{ "SchemaVersion": 2, "Trivy": { "Version": "0.70.0" }, "ReportID": "01a1b919-d84e-7f19-b906-73592159df3a", "CreatedAt": "2026-11-08T04:00:41.166991925+01:00", "ArtifactID": "sha256:c215a49674445e9581f41595d6d1fb250eca8dfa5f9ddf2fd970addf084fe11b", "ArtifactName": "meetings-stack-meet-diarizer", "ArtifactType": "container_image", "Metadata": { "Size": 787060224, "OS": { "Family": "debian", "Name": "13.7" }, "ImageID": "sha256:5fd5b21f1063fe2f0822c0d52190c7d377562a2bb206a3dc9399ad2f8f512ab4", "DiffIDs": [ "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933", "sha256:15239e16ba8b67101747ebe42fecc10c2c0cd24e43645959add815500c1d6769", "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26", "sha256:34b1ae7ada6487ce6ae41527853b82503ece47736f7755ac5c20ec03ea4b63c2", "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60", "sha256:02a04d9474ddc63ab17516649bacc57827127c9c61d52956cc81177b3dc32b1e", "sha256:d0a78b46b8d9a562e483ad6e9c8c2c7777c91d96ec71f6d2647d04328da9bada", "sha256:703e47fddd6b8ec23b4e80a89d7993cd20143257fc3e03f7bc64c4fe620611b2", "sha256:e09952f8db2346e7fb5adb9b6b9a16b3dc748678a927c17a0cffaeb540c00077", "sha256:8ff791ddcd229f20c04a859a976ccb1c09c10f0b3868e706092636d2648d4b35", "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36", "sha256:c7a9c3c8d348354c8fd5ca32185bbf1e2fff05b3ccc73fe6c874c0631a874b00" ], "RepoTags": [ "meetings-stack-meet-diarizer:latest" ], "Reference": "meetings-stack-meet-diarizer:latest", "ImageConfig": { "architecture": "amd64", "created": "2026-10-29T16:11:56.961128422Z", "history": [ { "created": "2026-10-27T00:00:00Z", "created_by": "# debian.sh --arch 'amd64' out/ 'trixie' '@1793059200'", "comment": "debuerreotype 0.17" }, { "created": "2026-10-28T01:55:50Z", "created_by": "ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-28T01:55:50Z", "created_by": "ENV LANG=C.UTF-8", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-28T01:55:50Z", "created_by": "RUN /bin/sh -c set -eux; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tca-certificates \t\tnetbase \t\ttzdata \t; \tapt-get dist-clean # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-28T01:55:50Z", "created_by": "ENV GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-28T01:55:50Z", "created_by": "ENV PYTHON_VERSION=3.11.18", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-28T01:55:50Z", "created_by": "ENV PYTHON_SHA256=9120e0a653868f6e3698d36cdd99e5a58903ec9469e448f21d98f7b16d8fa290", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-28T02:05:33Z", "created_by": "RUN /bin/sh -c set -eux; \t\tsavedAptMark=\"$(apt-mark showmanual)\"; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tdpkg-dev \t\tg++ \t\tgcc \t\tgnupg \t\tlibbluetooth-dev \t\tlibbz2-dev \t\tlibc6-dev \t\tlibdb-dev \t\tlibffi-dev \t\tlibgdbm-dev \t\tliblzma-dev \t\tlibncursesw5-dev \t\tlibreadline-dev \t\tlibsqlite3-dev \t\tlibssl-dev \t\tmake \t\ttk-dev \t\tuuid-dev \t\twget \t\txz-utils \t\tzlib1g-dev \t; \t\twget -O python.tar.xz \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz\"; \techo \"$PYTHON_SHA256 *python.tar.xz\" | sha256sum -c -; \twget -O python.tar.xz.asc \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc\"; \tGNUPGHOME=\"$(mktemp -d)\"; export GNUPGHOME; \tgpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$GPG_KEY\"; \tgpg --batch --verify python.tar.xz.asc python.tar.xz; \tgpgconf --kill all; \trm -rf \"$GNUPGHOME\" python.tar.xz.asc; \tmkdir -p /usr/src/python; \ttar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; \trm python.tar.xz; \t\tcd /usr/src/python; \tgnuArch=\"$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)\"; \t./configure \t\t--build=\"$gnuArch\" \t\t--enable-loadable-sqlite-extensions \t\t--enable-optimizations \t\t--enable-option-checking=fatal \t\t--enable-shared \t\t$(test \"${gnuArch%%-*}\" != 'riscv64' \u0026\u0026 echo '--with-lto') \t\t--with-ensurepip \t; \tnproc=\"$(nproc)\"; \tEXTRA_CFLAGS=\"$(dpkg-buildflags --get CFLAGS)\"; \tLDFLAGS=\"$(dpkg-buildflags --get LDFLAGS)\"; \tLDFLAGS=\"${LDFLAGS:-} -Wl,--strip-all\"; \tmake -j \"$nproc\" \t\t\"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}\" \t\t\"LDFLAGS=${LDFLAGS:-}\" \t; \trm python; \tmake -j \"$nproc\" \t\t\"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}\" \t\t\"LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\\$\\$ORIGIN/../lib'\" \t\tpython \t; \tmake install; \t\tcd /; \trm -rf /usr/src/python; \t\tfind /usr/local -depth \t\t\\( \t\t\t\\( -type d -a \\( -name test -o -name tests -o -name idle_test \\) \\) \t\t\t-o \\( -type f -a \\( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \\) \\) \t\t\\) -exec rm -rf '{}' + \t; \t\tldconfig; \t\tapt-mark auto '.*' \u003e /dev/null; \tapt-mark manual $savedAptMark; \tfind /usr/local -type f -executable -not \\( -name '*tkinter*' \\) -exec ldd '{}' ';' \t\t| awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); printf \"*%s\\n\", so }' \t\t| sort -u \t\t| xargs -rt dpkg-query --search \t\t| awk 'sub(\":$\", \"\", $1) { print $1 }' \t\t| sort -u \t\t| xargs -r apt-mark manual \t; \tapt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \tapt-get dist-clean; \t\texport PYTHONDONTWRITEBYTECODE=1; \tpython3 --version; \t\tpip3 install \t\t--disable-pip-version-check \t\t--no-cache-dir \t\t--no-compile \t\t'setuptools==79.0.1' \t\t'wheel==0.46.3' \t; \tpip3 --version # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-28T02:05:34Z", "created_by": "RUN /bin/sh -c set -eux; \tfor src in idle3 pip3 pydoc3 python3 python3-config; do \t\tdst=\"$(echo \"$src\" | tr -d 3)\"; \t\t[ -s \"/usr/local/bin/$src\" ]; \t\t[ ! -e \"/usr/local/bin/$dst\" ]; \t\tln -svT \"$src\" \"/usr/local/bin/$dst\"; \tdone # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-28T02:05:34Z", "created_by": "CMD [\"python3\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-29T16:11:26Z", "created_by": "RUN /bin/sh -c apt-get update \u0026\u0026 apt-get install -y --no-install-recommends ffmpeg libsndfile1 wget bzip2 \u0026\u0026 rm -rf /var/lib/apt/lists/* # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-29T16:11:26Z", "created_by": "WORKDIR /app", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-29T16:11:27Z", "created_by": "RUN /bin/sh -c mkdir -p /app/models # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-29T16:11:29Z", "created_by": "RUN /bin/sh -c cd /app/models \u0026\u0026 wget -q https://github.com/k2-fsa/sherpa-onnx/releases/download/speaker-segmentation-models/sherpa-onnx-pyannote-segmentation-3-0.tar.bz2 \u0026\u0026 tar xjf sherpa-onnx-pyannote-segmentation-3-0.tar.bz2 \u0026\u0026 rm sherpa-onnx-pyannote-segmentation-3-0.tar.bz2 # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-29T16:11:33Z", "created_by": "RUN /bin/sh -c cd /app/models \u0026\u0026 wget -q https://github.com/k2-fsa/sherpa-onnx/releases/download/speaker-recongition-models/3dspeaker_speech_campplus_sv_zh-cn_16k-common.onnx # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-29T16:11:34Z", "created_by": "COPY requirements.txt . # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-29T16:11:56Z", "created_by": "RUN /bin/sh -c pip install --no-cache-dir -r requirements.txt # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-29T16:11:56Z", "created_by": "COPY app.py . # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-10-29T16:11:56Z", "created_by": "EXPOSE [8000/tcp]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-10-29T16:11:56Z", "created_by": "CMD [\"uvicorn\" \"app:app\" \"--host\" \"0.0.0.0\" \"--port\" \"8000\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true } ], "os": "linux", "rootfs": { "type": "layers", "diff_ids": [ "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933", "sha256:15239e16ba8b67101747ebe42fecc10c2c0cd24e43645959add815500c1d6769", "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26", "sha256:34b1ae7ada6487ce6ae41527853b82503ece47736f7755ac5c20ec03ea4b63c2", "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60", "sha256:02a04d9474ddc63ab17516649bacc57827127c9c61d52956cc81177b3dc32b1e", "sha256:d0a78b46b8d9a562e483ad6e9c8c2c7777c91d96ec71f6d2647d04328da9bada", "sha256:703e47fddd6b8ec23b4e80a89d7993cd20143257fc3e03f7bc64c4fe620611b2", "sha256:e09952f8db2346e7fb5adb9b6b9a16b3dc748678a927c17a0cffaeb540c00077", "sha256:8ff791ddcd229f20c04a859a976ccb1c09c10f0b3868e706092636d2648d4b35", "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36", "sha256:c7a9c3c8d348354c8fd5ca32185bbf1e2fff05b3ccc73fe6c874c0631a874b00" ] }, "config": { "Cmd": [ "uvicorn", "app:app", "--host", "0.0.0.0", "--port", "8000" ], "Env": [ "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "LANG=C.UTF-8", "GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D", "PYTHON_VERSION=3.11.18", "PYTHON_SHA256=9120e0a653868f6e3698d36cdd99e5a58903ec9469e448f21d98f7b16d8fa290" ], "Labels": { "com.docker.compose.project": "meetings-stack", "com.docker.compose.service": "meet-diarizer", "com.docker.compose.version": "5.5.1" }, "WorkingDir": "/app", "ExposedPorts": { "8000/tcp": {} }, "ArgsEscaped": true } }, "Layers": [ { "Size": 81295360, "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, { "Size": 4118528, "DiffID": "sha256:15239e16ba8b67101747ebe42fecc10c2c0cd24e43645959add815500c1d6769" }, { "Size": 44258816, "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, { "Size": 5120, "DiffID": "sha256:34b1ae7ada6487ce6ae41527853b82503ece47736f7755ac5c20ec03ea4b63c2" }, { "Size": 451441664, "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, { "Size": 1536, "DiffID": "sha256:02a04d9474ddc63ab17516649bacc57827127c9c61d52956cc81177b3dc32b1e" }, { "Size": 2560, "DiffID": "sha256:d0a78b46b8d9a562e483ad6e9c8c2c7777c91d96ec71f6d2647d04328da9bada" }, { "Size": 7579648, "DiffID": "sha256:703e47fddd6b8ec23b4e80a89d7993cd20143257fc3e03f7bc64c4fe620611b2" }, { "Size": 28285952, "DiffID": "sha256:e09952f8db2346e7fb5adb9b6b9a16b3dc748678a927c17a0cffaeb540c00077" }, { "Size": 2560, "DiffID": "sha256:8ff791ddcd229f20c04a859a976ccb1c09c10f0b3868e706092636d2648d4b35" }, { "Size": 170060800, "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, { "Size": 7680, "DiffID": "sha256:c7a9c3c8d348354c8fd5ca32185bbf1e2fff05b3ccc73fe6c874c0631a874b00" } ] }, "Results": [ { "Target": "meetings-stack-meet-diarizer (debian 13.7)", "Class": "os-pkgs", "Type": "debian", "Packages": [ { "ID": "adduser@3.152", "Name": "adduser", "Identifier": { "PURL": "pkg:deb/debian/adduser@3.152?arch=all\u0026distro=debian-13.7", "UID": "17a3839c9950603e" }, "Version": "3.152", "Arch": "all", "SrcName": "adduser", "SrcVersion": "3.152", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Adduser Developers \u003cadduser@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "passwd@1:4.17.4-2" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "InstalledFiles": [ "/usr/sbin/adduser", "/usr/sbin/deluser", "/usr/share/doc/adduser/NEWS.Debian.gz", "/usr/share/doc/adduser/README.gz", "/usr/share/doc/adduser/TODO", "/usr/share/doc/adduser/changelog.gz", "/usr/share/doc/adduser/copyright", "/usr/share/doc/adduser/examples/INSTALL", "/usr/share/doc/adduser/examples/README", "/usr/share/doc/adduser/examples/adduser.conf", "/usr/share/doc/adduser/examples/adduser.local", "/usr/share/doc/adduser/examples/adduser.local.conf", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/bash.bashrc", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/profile", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel.other/index.html", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_logout", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_profile", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bashrc", "/usr/share/doc/adduser/examples/deluser.conf", "/usr/share/man/da/man5/deluser.conf.5.gz", "/usr/share/man/de/man5/adduser.conf.5.gz", "/usr/share/man/de/man5/deluser.conf.5.gz", "/usr/share/man/de/man8/adduser.8.gz", "/usr/share/man/de/man8/adduser.local.8.gz", "/usr/share/man/de/man8/deluser.8.gz", "/usr/share/man/es/man5/deluser.conf.5.gz", "/usr/share/man/fr/man5/adduser.conf.5.gz", "/usr/share/man/fr/man5/deluser.conf.5.gz", "/usr/share/man/fr/man8/adduser.8.gz", "/usr/share/man/fr/man8/deluser.8.gz", "/usr/share/man/it/man5/deluser.conf.5.gz", "/usr/share/man/man5/adduser.conf.5.gz", "/usr/share/man/man5/deluser.conf.5.gz", "/usr/share/man/man8/adduser.8.gz", "/usr/share/man/man8/adduser.local.8.gz", "/usr/share/man/man8/deluser.8.gz", "/usr/share/man/nl/man5/adduser.conf.5.gz", "/usr/share/man/nl/man5/deluser.conf.5.gz", "/usr/share/man/nl/man8/adduser.8.gz", "/usr/share/man/nl/man8/adduser.local.8.gz", "/usr/share/man/nl/man8/deluser.8.gz", "/usr/share/man/pl/man5/deluser.conf.5.gz", "/usr/share/man/pt/man5/adduser.conf.5.gz", "/usr/share/man/pt/man5/deluser.conf.5.gz", "/usr/share/man/pt/man8/adduser.8.gz", "/usr/share/man/pt/man8/adduser.local.8.gz", "/usr/share/man/pt/man8/deluser.8.gz", "/usr/share/man/ro/man5/adduser.conf.5.gz", "/usr/share/man/ro/man5/deluser.conf.5.gz", "/usr/share/man/ro/man8/adduser.8.gz", "/usr/share/man/ro/man8/adduser.local.8.gz", "/usr/share/man/ro/man8/deluser.8.gz", "/usr/share/man/ru/man5/deluser.conf.5.gz", "/usr/share/man/sv/man5/deluser.conf.5.gz", "/usr/share/perl5/Debian/AdduserCommon.pm", "/usr/share/perl5/Debian/AdduserLogging.pm", "/usr/share/perl5/Debian/AdduserRetvalues.pm" ], "AnalyzedBy": "dpkg" }, { "ID": "apt@3.0.3", "Name": "apt", "Identifier": { "PURL": "pkg:deb/debian/apt@3.0.3?arch=amd64\u0026distro=debian-13.7", "UID": "18dd1ec95ee04059" }, "Version": "3.0.3", "Arch": "amd64", "SrcName": "apt", "SrcVersion": "3.0.3", "Licenses": [ "GPL-2.0-or-later", "curl", "BSD-3-Clause", "MIT", "GPL-2.0-only" ], "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "adduser@3.152", "base-passwd@3.6.7", "debian-archive-keyring@2025.1", "libapt-pkg7.0@3.0.3", "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libseccomp2@2.6.0-2", "libssl3t64@3.5.7-1~deb13u3", "libstdc++6@14.2.0-19", "libsystemd0@257.13-1~deb13u1", "sqv@1.3.0-3+b2" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/apt", "/usr/bin/apt-cache", "/usr/bin/apt-cdrom", "/usr/bin/apt-config", "/usr/bin/apt-get", "/usr/bin/apt-mark", "/usr/lib/apt/apt-extracttemplates", "/usr/lib/apt/apt-helper", "/usr/lib/apt/apt.systemd.daily", "/usr/lib/apt/methods/cdrom", "/usr/lib/apt/methods/copy", "/usr/lib/apt/methods/file", "/usr/lib/apt/methods/gpgv", "/usr/lib/apt/methods/http", "/usr/lib/apt/methods/mirror", "/usr/lib/apt/methods/rred", "/usr/lib/apt/methods/sqv", "/usr/lib/apt/methods/store", "/usr/lib/apt/solvers/dump", "/usr/lib/dpkg/methods/apt/desc.apt", "/usr/lib/dpkg/methods/apt/install", "/usr/lib/dpkg/methods/apt/names", "/usr/lib/dpkg/methods/apt/setup", "/usr/lib/dpkg/methods/apt/update", "/usr/lib/systemd/system/apt-daily-upgrade.service", "/usr/lib/systemd/system/apt-daily-upgrade.timer", "/usr/lib/systemd/system/apt-daily.service", "/usr/lib/systemd/system/apt-daily.timer", "/usr/lib/x86_64-linux-gnu/libapt-private.so.0.0.0", "/usr/share/apt/default-sequoia.config", "/usr/share/bash-completion/completions/apt", "/usr/share/bug/apt/script", "/usr/share/doc/apt/NEWS.Debian.gz", "/usr/share/doc/apt/README.md.gz", "/usr/share/doc/apt/changelog.gz", "/usr/share/doc/apt/copyright", "/usr/share/doc/apt/examples/apt.conf", "/usr/share/doc/apt/examples/configure-index", "/usr/share/doc/apt/examples/debian.sources", "/usr/share/doc/apt/examples/preferences", "/usr/share/lintian/overrides/apt", "/usr/share/locale/ar/LC_MESSAGES/apt.mo", "/usr/share/locale/ast/LC_MESSAGES/apt.mo", "/usr/share/locale/bg/LC_MESSAGES/apt.mo", "/usr/share/locale/bs/LC_MESSAGES/apt.mo", "/usr/share/locale/ca/LC_MESSAGES/apt.mo", "/usr/share/locale/cs/LC_MESSAGES/apt.mo", "/usr/share/locale/cy/LC_MESSAGES/apt.mo", "/usr/share/locale/da/LC_MESSAGES/apt.mo", "/usr/share/locale/de/LC_MESSAGES/apt.mo", "/usr/share/locale/dz/LC_MESSAGES/apt.mo", "/usr/share/locale/el/LC_MESSAGES/apt.mo", "/usr/share/locale/es/LC_MESSAGES/apt.mo", "/usr/share/locale/eu/LC_MESSAGES/apt.mo", "/usr/share/locale/fi/LC_MESSAGES/apt.mo", "/usr/share/locale/fr/LC_MESSAGES/apt.mo", "/usr/share/locale/gl/LC_MESSAGES/apt.mo", "/usr/share/locale/hu/LC_MESSAGES/apt.mo", "/usr/share/locale/it/LC_MESSAGES/apt.mo", "/usr/share/locale/ja/LC_MESSAGES/apt.mo", "/usr/share/locale/km/LC_MESSAGES/apt.mo", "/usr/share/locale/ko/LC_MESSAGES/apt.mo", "/usr/share/locale/ku/LC_MESSAGES/apt.mo", "/usr/share/locale/lt/LC_MESSAGES/apt.mo", "/usr/share/locale/mr/LC_MESSAGES/apt.mo", "/usr/share/locale/nb/LC_MESSAGES/apt.mo", "/usr/share/locale/ne/LC_MESSAGES/apt.mo", "/usr/share/locale/nl/LC_MESSAGES/apt.mo", "/usr/share/locale/nn/LC_MESSAGES/apt.mo", "/usr/share/locale/pl/LC_MESSAGES/apt.mo", "/usr/share/locale/pt/LC_MESSAGES/apt.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/apt.mo", "/usr/share/locale/ro/LC_MESSAGES/apt.mo", "/usr/share/locale/ru/LC_MESSAGES/apt.mo", "/usr/share/locale/sk/LC_MESSAGES/apt.mo", "/usr/share/locale/sl/LC_MESSAGES/apt.mo", "/usr/share/locale/sv/LC_MESSAGES/apt.mo", "/usr/share/locale/th/LC_MESSAGES/apt.mo", "/usr/share/locale/tl/LC_MESSAGES/apt.mo", "/usr/share/locale/tr/LC_MESSAGES/apt.mo", "/usr/share/locale/uk/LC_MESSAGES/apt.mo", "/usr/share/locale/vi/LC_MESSAGES/apt.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/apt.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/apt.mo", "/usr/share/man/de/man1/apt-transport-http.1.gz", "/usr/share/man/de/man1/apt-transport-https.1.gz", "/usr/share/man/de/man1/apt-transport-mirror.1.gz", "/usr/share/man/de/man5/apt.conf.5.gz", "/usr/share/man/de/man5/apt_auth.conf.5.gz", "/usr/share/man/de/man5/apt_preferences.5.gz", "/usr/share/man/de/man5/sources.list.5.gz", "/usr/share/man/de/man7/apt-patterns.7.gz", "/usr/share/man/de/man8/apt-cache.8.gz", "/usr/share/man/de/man8/apt-cdrom.8.gz", "/usr/share/man/de/man8/apt-config.8.gz", "/usr/share/man/de/man8/apt-get.8.gz", "/usr/share/man/de/man8/apt-mark.8.gz", "/usr/share/man/de/man8/apt-secure.8.gz", "/usr/share/man/de/man8/apt.8.gz", "/usr/share/man/es/man5/apt_preferences.5.gz", "/usr/share/man/es/man8/apt-cache.8.gz", "/usr/share/man/es/man8/apt-cdrom.8.gz", "/usr/share/man/es/man8/apt-config.8.gz", "/usr/share/man/fr/man1/apt-transport-http.1.gz", "/usr/share/man/fr/man1/apt-transport-https.1.gz", "/usr/share/man/fr/man1/apt-transport-mirror.1.gz", "/usr/share/man/fr/man5/apt.conf.5.gz", "/usr/share/man/fr/man5/apt_auth.conf.5.gz", "/usr/share/man/fr/man5/apt_preferences.5.gz", "/usr/share/man/fr/man5/sources.list.5.gz", "/usr/share/man/fr/man7/apt-patterns.7.gz", "/usr/share/man/fr/man8/apt-cache.8.gz", "/usr/share/man/fr/man8/apt-cdrom.8.gz", "/usr/share/man/fr/man8/apt-config.8.gz", "/usr/share/man/fr/man8/apt-get.8.gz", "/usr/share/man/fr/man8/apt-mark.8.gz", "/usr/share/man/fr/man8/apt-secure.8.gz", "/usr/share/man/fr/man8/apt.8.gz", "/usr/share/man/it/man5/apt.conf.5.gz", "/usr/share/man/it/man5/apt_preferences.5.gz", "/usr/share/man/it/man8/apt-cache.8.gz", "/usr/share/man/it/man8/apt-cdrom.8.gz", "/usr/share/man/it/man8/apt-config.8.gz", "/usr/share/man/it/man8/apt-mark.8.gz", "/usr/share/man/it/man8/apt.8.gz", "/usr/share/man/ja/man5/apt.conf.5.gz", "/usr/share/man/ja/man5/apt_preferences.5.gz", "/usr/share/man/ja/man8/apt-cache.8.gz", "/usr/share/man/ja/man8/apt-cdrom.8.gz", "/usr/share/man/ja/man8/apt-config.8.gz", "/usr/share/man/ja/man8/apt-mark.8.gz", "/usr/share/man/ja/man8/apt.8.gz", "/usr/share/man/man1/apt-transport-http.1.gz", "/usr/share/man/man1/apt-transport-https.1.gz", "/usr/share/man/man1/apt-transport-mirror.1.gz", "/usr/share/man/man5/apt.conf.5.gz", "/usr/share/man/man5/apt_auth.conf.5.gz", "/usr/share/man/man5/apt_preferences.5.gz", "/usr/share/man/man5/sources.list.5.gz", "/usr/share/man/man7/apt-patterns.7.gz", "/usr/share/man/man8/apt-cache.8.gz", "/usr/share/man/man8/apt-cdrom.8.gz", "/usr/share/man/man8/apt-config.8.gz", "/usr/share/man/man8/apt-get.8.gz", "/usr/share/man/man8/apt-mark.8.gz", "/usr/share/man/man8/apt-secure.8.gz", "/usr/share/man/man8/apt.8.gz", "/usr/share/man/nl/man1/apt-transport-http.1.gz", "/usr/share/man/nl/man1/apt-transport-https.1.gz", "/usr/share/man/nl/man1/apt-transport-mirror.1.gz", "/usr/share/man/nl/man5/apt.conf.5.gz", "/usr/share/man/nl/man5/apt_auth.conf.5.gz", "/usr/share/man/nl/man5/apt_preferences.5.gz", "/usr/share/man/nl/man5/sources.list.5.gz", "/usr/share/man/nl/man7/apt-patterns.7.gz", "/usr/share/man/nl/man8/apt-cache.8.gz", "/usr/share/man/nl/man8/apt-cdrom.8.gz", "/usr/share/man/nl/man8/apt-config.8.gz", "/usr/share/man/nl/man8/apt-get.8.gz", "/usr/share/man/nl/man8/apt-mark.8.gz", "/usr/share/man/nl/man8/apt-secure.8.gz", "/usr/share/man/nl/man8/apt.8.gz", "/usr/share/man/pl/man5/apt_preferences.5.gz", "/usr/share/man/pl/man8/apt-cache.8.gz", "/usr/share/man/pl/man8/apt-cdrom.8.gz", "/usr/share/man/pl/man8/apt-config.8.gz", "/usr/share/man/pt/man1/apt-transport-http.1.gz", "/usr/share/man/pt/man1/apt-transport-https.1.gz", "/usr/share/man/pt/man1/apt-transport-mirror.1.gz", "/usr/share/man/pt/man5/apt.conf.5.gz", "/usr/share/man/pt/man5/apt_auth.conf.5.gz", "/usr/share/man/pt/man5/apt_preferences.5.gz", "/usr/share/man/pt/man5/sources.list.5.gz", "/usr/share/man/pt/man7/apt-patterns.7.gz", "/usr/share/man/pt/man8/apt-cache.8.gz", "/usr/share/man/pt/man8/apt-cdrom.8.gz", "/usr/share/man/pt/man8/apt-config.8.gz", "/usr/share/man/pt/man8/apt-get.8.gz", "/usr/share/man/pt/man8/apt-mark.8.gz", "/usr/share/man/pt/man8/apt-secure.8.gz", "/usr/share/man/pt/man8/apt.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "base-files@13.8+deb13u7", "Name": "base-files", "Identifier": { "PURL": "pkg:deb/debian/base-files@13.8%2Bdeb13u7?arch=amd64\u0026distro=debian-13.7", "UID": "76560355df616e3e" }, "Version": "13.8+deb13u7", "Arch": "amd64", "SrcName": "base-files", "SrcVersion": "13.8+deb13u7", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "verbatim" ], "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/os-release", "/usr/share/base-files/dot.bashrc", "/usr/share/base-files/dot.profile", "/usr/share/base-files/dot.profile.md5sums", "/usr/share/base-files/info.dir", "/usr/share/base-files/motd", "/usr/share/base-files/profile", "/usr/share/base-files/profile.md5sums", "/usr/share/base-files/staff-group-for-usr-local", "/usr/share/common-licenses/AGPL-3.0", "/usr/share/common-licenses/Apache-2.0", "/usr/share/common-licenses/Artistic", "/usr/share/common-licenses/Artistic-2.0", "/usr/share/common-licenses/BSD", "/usr/share/common-licenses/BSL-1.0", "/usr/share/common-licenses/CC-BY-3.0", "/usr/share/common-licenses/CC-BY-4.0", "/usr/share/common-licenses/CC-BY-SA-3.0", "/usr/share/common-licenses/CC-BY-SA-4.0", "/usr/share/common-licenses/CC0-1.0", "/usr/share/common-licenses/GFDL-1.1", "/usr/share/common-licenses/GFDL-1.2", "/usr/share/common-licenses/GFDL-1.3", "/usr/share/common-licenses/GPL-1", "/usr/share/common-licenses/GPL-2", "/usr/share/common-licenses/GPL-3", "/usr/share/common-licenses/LGPL-2", "/usr/share/common-licenses/LGPL-2.1", "/usr/share/common-licenses/LGPL-3", "/usr/share/common-licenses/MPL-1.1", "/usr/share/common-licenses/MPL-2.0", "/usr/share/common-licenses/OFL-1.1", "/usr/share/doc/base-files/NEWS.Debian.gz", "/usr/share/doc/base-files/README", "/usr/share/doc/base-files/README.FHS", "/usr/share/doc/base-files/changelog.gz", "/usr/share/doc/base-files/copyright", "/usr/share/lintian/overrides/base-files" ], "AnalyzedBy": "dpkg" }, { "ID": "base-passwd@3.6.7", "Name": "base-passwd", "Identifier": { "PURL": "pkg:deb/debian/base-passwd@3.6.7?arch=amd64\u0026distro=debian-13.7", "UID": "1cd3add99b3d2533" }, "Version": "3.6.7", "Arch": "amd64", "SrcName": "base-passwd", "SrcVersion": "3.6.7", "Licenses": [ "GPL-2.0-only", "public-domain" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdebconfclient0@0.280", "libselinux1@3.8.1-1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/sbin/update-passwd", "/usr/share/base-passwd/group.master", "/usr/share/base-passwd/passwd.master", "/usr/share/doc-base/base-passwd.users-and-groups", "/usr/share/doc/base-passwd/README", "/usr/share/doc/base-passwd/changelog.gz", "/usr/share/doc/base-passwd/copyright", "/usr/share/doc/base-passwd/users-and-groups.html", "/usr/share/doc/base-passwd/users-and-groups.txt.gz", "/usr/share/lintian/overrides/base-passwd", "/usr/share/man/de/man8/update-passwd.8.gz", "/usr/share/man/es/man8/update-passwd.8.gz", "/usr/share/man/fr/man8/update-passwd.8.gz", "/usr/share/man/ja/man8/update-passwd.8.gz", "/usr/share/man/man8/update-passwd.8.gz", "/usr/share/man/pl/man8/update-passwd.8.gz", "/usr/share/man/ro/man8/update-passwd.8.gz", "/usr/share/man/ru/man8/update-passwd.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "bash@5.2.37-2+b10", "Name": "bash", "Identifier": { "PURL": "pkg:deb/debian/bash@5.2.37-2%2Bb10?arch=amd64\u0026distro=debian-13.7", "UID": "2e2ffb74d0d3e1ed" }, "Version": "5.2.37", "Release": "2+b10", "Arch": "amd64", "SrcName": "bash", "SrcVersion": "5.2.37", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-3+ with Bison exception", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-only", "GFDL-1.3-only", "Latex2e", "BSD-4-Clause-UC", "MIT", "permissive" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "base-files@13.8+deb13u7", "debianutils@5.23.2" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/bash", "/usr/bin/bashbug", "/usr/bin/clear_console", "/usr/share/debianutils/shells.d/bash", "/usr/share/doc/bash/CHANGES.gz", "/usr/share/doc/bash/COMPAT.gz", "/usr/share/doc/bash/INTRO.gz", "/usr/share/doc/bash/NEWS.gz", "/usr/share/doc/bash/POSIX.gz", "/usr/share/doc/bash/RBASH", "/usr/share/doc/bash/README.Debian.gz", "/usr/share/doc/bash/README.abs-guide", "/usr/share/doc/bash/README.commands.gz", "/usr/share/doc/bash/README.gz", "/usr/share/doc/bash/changelog.Debian.amd64.gz", "/usr/share/doc/bash/changelog.Debian.gz", "/usr/share/doc/bash/changelog.gz", "/usr/share/doc/bash/copyright", "/usr/share/doc/bash/inputrc.arrows", "/usr/share/lintian/overrides/bash", "/usr/share/locale/af/LC_MESSAGES/bash.mo", "/usr/share/locale/bg/LC_MESSAGES/bash.mo", "/usr/share/locale/ca/LC_MESSAGES/bash.mo", "/usr/share/locale/cs/LC_MESSAGES/bash.mo", "/usr/share/locale/da/LC_MESSAGES/bash.mo", "/usr/share/locale/de/LC_MESSAGES/bash.mo", "/usr/share/locale/el/LC_MESSAGES/bash.mo", "/usr/share/locale/en@boldquot/LC_MESSAGES/bash.mo", "/usr/share/locale/en@quot/LC_MESSAGES/bash.mo", "/usr/share/locale/eo/LC_MESSAGES/bash.mo", "/usr/share/locale/es/LC_MESSAGES/bash.mo", "/usr/share/locale/et/LC_MESSAGES/bash.mo", "/usr/share/locale/fi/LC_MESSAGES/bash.mo", "/usr/share/locale/fr/LC_MESSAGES/bash.mo", "/usr/share/locale/ga/LC_MESSAGES/bash.mo", "/usr/share/locale/gl/LC_MESSAGES/bash.mo", "/usr/share/locale/hr/LC_MESSAGES/bash.mo", "/usr/share/locale/hu/LC_MESSAGES/bash.mo", "/usr/share/locale/id/LC_MESSAGES/bash.mo", "/usr/share/locale/it/LC_MESSAGES/bash.mo", "/usr/share/locale/ja/LC_MESSAGES/bash.mo", "/usr/share/locale/ko/LC_MESSAGES/bash.mo", "/usr/share/locale/lt/LC_MESSAGES/bash.mo", "/usr/share/locale/nb/LC_MESSAGES/bash.mo", "/usr/share/locale/nl/LC_MESSAGES/bash.mo", "/usr/share/locale/pl/LC_MESSAGES/bash.mo", "/usr/share/locale/pt/LC_MESSAGES/bash.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/bash.mo", "/usr/share/locale/ro/LC_MESSAGES/bash.mo", "/usr/share/locale/ru/LC_MESSAGES/bash.mo", "/usr/share/locale/sk/LC_MESSAGES/bash.mo", "/usr/share/locale/sl/LC_MESSAGES/bash.mo", "/usr/share/locale/sr/LC_MESSAGES/bash.mo", "/usr/share/locale/sv/LC_MESSAGES/bash.mo", "/usr/share/locale/tr/LC_MESSAGES/bash.mo", "/usr/share/locale/uk/LC_MESSAGES/bash.mo", "/usr/share/locale/vi/LC_MESSAGES/bash.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/bash.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/bash.mo", "/usr/share/man/man1/bash.1.gz", "/usr/share/man/man1/bashbug.1.gz", "/usr/share/man/man1/clear_console.1.gz", "/usr/share/man/man1/rbash.1.gz", "/usr/share/man/man7/bash-builtins.7.gz", "/usr/share/menu/bash" ], "AnalyzedBy": "dpkg" }, { "ID": "bsdutils@1:2.41.5-0+deb13u1", "Name": "bsdutils", "Identifier": { "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "a4b47561565a3535" }, "Version": "2.41.5", "Release": "0+deb13u1", "Epoch": 1, "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/logger", "/usr/bin/renice", "/usr/bin/script", "/usr/bin/scriptlive", "/usr/bin/scriptreplay", "/usr/bin/wall", "/usr/share/bash-completion/completions/logger", "/usr/share/bash-completion/completions/renice", "/usr/share/bash-completion/completions/script", "/usr/share/bash-completion/completions/scriptlive", "/usr/share/bash-completion/completions/scriptreplay", "/usr/share/bash-completion/completions/wall", "/usr/share/doc/bsdutils/NEWS.Debian.gz", "/usr/share/doc/bsdutils/changelog.Debian.gz", "/usr/share/doc/bsdutils/changelog.gz", "/usr/share/doc/bsdutils/copyright", "/usr/share/lintian/overrides/bsdutils", "/usr/share/man/man1/logger.1.gz", "/usr/share/man/man1/renice.1.gz", "/usr/share/man/man1/script.1.gz", "/usr/share/man/man1/scriptlive.1.gz", "/usr/share/man/man1/scriptreplay.1.gz", "/usr/share/man/man1/wall.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "bzip2@1.0.8-6", "Name": "bzip2", "Identifier": { "PURL": "pkg:deb/debian/bzip2@1.0.8-6?arch=amd64\u0026distro=debian-13.7", "UID": "4abdadbf06a44098" }, "Version": "1.0.8", "Release": "6", "Arch": "amd64", "SrcName": "bzip2", "SrcVersion": "1.0.8", "SrcRelease": "6", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/bin/bzdiff", "/usr/bin/bzexe", "/usr/bin/bzgrep", "/usr/bin/bzip2", "/usr/bin/bzip2recover", "/usr/bin/bzmore", "/usr/share/doc/bzip2/changelog.Debian.gz", "/usr/share/doc/bzip2/changelog.gz", "/usr/share/doc/bzip2/copyright", "/usr/share/man/man1/bzdiff.1.gz", "/usr/share/man/man1/bzexe.1.gz", "/usr/share/man/man1/bzgrep.1.gz", "/usr/share/man/man1/bzip2.1.gz", "/usr/share/man/man1/bzmore.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "ca-certificates@20250419+deb13u1", "Name": "ca-certificates", "Identifier": { "PURL": "pkg:deb/debian/ca-certificates@20250419%2Bdeb13u1?arch=all\u0026distro=debian-13.7", "UID": "36d3d495da2f248f" }, "Version": "20250419+deb13u1", "Arch": "all", "SrcName": "ca-certificates", "SrcVersion": "20250419+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "MPL-2.0" ], "Maintainer": "Julien Cristau \u003cjcristau@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "openssl@3.5.7-1~deb13u3" ], "Layer": { "DiffID": "sha256:15239e16ba8b67101747ebe42fecc10c2c0cd24e43645959add815500c1d6769" }, "InstalledFiles": [ "/usr/sbin/update-ca-certificates", "/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt", "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt", "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt", "/usr/share/ca-certificates/mozilla/ANF_Secure_Server_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt", "/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt", "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt", "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt", "/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt", "/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt", "/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt", "/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt", "/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Certainly_Root_E1.crt", "/usr/share/ca-certificates/mozilla/Certainly_Root_R1.crt", "/usr/share/ca-certificates/mozilla/Certigna.crt", "/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_EC-384_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_2_2023.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_2_2023.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt", "/usr/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt", "/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/FIRMAPROFESIONAL_CA_ROOT-A_WEB.crt", "/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt", "/usr/share/ca-certificates/mozilla/GLOBALTRUST_2020.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_E46.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_R46.crt", "/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt", "/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/HARICA_TLS_ECC_Root_CA_2021.crt", "/usr/share/ca-certificates/mozilla/HARICA_TLS_RSA_Root_CA_2021.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt", "/usr/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt", "/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt", "/usr/share/ca-certificates/mozilla/ISRG_Root_X2.crt", "/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Izenpe.com.crt", "/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt", "/usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt", "/usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt", "/usr/share/ca-certificates/mozilla/NAVER_Global_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt", "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt", "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt", "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt", "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt", "/usr/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt", "/usr/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt", "/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt", "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt", "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA12.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA14.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA15.crt", "/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt", "/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt", "/usr/share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt", "/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt", "/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt", "/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt", "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt", "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt", "/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt", "/usr/share/ca-certificates/mozilla/TWCA_CYBER_Root_CA.crt", "/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt", "/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_ECC_Root_2020.crt", "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_RSA_Root_2023.crt", "/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt", "/usr/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt", "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt", "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/TunTrust_Root_CA.crt", "/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt", "/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt", "/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt", "/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt", "/usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt", "/usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt", "/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt", "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt", "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt", "/usr/share/ca-certificates/mozilla/vTrus_ECC_Root_CA.crt", "/usr/share/ca-certificates/mozilla/vTrus_Root_CA.crt", "/usr/share/doc/ca-certificates/README.Debian", "/usr/share/doc/ca-certificates/changelog.gz", "/usr/share/doc/ca-certificates/copyright", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/Makefile", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/README", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/ca-certificates-local.triggers", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/changelog", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/compat", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/control", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/copyright", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/postrm", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/rules", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/source/format", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Local_Root_CA.crt", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Makefile", "/usr/share/man/man8/update-ca-certificates.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "coreutils@9.7-3", "Name": "coreutils", "Identifier": { "PURL": "pkg:deb/debian/coreutils@9.7-3?arch=amd64\u0026distro=debian-13.7", "UID": "cb4a55f50bda2393" }, "Version": "9.7", "Release": "3", "Arch": "amd64", "SrcName": "coreutils", "SrcVersion": "9.7", "SrcRelease": "3", "Licenses": [ "GPL-3.0-or-later", "BSD-4-Clause-UC", "GPL-3.0-only", "ISC", "FSFULLR", "GFDL-1.3-no-invariants-only", "GFDL-1.3-only" ], "Maintainer": "Michael Stone \u003cmstone@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/[", "/usr/bin/arch", "/usr/bin/b2sum", "/usr/bin/base32", "/usr/bin/base64", "/usr/bin/basename", "/usr/bin/basenc", "/usr/bin/cat", "/usr/bin/chcon", "/usr/bin/chgrp", "/usr/bin/chmod", "/usr/bin/chown", "/usr/bin/cksum", "/usr/bin/comm", "/usr/bin/cp", "/usr/bin/csplit", "/usr/bin/cut", "/usr/bin/date", "/usr/bin/dd", "/usr/bin/df", "/usr/bin/dir", "/usr/bin/dircolors", "/usr/bin/dirname", "/usr/bin/du", "/usr/bin/echo", "/usr/bin/env", "/usr/bin/expand", "/usr/bin/expr", "/usr/bin/factor", "/usr/bin/false", "/usr/bin/fmt", "/usr/bin/fold", "/usr/bin/groups", "/usr/bin/head", "/usr/bin/hostid", "/usr/bin/id", "/usr/bin/install", "/usr/bin/join", "/usr/bin/link", "/usr/bin/ln", "/usr/bin/logname", "/usr/bin/ls", "/usr/bin/md5sum", "/usr/bin/mkdir", "/usr/bin/mkfifo", "/usr/bin/mknod", "/usr/bin/mktemp", "/usr/bin/mv", "/usr/bin/nice", "/usr/bin/nl", "/usr/bin/nohup", "/usr/bin/nproc", "/usr/bin/numfmt", "/usr/bin/od", "/usr/bin/paste", "/usr/bin/pathchk", "/usr/bin/pinky", "/usr/bin/pr", "/usr/bin/printenv", "/usr/bin/printf", "/usr/bin/ptx", "/usr/bin/pwd", "/usr/bin/readlink", "/usr/bin/realpath", "/usr/bin/rm", "/usr/bin/rmdir", "/usr/bin/runcon", "/usr/bin/seq", "/usr/bin/sha1sum", "/usr/bin/sha224sum", "/usr/bin/sha256sum", "/usr/bin/sha384sum", "/usr/bin/sha512sum", "/usr/bin/shred", "/usr/bin/shuf", "/usr/bin/sleep", "/usr/bin/sort", "/usr/bin/split", "/usr/bin/stat", "/usr/bin/stdbuf", "/usr/bin/stty", "/usr/bin/sum", "/usr/bin/sync", "/usr/bin/tac", "/usr/bin/tail", "/usr/bin/tee", "/usr/bin/test", "/usr/bin/timeout", "/usr/bin/touch", "/usr/bin/tr", "/usr/bin/true", "/usr/bin/truncate", "/usr/bin/tsort", "/usr/bin/tty", "/usr/bin/uname", "/usr/bin/unexpand", "/usr/bin/uniq", "/usr/bin/unlink", "/usr/bin/users", "/usr/bin/vdir", "/usr/bin/wc", "/usr/bin/who", "/usr/bin/whoami", "/usr/bin/yes", "/usr/libexec/coreutils/libstdbuf.so", "/usr/sbin/chroot", "/usr/share/doc/coreutils/AUTHORS", "/usr/share/doc/coreutils/NEWS.gz", "/usr/share/doc/coreutils/README.Debian", "/usr/share/doc/coreutils/README.gz", "/usr/share/doc/coreutils/THANKS.gz", "/usr/share/doc/coreutils/TODO.gz", "/usr/share/doc/coreutils/changelog.Debian.gz", "/usr/share/doc/coreutils/changelog.gz", "/usr/share/doc/coreutils/copyright", "/usr/share/info/coreutils.info.gz", "/usr/share/lintian/overrides/coreutils", "/usr/share/locale/af/LC_MESSAGES/coreutils.mo", "/usr/share/locale/be/LC_MESSAGES/coreutils.mo", "/usr/share/locale/bg/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ca/LC_MESSAGES/coreutils.mo", "/usr/share/locale/cs/LC_MESSAGES/coreutils.mo", "/usr/share/locale/da/LC_MESSAGES/coreutils.mo", "/usr/share/locale/de/LC_MESSAGES/coreutils.mo", "/usr/share/locale/el/LC_MESSAGES/coreutils.mo", "/usr/share/locale/eo/LC_MESSAGES/coreutils.mo", "/usr/share/locale/es/LC_MESSAGES/coreutils.mo", "/usr/share/locale/et/LC_MESSAGES/coreutils.mo", "/usr/share/locale/eu/LC_MESSAGES/coreutils.mo", "/usr/share/locale/fi/LC_MESSAGES/coreutils.mo", "/usr/share/locale/fr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ga/LC_MESSAGES/coreutils.mo", "/usr/share/locale/gl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/hr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/hu/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ia/LC_MESSAGES/coreutils.mo", "/usr/share/locale/id/LC_MESSAGES/coreutils.mo", "/usr/share/locale/it/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ja/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ka/LC_MESSAGES/coreutils.mo", "/usr/share/locale/kk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ko/LC_MESSAGES/coreutils.mo", "/usr/share/locale/lg/LC_MESSAGES/coreutils.mo", "/usr/share/locale/lt/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ms/LC_MESSAGES/coreutils.mo", "/usr/share/locale/nb/LC_MESSAGES/coreutils.mo", "/usr/share/locale/nl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pt/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ro/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ru/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sv/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ta/LC_MESSAGES/coreutils.mo", "/usr/share/locale/tr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/uk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/vi/LC_MESSAGES/coreutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/coreutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/coreutils.mo", "/usr/share/man/man1/arch.1.gz", "/usr/share/man/man1/b2sum.1.gz", "/usr/share/man/man1/base32.1.gz", "/usr/share/man/man1/base64.1.gz", "/usr/share/man/man1/basename.1.gz", "/usr/share/man/man1/basenc.1.gz", "/usr/share/man/man1/cat.1.gz", "/usr/share/man/man1/chcon.1.gz", "/usr/share/man/man1/chgrp.1.gz", "/usr/share/man/man1/chmod.1.gz", "/usr/share/man/man1/chown.1.gz", "/usr/share/man/man1/cksum.1.gz", "/usr/share/man/man1/comm.1.gz", "/usr/share/man/man1/cp.1.gz", "/usr/share/man/man1/csplit.1.gz", "/usr/share/man/man1/cut.1.gz", "/usr/share/man/man1/date.1.gz", "/usr/share/man/man1/dd.1.gz", "/usr/share/man/man1/df.1.gz", "/usr/share/man/man1/dir.1.gz", "/usr/share/man/man1/dircolors.1.gz", "/usr/share/man/man1/dirname.1.gz", "/usr/share/man/man1/du.1.gz", "/usr/share/man/man1/echo.1.gz", "/usr/share/man/man1/env.1.gz", "/usr/share/man/man1/expand.1.gz", "/usr/share/man/man1/expr.1.gz", "/usr/share/man/man1/factor.1.gz", "/usr/share/man/man1/false.1.gz", "/usr/share/man/man1/fmt.1.gz", "/usr/share/man/man1/fold.1.gz", "/usr/share/man/man1/groups.1.gz", "/usr/share/man/man1/head.1.gz", "/usr/share/man/man1/hostid.1.gz", "/usr/share/man/man1/id.1.gz", "/usr/share/man/man1/install.1.gz", "/usr/share/man/man1/join.1.gz", "/usr/share/man/man1/link.1.gz", "/usr/share/man/man1/ln.1.gz", "/usr/share/man/man1/logname.1.gz", "/usr/share/man/man1/ls.1.gz", "/usr/share/man/man1/md5sum.1.gz", "/usr/share/man/man1/mkdir.1.gz", "/usr/share/man/man1/mkfifo.1.gz", "/usr/share/man/man1/mknod.1.gz", "/usr/share/man/man1/mktemp.1.gz", "/usr/share/man/man1/mv.1.gz", "/usr/share/man/man1/nice.1.gz", "/usr/share/man/man1/nl.1.gz", "/usr/share/man/man1/nohup.1.gz", "/usr/share/man/man1/nproc.1.gz", "/usr/share/man/man1/numfmt.1.gz", "/usr/share/man/man1/od.1.gz", "/usr/share/man/man1/paste.1.gz", "/usr/share/man/man1/pathchk.1.gz", "/usr/share/man/man1/pinky.1.gz", "/usr/share/man/man1/pr.1.gz", "/usr/share/man/man1/printenv.1.gz", "/usr/share/man/man1/printf.1.gz", "/usr/share/man/man1/ptx.1.gz", "/usr/share/man/man1/pwd.1.gz", "/usr/share/man/man1/readlink.1.gz", "/usr/share/man/man1/realpath.1.gz", "/usr/share/man/man1/rm.1.gz", "/usr/share/man/man1/rmdir.1.gz", "/usr/share/man/man1/runcon.1.gz", "/usr/share/man/man1/seq.1.gz", "/usr/share/man/man1/sha1sum.1.gz", "/usr/share/man/man1/sha224sum.1.gz", "/usr/share/man/man1/sha256sum.1.gz", "/usr/share/man/man1/sha384sum.1.gz", "/usr/share/man/man1/sha512sum.1.gz", "/usr/share/man/man1/shred.1.gz", "/usr/share/man/man1/shuf.1.gz", "/usr/share/man/man1/sleep.1.gz", "/usr/share/man/man1/sort.1.gz", "/usr/share/man/man1/split.1.gz", "/usr/share/man/man1/stat.1.gz", "/usr/share/man/man1/stdbuf.1.gz", "/usr/share/man/man1/stty.1.gz", "/usr/share/man/man1/sum.1.gz", "/usr/share/man/man1/sync.1.gz", "/usr/share/man/man1/tac.1.gz", "/usr/share/man/man1/tail.1.gz", "/usr/share/man/man1/tee.1.gz", "/usr/share/man/man1/test.1.gz", "/usr/share/man/man1/timeout.1.gz", "/usr/share/man/man1/touch.1.gz", "/usr/share/man/man1/tr.1.gz", "/usr/share/man/man1/true.1.gz", "/usr/share/man/man1/truncate.1.gz", "/usr/share/man/man1/tsort.1.gz", "/usr/share/man/man1/tty.1.gz", "/usr/share/man/man1/uname.1.gz", "/usr/share/man/man1/unexpand.1.gz", "/usr/share/man/man1/uniq.1.gz", "/usr/share/man/man1/unlink.1.gz", "/usr/share/man/man1/users.1.gz", "/usr/share/man/man1/vdir.1.gz", "/usr/share/man/man1/wc.1.gz", "/usr/share/man/man1/who.1.gz", "/usr/share/man/man1/whoami.1.gz", "/usr/share/man/man1/yes.1.gz", "/usr/share/man/man8/chroot.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "dash@0.5.12-12", "Name": "dash", "Identifier": { "PURL": "pkg:deb/debian/dash@0.5.12-12?arch=amd64\u0026distro=debian-13.7", "UID": "4990b2098a2a3724" }, "Version": "0.5.12", "Release": "12", "Arch": "amd64", "SrcName": "dash", "SrcVersion": "0.5.12", "SrcRelease": "12", "Licenses": [ "BSD-3-Clause", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debianutils@5.23.2" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/dash", "/usr/share/debianutils/shells.d/dash", "/usr/share/doc/dash/README.Debian.diet", "/usr/share/doc/dash/README.source", "/usr/share/doc/dash/changelog.Debian.gz", "/usr/share/doc/dash/changelog.gz", "/usr/share/doc/dash/copyright", "/usr/share/lintian/overrides/dash", "/usr/share/man/man1/dash.1.gz", "/usr/share/menu/dash" ], "AnalyzedBy": "dpkg" }, { "ID": "debconf@1.5.91", "Name": "debconf", "Identifier": { "PURL": "pkg:deb/debian/debconf@1.5.91?arch=all\u0026distro=debian-13.7", "UID": "f7c8b7ba83ed5cfe" }, "Version": "1.5.91", "Arch": "all", "SrcName": "debconf", "SrcVersion": "1.5.91", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Debconf Developers \u003cdebconf-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/debconf", "/usr/bin/debconf-apt-progress", "/usr/bin/debconf-communicate", "/usr/bin/debconf-copydb", "/usr/bin/debconf-escape", "/usr/bin/debconf-set-selections", "/usr/bin/debconf-show", "/usr/sbin/dpkg-preconfigure", "/usr/sbin/dpkg-reconfigure", "/usr/share/bash-completion/completions/debconf", "/usr/share/debconf/confmodule", "/usr/share/debconf/confmodule.sh", "/usr/share/debconf/debconf.conf", "/usr/share/debconf/fix_db.pl", "/usr/share/debconf/frontend", "/usr/share/doc/debconf/README.Debian", "/usr/share/doc/debconf/changelog.gz", "/usr/share/doc/debconf/copyright", "/usr/share/lintian/overrides/debconf", "/usr/share/man/man1/debconf-apt-progress.1.gz", "/usr/share/man/man1/debconf-communicate.1.gz", "/usr/share/man/man1/debconf-copydb.1.gz", "/usr/share/man/man1/debconf-escape.1.gz", "/usr/share/man/man1/debconf-set-selections.1.gz", "/usr/share/man/man1/debconf-show.1.gz", "/usr/share/man/man1/debconf.1.gz", "/usr/share/man/man8/dpkg-preconfigure.8.gz", "/usr/share/man/man8/dpkg-reconfigure.8.gz", "/usr/share/perl5/Debconf/AutoSelect.pm", "/usr/share/perl5/Debconf/Base.pm", "/usr/share/perl5/Debconf/Client/ConfModule.pm", "/usr/share/perl5/Debconf/ConfModule.pm", "/usr/share/perl5/Debconf/Config.pm", "/usr/share/perl5/Debconf/Db.pm", "/usr/share/perl5/Debconf/DbDriver.pm", "/usr/share/perl5/Debconf/DbDriver/Backup.pm", "/usr/share/perl5/Debconf/DbDriver/Cache.pm", "/usr/share/perl5/Debconf/DbDriver/Copy.pm", "/usr/share/perl5/Debconf/DbDriver/Debug.pm", "/usr/share/perl5/Debconf/DbDriver/DirTree.pm", "/usr/share/perl5/Debconf/DbDriver/Directory.pm", "/usr/share/perl5/Debconf/DbDriver/File.pm", "/usr/share/perl5/Debconf/DbDriver/LDAP.pm", "/usr/share/perl5/Debconf/DbDriver/PackageDir.pm", "/usr/share/perl5/Debconf/DbDriver/Pipe.pm", "/usr/share/perl5/Debconf/DbDriver/Stack.pm", "/usr/share/perl5/Debconf/Element.pm", "/usr/share/perl5/Debconf/Element/Dialog/Boolean.pm", "/usr/share/perl5/Debconf/Element/Dialog/Error.pm", "/usr/share/perl5/Debconf/Element/Dialog/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Dialog/Note.pm", "/usr/share/perl5/Debconf/Element/Dialog/Password.pm", "/usr/share/perl5/Debconf/Element/Dialog/Progress.pm", "/usr/share/perl5/Debconf/Element/Dialog/Select.pm", "/usr/share/perl5/Debconf/Element/Dialog/String.pm", "/usr/share/perl5/Debconf/Element/Dialog/Text.pm", "/usr/share/perl5/Debconf/Element/Editor/Boolean.pm", "/usr/share/perl5/Debconf/Element/Editor/Error.pm", "/usr/share/perl5/Debconf/Element/Editor/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Editor/Note.pm", "/usr/share/perl5/Debconf/Element/Editor/Password.pm", "/usr/share/perl5/Debconf/Element/Editor/Progress.pm", "/usr/share/perl5/Debconf/Element/Editor/Select.pm", "/usr/share/perl5/Debconf/Element/Editor/String.pm", "/usr/share/perl5/Debconf/Element/Editor/Text.pm", "/usr/share/perl5/Debconf/Element/Gnome.pm", "/usr/share/perl5/Debconf/Element/Gnome/Boolean.pm", "/usr/share/perl5/Debconf/Element/Gnome/Error.pm", "/usr/share/perl5/Debconf/Element/Gnome/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Gnome/Note.pm", "/usr/share/perl5/Debconf/Element/Gnome/Password.pm", "/usr/share/perl5/Debconf/Element/Gnome/Progress.pm", "/usr/share/perl5/Debconf/Element/Gnome/Select.pm", "/usr/share/perl5/Debconf/Element/Gnome/String.pm", "/usr/share/perl5/Debconf/Element/Gnome/Text.pm", "/usr/share/perl5/Debconf/Element/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Noninteractive.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Boolean.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Error.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Note.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Password.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Progress.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Select.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/String.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Text.pm", "/usr/share/perl5/Debconf/Element/Select.pm", "/usr/share/perl5/Debconf/Element/Teletype/Boolean.pm", "/usr/share/perl5/Debconf/Element/Teletype/Error.pm", "/usr/share/perl5/Debconf/Element/Teletype/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Teletype/Note.pm", "/usr/share/perl5/Debconf/Element/Teletype/Password.pm", "/usr/share/perl5/Debconf/Element/Teletype/Progress.pm", "/usr/share/perl5/Debconf/Element/Teletype/Select.pm", "/usr/share/perl5/Debconf/Element/Teletype/String.pm", "/usr/share/perl5/Debconf/Element/Teletype/Text.pm", "/usr/share/perl5/Debconf/Element/Web/Boolean.pm", "/usr/share/perl5/Debconf/Element/Web/Error.pm", "/usr/share/perl5/Debconf/Element/Web/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Web/Note.pm", "/usr/share/perl5/Debconf/Element/Web/Password.pm", "/usr/share/perl5/Debconf/Element/Web/Progress.pm", "/usr/share/perl5/Debconf/Element/Web/Select.pm", "/usr/share/perl5/Debconf/Element/Web/String.pm", "/usr/share/perl5/Debconf/Element/Web/Text.pm", "/usr/share/perl5/Debconf/Encoding.pm", "/usr/share/perl5/Debconf/Format.pm", "/usr/share/perl5/Debconf/Format/822.pm", "/usr/share/perl5/Debconf/FrontEnd.pm", "/usr/share/perl5/Debconf/FrontEnd/Dialog.pm", "/usr/share/perl5/Debconf/FrontEnd/Editor.pm", "/usr/share/perl5/Debconf/FrontEnd/Gnome.pm", "/usr/share/perl5/Debconf/FrontEnd/Kde.pm", "/usr/share/perl5/Debconf/FrontEnd/Noninteractive.pm", "/usr/share/perl5/Debconf/FrontEnd/Passthrough.pm", "/usr/share/perl5/Debconf/FrontEnd/Readline.pm", "/usr/share/perl5/Debconf/FrontEnd/ScreenSize.pm", "/usr/share/perl5/Debconf/FrontEnd/Teletype.pm", "/usr/share/perl5/Debconf/FrontEnd/Text.pm", "/usr/share/perl5/Debconf/FrontEnd/Web.pm", "/usr/share/perl5/Debconf/Gettext.pm", "/usr/share/perl5/Debconf/Iterator.pm", "/usr/share/perl5/Debconf/Log.pm", "/usr/share/perl5/Debconf/Path.pm", "/usr/share/perl5/Debconf/Priority.pm", "/usr/share/perl5/Debconf/Question.pm", "/usr/share/perl5/Debconf/Template.pm", "/usr/share/perl5/Debconf/Template/Transient.pm", "/usr/share/perl5/Debconf/TmpFile.pm", "/usr/share/perl5/Debian/DebConf/Client/ConfModule.pm", "/usr/share/pixmaps/debian-logo.png" ], "AnalyzedBy": "dpkg" }, { "ID": "debian-archive-keyring@2025.1", "Name": "debian-archive-keyring", "Identifier": { "PURL": "pkg:deb/debian/debian-archive-keyring@2025.1?arch=all\u0026distro=debian-13.7", "UID": "a22d861380b1187c" }, "Version": "2025.1", "Arch": "all", "SrcName": "debian-archive-keyring", "SrcVersion": "2025.1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Debian Release Team \u003cpackages@release.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/share/doc/debian-archive-keyring/NEWS.Debian.gz", "/usr/share/doc/debian-archive-keyring/README", "/usr/share/doc/debian-archive-keyring/changelog.gz", "/usr/share/doc/debian-archive-keyring/copyright", "/usr/share/keyrings/debian-archive-bookworm-automatic.pgp", "/usr/share/keyrings/debian-archive-bookworm-security-automatic.pgp", "/usr/share/keyrings/debian-archive-bookworm-stable.pgp", "/usr/share/keyrings/debian-archive-bullseye-automatic.pgp", "/usr/share/keyrings/debian-archive-bullseye-security-automatic.pgp", "/usr/share/keyrings/debian-archive-bullseye-stable.pgp", "/usr/share/keyrings/debian-archive-keyring.pgp", "/usr/share/keyrings/debian-archive-removed-keys.pgp", "/usr/share/keyrings/debian-archive-trixie-automatic.pgp", "/usr/share/keyrings/debian-archive-trixie-security-automatic.pgp", "/usr/share/keyrings/debian-archive-trixie-stable.pgp" ], "AnalyzedBy": "dpkg" }, { "ID": "debianutils@5.23.2", "Name": "debianutils", "Identifier": { "PURL": "pkg:deb/debian/debianutils@5.23.2?arch=amd64\u0026distro=debian-13.7", "UID": "3c5d0b66afafddbb" }, "Version": "5.23.2", "Arch": "amd64", "SrcName": "debianutils", "SrcVersion": "5.23.2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "SMAIL-GPL" ], "Maintainer": "Ileana Dumitrescu \u003cileanadumitrescu95@gmail.com\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/ischroot", "/usr/bin/run-parts", "/usr/bin/savelog", "/usr/bin/tempfile", "/usr/bin/which.debianutils", "/usr/sbin/add-shell", "/usr/sbin/installkernel", "/usr/sbin/remove-shell", "/usr/sbin/update-shells", "/usr/share/debianutils/shells", "/usr/share/doc/debianutils/README.shells", "/usr/share/doc/debianutils/changelog.gz", "/usr/share/doc/debianutils/copyright", "/usr/share/man/de/man1/which.debianutils.1.gz", "/usr/share/man/de/man8/add-shell.8.gz", "/usr/share/man/de/man8/installkernel.8.gz", "/usr/share/man/de/man8/remove-shell.8.gz", "/usr/share/man/de/man8/run-parts.8.gz", "/usr/share/man/de/man8/savelog.8.gz", "/usr/share/man/es/man1/which.debianutils.1.gz", "/usr/share/man/es/man8/add-shell.8.gz", "/usr/share/man/es/man8/installkernel.8.gz", "/usr/share/man/es/man8/remove-shell.8.gz", "/usr/share/man/es/man8/run-parts.8.gz", "/usr/share/man/es/man8/savelog.8.gz", "/usr/share/man/fr/man1/which.debianutils.1.gz", "/usr/share/man/fr/man8/add-shell.8.gz", "/usr/share/man/fr/man8/installkernel.8.gz", "/usr/share/man/fr/man8/remove-shell.8.gz", "/usr/share/man/fr/man8/run-parts.8.gz", "/usr/share/man/fr/man8/savelog.8.gz", "/usr/share/man/it/man1/which.debianutils.1.gz", "/usr/share/man/it/man8/add-shell.8.gz", "/usr/share/man/it/man8/installkernel.8.gz", "/usr/share/man/it/man8/remove-shell.8.gz", "/usr/share/man/it/man8/run-parts.8.gz", "/usr/share/man/it/man8/savelog.8.gz", "/usr/share/man/ja/man1/which.debianutils.1.gz", "/usr/share/man/ja/man8/add-shell.8.gz", "/usr/share/man/ja/man8/installkernel.8.gz", "/usr/share/man/ja/man8/remove-shell.8.gz", "/usr/share/man/ja/man8/run-parts.8.gz", "/usr/share/man/ja/man8/savelog.8.gz", "/usr/share/man/man1/ischroot.1.gz", "/usr/share/man/man1/tempfile.1.gz", "/usr/share/man/man1/which.debianutils.1.gz", "/usr/share/man/man8/add-shell.8.gz", "/usr/share/man/man8/installkernel.8.gz", "/usr/share/man/man8/remove-shell.8.gz", "/usr/share/man/man8/run-parts.8.gz", "/usr/share/man/man8/savelog.8.gz", "/usr/share/man/man8/update-shells.8.gz", "/usr/share/man/pl/man1/which.debianutils.1.gz", "/usr/share/man/pl/man8/add-shell.8.gz", "/usr/share/man/pl/man8/installkernel.8.gz", "/usr/share/man/pl/man8/remove-shell.8.gz", "/usr/share/man/pl/man8/run-parts.8.gz", "/usr/share/man/pl/man8/savelog.8.gz", "/usr/share/man/pt/man1/which.debianutils.1.gz", "/usr/share/man/pt/man8/add-shell.8.gz", "/usr/share/man/pt/man8/installkernel.8.gz", "/usr/share/man/pt/man8/remove-shell.8.gz", "/usr/share/man/pt/man8/run-parts.8.gz", "/usr/share/man/pt/man8/savelog.8.gz", "/usr/share/man/sl/man1/which.debianutils.1.gz", "/usr/share/man/sl/man8/add-shell.8.gz", "/usr/share/man/sl/man8/installkernel.8.gz", "/usr/share/man/sl/man8/remove-shell.8.gz", "/usr/share/man/sl/man8/run-parts.8.gz", "/usr/share/man/sl/man8/savelog.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "diffutils@1:3.10-4", "Name": "diffutils", "Identifier": { "PURL": "pkg:deb/debian/diffutils@3.10-4?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "852f693a78aaa149" }, "Version": "3.10", "Release": "4", "Epoch": 1, "Arch": "amd64", "SrcName": "diffutils", "SrcVersion": "3.10", "SrcRelease": "4", "SrcEpoch": 1, "Licenses": [ "GPL-3.0-or-later", "FSFULLR", "LGPL-2.1-or-later", "GPL-3.0-with-autoconf-exception+", "GPL-3.0-only", "GPL-3+ with texinfo exception", "LGPL-2.0-or-later", "GPL-2.0-or-later", "X11", "FSFAP", "GFDL-1.3-no-invariants-only", "LGPL-3.0-or-later", "LGPL-3.0-only", "public-domain", "LGPL-2.0-only", "LGPL-2.1-only", "GPL-2.0-only", "GFDL-1.3-only" ], "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/cmp", "/usr/bin/diff", "/usr/bin/diff3", "/usr/bin/sdiff", "/usr/share/doc/diffutils/NEWS.gz", "/usr/share/doc/diffutils/changelog.Debian.gz", "/usr/share/doc/diffutils/changelog.gz", "/usr/share/doc/diffutils/copyright", "/usr/share/info/diffutils.info.gz", "/usr/share/locale/bg/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ca/LC_MESSAGES/diffutils.mo", "/usr/share/locale/cs/LC_MESSAGES/diffutils.mo", "/usr/share/locale/da/LC_MESSAGES/diffutils.mo", "/usr/share/locale/de/LC_MESSAGES/diffutils.mo", "/usr/share/locale/el/LC_MESSAGES/diffutils.mo", "/usr/share/locale/eo/LC_MESSAGES/diffutils.mo", "/usr/share/locale/es/LC_MESSAGES/diffutils.mo", "/usr/share/locale/fi/LC_MESSAGES/diffutils.mo", "/usr/share/locale/fr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ga/LC_MESSAGES/diffutils.mo", "/usr/share/locale/gl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/he/LC_MESSAGES/diffutils.mo", "/usr/share/locale/hr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/hu/LC_MESSAGES/diffutils.mo", "/usr/share/locale/id/LC_MESSAGES/diffutils.mo", "/usr/share/locale/it/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ja/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ka/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ko/LC_MESSAGES/diffutils.mo", "/usr/share/locale/lv/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ms/LC_MESSAGES/diffutils.mo", "/usr/share/locale/nb/LC_MESSAGES/diffutils.mo", "/usr/share/locale/nl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pt/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ro/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ru/LC_MESSAGES/diffutils.mo", "/usr/share/locale/sr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/sv/LC_MESSAGES/diffutils.mo", "/usr/share/locale/tr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/uk/LC_MESSAGES/diffutils.mo", "/usr/share/locale/vi/LC_MESSAGES/diffutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/diffutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo", "/usr/share/man/man1/cmp.1.gz", "/usr/share/man/man1/diff.1.gz", "/usr/share/man/man1/diff3.1.gz", "/usr/share/man/man1/sdiff.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "dpkg@1.22.22", "Name": "dpkg", "Identifier": { "PURL": "pkg:deb/debian/dpkg@1.22.22?arch=amd64\u0026distro=debian-13.7", "UID": "7b97f27e3bec0417" }, "Version": "1.22.22", "Arch": "amd64", "SrcName": "dpkg", "SrcVersion": "1.22.22", "Licenses": [ "GPL-2.0-or-later", "public-domain-s-s-d", "GPL-2.0-only" ], "Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "tar@1.35+dfsg-3.1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/dpkg", "/usr/bin/dpkg-deb", "/usr/bin/dpkg-divert", "/usr/bin/dpkg-maintscript-helper", "/usr/bin/dpkg-query", "/usr/bin/dpkg-realpath", "/usr/bin/dpkg-split", "/usr/bin/dpkg-statoverride", "/usr/bin/dpkg-trigger", "/usr/bin/update-alternatives", "/usr/lib/systemd/system/dpkg-db-backup.service", "/usr/lib/systemd/system/dpkg-db-backup.timer", "/usr/libexec/dpkg/dpkg-db-backup", "/usr/libexec/dpkg/dpkg-db-keeper", "/usr/sbin/start-stop-daemon", "/usr/share/doc/dpkg/AUTHORS", "/usr/share/doc/dpkg/README.api", "/usr/share/doc/dpkg/README.bug-usertags.gz", "/usr/share/doc/dpkg/README.feature-removal-schedule.gz", "/usr/share/doc/dpkg/THANKS.gz", "/usr/share/doc/dpkg/changelog.gz", "/usr/share/doc/dpkg/copyright", "/usr/share/dpkg/abitable", "/usr/share/dpkg/cputable", "/usr/share/dpkg/ostable", "/usr/share/dpkg/sh/dpkg-error.sh", "/usr/share/dpkg/tupletable", "/usr/share/lintian/overrides/dpkg", "/usr/share/lintian/profiles/dpkg/main.profile", "/usr/share/locale/ast/LC_MESSAGES/dpkg.mo", "/usr/share/locale/bs/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ca/LC_MESSAGES/dpkg.mo", "/usr/share/locale/cs/LC_MESSAGES/dpkg.mo", "/usr/share/locale/da/LC_MESSAGES/dpkg.mo", "/usr/share/locale/de/LC_MESSAGES/dpkg.mo", "/usr/share/locale/dz/LC_MESSAGES/dpkg.mo", "/usr/share/locale/el/LC_MESSAGES/dpkg.mo", "/usr/share/locale/eo/LC_MESSAGES/dpkg.mo", "/usr/share/locale/es/LC_MESSAGES/dpkg.mo", "/usr/share/locale/et/LC_MESSAGES/dpkg.mo", "/usr/share/locale/eu/LC_MESSAGES/dpkg.mo", "/usr/share/locale/fr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/gl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/hu/LC_MESSAGES/dpkg.mo", "/usr/share/locale/id/LC_MESSAGES/dpkg.mo", "/usr/share/locale/it/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ja/LC_MESSAGES/dpkg.mo", "/usr/share/locale/km/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ko/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ku/LC_MESSAGES/dpkg.mo", "/usr/share/locale/lt/LC_MESSAGES/dpkg.mo", "/usr/share/locale/mr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nb/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ne/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nn/LC_MESSAGES/dpkg.mo", "/usr/share/locale/oc/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pa/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pt/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ro/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ru/LC_MESSAGES/dpkg.mo", "/usr/share/locale/sk/LC_MESSAGES/dpkg.mo", "/usr/share/locale/sv/LC_MESSAGES/dpkg.mo", "/usr/share/locale/th/LC_MESSAGES/dpkg.mo", "/usr/share/locale/tl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/tr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/vi/LC_MESSAGES/dpkg.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/dpkg.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/dpkg.mo", "/usr/share/man/de/man1/dpkg-deb.1.gz", "/usr/share/man/de/man1/dpkg-divert.1.gz", "/usr/share/man/de/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/de/man1/dpkg-query.1.gz", "/usr/share/man/de/man1/dpkg-realpath.1.gz", "/usr/share/man/de/man1/dpkg-split.1.gz", "/usr/share/man/de/man1/dpkg-statoverride.1.gz", "/usr/share/man/de/man1/dpkg-trigger.1.gz", "/usr/share/man/de/man1/dpkg.1.gz", "/usr/share/man/de/man1/update-alternatives.1.gz", "/usr/share/man/de/man5/dpkg.cfg.5.gz", "/usr/share/man/de/man8/start-stop-daemon.8.gz", "/usr/share/man/es/man5/dpkg.cfg.5.gz", "/usr/share/man/fr/man1/dpkg-divert.1.gz", "/usr/share/man/fr/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/fr/man1/dpkg-query.1.gz", "/usr/share/man/fr/man1/dpkg-realpath.1.gz", "/usr/share/man/fr/man1/dpkg-split.1.gz", "/usr/share/man/fr/man1/dpkg-trigger.1.gz", "/usr/share/man/fr/man1/update-alternatives.1.gz", "/usr/share/man/fr/man5/dpkg.cfg.5.gz", "/usr/share/man/fr/man8/start-stop-daemon.8.gz", "/usr/share/man/it/man5/dpkg.cfg.5.gz", "/usr/share/man/ja/man5/dpkg.cfg.5.gz", "/usr/share/man/man1/dpkg-deb.1.gz", "/usr/share/man/man1/dpkg-divert.1.gz", "/usr/share/man/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/man1/dpkg-query.1.gz", "/usr/share/man/man1/dpkg-realpath.1.gz", "/usr/share/man/man1/dpkg-split.1.gz", "/usr/share/man/man1/dpkg-statoverride.1.gz", "/usr/share/man/man1/dpkg-trigger.1.gz", "/usr/share/man/man1/dpkg.1.gz", "/usr/share/man/man1/update-alternatives.1.gz", "/usr/share/man/man5/dpkg.cfg.5.gz", "/usr/share/man/man8/start-stop-daemon.8.gz", "/usr/share/man/nl/man1/dpkg-deb.1.gz", "/usr/share/man/nl/man1/dpkg-divert.1.gz", "/usr/share/man/nl/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/nl/man1/dpkg-query.1.gz", "/usr/share/man/nl/man1/dpkg-realpath.1.gz", "/usr/share/man/nl/man1/dpkg-split.1.gz", "/usr/share/man/nl/man1/dpkg-statoverride.1.gz", "/usr/share/man/nl/man1/dpkg-trigger.1.gz", "/usr/share/man/nl/man1/dpkg.1.gz", "/usr/share/man/nl/man1/update-alternatives.1.gz", "/usr/share/man/nl/man5/dpkg.cfg.5.gz", "/usr/share/man/nl/man8/start-stop-daemon.8.gz", "/usr/share/man/pl/man5/dpkg.cfg.5.gz", "/usr/share/man/pt/man1/dpkg-deb.1.gz", "/usr/share/man/pt/man1/dpkg-divert.1.gz", "/usr/share/man/pt/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/pt/man1/dpkg-query.1.gz", "/usr/share/man/pt/man1/dpkg-realpath.1.gz", "/usr/share/man/pt/man1/dpkg-split.1.gz", "/usr/share/man/pt/man1/dpkg-statoverride.1.gz", "/usr/share/man/pt/man1/dpkg-trigger.1.gz", "/usr/share/man/pt/man1/dpkg.1.gz", "/usr/share/man/pt/man1/update-alternatives.1.gz", "/usr/share/man/pt/man5/dpkg.cfg.5.gz", "/usr/share/man/pt/man8/start-stop-daemon.8.gz", "/usr/share/man/sv/man1/dpkg-deb.1.gz", "/usr/share/man/sv/man1/dpkg-divert.1.gz", "/usr/share/man/sv/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/sv/man1/dpkg-query.1.gz", "/usr/share/man/sv/man1/dpkg-realpath.1.gz", "/usr/share/man/sv/man1/dpkg-split.1.gz", "/usr/share/man/sv/man1/dpkg-statoverride.1.gz", "/usr/share/man/sv/man1/dpkg-trigger.1.gz", "/usr/share/man/sv/man1/dpkg.1.gz", "/usr/share/man/sv/man1/update-alternatives.1.gz", "/usr/share/man/sv/man5/dpkg.cfg.5.gz", "/usr/share/man/sv/man8/start-stop-daemon.8.gz", "/usr/share/polkit-1/actions/org.dpkg.pkexec.update-alternatives.policy" ], "AnalyzedBy": "dpkg" }, { "ID": "ffmpeg@7:7.1.5-0+deb13u1", "Name": "ffmpeg", "Identifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libavcodec61@7:7.1.5-0+deb13u1", "libavdevice61@7:7.1.5-0+deb13u1", "libavfilter10@7:7.1.5-0+deb13u1", "libavformat61@7:7.1.5-0+deb13u1", "libavutil59@7:7.1.5-0+deb13u1", "libc6@2.41-12+deb13u4", "libplacebo349@7.349.0-3", "libpostproc58@7:7.1.5-0+deb13u1", "libsdl2-2.0-0@2.32.4+dfsg-1", "libswresample5@7:7.1.5-0+deb13u1", "libswscale8@7:7.1.5-0+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/bin/ffmpeg", "/usr/bin/ffplay", "/usr/bin/ffprobe", "/usr/bin/qt-faststart", "/usr/share/doc/ffmpeg/README.Debian", "/usr/share/doc/ffmpeg/RELEASE_NOTES", "/usr/share/doc/ffmpeg/TODO.Debian", "/usr/share/doc/ffmpeg/changelog.Debian.gz", "/usr/share/doc/ffmpeg/changelog.gz", "/usr/share/doc/ffmpeg/copyright", "/usr/share/ffmpeg/ffprobe.xsd", "/usr/share/ffmpeg/libvpx-1080p.ffpreset", "/usr/share/ffmpeg/libvpx-1080p50_60.ffpreset", "/usr/share/ffmpeg/libvpx-360p.ffpreset", "/usr/share/ffmpeg/libvpx-720p.ffpreset", "/usr/share/ffmpeg/libvpx-720p50_60.ffpreset", "/usr/share/lintian/overrides/ffmpeg", "/usr/share/man/man1/ffmpeg-all.1.gz", "/usr/share/man/man1/ffmpeg-bitstream-filters.1.gz", "/usr/share/man/man1/ffmpeg-codecs.1.gz", "/usr/share/man/man1/ffmpeg-devices.1.gz", "/usr/share/man/man1/ffmpeg-filters.1.gz", "/usr/share/man/man1/ffmpeg-formats.1.gz", "/usr/share/man/man1/ffmpeg-protocols.1.gz", "/usr/share/man/man1/ffmpeg-resampler.1.gz", "/usr/share/man/man1/ffmpeg-scaler.1.gz", "/usr/share/man/man1/ffmpeg-utils.1.gz", "/usr/share/man/man1/ffmpeg.1.gz", "/usr/share/man/man1/ffplay-all.1.gz", "/usr/share/man/man1/ffplay.1.gz", "/usr/share/man/man1/ffprobe-all.1.gz", "/usr/share/man/man1/ffprobe.1.gz", "/usr/share/man/man1/qt-faststart.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "findutils@4.10.0-3", "Name": "findutils", "Identifier": { "PURL": "pkg:deb/debian/findutils@4.10.0-3?arch=amd64\u0026distro=debian-13.7", "UID": "12e741692291b42a" }, "Version": "4.10.0", "Release": "3", "Arch": "amd64", "SrcName": "findutils", "SrcVersion": "4.10.0", "SrcRelease": "3", "Licenses": [ "GFDL-1.3-no-invariants-or-later", "GPL-3.0-or-later", "FSFAP", "GPL-2+ with Autoconf-data exception", "GPL-3+ with Autoconf-data exception", "FSFULLR", "GPL-2.0-or-later", "X11", "public-domain", "LGPL-2.1-or-later", "GPL with automake exception", "LGPL-2.0-or-later", "LGPL-3.0-or-later", "BSD-3-Clause", "GPL-3+ with Bison-2.2 exception", "LGPL-3.0-only", "ISC", "GFDL-1.3-only", "GPL-2.0-only", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Andreas Metzler \u003cametzler@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/find", "/usr/bin/xargs", "/usr/share/doc-base/findutils.findutils", "/usr/share/doc/findutils/NEWS.gz", "/usr/share/doc/findutils/README.gz", "/usr/share/doc/findutils/TODO", "/usr/share/doc/findutils/changelog.Debian.gz", "/usr/share/doc/findutils/changelog.gz", "/usr/share/doc/findutils/copyright", "/usr/share/info/find-maint.info.gz", "/usr/share/info/find.info.gz", "/usr/share/locale/be/LC_MESSAGES/findutils.mo", "/usr/share/locale/bg/LC_MESSAGES/findutils.mo", "/usr/share/locale/ca/LC_MESSAGES/findutils.mo", "/usr/share/locale/cs/LC_MESSAGES/findutils.mo", "/usr/share/locale/da/LC_MESSAGES/findutils.mo", "/usr/share/locale/de/LC_MESSAGES/findutils.mo", "/usr/share/locale/el/LC_MESSAGES/findutils.mo", "/usr/share/locale/eo/LC_MESSAGES/findutils.mo", "/usr/share/locale/es/LC_MESSAGES/findutils.mo", "/usr/share/locale/et/LC_MESSAGES/findutils.mo", "/usr/share/locale/fi/LC_MESSAGES/findutils.mo", "/usr/share/locale/fr/LC_MESSAGES/findutils.mo", "/usr/share/locale/ga/LC_MESSAGES/findutils.mo", "/usr/share/locale/gl/LC_MESSAGES/findutils.mo", "/usr/share/locale/hr/LC_MESSAGES/findutils.mo", "/usr/share/locale/hu/LC_MESSAGES/findutils.mo", "/usr/share/locale/id/LC_MESSAGES/findutils.mo", "/usr/share/locale/it/LC_MESSAGES/findutils.mo", "/usr/share/locale/ja/LC_MESSAGES/findutils.mo", "/usr/share/locale/ka/LC_MESSAGES/findutils.mo", "/usr/share/locale/ko/LC_MESSAGES/findutils.mo", "/usr/share/locale/lg/LC_MESSAGES/findutils.mo", "/usr/share/locale/lt/LC_MESSAGES/findutils.mo", "/usr/share/locale/ms/LC_MESSAGES/findutils.mo", "/usr/share/locale/nb/LC_MESSAGES/findutils.mo", "/usr/share/locale/nl/LC_MESSAGES/findutils.mo", "/usr/share/locale/pl/LC_MESSAGES/findutils.mo", "/usr/share/locale/pt/LC_MESSAGES/findutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/findutils.mo", "/usr/share/locale/ro/LC_MESSAGES/findutils.mo", "/usr/share/locale/ru/LC_MESSAGES/findutils.mo", "/usr/share/locale/sk/LC_MESSAGES/findutils.mo", "/usr/share/locale/sl/LC_MESSAGES/findutils.mo", "/usr/share/locale/sr/LC_MESSAGES/findutils.mo", "/usr/share/locale/sv/LC_MESSAGES/findutils.mo", "/usr/share/locale/tr/LC_MESSAGES/findutils.mo", "/usr/share/locale/uk/LC_MESSAGES/findutils.mo", "/usr/share/locale/vi/LC_MESSAGES/findutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/findutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/findutils.mo", "/usr/share/man/man1/find.1.gz", "/usr/share/man/man1/xargs.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "fontconfig@2.15.0-2.3", "Name": "fontconfig", "Identifier": { "PURL": "pkg:deb/debian/fontconfig@2.15.0-2.3?arch=amd64\u0026distro=debian-13.7", "UID": "76153120a42a8870" }, "Version": "2.15.0", "Release": "2.3", "Arch": "amd64", "SrcName": "fontconfig", "SrcVersion": "2.15.0", "SrcRelease": "2.3", "Maintainer": "Debian freedesktop.org maintainers \u003cpkg-freedesktop-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "fontconfig-config@2.15.0-2.3", "libc6@2.41-12+deb13u4", "libfontconfig1@2.15.0-2.3", "libfreetype6@2.13.3+dfsg-1+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/bin/fc-cache", "/usr/bin/fc-cat", "/usr/bin/fc-conflist", "/usr/bin/fc-list", "/usr/bin/fc-match", "/usr/bin/fc-pattern", "/usr/bin/fc-query", "/usr/bin/fc-scan", "/usr/bin/fc-validate", "/usr/share/doc-base/fontconfig.fontconfig-user", "/usr/share/doc/fontconfig/README.Debian", "/usr/share/doc/fontconfig/changelog.Debian.gz", "/usr/share/doc/fontconfig/changelog.gz", "/usr/share/doc/fontconfig/copyright", "/usr/share/doc/fontconfig/fontconfig-user.html", "/usr/share/doc/fontconfig/fontconfig-user.pdf.gz", "/usr/share/doc/fontconfig/fontconfig-user.txt.gz", "/usr/share/locale/ka/LC_MESSAGES/fontconfig-conf.mo", "/usr/share/locale/ka/LC_MESSAGES/fontconfig.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/fontconfig-conf.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/fontconfig.mo", "/usr/share/man/man1/fc-cache.1.gz", "/usr/share/man/man1/fc-cat.1.gz", "/usr/share/man/man1/fc-conflist.1.gz", "/usr/share/man/man1/fc-list.1.gz", "/usr/share/man/man1/fc-match.1.gz", "/usr/share/man/man1/fc-pattern.1.gz", "/usr/share/man/man1/fc-query.1.gz", "/usr/share/man/man1/fc-scan.1.gz", "/usr/share/man/man1/fc-validate.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "fontconfig-config@2.15.0-2.3", "Name": "fontconfig-config", "Identifier": { "PURL": "pkg:deb/debian/fontconfig-config@2.15.0-2.3?arch=amd64\u0026distro=debian-13.7", "UID": "2ebf9c6542eb6a41" }, "Version": "2.15.0", "Release": "2.3", "Arch": "amd64", "SrcName": "fontconfig", "SrcVersion": "2.15.0", "SrcRelease": "2.3", "Maintainer": "Debian freedesktop.org maintainers \u003cpkg-freedesktop-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "fonts-dejavu-core@2.37-8" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/fontconfig-config/changelog.Debian.gz", "/usr/share/doc/fontconfig-config/changelog.gz", "/usr/share/doc/fontconfig-config/copyright", "/usr/share/fontconfig/conf.avail/05-reset-dirs-sample.conf", "/usr/share/fontconfig/conf.avail/09-autohint-if-no-hinting.conf", "/usr/share/fontconfig/conf.avail/10-autohint.conf", "/usr/share/fontconfig/conf.avail/10-hinting-full.conf", "/usr/share/fontconfig/conf.avail/10-hinting-medium.conf", "/usr/share/fontconfig/conf.avail/10-hinting-none.conf", "/usr/share/fontconfig/conf.avail/10-hinting-slight.conf", "/usr/share/fontconfig/conf.avail/10-no-antialias.conf", "/usr/share/fontconfig/conf.avail/10-scale-bitmap-fonts.conf", "/usr/share/fontconfig/conf.avail/10-sub-pixel-bgr.conf", "/usr/share/fontconfig/conf.avail/10-sub-pixel-none.conf", "/usr/share/fontconfig/conf.avail/10-sub-pixel-rgb.conf", "/usr/share/fontconfig/conf.avail/10-sub-pixel-vbgr.conf", "/usr/share/fontconfig/conf.avail/10-sub-pixel-vrgb.conf", "/usr/share/fontconfig/conf.avail/10-unhinted.conf", "/usr/share/fontconfig/conf.avail/10-yes-antialias.conf", "/usr/share/fontconfig/conf.avail/11-lcdfilter-default.conf", "/usr/share/fontconfig/conf.avail/11-lcdfilter-legacy.conf", "/usr/share/fontconfig/conf.avail/11-lcdfilter-light.conf", "/usr/share/fontconfig/conf.avail/11-lcdfilter-none.conf", "/usr/share/fontconfig/conf.avail/20-unhint-small-vera.conf", "/usr/share/fontconfig/conf.avail/25-unhint-nonlatin.conf", "/usr/share/fontconfig/conf.avail/30-metric-aliases.conf", "/usr/share/fontconfig/conf.avail/35-lang-normalize.conf", "/usr/share/fontconfig/conf.avail/40-nonlatin.conf", "/usr/share/fontconfig/conf.avail/45-generic.conf", "/usr/share/fontconfig/conf.avail/45-latin.conf", "/usr/share/fontconfig/conf.avail/48-spacing.conf", "/usr/share/fontconfig/conf.avail/49-sansserif.conf", "/usr/share/fontconfig/conf.avail/50-user.conf", "/usr/share/fontconfig/conf.avail/51-local.conf", "/usr/share/fontconfig/conf.avail/60-generic.conf", "/usr/share/fontconfig/conf.avail/60-latin.conf", "/usr/share/fontconfig/conf.avail/65-fonts-persian.conf", "/usr/share/fontconfig/conf.avail/65-khmer.conf", "/usr/share/fontconfig/conf.avail/65-nonlatin.conf", "/usr/share/fontconfig/conf.avail/69-unifont.conf", "/usr/share/fontconfig/conf.avail/70-force-bitmaps.conf", "/usr/share/fontconfig/conf.avail/70-no-bitmaps-and-emoji.conf", "/usr/share/fontconfig/conf.avail/70-no-bitmaps-except-emoji.conf", "/usr/share/fontconfig/conf.avail/70-no-bitmaps.conf", "/usr/share/fontconfig/conf.avail/70-yes-bitmaps.conf", "/usr/share/fontconfig/conf.avail/80-delicious.conf", "/usr/share/fontconfig/conf.avail/90-synthetic.conf", "/usr/share/man/man5/fonts-conf.5.gz", "/usr/share/xml/fontconfig/fonts.dtd" ], "AnalyzedBy": "dpkg" }, { "ID": "fonts-dejavu-core@2.37-8", "Name": "fonts-dejavu-core", "Identifier": { "PURL": "pkg:deb/debian/fonts-dejavu-core@2.37-8?arch=all\u0026distro=debian-13.7", "UID": "49b3e2770d03125d" }, "Version": "2.37", "Release": "8", "Arch": "all", "SrcName": "fonts-dejavu", "SrcVersion": "2.37", "SrcRelease": "8", "Licenses": [ "Bitstream-Vera", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Fonts Task Force \u003cdebian-fonts@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "fonts-dejavu-mono@2.37-8" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/fonts-dejavu-core/AUTHORS", "/usr/share/doc/fonts-dejavu-core/BUGS", "/usr/share/doc/fonts-dejavu-core/README.md", "/usr/share/doc/fonts-dejavu-core/changelog.Debian.gz", "/usr/share/doc/fonts-dejavu-core/changelog.gz", "/usr/share/doc/fonts-dejavu-core/copyright", "/usr/share/doc/fonts-dejavu-core/langcover.txt.gz", "/usr/share/doc/fonts-dejavu-core/status.txt.gz", "/usr/share/doc/fonts-dejavu-core/unicover.txt.gz", "/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf", "/usr/share/fonts/truetype/dejavu/DejaVuSans.ttf", "/usr/share/fonts/truetype/dejavu/DejaVuSerif-Bold.ttf", "/usr/share/fonts/truetype/dejavu/DejaVuSerif.ttf" ], "AnalyzedBy": "dpkg" }, { "ID": "fonts-dejavu-mono@2.37-8", "Name": "fonts-dejavu-mono", "Identifier": { "PURL": "pkg:deb/debian/fonts-dejavu-mono@2.37-8?arch=all\u0026distro=debian-13.7", "UID": "1ba9a619eb841c83" }, "Version": "2.37", "Release": "8", "Arch": "all", "SrcName": "fonts-dejavu", "SrcVersion": "2.37", "SrcRelease": "8", "Licenses": [ "Bitstream-Vera", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Fonts Task Force \u003cdebian-fonts@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/fonts-dejavu-mono/AUTHORS", "/usr/share/doc/fonts-dejavu-mono/BUGS", "/usr/share/doc/fonts-dejavu-mono/README.md", "/usr/share/doc/fonts-dejavu-mono/changelog.Debian.gz", "/usr/share/doc/fonts-dejavu-mono/changelog.gz", "/usr/share/doc/fonts-dejavu-mono/copyright", "/usr/share/doc/fonts-dejavu-mono/langcover.txt.gz", "/usr/share/doc/fonts-dejavu-mono/status.txt.gz", "/usr/share/doc/fonts-dejavu-mono/unicover.txt.gz", "/usr/share/fonts/truetype/dejavu/DejaVuSansMono-Bold.ttf", "/usr/share/fonts/truetype/dejavu/DejaVuSansMono-BoldOblique.ttf", "/usr/share/fonts/truetype/dejavu/DejaVuSansMono-Oblique.ttf", "/usr/share/fonts/truetype/dejavu/DejaVuSansMono.ttf" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-14-base@14.2.0-19", "Name": "gcc-14-base", "Identifier": { "PURL": "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64\u0026distro=debian-13.7", "UID": "371c061d08215a1b" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Licenses": [ "GPL-2.0-or-later", "GPL-3.0-only", "GFDL-1.2-only", "Artistic-2.0", "LGPL-2.0-or-later" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/share/doc/gcc-14-base/README.Debian.amd64.gz", "/usr/share/doc/gcc-14-base/TODO.Debian", "/usr/share/doc/gcc-14-base/changelog.Debian.gz", "/usr/share/doc/gcc-14-base/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "grep@3.11-4", "Name": "grep", "Identifier": { "PURL": "pkg:deb/debian/grep@3.11-4?arch=amd64\u0026distro=debian-13.7", "UID": "6ce8b4eed9c0d137" }, "Version": "3.11", "Release": "4", "Arch": "amd64", "SrcName": "grep", "SrcVersion": "3.11", "SrcRelease": "4", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/egrep", "/usr/bin/fgrep", "/usr/bin/grep", "/usr/bin/rgrep", "/usr/share/doc/grep/AUTHORS", "/usr/share/doc/grep/NEWS.Debian.gz", "/usr/share/doc/grep/NEWS.gz", "/usr/share/doc/grep/README", "/usr/share/doc/grep/THANKS.gz", "/usr/share/doc/grep/TODO.gz", "/usr/share/doc/grep/changelog.Debian.gz", "/usr/share/doc/grep/changelog.gz", "/usr/share/doc/grep/copyright", "/usr/share/info/grep.info.gz", "/usr/share/locale/af/LC_MESSAGES/grep.mo", "/usr/share/locale/be/LC_MESSAGES/grep.mo", "/usr/share/locale/bg/LC_MESSAGES/grep.mo", "/usr/share/locale/ca/LC_MESSAGES/grep.mo", "/usr/share/locale/cs/LC_MESSAGES/grep.mo", "/usr/share/locale/da/LC_MESSAGES/grep.mo", "/usr/share/locale/de/LC_MESSAGES/grep.mo", "/usr/share/locale/el/LC_MESSAGES/grep.mo", "/usr/share/locale/eo/LC_MESSAGES/grep.mo", "/usr/share/locale/es/LC_MESSAGES/grep.mo", "/usr/share/locale/et/LC_MESSAGES/grep.mo", "/usr/share/locale/eu/LC_MESSAGES/grep.mo", "/usr/share/locale/fi/LC_MESSAGES/grep.mo", "/usr/share/locale/fr/LC_MESSAGES/grep.mo", "/usr/share/locale/ga/LC_MESSAGES/grep.mo", "/usr/share/locale/gl/LC_MESSAGES/grep.mo", "/usr/share/locale/he/LC_MESSAGES/grep.mo", "/usr/share/locale/hr/LC_MESSAGES/grep.mo", "/usr/share/locale/hu/LC_MESSAGES/grep.mo", "/usr/share/locale/id/LC_MESSAGES/grep.mo", "/usr/share/locale/it/LC_MESSAGES/grep.mo", "/usr/share/locale/ja/LC_MESSAGES/grep.mo", "/usr/share/locale/ka/LC_MESSAGES/grep.mo", "/usr/share/locale/ko/LC_MESSAGES/grep.mo", "/usr/share/locale/ky/LC_MESSAGES/grep.mo", "/usr/share/locale/lt/LC_MESSAGES/grep.mo", "/usr/share/locale/nb/LC_MESSAGES/grep.mo", "/usr/share/locale/nl/LC_MESSAGES/grep.mo", "/usr/share/locale/pa/LC_MESSAGES/grep.mo", "/usr/share/locale/pl/LC_MESSAGES/grep.mo", "/usr/share/locale/pt/LC_MESSAGES/grep.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/grep.mo", "/usr/share/locale/ro/LC_MESSAGES/grep.mo", "/usr/share/locale/ru/LC_MESSAGES/grep.mo", "/usr/share/locale/sk/LC_MESSAGES/grep.mo", "/usr/share/locale/sl/LC_MESSAGES/grep.mo", "/usr/share/locale/sr/LC_MESSAGES/grep.mo", "/usr/share/locale/sv/LC_MESSAGES/grep.mo", "/usr/share/locale/ta/LC_MESSAGES/grep.mo", "/usr/share/locale/th/LC_MESSAGES/grep.mo", "/usr/share/locale/tr/LC_MESSAGES/grep.mo", "/usr/share/locale/uk/LC_MESSAGES/grep.mo", "/usr/share/locale/vi/LC_MESSAGES/grep.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/grep.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo", "/usr/share/man/man1/grep.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gzip@1.13-1+deb13u1", "Name": "gzip", "Identifier": { "PURL": "pkg:deb/debian/gzip@1.13-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "75d9e6fa7aafe838" }, "Version": "1.13", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "gzip", "SrcVersion": "1.13", "SrcRelease": "1+deb13u1", "Licenses": [ "GPL-3.0-or-later", "GFDL-1.3+-no-invariant", "FSF-manpages", "GPL-3.0-only", "GFDL-3" ], "Maintainer": "Milan Kupcevic \u003cmilan@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/gunzip", "/usr/bin/gzexe", "/usr/bin/gzip", "/usr/bin/zcat", "/usr/bin/zcmp", "/usr/bin/zdiff", "/usr/bin/zegrep", "/usr/bin/zfgrep", "/usr/bin/zforce", "/usr/bin/zgrep", "/usr/bin/zless", "/usr/bin/zmore", "/usr/bin/znew", "/usr/share/doc/gzip/NEWS.gz", "/usr/share/doc/gzip/README.gz", "/usr/share/doc/gzip/TODO", "/usr/share/doc/gzip/changelog.Debian.gz", "/usr/share/doc/gzip/changelog.gz", "/usr/share/doc/gzip/copyright", "/usr/share/info/gzip.info.gz", "/usr/share/man/man1/gzexe.1.gz", "/usr/share/man/man1/gzip.1.gz", "/usr/share/man/man1/zdiff.1.gz", "/usr/share/man/man1/zforce.1.gz", "/usr/share/man/man1/zgrep.1.gz", "/usr/share/man/man1/zless.1.gz", "/usr/share/man/man1/zmore.1.gz", "/usr/share/man/man1/znew.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "hostname@3.25", "Name": "hostname", "Identifier": { "PURL": "pkg:deb/debian/hostname@3.25?arch=amd64\u0026distro=debian-13.7", "UID": "641772722328aedf" }, "Version": "3.25", "Arch": "amd64", "SrcName": "hostname", "SrcVersion": "3.25", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Michael Meskes \u003cmeskes@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/hostname", "/usr/share/doc/hostname/changelog.gz", "/usr/share/doc/hostname/copyright", "/usr/share/man/man1/hostname.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "init-system-helpers@1.69~deb13u1", "Name": "init-system-helpers", "Identifier": { "PURL": "pkg:deb/debian/init-system-helpers@1.69~deb13u1?arch=all\u0026distro=debian-13.7", "UID": "cb52819ec2f1a236" }, "Version": "1.69~deb13u1", "Arch": "all", "SrcName": "init-system-helpers", "SrcVersion": "1.69~deb13u1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/deb-systemd-helper", "/usr/bin/deb-systemd-invoke", "/usr/sbin/invoke-rc.d", "/usr/sbin/service", "/usr/sbin/update-rc.d", "/usr/share/bug/init-system-helpers/control", "/usr/share/doc/init-system-helpers/README.invoke-rc.d.gz", "/usr/share/doc/init-system-helpers/README.policy-rc.d.gz", "/usr/share/doc/init-system-helpers/changelog.gz", "/usr/share/doc/init-system-helpers/copyright", "/usr/share/lintian/overrides/init-system-helpers", "/usr/share/man/man1/deb-systemd-helper.1p.gz", "/usr/share/man/man1/deb-systemd-invoke.1p.gz", "/usr/share/man/man8/invoke-rc.d.8.gz", "/usr/share/man/man8/service.8.gz", "/usr/share/man/man8/update-rc.d.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libacl1@2.3.2-2+b1", "Name": "libacl1", "Identifier": { "PURL": "pkg:deb/debian/libacl1@2.3.2-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "cc40ccea052c10a8" }, "Version": "2.3.2", "Release": "2+b1", "Arch": "amd64", "SrcName": "acl", "SrcVersion": "2.3.2", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.1-only" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libacl.so.1.1.2302", "/usr/share/doc/libacl1/changelog.Debian.amd64.gz", "/usr/share/doc/libacl1/changelog.Debian.gz", "/usr/share/doc/libacl1/changelog.gz", "/usr/share/doc/libacl1/copyright", "/usr/share/lintian/overrides/libacl1" ], "AnalyzedBy": "dpkg" }, { "ID": "libaom3@3.12.1-1+deb13u1", "Name": "libaom3", "Identifier": { "PURL": "pkg:deb/debian/libaom3@3.12.1-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "c5d3a0abd3b00671" }, "Version": "3.12.1", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "aom", "SrcVersion": "3.12.1", "SrcRelease": "1+deb13u1", "Licenses": [ "BSD-2-Clause", "public-domain-md5", "BSD-3-Clause", "ISC", "MIT" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libaom.so.3.12.1", "/usr/share/doc/libaom3/changelog.Debian.gz", "/usr/share/doc/libaom3/changelog.gz", "/usr/share/doc/libaom3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libapt-pkg7.0@3.0.3", "Name": "libapt-pkg7.0", "Identifier": { "PURL": "pkg:deb/debian/libapt-pkg7.0@3.0.3?arch=amd64\u0026distro=debian-13.7", "UID": "158032a20d7e3dfd" }, "Version": "3.0.3", "Arch": "amd64", "SrcName": "apt", "SrcVersion": "3.0.3", "Licenses": [ "GPL-2.0-or-later", "curl", "BSD-3-Clause", "MIT", "GPL-2.0-only" ], "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "liblz4-1@1.10.0-4", "liblzma5@5.8.1-1+deb13u2", "libssl3t64@3.5.7-1~deb13u3", "libstdc++6@14.2.0-19", "libsystemd0@257.13-1~deb13u1", "libudev1@257.13-1~deb13u1", "libxxhash0@0.8.3-2", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libapt-pkg.so.7.0.0", "/usr/share/doc/libapt-pkg7.0/NEWS.Debian.gz", "/usr/share/doc/libapt-pkg7.0/changelog.gz", "/usr/share/doc/libapt-pkg7.0/copyright", "/usr/share/locale/ar/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ast/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/bg/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/bs/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ca/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/cs/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/cy/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/da/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/de/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/dz/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/el/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/es/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/eu/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/fi/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/fr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/gl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/hu/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/it/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ja/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/km/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ko/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ku/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/lt/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/mr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nb/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ne/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nn/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pt/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ro/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ru/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sk/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sv/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/th/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/tl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/tr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/uk/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/vi/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/libapt-pkg7.0.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libasound2-data@1.2.14-1+deb13u1", "Name": "libasound2-data", "Identifier": { "PURL": "pkg:deb/debian/libasound2-data@1.2.14-1%2Bdeb13u1?arch=all\u0026distro=debian-13.7", "UID": "34e854edfb971425" }, "Version": "1.2.14", "Release": "1+deb13u1", "Arch": "all", "SrcName": "alsa-lib", "SrcVersion": "1.2.14", "SrcRelease": "1+deb13u1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only" ], "Maintainer": "Debian ALSA Maintainers \u003cpkg-alsa-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/alsa/alsa.conf", "/usr/share/alsa/cards/AACI.conf", "/usr/share/alsa/cards/ATIIXP-MODEM.conf", "/usr/share/alsa/cards/ATIIXP-SPDMA.conf", "/usr/share/alsa/cards/ATIIXP.conf", "/usr/share/alsa/cards/AU8810.conf", "/usr/share/alsa/cards/AU8820.conf", "/usr/share/alsa/cards/AU8830.conf", "/usr/share/alsa/cards/Audigy.conf", "/usr/share/alsa/cards/Audigy2.conf", "/usr/share/alsa/cards/Aureon51.conf", "/usr/share/alsa/cards/Aureon71.conf", "/usr/share/alsa/cards/CA0106.conf", "/usr/share/alsa/cards/CMI8338-SWIEC.conf", "/usr/share/alsa/cards/CMI8338.conf", "/usr/share/alsa/cards/CMI8738-MC6.conf", "/usr/share/alsa/cards/CMI8738-MC8.conf", "/usr/share/alsa/cards/CMI8788.conf", "/usr/share/alsa/cards/CS46xx.conf", "/usr/share/alsa/cards/EMU10K1.conf", "/usr/share/alsa/cards/EMU10K1X.conf", "/usr/share/alsa/cards/ENS1370.conf", "/usr/share/alsa/cards/ENS1371.conf", "/usr/share/alsa/cards/ES1968.conf", "/usr/share/alsa/cards/Echo_Echo3G.conf", "/usr/share/alsa/cards/FM801.conf", "/usr/share/alsa/cards/FWSpeakers.conf", "/usr/share/alsa/cards/FireWave.conf", "/usr/share/alsa/cards/GUS.conf", "/usr/share/alsa/cards/HDA-Intel.conf", "/usr/share/alsa/cards/HdmiLpeAudio.conf", "/usr/share/alsa/cards/ICE1712.conf", "/usr/share/alsa/cards/ICE1724.conf", "/usr/share/alsa/cards/ICH-MODEM.conf", "/usr/share/alsa/cards/ICH.conf", "/usr/share/alsa/cards/ICH4.conf", "/usr/share/alsa/cards/Loopback.conf", "/usr/share/alsa/cards/Maestro3.conf", "/usr/share/alsa/cards/NFORCE.conf", "/usr/share/alsa/cards/PC-Speaker.conf", "/usr/share/alsa/cards/PMac.conf", "/usr/share/alsa/cards/PMacToonie.conf", "/usr/share/alsa/cards/PS3.conf", "/usr/share/alsa/cards/RME9636.conf", "/usr/share/alsa/cards/RME9652.conf", "/usr/share/alsa/cards/SB-XFi.conf", "/usr/share/alsa/cards/SI7018.conf", "/usr/share/alsa/cards/TRID4DWAVENX.conf", "/usr/share/alsa/cards/USB-Audio.conf", "/usr/share/alsa/cards/VIA686A.conf", "/usr/share/alsa/cards/VIA8233.conf", "/usr/share/alsa/cards/VIA8233A.conf", "/usr/share/alsa/cards/VIA8237.conf", "/usr/share/alsa/cards/VX222.conf", "/usr/share/alsa/cards/VXPocket.conf", "/usr/share/alsa/cards/VXPocket440.conf", "/usr/share/alsa/cards/YMF744.conf", "/usr/share/alsa/cards/aliases.conf", "/usr/share/alsa/cards/pistachio-card.conf", "/usr/share/alsa/cards/vc4-hdmi.conf", "/usr/share/alsa/ctl/default.conf", "/usr/share/alsa/pcm/center_lfe.conf", "/usr/share/alsa/pcm/default.conf", "/usr/share/alsa/pcm/dmix.conf", "/usr/share/alsa/pcm/dpl.conf", "/usr/share/alsa/pcm/dsnoop.conf", "/usr/share/alsa/pcm/front.conf", "/usr/share/alsa/pcm/hdmi.conf", "/usr/share/alsa/pcm/iec958.conf", "/usr/share/alsa/pcm/modem.conf", "/usr/share/alsa/pcm/rear.conf", "/usr/share/alsa/pcm/side.conf", "/usr/share/alsa/pcm/surround21.conf", "/usr/share/alsa/pcm/surround40.conf", "/usr/share/alsa/pcm/surround41.conf", "/usr/share/alsa/pcm/surround50.conf", "/usr/share/alsa/pcm/surround51.conf", "/usr/share/alsa/pcm/surround71.conf", "/usr/share/doc/libasound2-data/changelog.Debian.gz", "/usr/share/doc/libasound2-data/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libasound2t64@1.2.14-1+deb13u1", "Name": "libasound2t64", "Identifier": { "PURL": "pkg:deb/debian/libasound2t64@1.2.14-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "b2afe1a42384e598" }, "Version": "1.2.14", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "alsa-lib", "SrcVersion": "1.2.14", "SrcRelease": "1+deb13u1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only" ], "Maintainer": "Debian ALSA Maintainers \u003cpkg-alsa-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libasound2-data@1.2.14-1+deb13u1", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libasound.so.2.0.0", "/usr/share/doc/libasound2t64/changelog.Debian.gz", "/usr/share/doc/libasound2t64/copyright", "/usr/share/doc/libasound2t64/examples/asoundrc.txt", "/usr/share/lintian/overrides/libasound2t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libass9@1:0.17.3-1+deb13u1", "Name": "libass9", "Identifier": { "PURL": "pkg:deb/debian/libass9@0.17.3-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "3a3a1354500cb4d" }, "Version": "0.17.3", "Release": "1+deb13u1", "Epoch": 1, "Arch": "amd64", "SrcName": "libass", "SrcVersion": "0.17.3", "SrcRelease": "1+deb13u1", "SrcEpoch": 1, "Licenses": [ "ISC", "NTP", "BSD-2-Clause", "Unlicense", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libfontconfig1@2.15.0-2.3", "libfreetype6@2.13.3+dfsg-1+deb13u1", "libfribidi0@1.0.16-1", "libharfbuzz0b@10.2.0-1+deb13u1", "libunibreak6@6.1-3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libass.so.9.3.1", "/usr/share/doc/libass9/changelog.Debian.gz", "/usr/share/doc/libass9/changelog.gz", "/usr/share/doc/libass9/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libasyncns0@0.8-6+b5", "Name": "libasyncns0", "Identifier": { "PURL": "pkg:deb/debian/libasyncns0@0.8-6%2Bb5?arch=amd64\u0026distro=debian-13.7", "UID": "4fc74d5b84412640" }, "Version": "0.8", "Release": "6+b5", "Arch": "amd64", "SrcName": "libasyncns", "SrcVersion": "0.8", "SrcRelease": "6", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only" ], "Maintainer": "Tanguy Ortolo \u003ctanguy+debian@ortolo.eu\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libasyncns.so.0.3.1", "/usr/share/doc/libasyncns0/changelog.Debian.amd64.gz", "/usr/share/doc/libasyncns0/changelog.Debian.gz", "/usr/share/doc/libasyncns0/changelog.gz", "/usr/share/doc/libasyncns0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libatomic1@14.2.0-19", "Name": "libatomic1", "Identifier": { "PURL": "pkg:deb/debian/libatomic1@14.2.0-19?arch=amd64\u0026distro=debian-13.7", "UID": "ce460be44f20db35" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libatomic.so.1.2.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libattr1@1:2.5.2-3", "Name": "libattr1", "Identifier": { "PURL": "pkg:deb/debian/libattr1@2.5.2-3?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "d04226e5c9c60381" }, "Version": "2.5.2", "Release": "3", "Epoch": 1, "Arch": "amd64", "SrcName": "attr", "SrcVersion": "2.5.2", "SrcRelease": "3", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.1-only" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libattr.so.1.1.2502", "/usr/share/doc/libattr1/changelog.Debian.gz", "/usr/share/doc/libattr1/changelog.gz", "/usr/share/doc/libattr1/copyright", "/usr/share/lintian/overrides/libattr1" ], "AnalyzedBy": "dpkg" }, { "ID": "libaudit-common@1:4.0.2-2+deb13u1", "Name": "libaudit-common", "Identifier": { "PURL": "pkg:deb/debian/libaudit-common@4.0.2-2%2Bdeb13u1?arch=all\u0026distro=debian-13.7\u0026epoch=1", "UID": "18dd5eb82cef3db0" }, "Version": "4.0.2", "Release": "2+deb13u1", "Epoch": 1, "Arch": "all", "SrcName": "audit", "SrcVersion": "4.0.2", "SrcRelease": "2+deb13u1", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only", "GPL-1.0-only" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/share/doc/libaudit-common/changelog.Debian.gz", "/usr/share/doc/libaudit-common/changelog.gz", "/usr/share/doc/libaudit-common/copyright", "/usr/share/man/man5/libaudit.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libaudit1@1:4.0.2-2+deb13u1", "Name": "libaudit1", "Identifier": { "PURL": "pkg:deb/debian/libaudit1@4.0.2-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "f2916f6572e51444" }, "Version": "4.0.2", "Release": "2+deb13u1", "Epoch": 1, "Arch": "amd64", "SrcName": "audit", "SrcVersion": "4.0.2", "SrcRelease": "2+deb13u1", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only", "GPL-1.0-only" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit-common@1:4.0.2-2+deb13u1", "libc6@2.41-12+deb13u4", "libcap-ng0@0.8.5-4+b1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libaudit.so.1.0.0", "/usr/share/doc/libaudit1/changelog.Debian.gz", "/usr/share/doc/libaudit1/changelog.gz", "/usr/share/doc/libaudit1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libavc1394-0@0.5.4-5+b2", "Name": "libavc1394-0", "Identifier": { "PURL": "pkg:deb/debian/libavc1394-0@0.5.4-5%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "fbfd0bcb57fceba9" }, "Version": "0.5.4", "Release": "5+b2", "Arch": "amd64", "SrcName": "libavc1394", "SrcVersion": "0.5.4", "SrcRelease": "5", "Licenses": [ "LGPL-2.1-or-later", "GPL-2.0-or-later", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libraw1394-11@2.1.2-2+b2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libavc1394.so.0.3.0", "/usr/lib/x86_64-linux-gnu/librom1394.so.0.3.0", "/usr/share/doc/libavc1394-0/changelog.Debian.amd64.gz", "/usr/share/doc/libavc1394-0/changelog.Debian.gz", "/usr/share/doc/libavc1394-0/changelog.gz", "/usr/share/doc/libavc1394-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libavcodec61@7:7.1.5-0+deb13u1", "Name": "libavcodec61", "Identifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaom3@3.12.1-1+deb13u1", "libavutil59@7:7.1.5-0+deb13u1", "libc6@2.41-12+deb13u4", "libcairo2@1.18.4-1+b1", "libcodec2-1.2@1.2.0-3", "libdav1d7@1.5.1-1", "libglib2.0-0t64@2.84.4-3~deb13u5", "libgsm1@1.0.22-1+b2", "libjxl0.11@0.11.2-0.1~deb13u3", "liblzma5@5.8.1-1+deb13u2", "libmp3lame0@3.100-6+b3", "libopenjp2-7@2.5.3-2.1~deb13u2", "libopus0@1.5.2-2", "librav1e0.7@0.7.1-9+b2", "librsvg2-2@2.60.0+dfsg-1+deb13u1", "libshine3@3.1.1-2+b2", "libsnappy1v5@1.2.2-1", "libspeex1@1.2.1-3", "libsvtav1enc2@2.3.0+dfsg-1", "libswresample5@7:7.1.5-0+deb13u1", "libtheoradec1@1.2.0~alpha1+dfsg-6", "libtheoraenc1@1.2.0~alpha1+dfsg-6", "libtwolame0@0.4.0-2+b2", "libva2@2.22.0-3", "libvorbis0a@1.3.7-3", "libvorbisenc2@1.3.7-3", "libvpl2@1:2.14.0-1+b1", "libvpx9@1.15.0-2.1+deb13u1", "libwebp7@1.5.0-0.1", "libwebpmux3@1.5.0-0.1", "libx264-164@2:0.164.3108+git31e19f9-2+b1", "libx265-215@4.1-2", "libxvidcore4@2:1.3.7-1+b2", "libzvbi0t64@0.2.44-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libavcodec.so.61.19.101", "/usr/share/doc/libavcodec61/changelog.Debian.gz", "/usr/share/doc/libavcodec61/changelog.gz", "/usr/share/doc/libavcodec61/copyright", "/usr/share/lintian/overrides/libavcodec61" ], "AnalyzedBy": "dpkg" }, { "ID": "libavdevice61@7:7.1.5-0+deb13u1", "Name": "libavdevice61", "Identifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libasound2t64@1.2.14-1+deb13u1", "libavc1394-0@0.5.4-5+b2", "libavcodec61@7:7.1.5-0+deb13u1", "libavfilter10@7:7.1.5-0+deb13u1", "libavformat61@7:7.1.5-0+deb13u1", "libavutil59@7:7.1.5-0+deb13u1", "libc6@2.41-12+deb13u4", "libcaca0@0.99.beta20-5+deb13u1", "libcdio-cdda2t64@10.2+2.0.2-1+b1", "libcdio-paranoia2t64@10.2+2.0.2-1+b1", "libdc1394-25@2.2.6-5", "libdrm2@2.4.124-2", "libgl1@1.7.0-1+b2", "libiec61883-0@1.2.0-7", "libjack-jackd2-0@1.9.22~dfsg-4", "libopenal1@1:1.24.2-1", "libpulse0@17.0+dfsg1-2+b1", "libraw1394-11@2.1.2-2+b2", "libsdl2-2.0-0@2.32.4+dfsg-1", "libx11-6@2:1.8.12-1", "libxcb-shape0@1.17.0-2+b1", "libxcb-shm0@1.17.0-2+b1", "libxcb-xfixes0@1.17.0-2+b1", "libxcb1@1.17.0-2+b1", "libxext6@2:1.3.4-1+b3", "libxv1@2:1.0.11-1.1+b3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libavdevice.so.61.3.100", "/usr/share/doc/libavdevice61/changelog.Debian.gz", "/usr/share/doc/libavdevice61/changelog.gz", "/usr/share/doc/libavdevice61/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libavfilter10@7:7.1.5-0+deb13u1", "Name": "libavfilter10", "Identifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libass9@1:0.17.3-1+deb13u1", "libavcodec61@7:7.1.5-0+deb13u1", "libavformat61@7:7.1.5-0+deb13u1", "libavutil59@7:7.1.5-0+deb13u1", "libbs2b0@3.1.0+dfsg-8+b1", "libc6@2.41-12+deb13u4", "libflite1@2.2-7", "libfontconfig1@2.15.0-2.3", "libfreetype6@2.13.3+dfsg-1+deb13u1", "libfribidi0@1.0.16-1", "libharfbuzz0b@10.2.0-1+deb13u1", "liblilv-0-0@0.24.26-1", "libmysofa1@1.3.3+dfsg-1", "libplacebo349@7.349.0-3", "libpocketsphinx3@0.8+5prealpha+1-15+b4", "libpostproc58@7:7.1.5-0+deb13u1", "librubberband2@3.3.0+dfsg-2+b3", "libsphinxbase3t64@0.8+5prealpha+1-21+b1", "libstdc++6@14.2.0-19", "libswresample5@7:7.1.5-0+deb13u1", "libswscale8@7:7.1.5-0+deb13u1", "libva2@2.22.0-3", "libvidstab1.1@1.1.0-2+b2", "libvpl2@1:2.14.0-1+b1", "libzimg2@3.0.5+ds1-1+b2", "libzmq5@4.3.5-1+b3", "ocl-icd-libopencl1@2.3.3-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libavfilter.so.10.5.100", "/usr/share/doc/libavfilter10/changelog.Debian.gz", "/usr/share/doc/libavfilter10/changelog.gz", "/usr/share/doc/libavfilter10/copyright", "/usr/share/lintian/overrides/libavfilter10" ], "AnalyzedBy": "dpkg" }, { "ID": "libavformat61@7:7.1.5-0+deb13u1", "Name": "libavformat61", "Identifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libavcodec61@7:7.1.5-0+deb13u1", "libavutil59@7:7.1.5-0+deb13u1", "libbluray2@1:1.3.4-1+b2", "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u4", "libchromaprint1@1.5.1-7", "libdvdnav4@6.1.1-3+b1", "libdvdread8t64@6.1.3-2", "libgme0@0.6.3-7+b2", "libgnutls30t64@3.8.9-3+deb13u4", "libopenmpt0t64@0.7.13-1+b1", "librabbitmq4@0.15.0-1+deb13u2", "librist4@0.2.11+dfsg-1", "libsrt1.5-gnutls@1.5.4-1+deb13u1", "libssh-4@0.11.5-0+deb13u1", "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "libzmq5@4.3.5-1+b3", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libavformat.so.61.7.103", "/usr/share/doc/libavformat61/changelog.Debian.gz", "/usr/share/doc/libavformat61/changelog.gz", "/usr/share/doc/libavformat61/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libavutil59@7:7.1.5-0+deb13u1", "Name": "libavutil59", "Identifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm2@2.4.124-2", "libva-drm2@2.22.0-3", "libva-x11-2@2.22.0-3", "libva2@2.22.0-3", "libvdpau1@1.5-3+b1", "libvpl2@1:2.14.0-1+b1", "libx11-6@2:1.8.12-1", "ocl-icd-libopencl1@2.3.3-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libavutil.so.59.39.100", "/usr/share/doc/libavutil59/changelog.Debian.gz", "/usr/share/doc/libavutil59/changelog.gz", "/usr/share/doc/libavutil59/copyright", "/usr/share/lintian/overrides/libavutil59" ], "AnalyzedBy": "dpkg" }, { "ID": "libblas3@3.12.1-6", "Name": "libblas3", "Identifier": { "PURL": "pkg:deb/debian/libblas3@3.12.1-6?arch=amd64\u0026distro=debian-13.7", "UID": "ae9912f3c6221aec" }, "Version": "3.12.1", "Release": "6", "Arch": "amd64", "SrcName": "lapack", "SrcVersion": "3.12.1", "SrcRelease": "6", "Licenses": [ "BSD-3-Clause", "BSD-3-clause-intel" ], "Maintainer": "Debian Science Team \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/blas/libblas.so.3.12.1", "/usr/share/doc/libblas3/changelog.Debian.gz", "/usr/share/doc/libblas3/copyright", "/usr/share/lintian/overrides/libblas3" ], "AnalyzedBy": "dpkg" }, { "ID": "libblkid1@2.41.5-0+deb13u1", "Name": "libblkid1", "Identifier": { "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e20c3ed37f6020d7" }, "Version": "2.41.5", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libblkid.so.1.1.0", "/usr/share/doc/libblkid1/NEWS.Debian.gz", "/usr/share/doc/libblkid1/changelog.Debian.gz", "/usr/share/doc/libblkid1/changelog.gz", "/usr/share/doc/libblkid1/copyright", "/usr/share/lintian/overrides/libblkid1" ], "AnalyzedBy": "dpkg" }, { "ID": "libbluray2@1:1.3.4-1+b2", "Name": "libbluray2", "Identifier": { "PURL": "pkg:deb/debian/libbluray2@1.3.4-1%2Bb2?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "439e5b2b447c1023" }, "Version": "1.3.4", "Release": "1+b2", "Epoch": 1, "Arch": "amd64", "SrcName": "libbluray", "SrcVersion": "1.3.4", "SrcRelease": "1", "SrcEpoch": 1, "Licenses": [ "LGPL-2.1-or-later", "custom", "GPL-2.0-or-later", "BSD-3-Clause", "MPL-1.0", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libfontconfig1@2.15.0-2.3", "libfreetype6@2.13.3+dfsg-1+deb13u1", "libudfread0@1.1.2-1+b2", "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbluray.so.2.4.3", "/usr/share/doc/libbluray2/changelog.Debian.amd64.gz", "/usr/share/doc/libbluray2/changelog.Debian.gz", "/usr/share/doc/libbluray2/changelog.gz", "/usr/share/doc/libbluray2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libbrotli1@1.1.0-2+deb13u1", "Name": "libbrotli1", "Identifier": { "PURL": "pkg:deb/debian/libbrotli1@1.1.0-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "5fd84a78566f2baf" }, "Version": "1.1.0", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "brotli", "SrcVersion": "1.1.0", "SrcRelease": "2+deb13u1", "Licenses": [ "MIT" ], "Maintainer": "Tomasz Buchert \u003ctomasz@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbrotlicommon.so.1.1.0", "/usr/lib/x86_64-linux-gnu/libbrotlidec.so.1.1.0", "/usr/lib/x86_64-linux-gnu/libbrotlienc.so.1.1.0", "/usr/share/doc/libbrotli1/changelog.Debian.gz", "/usr/share/doc/libbrotli1/changelog.gz", "/usr/share/doc/libbrotli1/copyright", "/usr/share/lintian/overrides/libbrotli1" ], "AnalyzedBy": "dpkg" }, { "ID": "libbs2b0@3.1.0+dfsg-8+b1", "Name": "libbs2b0", "Identifier": { "PURL": "pkg:deb/debian/libbs2b0@3.1.0%2Bdfsg-8%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "da2b8aed219bb8aa" }, "Version": "3.1.0+dfsg", "Release": "8+b1", "Arch": "amd64", "SrcName": "libbs2b", "SrcVersion": "3.1.0+dfsg", "SrcRelease": "8", "Licenses": [ "MIT", "GPL-3.0-or-later", "GPL-2.0-or-later", "MIT+FSF-public", "FSF-unlimited", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Debian QA Group \u003cpackages@qa.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbs2b.so.0.0.0", "/usr/share/doc/libbs2b0/changelog.Debian.amd64.gz", "/usr/share/doc/libbs2b0/changelog.Debian.gz", "/usr/share/doc/libbs2b0/changelog.gz", "/usr/share/doc/libbs2b0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libbsd0@0.12.2-2", "Name": "libbsd0", "Identifier": { "PURL": "pkg:deb/debian/libbsd0@0.12.2-2?arch=amd64\u0026distro=debian-13.7", "UID": "1de87442fee280ff" }, "Version": "0.12.2", "Release": "2", "Arch": "amd64", "SrcName": "libbsd", "SrcVersion": "0.12.2", "SrcRelease": "2", "Licenses": [ "BSD-3-Clause", "BSD-3-clause-Regents", "BSD-2-Clause-NetBSD", "BSD-3-clause-author", "BSD-3-clause-John-Birrell", "BSD-5-clause-Peter-Wemm", "BSD-2-Clause", "BSD-2-clause-verbatim", "BSD-2-clause-author", "ISC", "ISC-Original", "MIT", "public-domain", "Beerware" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libmd0@1.1.0-2+b1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbsd.so.0.12.2", "/usr/share/doc/libbsd0/changelog.Debian.gz", "/usr/share/doc/libbsd0/changelog.gz", "/usr/share/doc/libbsd0/copyright", "/usr/share/lintian/overrides/libbsd0" ], "AnalyzedBy": "dpkg" }, { "ID": "libbz2-1.0@1.0.8-6", "Name": "libbz2-1.0", "Identifier": { "PURL": "pkg:deb/debian/libbz2-1.0@1.0.8-6?arch=amd64\u0026distro=debian-13.7", "UID": "3589bfcff9e95a4f" }, "Version": "1.0.8", "Release": "6", "Arch": "amd64", "SrcName": "bzip2", "SrcVersion": "1.0.8", "SrcRelease": "6", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4", "/usr/share/doc/libbz2-1.0/changelog.Debian.gz", "/usr/share/doc/libbz2-1.0/changelog.gz", "/usr/share/doc/libbz2-1.0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libc-bin@2.41-12+deb13u4", "Name": "libc-bin", "Identifier": { "PURL": "pkg:deb/debian/libc-bin@2.41-12%2Bdeb13u4?arch=amd64\u0026distro=debian-13.7", "UID": "5ccd64afecf0b4d0" }, "Version": "2.41", "Release": "12+deb13u4", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.41", "SrcRelease": "12+deb13u4", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.1+-with-link-exception", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2+-with-link-exception", "GPL-2.0-only", "GPL-3.0-or-later", "FSFAP", "Carnegie", "Inner-Net", "MIT-like-Lord", "BSD-like-Spencer", "PCRE", "BSD-3-clause-Carnegie", "Unicode-DFS-2016", "BSL-1.0", "SunPro", "CORE-MATH", "BSD-3-clause-Berkeley", "BSD-3-clause-WIDE", "BSD-2-Clause", "BSD-3-clause-Oracle", "DEC", "IBM", "ISC", "Univ-Coimbra", "public-domain", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/getconf", "/usr/bin/getent", "/usr/bin/iconv", "/usr/bin/ldd", "/usr/bin/locale", "/usr/bin/localedef", "/usr/bin/pldd", "/usr/bin/tzselect", "/usr/bin/zdump", "/usr/lib/locale/C.utf8/LC_ADDRESS", "/usr/lib/locale/C.utf8/LC_COLLATE", "/usr/lib/locale/C.utf8/LC_CTYPE", "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", "/usr/lib/locale/C.utf8/LC_MEASUREMENT", "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", "/usr/lib/locale/C.utf8/LC_MONETARY", "/usr/lib/locale/C.utf8/LC_NAME", "/usr/lib/locale/C.utf8/LC_NUMERIC", "/usr/lib/locale/C.utf8/LC_PAPER", "/usr/lib/locale/C.utf8/LC_TELEPHONE", "/usr/lib/locale/C.utf8/LC_TIME", "/usr/sbin/iconvconfig", "/usr/sbin/ldconfig", "/usr/sbin/zic", "/usr/share/doc/libc-bin/changelog.Debian.gz", "/usr/share/doc/libc-bin/changelog.gz", "/usr/share/doc/libc-bin/copyright", "/usr/share/libc-bin/nsswitch.conf", "/usr/share/lintian/overrides/libc-bin", "/usr/share/man/man1/getconf.1.gz", "/usr/share/man/man1/tzselect.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libc6@2.41-12+deb13u4", "Name": "libc6", "Identifier": { "PURL": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u4?arch=amd64\u0026distro=debian-13.7", "UID": "ff8541d1996042ee" }, "Version": "2.41", "Release": "12+deb13u4", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.41", "SrcRelease": "12+deb13u4", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.1+-with-link-exception", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2+-with-link-exception", "GPL-2.0-only", "GPL-3.0-or-later", "FSFAP", "Carnegie", "Inner-Net", "MIT-like-Lord", "BSD-like-Spencer", "PCRE", "BSD-3-clause-Carnegie", "Unicode-DFS-2016", "BSL-1.0", "SunPro", "CORE-MATH", "BSD-3-clause-Berkeley", "BSD-3-clause-WIDE", "BSD-2-Clause", "BSD-3-clause-Oracle", "DEC", "IBM", "ISC", "Univ-Coimbra", "public-domain", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/gconv/ANSI_X3.110.so", "/usr/lib/x86_64-linux-gnu/gconv/ARMSCII-8.so", "/usr/lib/x86_64-linux-gnu/gconv/ASMO_449.so", "/usr/lib/x86_64-linux-gnu/gconv/BIG5.so", "/usr/lib/x86_64-linux-gnu/gconv/BIG5HKSCS.so", "/usr/lib/x86_64-linux-gnu/gconv/BRF.so", "/usr/lib/x86_64-linux-gnu/gconv/CP10007.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1125.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1250.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1251.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1252.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1253.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1254.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1255.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1256.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1257.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1258.so", "/usr/lib/x86_64-linux-gnu/gconv/CP737.so", "/usr/lib/x86_64-linux-gnu/gconv/CP770.so", "/usr/lib/x86_64-linux-gnu/gconv/CP771.so", "/usr/lib/x86_64-linux-gnu/gconv/CP772.so", "/usr/lib/x86_64-linux-gnu/gconv/CP773.so", "/usr/lib/x86_64-linux-gnu/gconv/CP774.so", "/usr/lib/x86_64-linux-gnu/gconv/CP775.so", "/usr/lib/x86_64-linux-gnu/gconv/CP932.so", "/usr/lib/x86_64-linux-gnu/gconv/CSN_369103.so", "/usr/lib/x86_64-linux-gnu/gconv/CWI.so", "/usr/lib/x86_64-linux-gnu/gconv/DEC-MCS.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-CA-FR.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-S.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FR.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IS-FRISS.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IT.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-PT.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-UK.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-US.so", "/usr/lib/x86_64-linux-gnu/gconv/ECMA-CYRILLIC.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-CN.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP-MS.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-KR.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-TW.so", "/usr/lib/x86_64-linux-gnu/gconv/GB18030.so", "/usr/lib/x86_64-linux-gnu/gconv/GBBIG5.so", "/usr/lib/x86_64-linux-gnu/gconv/GBGBK.so", "/usr/lib/x86_64-linux-gnu/gconv/GBK.so", "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-ACADEMY.so", "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-PS.so", "/usr/lib/x86_64-linux-gnu/gconv/GOST_19768-74.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK-CCITT.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK7-OLD.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK7.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-GREEK8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN9.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-THAI8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-TURKISH8.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM037.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM038.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1004.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1008.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1008_420.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1025.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1026.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1046.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1047.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1097.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1112.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1122.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1123.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1124.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1129.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1130.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1132.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1133.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1137.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1140.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1141.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1142.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1143.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1144.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1145.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1146.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1147.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1148.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1149.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1153.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1154.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1155.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1156.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1157.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1158.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1160.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1161.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1162.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1163.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1164.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1166.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1167.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM12712.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1364.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1371.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1388.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1390.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1399.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM16804.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM256.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM273.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM274.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM275.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM277.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM278.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM280.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM281.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM284.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM285.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM290.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM297.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM420.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM423.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM424.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM437.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4517.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4899.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4909.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4971.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM500.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM5347.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM803.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM850.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM851.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM852.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM855.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM856.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM857.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM858.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM860.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM861.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM862.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM863.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM864.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM865.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM866.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM866NAV.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM868.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM869.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM870.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM871.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM874.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM875.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM880.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM891.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM901.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM902.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM903.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9030.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM904.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM905.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9066.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM918.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM921.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM922.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM930.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM932.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM933.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM935.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM937.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM939.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM943.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9448.so", "/usr/lib/x86_64-linux-gnu/gconv/IEC_P27-1.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS-8.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS-CYRILLIC.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS.so", "/usr/lib/x86_64-linux-gnu/gconv/ISIRI-3342.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN-EXT.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP-3.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-KR.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-197.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-209.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO646.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-1.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-10.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-11.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-13.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-14.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-15.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-16.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-2.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-3.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-4.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-5.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-6.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-7.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-8.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9E.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_10367-BOX.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_11548-1.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_2033.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427-EXT.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5428.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937-2.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937.so", "/usr/lib/x86_64-linux-gnu/gconv/JOHAB.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI-8.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-R.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-RU.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-T.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-U.so", "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK-1.so", "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-CENTRALEUROPE.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-IS.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-SAMI.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-UK.so", "/usr/lib/x86_64-linux-gnu/gconv/MACINTOSH.so", "/usr/lib/x86_64-linux-gnu/gconv/MIK.so", "/usr/lib/x86_64-linux-gnu/gconv/NATS-DANO.so", "/usr/lib/x86_64-linux-gnu/gconv/NATS-SEFI.so", "/usr/lib/x86_64-linux-gnu/gconv/PT154.so", "/usr/lib/x86_64-linux-gnu/gconv/RK1048.so", "/usr/lib/x86_64-linux-gnu/gconv/SAMI-WS2.so", "/usr/lib/x86_64-linux-gnu/gconv/SHIFT_JISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/SJIS.so", "/usr/lib/x86_64-linux-gnu/gconv/T.61.so", "/usr/lib/x86_64-linux-gnu/gconv/TCVN5712-1.so", "/usr/lib/x86_64-linux-gnu/gconv/TIS-620.so", "/usr/lib/x86_64-linux-gnu/gconv/TSCII.so", "/usr/lib/x86_64-linux-gnu/gconv/UHC.so", "/usr/lib/x86_64-linux-gnu/gconv/UNICODE.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-16.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-32.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-7.so", "/usr/lib/x86_64-linux-gnu/gconv/VISCII.so", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf", "/usr/lib/x86_64-linux-gnu/gconv/libCNS.so", "/usr/lib/x86_64-linux-gnu/gconv/libGB.so", "/usr/lib/x86_64-linux-gnu/gconv/libISOIR165.so", "/usr/lib/x86_64-linux-gnu/gconv/libJIS.so", "/usr/lib/x86_64-linux-gnu/gconv/libJISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/libKSC.so", "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", "/usr/lib/x86_64-linux-gnu/libBrokenLocale.so.1", "/usr/lib/x86_64-linux-gnu/libanl.so.1", "/usr/lib/x86_64-linux-gnu/libc.so.6", "/usr/lib/x86_64-linux-gnu/libc_malloc_debug.so.0", "/usr/lib/x86_64-linux-gnu/libdl.so.2", "/usr/lib/x86_64-linux-gnu/libm.so.6", "/usr/lib/x86_64-linux-gnu/libmemusage.so", "/usr/lib/x86_64-linux-gnu/libmvec.so.1", "/usr/lib/x86_64-linux-gnu/libnsl.so.1", "/usr/lib/x86_64-linux-gnu/libnss_compat.so.2", "/usr/lib/x86_64-linux-gnu/libnss_dns.so.2", "/usr/lib/x86_64-linux-gnu/libnss_files.so.2", "/usr/lib/x86_64-linux-gnu/libnss_hesiod.so.2", "/usr/lib/x86_64-linux-gnu/libpcprofile.so", "/usr/lib/x86_64-linux-gnu/libpthread.so.0", "/usr/lib/x86_64-linux-gnu/libresolv.so.2", "/usr/lib/x86_64-linux-gnu/librt.so.1", "/usr/lib/x86_64-linux-gnu/libthread_db.so.1", "/usr/lib/x86_64-linux-gnu/libutil.so.1", "/usr/share/doc/libc6/NEWS.Debian.gz", "/usr/share/doc/libc6/NEWS.gz", "/usr/share/doc/libc6/README.Debian.gz", "/usr/share/doc/libc6/README.hesiod.gz", "/usr/share/doc/libc6/changelog.Debian.gz", "/usr/share/doc/libc6/changelog.gz", "/usr/share/doc/libc6/copyright", "/usr/share/lintian/overrides/libc6" ], "AnalyzedBy": "dpkg" }, { "ID": "libcaca0@0.99.beta20-5+deb13u1", "Name": "libcaca0", "Identifier": { "PURL": "pkg:deb/debian/libcaca0@0.99.beta20-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "b3a439bd17d4c5e1" }, "Version": "0.99.beta20", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "libcaca", "SrcVersion": "0.99.beta20", "SrcRelease": "5+deb13u1", "Licenses": [ "WTFPL-2", "ISC", "LGPL-2.0-or-later", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "LGPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libncursesw6@6.5+20250216-2", "libslang2@2.3.3-5+b2", "libstdc++6@14.2.0-19", "libtinfo6@6.5+20250216-2", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/caca/libgl_plugin.so.0.0.0", "/usr/lib/x86_64-linux-gnu/caca/libx11_plugin.so.0.0.0", "/usr/lib/x86_64-linux-gnu/libcaca++.so.0.99.20", "/usr/lib/x86_64-linux-gnu/libcaca.so.0.99.20", "/usr/share/doc/libcaca0/changelog.Debian.gz", "/usr/share/doc/libcaca0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcairo-gobject2@1.18.4-1+b1", "Name": "libcairo-gobject2", "Identifier": { "PURL": "pkg:deb/debian/libcairo-gobject2@1.18.4-1%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "4a53b0642698b2f6" }, "Version": "1.18.4", "Release": "1+b1", "Arch": "amd64", "SrcName": "cairo", "SrcVersion": "1.18.4", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libcairo2@1.18.4-1+b1", "libglib2.0-0t64@2.84.4-3~deb13u5" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcairo-gobject.so.2.11804.4", "/usr/share/doc/libcairo-gobject2/AUTHORS.gz", "/usr/share/doc/libcairo-gobject2/NEWS.gz", "/usr/share/doc/libcairo-gobject2/README.md.gz", "/usr/share/doc/libcairo-gobject2/changelog.Debian.amd64.gz", "/usr/share/doc/libcairo-gobject2/changelog.Debian.gz", "/usr/share/doc/libcairo-gobject2/copyright", "/usr/share/lintian/overrides/libcairo-gobject2" ], "AnalyzedBy": "dpkg" }, { "ID": "libcairo2@1.18.4-1+b1", "Name": "libcairo2", "Identifier": { "PURL": "pkg:deb/debian/libcairo2@1.18.4-1%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "ce092d8f0d3101ba" }, "Version": "1.18.4", "Release": "1+b1", "Arch": "amd64", "SrcName": "cairo", "SrcVersion": "1.18.4", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libfontconfig1@2.15.0-2.3", "libfreetype6@2.13.3+dfsg-1+deb13u1", "libpixman-1-0@0.44.0-3", "libpng16-16t64@1.6.48-1+deb13u6", "libx11-6@2:1.8.12-1", "libxcb-render0@1.17.0-2+b1", "libxcb-shm0@1.17.0-2+b1", "libxcb1@1.17.0-2+b1", "libxext6@2:1.3.4-1+b3", "libxrender1@1:0.9.12-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcairo.so.2.11804.4", "/usr/share/doc/libcairo2/changelog.Debian.amd64.gz", "/usr/share/doc/libcairo2/changelog.Debian.gz", "/usr/share/doc/libcairo2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcap-ng0@0.8.5-4+b1", "Name": "libcap-ng0", "Identifier": { "PURL": "pkg:deb/debian/libcap-ng0@0.8.5-4%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "6ebeba515cbfa716" }, "Version": "0.8.5", "Release": "4+b1", "Arch": "amd64", "SrcName": "libcap-ng", "SrcVersion": "0.8.5", "SrcRelease": "4", "Licenses": [ "LGPL-2.1-or-later", "GPL-2.0-or-later", "GPL-3.0-only", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Håvard F. Aasen \u003chavard.f.aasen@pfft.no\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcap-ng.so.0.0.0", "/usr/lib/x86_64-linux-gnu/libdrop_ambient.so.0.0.0", "/usr/share/doc/libcap-ng0/changelog.Debian.amd64.gz", "/usr/share/doc/libcap-ng0/changelog.Debian.gz", "/usr/share/doc/libcap-ng0/changelog.gz", "/usr/share/doc/libcap-ng0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcap2@1:2.75-10+deb13u1+b3", "Name": "libcap2", "Identifier": { "PURL": "pkg:deb/debian/libcap2@2.75-10%2Bdeb13u1%2Bb3?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "32401c9c22a36a0d" }, "Version": "2.75", "Release": "10+deb13u1+b3", "Epoch": 1, "Arch": "amd64", "SrcName": "libcap2", "SrcVersion": "2.75", "SrcRelease": "10+deb13u1", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "GPL-2.0-or-later" ], "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcap.so.2.75", "/usr/lib/x86_64-linux-gnu/libpsx.so.2.75", "/usr/share/doc/libcap2/changelog.Debian.amd64.gz", "/usr/share/doc/libcap2/changelog.Debian.gz", "/usr/share/doc/libcap2/changelog.gz", "/usr/share/doc/libcap2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcdio-cdda2t64@10.2+2.0.2-1+b1", "Name": "libcdio-cdda2t64", "Identifier": { "PURL": "pkg:deb/debian/libcdio-cdda2t64@10.2%2B2.0.2-1%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "c397177ff20dcc46" }, "Version": "10.2+2.0.2", "Release": "1+b1", "Arch": "amd64", "SrcName": "libcdio-paranoia", "SrcVersion": "10.2+2.0.2", "SrcRelease": "1", "Licenses": [ "GPL-3.0-or-later", "GFDL-1.2-no-invariants-only", "GPL-3.0-only", "GFDL-1.2-only" ], "Maintainer": "Philippe SWARTVAGHER \u003cphil.swart@gmx.fr\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcdio19t64@2.2.0-4.1~deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcdio_cdda.so.2.0.0", "/usr/share/doc/libcdio-cdda2t64/changelog.Debian.amd64.gz", "/usr/share/doc/libcdio-cdda2t64/changelog.Debian.gz", "/usr/share/doc/libcdio-cdda2t64/copyright", "/usr/share/lintian/overrides/libcdio-cdda2t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libcdio-paranoia2t64@10.2+2.0.2-1+b1", "Name": "libcdio-paranoia2t64", "Identifier": { "PURL": "pkg:deb/debian/libcdio-paranoia2t64@10.2%2B2.0.2-1%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "f769785444ec1405" }, "Version": "10.2+2.0.2", "Release": "1+b1", "Arch": "amd64", "SrcName": "libcdio-paranoia", "SrcVersion": "10.2+2.0.2", "SrcRelease": "1", "Licenses": [ "GPL-3.0-or-later", "GFDL-1.2-no-invariants-only", "GPL-3.0-only", "GFDL-1.2-only" ], "Maintainer": "Philippe SWARTVAGHER \u003cphil.swart@gmx.fr\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcdio-cdda2t64@10.2+2.0.2-1+b1", "libcdio19t64@2.2.0-4.1~deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcdio_paranoia.so.2.0.0", "/usr/share/doc/libcdio-paranoia2t64/changelog.Debian.amd64.gz", "/usr/share/doc/libcdio-paranoia2t64/changelog.Debian.gz", "/usr/share/doc/libcdio-paranoia2t64/copyright", "/usr/share/lintian/overrides/libcdio-paranoia2t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libcdio19t64@2.2.0-4.1~deb13u1", "Name": "libcdio19t64", "Identifier": { "PURL": "pkg:deb/debian/libcdio19t64@2.2.0-4.1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "21bd436d3cd1b382" }, "Version": "2.2.0", "Release": "4.1~deb13u1", "Arch": "amd64", "SrcName": "libcdio", "SrcVersion": "2.2.0", "SrcRelease": "4.1~deb13u1", "Licenses": [ "GPL-3.0-only", "GPL-2+ with autoconf-macro exception", "GFDL-1.2-only", "GPL-2.0-only" ], "Maintainer": "Gabriel F. T. Gomes \u003cgabriel@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcdio.so.19.0.0", "/usr/share/doc/libcdio19t64/changelog.Debian.gz", "/usr/share/doc/libcdio19t64/copyright", "/usr/share/lintian/overrides/libcdio19t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libchromaprint1@1.5.1-7", "Name": "libchromaprint1", "Identifier": { "PURL": "pkg:deb/debian/libchromaprint1@1.5.1-7?arch=amd64\u0026distro=debian-13.7", "UID": "4b78a7b4549ebb0b" }, "Version": "1.5.1", "Release": "7", "Arch": "amd64", "SrcName": "chromaprint", "SrcVersion": "1.5.1", "SrcRelease": "7", "Licenses": [ "MIT", "BSD-3-Clause", "LGPL-2.1-or-later", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libchromaprint.so.1.5.1", "/usr/share/doc/libchromaprint1/changelog.Debian.gz", "/usr/share/doc/libchromaprint1/changelog.gz", "/usr/share/doc/libchromaprint1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcjson1@1.7.18-3.1+deb13u1", "Name": "libcjson1", "Identifier": { "PURL": "pkg:deb/debian/libcjson1@1.7.18-3.1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d70fd114750ffef9" }, "Version": "1.7.18", "Release": "3.1+deb13u1", "Arch": "amd64", "SrcName": "cjson", "SrcVersion": "1.7.18", "SrcRelease": "3.1+deb13u1", "Licenses": [ "MIT", "Apache-2.0" ], "Maintainer": "Maytham Alsudany \u003cmaytha8thedev@gmail.com\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcjson.so.1.7.18", "/usr/lib/x86_64-linux-gnu/libcjson_utils.so.1.7.18", "/usr/share/doc/libcjson1/changelog.Debian.gz", "/usr/share/doc/libcjson1/changelog.gz", "/usr/share/doc/libcjson1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcodec2-1.2@1.2.0-3", "Name": "libcodec2-1.2", "Identifier": { "PURL": "pkg:deb/debian/libcodec2-1.2@1.2.0-3?arch=amd64\u0026distro=debian-13.7", "UID": "1a94c315283ffffb" }, "Version": "1.2.0", "Release": "3", "Arch": "amd64", "SrcName": "codec2", "SrcVersion": "1.2.0", "SrcRelease": "3", "Licenses": [ "LGPL-2.1-only", "JMVBSD", "KISSFFTBSD" ], "Maintainer": "A. Maitland Bottoms \u003cbottoms@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcodec2.so.1.2", "/usr/share/doc/libcodec2-1.2/changelog.Debian.gz", "/usr/share/doc/libcodec2-1.2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcom-err2@1.47.2-3+b12", "Name": "libcom-err2", "Identifier": { "PURL": "pkg:deb/debian/libcom-err2@1.47.2-3%2Bb12?arch=amd64\u0026distro=debian-13.7", "UID": "7397fc65977e0031" }, "Version": "1.47.2", "Release": "3+b12", "Arch": "amd64", "SrcName": "e2fsprogs", "SrcVersion": "1.47.2", "SrcRelease": "3", "Licenses": [ "GPL-2.0-only", "GPL-2.0-or-later", "0BSD", "MIT", "BSD-3-Clause-Variant", "BSD-3-Clause", "BSD-4-Clause-CMU", "LGPL-2.0-only", "Apache-2.0", "ISC", "MIT-US-export", "Kazlib", "Latex2e", "GPL-2+ with Texinfo exception" ], "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcom_err.so.2.1", "/usr/share/doc/libcom-err2/changelog.Debian.amd64.gz", "/usr/share/doc/libcom-err2/changelog.Debian.gz", "/usr/share/doc/libcom-err2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcrypt1@1:4.4.38-1", "Name": "libcrypt1", "Identifier": { "PURL": "pkg:deb/debian/libcrypt1@4.4.38-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "bcf9a53d19864571" }, "Version": "4.4.38", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "libxcrypt", "SrcVersion": "4.4.38", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcrypt.so.1.1.0", "/usr/share/doc/libcrypt1/changelog.Debian.gz", "/usr/share/doc/libcrypt1/changelog.gz", "/usr/share/doc/libcrypt1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdatrie1@0.2.13-3+b1", "Name": "libdatrie1", "Identifier": { "PURL": "pkg:deb/debian/libdatrie1@0.2.13-3%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "a6a873ca1e3b71ca" }, "Version": "0.2.13", "Release": "3+b1", "Arch": "amd64", "SrcName": "libdatrie", "SrcVersion": "0.2.13", "SrcRelease": "3", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Theppitak Karoonboonyanan \u003cthep@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdatrie.so.1.4.0", "/usr/share/doc/libdatrie1/NEWS.gz", "/usr/share/doc/libdatrie1/README", "/usr/share/doc/libdatrie1/changelog.Debian.amd64.gz", "/usr/share/doc/libdatrie1/changelog.Debian.gz", "/usr/share/doc/libdatrie1/changelog.gz", "/usr/share/doc/libdatrie1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdav1d7@1.5.1-1", "Name": "libdav1d7", "Identifier": { "PURL": "pkg:deb/debian/libdav1d7@1.5.1-1?arch=amd64\u0026distro=debian-13.7", "UID": "d725fb31b0ca02de" }, "Version": "1.5.1", "Release": "1", "Arch": "amd64", "SrcName": "dav1d", "SrcVersion": "1.5.1", "SrcRelease": "1", "Licenses": [ "BSD-2-Clause", "public-domain", "ISC" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdav1d.so.7.0.0", "/usr/share/doc/libdav1d7/changelog.Debian.gz", "/usr/share/doc/libdav1d7/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdb5.3t64@5.3.28+dfsg2-9", "Name": "libdb5.3t64", "Identifier": { "PURL": "pkg:deb/debian/libdb5.3t64@5.3.28%2Bdfsg2-9?arch=amd64\u0026distro=debian-13.7", "UID": "6644476cfc0a6297" }, "Version": "5.3.28+dfsg2", "Release": "9", "Arch": "amd64", "SrcName": "db5.3", "SrcVersion": "5.3.28+dfsg2", "SrcRelease": "9", "Licenses": [ "Sleepycat", "BSD-3-Clause", "MS-PL", "GPL-2.0-or-later", "Artistic-2.0", "X11", "MIT-old", "TCL-like", "BSD-3-clause-fjord", "GPL-3.0-only", "Zlib" ], "Maintainer": "Debian QA Group \u003cpackages@qa.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdb-5.3.so", "/usr/share/doc/libdb5.3t64/build_signature_amd64.txt", "/usr/share/doc/libdb5.3t64/changelog.Debian.gz", "/usr/share/doc/libdb5.3t64/copyright", "/usr/share/lintian/overrides/libdb5.3t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libdbus-1-3@1.16.2-2", "Name": "libdbus-1-3", "Identifier": { "PURL": "pkg:deb/debian/libdbus-1-3@1.16.2-2?arch=amd64\u0026distro=debian-13.7", "UID": "7b51d2ed0d3c0e9f" }, "Version": "1.16.2", "Release": "2", "Arch": "amd64", "SrcName": "dbus", "SrcVersion": "1.16.2", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "AFL-2.1", "MIT", "Tcl-BSDish", "BSD-3-Clause", "BSD-3-clause-generic", "LGPL-2.1-or-later", "g10-permissive", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Utopia Maintenance Team \u003cpkg-utopia-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libsystemd0@257.13-1~deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdbus-1.so.3.38.3", "/usr/share/doc/libdbus-1-3/AUTHORS.gz", "/usr/share/doc/libdbus-1-3/NEWS.gz", "/usr/share/doc/libdbus-1-3/README.gz", "/usr/share/doc/libdbus-1-3/changelog.Debian.gz", "/usr/share/doc/libdbus-1-3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdc1394-25@2.2.6-5", "Name": "libdc1394-25", "Identifier": { "PURL": "pkg:deb/debian/libdc1394-25@2.2.6-5?arch=amd64\u0026distro=debian-13.7", "UID": "3dbbdf9dc9ecd928" }, "Version": "2.2.6", "Release": "5", "Arch": "amd64", "SrcName": "libdc1394", "SrcVersion": "2.2.6", "SrcRelease": "5", "Licenses": [ "LGPL-2.1-or-later", "GPL-2.0-or-later", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libraw1394-11@2.1.2-2+b2", "libusb-1.0-0@2:1.0.28-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdc1394.so.25.0.0", "/usr/share/doc/libdc1394-25/changelog.Debian.gz", "/usr/share/doc/libdc1394-25/changelog.gz", "/usr/share/doc/libdc1394-25/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdebconfclient0@0.280", "Name": "libdebconfclient0", "Identifier": { "PURL": "pkg:deb/debian/libdebconfclient0@0.280?arch=amd64\u0026distro=debian-13.7", "UID": "cd0c9dc2c6921f31" }, "Version": "0.280", "Arch": "amd64", "SrcName": "cdebconf", "SrcVersion": "0.280", "Licenses": [ "BSD-2-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Install System Team \u003cdebian-boot@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdebconfclient.so.0.0.0", "/usr/share/doc/libdebconfclient0/changelog.gz", "/usr/share/doc/libdebconfclient0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdecor-0-0@0.2.2-2", "Name": "libdecor-0-0", "Identifier": { "PURL": "pkg:deb/debian/libdecor-0-0@0.2.2-2?arch=amd64\u0026distro=debian-13.7", "UID": "3ae0eaf19df61962" }, "Version": "0.2.2", "Release": "2", "Arch": "amd64", "SrcName": "libdecor-0", "SrcVersion": "0.2.2", "SrcRelease": "2", "Licenses": [ "MIT", "GPL-3.0-or-later", "GPL-3.0-only" ], "Maintainer": "Debian SDL packages maintainers \u003cpkg-sdl-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libwayland-client0@1.23.1-3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdecor-0.so.0.200.2", "/usr/share/doc/libdecor-0-0/changelog.Debian.gz", "/usr/share/doc/libdecor-0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdeflate0@1.23-2", "Name": "libdeflate0", "Identifier": { "PURL": "pkg:deb/debian/libdeflate0@1.23-2?arch=amd64\u0026distro=debian-13.7", "UID": "dd0468bdeb5378bd" }, "Version": "1.23", "Release": "2", "Arch": "amd64", "SrcName": "libdeflate", "SrcVersion": "1.23", "SrcRelease": "2", "Licenses": [ "MIT" ], "Maintainer": "Deflate Team \u003clibdeflate@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdeflate.so.0", "/usr/share/doc/libdeflate0/changelog.Debian.gz", "/usr/share/doc/libdeflate0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdrm-amdgpu1@2.4.124-2", "Name": "libdrm-amdgpu1", "Identifier": { "PURL": "pkg:deb/debian/libdrm-amdgpu1@2.4.124-2?arch=amd64\u0026distro=debian-13.7", "UID": "acc684d58bc59979" }, "Version": "2.4.124", "Release": "2", "Arch": "amd64", "SrcName": "libdrm", "SrcVersion": "2.4.124", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm2@2.4.124-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdrm_amdgpu.so.1.124.0", "/usr/share/doc/libdrm-amdgpu1/changelog.Debian.gz", "/usr/share/doc/libdrm-amdgpu1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdrm-common@2.4.124-2", "Name": "libdrm-common", "Identifier": { "PURL": "pkg:deb/debian/libdrm-common@2.4.124-2?arch=all\u0026distro=debian-13.7", "UID": "83d256e8222dccd6" }, "Version": "2.4.124", "Release": "2", "Arch": "all", "SrcName": "libdrm", "SrcVersion": "2.4.124", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/libdrm-common/changelog.Debian.gz", "/usr/share/doc/libdrm-common/copyright", "/usr/share/libdrm/amdgpu.ids" ], "AnalyzedBy": "dpkg" }, { "ID": "libdrm-intel1@2.4.124-2", "Name": "libdrm-intel1", "Identifier": { "PURL": "pkg:deb/debian/libdrm-intel1@2.4.124-2?arch=amd64\u0026distro=debian-13.7", "UID": "f30e64618752acd7" }, "Version": "2.4.124", "Release": "2", "Arch": "amd64", "SrcName": "libdrm", "SrcVersion": "2.4.124", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm2@2.4.124-2", "libpciaccess0@0.17-3+b3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdrm_intel.so.1.124.0", "/usr/share/doc/libdrm-intel1/changelog.Debian.gz", "/usr/share/doc/libdrm-intel1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdrm2@2.4.124-2", "Name": "libdrm2", "Identifier": { "PURL": "pkg:deb/debian/libdrm2@2.4.124-2?arch=amd64\u0026distro=debian-13.7", "UID": "a5b98ea503993868" }, "Version": "2.4.124", "Release": "2", "Arch": "amd64", "SrcName": "libdrm", "SrcVersion": "2.4.124", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm-common@2.4.124-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdrm.so.2.124.0", "/usr/share/doc/libdrm2/changelog.Debian.gz", "/usr/share/doc/libdrm2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libdvdnav4@6.1.1-3+b1", "Name": "libdvdnav4", "Identifier": { "PURL": "pkg:deb/debian/libdvdnav4@6.1.1-3%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "eb3a8005f911bf19" }, "Version": "6.1.1", "Release": "3+b1", "Arch": "amd64", "SrcName": "libdvdnav", "SrcVersion": "6.1.1", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "LGPL-2.0-only", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdvdread8t64@6.1.3-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdvdnav.so.4.3.0", "/usr/share/bug/libdvdnav4/control", "/usr/share/doc/libdvdnav4/AUTHORS", "/usr/share/doc/libdvdnav4/README", "/usr/share/doc/libdvdnav4/changelog.Debian.amd64.gz", "/usr/share/doc/libdvdnav4/changelog.Debian.gz", "/usr/share/doc/libdvdnav4/changelog.gz", "/usr/share/doc/libdvdnav4/copyright", "/usr/share/lintian/overrides/libdvdnav4" ], "AnalyzedBy": "dpkg" }, { "ID": "libdvdread8t64@6.1.3-2", "Name": "libdvdread8t64", "Identifier": { "PURL": "pkg:deb/debian/libdvdread8t64@6.1.3-2?arch=amd64\u0026distro=debian-13.7", "UID": "cf4835e3c1d03079" }, "Version": "6.1.3", "Release": "2", "Arch": "amd64", "SrcName": "libdvdread", "SrcVersion": "6.1.3", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdvdread.so.8.0.0", "/usr/share/bug/libdvdread8t64/control", "/usr/share/doc/libdvdread8t64/README.css", "/usr/share/doc/libdvdread8t64/changelog.Debian.gz", "/usr/share/doc/libdvdread8t64/changelog.gz", "/usr/share/doc/libdvdread8t64/copyright", "/usr/share/lintian/overrides/libdvdread8t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libedit2@3.1-20250104-1", "Name": "libedit2", "Identifier": { "PURL": "pkg:deb/debian/libedit2@3.1-20250104-1?arch=amd64\u0026distro=debian-13.7", "UID": "7d6b06ea35ec4c63" }, "Version": "3.1-20250104", "Release": "1", "Arch": "amd64", "SrcName": "libedit", "SrcVersion": "3.1-20250104", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause" ], "Maintainer": "LLVM Packaging Team \u003cpkg-llvm-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbsd0@0.12.2-2", "libc6@2.41-12+deb13u4", "libtinfo6@6.5+20250216-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libedit.so.2.0.75", "/usr/share/doc/libedit2/TODO.Debian", "/usr/share/doc/libedit2/changelog.Debian.gz", "/usr/share/doc/libedit2/changelog.gz", "/usr/share/doc/libedit2/copyright", "/usr/share/lintian/overrides/libedit2", "/usr/share/man/man5/editrc.5edit.gz", "/usr/share/man/man7/editline.7edit.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libelf1t64@0.192-4", "Name": "libelf1t64", "Identifier": { "PURL": "pkg:deb/debian/libelf1t64@0.192-4?arch=amd64\u0026distro=debian-13.7", "UID": "db7e33deff6db1d8" }, "Version": "0.192", "Release": "4", "Arch": "amd64", "SrcName": "elfutils", "SrcVersion": "0.192", "SrcRelease": "4", "Licenses": [ "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-3.0-only", "BSD-2-Clause", "GFDL-1.3-no-invariants-only", "GFDL-1.3-only", "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-3+ with Bison exception", "GPL-3.0-only" ], "Maintainer": "Debian Elfutils Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libelf-0.192.so", "/usr/share/doc/libelf1t64/changelog.Debian.gz", "/usr/share/doc/libelf1t64/changelog.gz", "/usr/share/doc/libelf1t64/copyright", "/usr/share/locale/de/LC_MESSAGES/elfutils.mo", "/usr/share/locale/en@boldquot/LC_MESSAGES/elfutils.mo", "/usr/share/locale/en@quot/LC_MESSAGES/elfutils.mo", "/usr/share/locale/es/LC_MESSAGES/elfutils.mo", "/usr/share/locale/ja/LC_MESSAGES/elfutils.mo", "/usr/share/locale/pl/LC_MESSAGES/elfutils.mo", "/usr/share/locale/uk/LC_MESSAGES/elfutils.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libexpat1@2.9.0-1~deb13u1", "Name": "libexpat1", "Identifier": { "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e303fe8e0766825b" }, "Version": "2.9.0", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "expat", "SrcVersion": "2.9.0", "SrcRelease": "1~deb13u1", "Licenses": [ "MIT" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libexpat.so.1.13.0", "/usr/lib/x86_64-linux-gnu/libexpatw.so.1.13.0", "/usr/share/doc/libexpat1/AUTHORS", "/usr/share/doc/libexpat1/changelog.Debian.gz", "/usr/share/doc/libexpat1/changelog.gz", "/usr/share/doc/libexpat1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libffi8@3.4.8-2", "Name": "libffi8", "Identifier": { "PURL": "pkg:deb/debian/libffi8@3.4.8-2?arch=amd64\u0026distro=debian-13.7", "UID": "228a6da53492f741" }, "Version": "3.4.8", "Release": "2", "Arch": "amd64", "SrcName": "libffi", "SrcVersion": "3.4.8", "SrcRelease": "2", "Licenses": [ "MIT", "X11", "GPL-2.0-or-later", "GPL-3.0-or-later", "MPL-1.1", "LGPL-2.1-or-later", "public-domain" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libffi.so.8.1.4", "/usr/share/doc/libffi8/changelog.Debian.gz", "/usr/share/doc/libffi8/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libfftw3-double3@3.3.10-2+b1", "Name": "libfftw3-double3", "Identifier": { "PURL": "pkg:deb/debian/libfftw3-double3@3.3.10-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "e73dbe1deacf5551" }, "Version": "3.3.10", "Release": "2+b1", "Arch": "amd64", "SrcName": "fftw3", "SrcVersion": "3.3.10", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Science Maintainers \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgomp1@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libfftw3.so.3.6.10", "/usr/lib/x86_64-linux-gnu/libfftw3_omp.so.3.6.10", "/usr/lib/x86_64-linux-gnu/libfftw3_threads.so.3.6.10", "/usr/share/doc/libfftw3-double3/NEWS.gz", "/usr/share/doc/libfftw3-double3/README", "/usr/share/doc/libfftw3-double3/README.Debian", "/usr/share/doc/libfftw3-double3/changelog.Debian.amd64.gz", "/usr/share/doc/libfftw3-double3/changelog.Debian.gz", "/usr/share/doc/libfftw3-double3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libflac14@1.5.0+ds-2", "Name": "libflac14", "Identifier": { "PURL": "pkg:deb/debian/libflac14@1.5.0%2Bds-2?arch=amd64\u0026distro=debian-13.7", "UID": "3fd256678dc31e45" }, "Version": "1.5.0+ds", "Release": "2", "Arch": "amd64", "SrcName": "flac", "SrcVersion": "1.5.0+ds", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later", "GFDL-1.1-or-later", "GFDL-1.2-only", "BSD-3-Clause", "LGPL-2.0-or-later", "LGPL-2.0-only", "Public-domain", "ISC", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libogg0@1.3.5-3+b2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libFLAC.so.14.0.0", "/usr/share/doc/libflac14/changelog.Debian.gz", "/usr/share/doc/libflac14/changelog.gz", "/usr/share/doc/libflac14/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libflite1@2.2-7", "Name": "libflite1", "Identifier": { "PURL": "pkg:deb/debian/libflite1@2.2-7?arch=amd64\u0026distro=debian-13.7", "UID": "a725d1830582ef62" }, "Version": "2.2", "Release": "7", "Arch": "amd64", "SrcName": "flite", "SrcVersion": "2.2", "SrcRelease": "7", "Licenses": [ "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Debian Accessibility Team \u003cpkg-a11y-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libasound2t64@1.2.14-1+deb13u1", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libflite.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_grapheme_lang.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_grapheme_lex.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_indic_lang.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_indic_lex.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_time_awb.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_us_awb.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_us_kal.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_us_kal16.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_us_rms.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmu_us_slt.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_cmulex.so.2.2", "/usr/lib/x86_64-linux-gnu/libflite_usenglish.so.2.2", "/usr/share/doc/libflite1/changelog.Debian.gz", "/usr/share/doc/libflite1/copyright", "/usr/share/lintian/overrides/libflite1" ], "AnalyzedBy": "dpkg" }, { "ID": "libfontconfig1@2.15.0-2.3", "Name": "libfontconfig1", "Identifier": { "PURL": "pkg:deb/debian/libfontconfig1@2.15.0-2.3?arch=amd64\u0026distro=debian-13.7", "UID": "c8ce36bda565d48e" }, "Version": "2.15.0", "Release": "2.3", "Arch": "amd64", "SrcName": "fontconfig", "SrcVersion": "2.15.0", "SrcRelease": "2.3", "Maintainer": "Debian freedesktop.org maintainers \u003cpkg-freedesktop-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "fontconfig-config@2.15.0-2.3", "libc6@2.41-12+deb13u4", "libexpat1@2.9.0-1~deb13u1", "libfreetype6@2.13.3+dfsg-1+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libfontconfig.so.1.12.1", "/usr/share/doc/libfontconfig1/changelog.Debian.gz", "/usr/share/doc/libfontconfig1/changelog.gz", "/usr/share/doc/libfontconfig1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libfreetype6@2.13.3+dfsg-1+deb13u1", "Name": "libfreetype6", "Identifier": { "PURL": "pkg:deb/debian/libfreetype6@2.13.3%2Bdfsg-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "7561ae10ddc24148" }, "Version": "2.13.3+dfsg", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "freetype", "SrcVersion": "2.13.3+dfsg", "SrcRelease": "1+deb13u1", "Licenses": [ "FTL", "MIT", "BSD-3-Clause", "FSFAP", "GPL-3.0-or-later", "GPL-2.0-or-later", "Public-Domain", "MIT-SMC", "BSL-1.0", "MIT-Modern-Variant", "Zlib", "OpenGroup-MIT", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Hugh McMaster \u003chmc@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbrotli1@1.1.0-2+deb13u1", "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u4", "libpng16-16t64@1.6.48-1+deb13u6", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libfreetype.so.6.20.2", "/usr/share/doc/libfreetype6/README", "/usr/share/doc/libfreetype6/changelog.Debian.gz", "/usr/share/doc/libfreetype6/changelog.gz", "/usr/share/doc/libfreetype6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libfribidi0@1.0.16-1", "Name": "libfribidi0", "Identifier": { "PURL": "pkg:deb/debian/libfribidi0@1.0.16-1?arch=amd64\u0026distro=debian-13.7", "UID": "3d30759c639043c6" }, "Version": "1.0.16", "Release": "1", "Arch": "amd64", "SrcName": "fribidi", "SrcVersion": "1.0.16", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only" ], "Maintainer": "Debian Hebrew Packaging Team \u003cteam+hebrew@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libfribidi.so.0.4.0", "/usr/share/doc/libfribidi0/NEWS.gz", "/usr/share/doc/libfribidi0/README", "/usr/share/doc/libfribidi0/THANKS", "/usr/share/doc/libfribidi0/TODO", "/usr/share/doc/libfribidi0/changelog.Debian.gz", "/usr/share/doc/libfribidi0/changelog.gz", "/usr/share/doc/libfribidi0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgbm1@25.0.7-2+deb13u1", "Name": "libgbm1", "Identifier": { "PURL": "pkg:deb/debian/libgbm1@25.0.7-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "8e318cf19494c1ca" }, "Version": "25.0.7", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "mesa", "SrcVersion": "25.0.7", "SrcRelease": "2+deb13u1", "Licenses": [ "MIT", "GPL-2.0-only", "GPL-1.0-or-later", "BSD-3-google", "Khronos", "Apache-2.0", "BSL-1.0", "MLAA", "SGI", "BSD-2-Clause", "GPL-2.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm2@2.4.124-2", "libexpat1@2.9.0-1~deb13u1", "libwayland-server0@1.23.1-3", "mesa-libgallium@25.0.7-2+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/gbm/dri_gbm.so", "/usr/lib/x86_64-linux-gnu/libgbm.so.1.0.0", "/usr/share/bug/libgbm1/control", "/usr/share/bug/libgbm1/script", "/usr/share/doc/libgbm1/changelog.Debian.gz", "/usr/share/doc/libgbm1/changelog.gz", "/usr/share/doc/libgbm1/copyright", "/usr/share/lintian/overrides/libgbm1" ], "AnalyzedBy": "dpkg" }, { "ID": "libgcc-s1@14.2.0-19", "Name": "libgcc-s1", "Identifier": { "PURL": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64\u0026distro=debian-13.7", "UID": "5f801be708edc088" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgcc_s.so.1", "/usr/share/lintian/overrides/libgcc-s1" ], "AnalyzedBy": "dpkg" }, { "ID": "libgdbm6t64@1.24-2", "Name": "libgdbm6t64", "Identifier": { "PURL": "pkg:deb/debian/libgdbm6t64@1.24-2?arch=amd64\u0026distro=debian-13.7", "UID": "22d26fcd3d7e2796" }, "Version": "1.24", "Release": "2", "Arch": "amd64", "SrcName": "gdbm", "SrcVersion": "1.24", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "GPL-2.0-or-later", "GFDL-1.3-no-invariants-or-later", "GPL-3.0-only", "GPL-2.0-only" ], "Maintainer": "Nicolas Mora \u003cbabelouest@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgdbm.so.6.0.0", "/usr/share/doc/libgdbm6t64/changelog.Debian.gz", "/usr/share/doc/libgdbm6t64/changelog.gz", "/usr/share/doc/libgdbm6t64/copyright", "/usr/share/lintian/overrides/libgdbm6t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libgdk-pixbuf-2.0-0@2.42.12+dfsg-4+deb13u1", "Name": "libgdk-pixbuf-2.0-0", "Identifier": { "PURL": "pkg:deb/debian/libgdk-pixbuf-2.0-0@2.42.12%2Bdfsg-4%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e04ee951047bffc1" }, "Version": "2.42.12+dfsg", "Release": "4+deb13u1", "Arch": "amd64", "SrcName": "gdk-pixbuf", "SrcVersion": "2.42.12+dfsg", "SrcRelease": "4+deb13u1", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.1-or-later", "CC0-1.0", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgdk-pixbuf2.0-common@2.42.12+dfsg-4+deb13u1", "libglib2.0-0t64@2.84.4-3~deb13u5", "libjpeg62-turbo@1:2.1.5-4", "libpng16-16t64@1.6.48-1+deb13u6", "libtiff6@4.7.0-3+deb13u3", "shared-mime-info@2.4-5+b2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ani.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-bmp.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-gif.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-icns.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ico.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-pnm.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-qtif.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-tga.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-tiff.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-xbm.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-xpm.so", "/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/gdk-pixbuf-query-loaders", "/usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4200.12", "/usr/share/doc/libgdk-pixbuf-2.0-0/NEWS.gz", "/usr/share/doc/libgdk-pixbuf-2.0-0/README.md", "/usr/share/doc/libgdk-pixbuf-2.0-0/changelog.Debian.gz", "/usr/share/doc/libgdk-pixbuf-2.0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgdk-pixbuf2.0-common@2.42.12+dfsg-4+deb13u1", "Name": "libgdk-pixbuf2.0-common", "Identifier": { "PURL": "pkg:deb/debian/libgdk-pixbuf2.0-common@2.42.12%2Bdfsg-4%2Bdeb13u1?arch=all\u0026distro=debian-13.7", "UID": "67e8c4cd275d5e0d" }, "Version": "2.42.12+dfsg", "Release": "4+deb13u1", "Arch": "all", "SrcName": "gdk-pixbuf", "SrcVersion": "2.42.12+dfsg", "SrcRelease": "4+deb13u1", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.1-or-later", "CC0-1.0", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/libgdk-pixbuf2.0-common/changelog.Debian.gz", "/usr/share/doc/libgdk-pixbuf2.0-common/copyright", "/usr/share/locale/ab/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/af/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ang/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ar/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/as/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ast/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/az/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/be/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/be@latin/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/bg/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/bn/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/bn_IN/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/br/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/bs/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ca/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ca@valencia/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/crh/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/cs/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/csb/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/cy/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/da/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/de/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/dz/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/el/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/en@shaw/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/en_CA/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/en_GB/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/eo/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/es/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/et/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/eu/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/fa/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/fi/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/fr/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/fur/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ga/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/gl/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/gu/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/he/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/hi/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/hr/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/hu/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/hy/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ia/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/id/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/io/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/is/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/it/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ja/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ka/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/kab/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/kk/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/km/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/kn/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ko/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ku/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/li/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/lt/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/lv/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/mai/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/mi/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/mk/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ml/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/mn/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/mr/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ms/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/my/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/nb/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/nds/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ne/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/nl/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/nn/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/nso/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/oc/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/or/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/pa/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/pl/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ps/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/pt/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ro/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ru/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/si/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/sk/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/sl/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/sq/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/sr/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/sr@ije/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/sr@latin/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/sv/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ta/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/te/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/tg/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/th/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/tk/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/tr/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/tt/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/ug/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/uk/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/uz/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/uz@cyrillic/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/vi/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/wa/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/xh/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/yi/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/zh_HK/LC_MESSAGES/gdk-pixbuf.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/gdk-pixbuf.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libgfortran5@14.2.0-19", "Name": "libgfortran5", "Identifier": { "PURL": "pkg:deb/debian/libgfortran5@14.2.0-19?arch=amd64\u0026distro=debian-13.7", "UID": "6703637b3804539d" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgfortran.so.5.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libgl1@1.7.0-1+b2", "Name": "libgl1", "Identifier": { "PURL": "pkg:deb/debian/libgl1@1.7.0-1%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "6198c9782b6d7483" }, "Version": "1.7.0", "Release": "1+b2", "Arch": "amd64", "SrcName": "libglvnd", "SrcVersion": "1.7.0", "SrcRelease": "1", "Licenses": [ "MIT", "Apache-2.0", "public-domain", "GPL-3.0-or-later", "BSD-1-Clause", "GPL-2.0-or-later", "GPL-3.0-only" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libglvnd0@1.7.0-1+b2", "libglx0@1.7.0-1+b2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libGL.so.1.7.0", "/usr/share/bug/libgl1/control", "/usr/share/doc/libgl1/changelog.Debian.amd64.gz", "/usr/share/doc/libgl1/changelog.Debian.gz", "/usr/share/doc/libgl1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgl1-mesa-dri@25.0.7-2+deb13u1", "Name": "libgl1-mesa-dri", "Identifier": { "PURL": "pkg:deb/debian/libgl1-mesa-dri@25.0.7-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e5a974807c55c635" }, "Version": "25.0.7", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "mesa", "SrcVersion": "25.0.7", "SrcRelease": "2+deb13u1", "Licenses": [ "MIT", "GPL-2.0-only", "GPL-1.0-or-later", "BSD-3-google", "Khronos", "Apache-2.0", "BSL-1.0", "MLAA", "SGI", "BSD-2-Clause", "GPL-2.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgbm1@25.0.7-2+deb13u1", "libvulkan1@1.4.309.0-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/dri/libdril_dri.so", "/usr/share/bug/libgl1-mesa-dri/control", "/usr/share/bug/libgl1-mesa-dri/script", "/usr/share/doc/libgl1-mesa-dri/changelog.Debian.gz", "/usr/share/doc/libgl1-mesa-dri/changelog.gz", "/usr/share/doc/libgl1-mesa-dri/copyright", "/usr/share/drirc.d/00-mesa-defaults.conf" ], "AnalyzedBy": "dpkg" }, { "ID": "libglib2.0-0t64@2.84.4-3~deb13u5", "Name": "libglib2.0-0t64", "Identifier": { "PURL": "pkg:deb/debian/libglib2.0-0t64@2.84.4-3~deb13u5?arch=amd64\u0026distro=debian-13.7", "UID": "6de299a8bb6638a3" }, "Version": "2.84.4", "Release": "3~deb13u5", "Arch": "amd64", "SrcName": "glib2.0", "SrcVersion": "2.84.4", "SrcRelease": "3~deb13u5", "Licenses": [ "LGPL-2.1-or-later", "old-glib-tests", "AFL-2.0", "Janik-permissive", "LGPL-2.0-or-later", "CC0-1.0", "FSFULLR", "Iconv-PD", "Mingw-PD", "Unicode-DFS-2016", "MIT", "GPL-2.0-or-later", "LGPL-3.0-or-later", "Apache-2.0 with LLVM exception", "Kuchling-PD", "Plumb-PD", "bzip2-1.0.6", "CC-BY-SA-3.0", "cmph", "LGPL-2.0-only", "LGPL-2.1-only", "MPL-1.1", "Apache-2.0", "GPL-2.0-only", "LGPL-3.0-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libatomic1@14.2.0-19", "libc6@2.41-12+deb13u4", "libffi8@3.4.8-2", "libmount1@2.41.5-0+deb13u1", "libpcre2-8-0@10.46-1~deb13u3", "libselinux1@3.8.1-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/glib-2.0/gio-launch-desktop", "/usr/lib/x86_64-linux-gnu/glib-2.0/gio-querymodules", "/usr/lib/x86_64-linux-gnu/glib-2.0/glib-compile-schemas", "/usr/lib/x86_64-linux-gnu/libgio-2.0.so.0.8400.4", "/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0.8400.4", "/usr/lib/x86_64-linux-gnu/libgmodule-2.0.so.0.8400.4", "/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.8400.4", "/usr/lib/x86_64-linux-gnu/libgthread-2.0.so.0.8400.4", "/usr/share/doc/libglib2.0-0t64/NEWS.gz", "/usr/share/doc/libglib2.0-0t64/README.Debian", "/usr/share/doc/libglib2.0-0t64/README.md", "/usr/share/doc/libglib2.0-0t64/changelog.Debian.gz", "/usr/share/doc/libglib2.0-0t64/copyright", "/usr/share/lintian/overrides/libglib2.0-0t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libglvnd0@1.7.0-1+b2", "Name": "libglvnd0", "Identifier": { "PURL": "pkg:deb/debian/libglvnd0@1.7.0-1%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "eddf6f84def0b9fa" }, "Version": "1.7.0", "Release": "1+b2", "Arch": "amd64", "SrcName": "libglvnd", "SrcVersion": "1.7.0", "SrcRelease": "1", "Licenses": [ "MIT", "Apache-2.0", "public-domain", "GPL-3.0-or-later", "BSD-1-Clause", "GPL-2.0-or-later", "GPL-3.0-only" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libGLdispatch.so.0.0.0", "/usr/share/bug/libglvnd0/control", "/usr/share/doc/libglvnd0/changelog.Debian.amd64.gz", "/usr/share/doc/libglvnd0/changelog.Debian.gz", "/usr/share/doc/libglvnd0/copyright", "/usr/share/lintian/overrides/libglvnd0" ], "AnalyzedBy": "dpkg" }, { "ID": "libglx-mesa0@25.0.7-2+deb13u1", "Name": "libglx-mesa0", "Identifier": { "PURL": "pkg:deb/debian/libglx-mesa0@25.0.7-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "50107fc47f9a138b" }, "Version": "25.0.7", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "mesa", "SrcVersion": "25.0.7", "SrcRelease": "2+deb13u1", "Licenses": [ "MIT", "GPL-2.0-only", "GPL-1.0-or-later", "BSD-3-google", "Khronos", "Apache-2.0", "BSL-1.0", "MLAA", "SGI", "BSD-2-Clause", "GPL-2.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm2@2.4.124-2", "libexpat1@2.9.0-1~deb13u1", "libgl1-mesa-dri@25.0.7-2+deb13u1", "libx11-6@2:1.8.12-1", "libx11-xcb1@2:1.8.12-1", "libxcb-dri3-0@1.17.0-2+b1", "libxcb-glx0@1.17.0-2+b1", "libxcb-present0@1.17.0-2+b1", "libxcb-shm0@1.17.0-2+b1", "libxcb-xfixes0@1.17.0-2+b1", "libxcb1@1.17.0-2+b1", "libxext6@2:1.3.4-1+b3", "libxxf86vm1@1:1.1.4-1+b4", "mesa-libgallium@25.0.7-2+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libGLX_mesa.so.0.0.0", "/usr/share/bug/libglx-mesa0/control", "/usr/share/bug/libglx-mesa0/script", "/usr/share/doc/libglx-mesa0/changelog.Debian.gz", "/usr/share/doc/libglx-mesa0/changelog.gz", "/usr/share/doc/libglx-mesa0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libglx0@1.7.0-1+b2", "Name": "libglx0", "Identifier": { "PURL": "pkg:deb/debian/libglx0@1.7.0-1%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "7aaf50730bfd400d" }, "Version": "1.7.0", "Release": "1+b2", "Arch": "amd64", "SrcName": "libglvnd", "SrcVersion": "1.7.0", "SrcRelease": "1", "Licenses": [ "MIT", "Apache-2.0", "public-domain", "GPL-3.0-or-later", "BSD-1-Clause", "GPL-2.0-or-later", "GPL-3.0-only" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libglvnd0@1.7.0-1+b2", "libglx-mesa0@25.0.7-2+deb13u1", "libx11-6@2:1.8.12-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libGLX.so.0.0.0", "/usr/share/bug/libglx0/control", "/usr/share/doc/libglx0/changelog.Debian.amd64.gz", "/usr/share/doc/libglx0/changelog.Debian.gz", "/usr/share/doc/libglx0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgme0@0.6.3-7+b2", "Name": "libgme0", "Identifier": { "PURL": "pkg:deb/debian/libgme0@0.6.3-7%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "5b7956f760e40589" }, "Version": "0.6.3", "Release": "7+b2", "Arch": "amd64", "SrcName": "game-music-emu", "SrcVersion": "0.6.3", "SrcRelease": "7", "Licenses": [ "LGPL-2.1-or-later", "MIT", "LGPL-2.1-only" ], "Maintainer": "Ileana Dumitrescu \u003cileanadumitrescu95@gmail.com\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgme.so.0.6.3", "/usr/share/doc/libgme0/changelog.Debian.amd64.gz", "/usr/share/doc/libgme0/changelog.Debian.gz", "/usr/share/doc/libgme0/changelog.gz", "/usr/share/doc/libgme0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgmp10@2:6.3.0+dfsg-3", "Name": "libgmp10", "Identifier": { "PURL": "pkg:deb/debian/libgmp10@6.3.0%2Bdfsg-3?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "472e354773202f0f" }, "Version": "6.3.0+dfsg", "Release": "3", "Epoch": 2, "Arch": "amd64", "SrcName": "gmp", "SrcVersion": "6.3.0+dfsg", "SrcRelease": "3", "SrcEpoch": 2, "Licenses": [ "GPL-2.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-or-later", "GPL-3+ with Bison exception", "GPL-2.0-only", "GPL-3.0-only", "LGPL-3.0-only" ], "Maintainer": "Debian Science Maintainers \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgmp.so.10.5.0", "/usr/share/doc/libgmp10/README.Debian", "/usr/share/doc/libgmp10/changelog.Debian.gz", "/usr/share/doc/libgmp10/changelog.gz", "/usr/share/doc/libgmp10/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgnutls30t64@3.8.9-3+deb13u4", "Name": "libgnutls30t64", "Identifier": { "PURL": "pkg:deb/debian/libgnutls30t64@3.8.9-3%2Bdeb13u4?arch=amd64\u0026distro=debian-13.7", "UID": "9f386e13fba8f389" }, "Version": "3.8.9", "Release": "3+deb13u4", "Arch": "amd64", "SrcName": "gnutls28", "SrcVersion": "3.8.9", "SrcRelease": "3+deb13u4", "Licenses": [ "LGPL-2.1-only", "LGPL-2.0-or-later", "LGPL-3.0-only", "GPL-2.0-or-later", "GPL-3.0-only", "GFDL-1.3-only", "CC0-1.0", "MIT", "Apache-2.0", "LGPL-3.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-or-later", "BSD-3-Clause", "FSFAP" ], "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgmp10@2:6.3.0+dfsg-3", "libhogweed6t64@3.10.1-1", "libidn2-0@2.3.8-2", "libnettle8t64@3.10.1-1", "libp11-kit0@0.25.5-3", "libtasn1-6@4.20.0-2+deb13u1", "libunistring5@1.3-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgnutls.so.30.40.3", "/usr/share/doc/libgnutls30t64/AUTHORS.gz", "/usr/share/doc/libgnutls30t64/NEWS.gz", "/usr/share/doc/libgnutls30t64/README.md.gz", "/usr/share/doc/libgnutls30t64/THANKS.gz", "/usr/share/doc/libgnutls30t64/changelog.Debian.gz", "/usr/share/doc/libgnutls30t64/changelog.gz", "/usr/share/doc/libgnutls30t64/copyright", "/usr/share/lintian/overrides/libgnutls30t64", "/usr/share/locale/cs/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/de/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/eo/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/es/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/fi/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/fr/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/it/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/ka/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/ms/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/nl/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/pl/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/ro/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/sr/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/sv/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/uk/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/vi/LC_MESSAGES/gnutls30.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/gnutls30.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libgomp1@14.2.0-19", "Name": "libgomp1", "Identifier": { "PURL": "pkg:deb/debian/libgomp1@14.2.0-19?arch=amd64\u0026distro=debian-13.7", "UID": "42dde5818f67e27b" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libgraphite2-3@1.3.14-2+deb13u1", "Name": "libgraphite2-3", "Identifier": { "PURL": "pkg:deb/debian/libgraphite2-3@1.3.14-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "88796c3679f3841a" }, "Version": "1.3.14", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "graphite2", "SrcVersion": "1.3.14", "SrcRelease": "2+deb13u1", "Licenses": [ "LGPL-2.1-or-later", "MPL-1.1", "GPL-2.0-or-later", "public-domain", "Artistic-2.0", "GPL-1.0-or-later", "custom-sil-open-font-license", "GPL-1.0-only", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian LibreOffice Maintainers \u003cdebian-openoffice@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgraphite2.so.3.2.1", "/usr/share/doc/libgraphite2-3/changelog.Debian.gz", "/usr/share/doc/libgraphite2-3/changelog.gz", "/usr/share/doc/libgraphite2-3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgsm1@1.0.22-1+b2", "Name": "libgsm1", "Identifier": { "PURL": "pkg:deb/debian/libgsm1@1.0.22-1%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "2e79e06f44ee45c9" }, "Version": "1.0.22", "Release": "1+b2", "Arch": "amd64", "SrcName": "libgsm", "SrcVersion": "1.0.22", "SrcRelease": "1", "Licenses": [ "TU-Berlin-2.0" ], "Maintainer": "Debian Mobcom Maintainers \u003cDebian-mobcom-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgsm.so.1.0.19", "/usr/share/doc/libgsm1/MACHINES", "/usr/share/doc/libgsm1/README", "/usr/share/doc/libgsm1/README.Debian", "/usr/share/doc/libgsm1/changelog.Debian.amd64.gz", "/usr/share/doc/libgsm1/changelog.Debian.gz", "/usr/share/doc/libgsm1/changelog.gz", "/usr/share/doc/libgsm1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgssapi-krb5-2@1.21.3-5+deb13u1", "Name": "libgssapi-krb5-2", "Identifier": { "PURL": "pkg:deb/debian/libgssapi-krb5-2@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "bf891abba22dab2e" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcom-err2@1.47.2-3+b12", "libk5crypto3@1.21.3-5+deb13u1", "libkrb5-3@1.21.3-5+deb13u1", "libkrb5support0@1.21.3-5+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2", "/usr/share/doc/libgssapi-krb5-2/changelog.Debian.gz", "/usr/share/doc/libgssapi-krb5-2/copyright", "/usr/share/lintian/overrides/libgssapi-krb5-2" ], "AnalyzedBy": "dpkg" }, { "ID": "libharfbuzz0b@10.2.0-1+deb13u1", "Name": "libharfbuzz0b", "Identifier": { "PURL": "pkg:deb/debian/libharfbuzz0b@10.2.0-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "c0040d90e5730eb2" }, "Version": "10.2.0", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "harfbuzz", "SrcVersion": "10.2.0", "SrcRelease": "1+deb13u1", "Licenses": [ "MIT", "Unicode", "ISC", "Apache-2.0", "OFL-1.1", "Monotype", "CC0-1.0", "GPL-3.0-or-later", "GPL-2+ with Font exception", "UFL-1.0", "FSFULLR", "GPL-2.0-with-autoconf-exception+", "GPL-3.0-with-autoconf-exception+", "FSFAP", "LGPL-2.1-or-later", "GPL-2+ with LibTool exception", "FSFUL", "GPL-2.0-only", "GPL-3.0-only", "LGPL-2.1-only" ], "Maintainer": "أحمد المحمودي (Ahmed El-Mahmoudy) \u003caelmahmoudy@users.sourceforge.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libfreetype6@2.13.3+dfsg-1+deb13u1", "libglib2.0-0t64@2.84.4-3~deb13u5", "libgraphite2-3@1.3.14-2+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libharfbuzz.so.0.61020.0", "/usr/share/doc/libharfbuzz0b/changelog.Debian.gz", "/usr/share/doc/libharfbuzz0b/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libhogweed6t64@3.10.1-1", "Name": "libhogweed6t64", "Identifier": { "PURL": "pkg:deb/debian/libhogweed6t64@3.10.1-1?arch=amd64\u0026distro=debian-13.7", "UID": "2df7ce16a99c5e01" }, "Version": "3.10.1", "Release": "1", "Arch": "amd64", "SrcName": "nettle", "SrcVersion": "3.10.1", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-or-later", "GPL-2.0-or-later", "LGPL-2.0-or-later", "LGPL-2.0-only", "MIT", "GPL-3.0-with-autoconf-exception+", "public-domain", "GPL-2.0-only", "GAP" ], "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgmp10@2:6.3.0+dfsg-3", "libnettle8t64@3.10.1-1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhogweed.so.6.10", "/usr/share/doc/libhogweed6t64/changelog.Debian.gz", "/usr/share/doc/libhogweed6t64/changelog.gz", "/usr/share/doc/libhogweed6t64/copyright", "/usr/share/lintian/overrides/libhogweed6t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libhwy1t64@1.2.0-2+b2", "Name": "libhwy1t64", "Identifier": { "PURL": "pkg:deb/debian/libhwy1t64@1.2.0-2%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "409d04cd2a6647fb" }, "Version": "1.2.0", "Release": "2+b2", "Arch": "amd64", "SrcName": "highway", "SrcVersion": "1.2.0", "SrcRelease": "2", "Licenses": [ "Apache-2.0" ], "Maintainer": "Debian PhotoTools Maintainers \u003cpkg-phototools-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhwy.so.1.2.0", "/usr/lib/x86_64-linux-gnu/libhwy_contrib.so.1.2.0", "/usr/lib/x86_64-linux-gnu/libhwy_test.so.1.2.0", "/usr/share/doc/libhwy1t64/changelog.Debian.amd64.gz", "/usr/share/doc/libhwy1t64/changelog.Debian.gz", "/usr/share/doc/libhwy1t64/copyright", "/usr/share/lintian/overrides/libhwy1t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libidn2-0@2.3.8-2", "Name": "libidn2-0", "Identifier": { "PURL": "pkg:deb/debian/libidn2-0@2.3.8-2?arch=amd64\u0026distro=debian-13.7", "UID": "62db500241fd9ab0" }, "Version": "2.3.8", "Release": "2", "Arch": "amd64", "SrcName": "libidn2", "SrcVersion": "2.3.8", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "LGPL-3.0-or-later", "GPL-2.0-or-later", "MIT", "Unicode", "GPL-3.0-only", "GPL-2.0-only", "LGPL-3.0-only" ], "Maintainer": "Debian Libidn team \u003chelp-libidn@gnu.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libunistring5@1.3-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libidn2.so.0.4.0", "/usr/share/doc/libidn2-0/AUTHORS", "/usr/share/doc/libidn2-0/NEWS.gz", "/usr/share/doc/libidn2-0/README.md.gz", "/usr/share/doc/libidn2-0/changelog.Debian.gz", "/usr/share/doc/libidn2-0/copyright", "/usr/share/lintian/overrides/libidn2-0", "/usr/share/locale/cs/LC_MESSAGES/libidn2.mo", "/usr/share/locale/da/LC_MESSAGES/libidn2.mo", "/usr/share/locale/de/LC_MESSAGES/libidn2.mo", "/usr/share/locale/eo/LC_MESSAGES/libidn2.mo", "/usr/share/locale/es/LC_MESSAGES/libidn2.mo", "/usr/share/locale/fi/LC_MESSAGES/libidn2.mo", "/usr/share/locale/fr/LC_MESSAGES/libidn2.mo", "/usr/share/locale/fur/LC_MESSAGES/libidn2.mo", "/usr/share/locale/hr/LC_MESSAGES/libidn2.mo", "/usr/share/locale/hu/LC_MESSAGES/libidn2.mo", "/usr/share/locale/id/LC_MESSAGES/libidn2.mo", "/usr/share/locale/it/LC_MESSAGES/libidn2.mo", "/usr/share/locale/ja/LC_MESSAGES/libidn2.mo", "/usr/share/locale/ka/LC_MESSAGES/libidn2.mo", "/usr/share/locale/ko/LC_MESSAGES/libidn2.mo", "/usr/share/locale/lv/LC_MESSAGES/libidn2.mo", "/usr/share/locale/nl/LC_MESSAGES/libidn2.mo", "/usr/share/locale/pl/LC_MESSAGES/libidn2.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/libidn2.mo", "/usr/share/locale/ro/LC_MESSAGES/libidn2.mo", "/usr/share/locale/ru/LC_MESSAGES/libidn2.mo", "/usr/share/locale/sr/LC_MESSAGES/libidn2.mo", "/usr/share/locale/sv/LC_MESSAGES/libidn2.mo", "/usr/share/locale/uk/LC_MESSAGES/libidn2.mo", "/usr/share/locale/vi/LC_MESSAGES/libidn2.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/libidn2.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libiec61883-0@1.2.0-7", "Name": "libiec61883-0", "Identifier": { "PURL": "pkg:deb/debian/libiec61883-0@1.2.0-7?arch=amd64\u0026distro=debian-13.7", "UID": "ad033c0d4e5f6988" }, "Version": "1.2.0", "Release": "7", "Arch": "amd64", "SrcName": "libiec61883", "SrcVersion": "1.2.0", "SrcRelease": "7", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "GPL-2.0-or-later", "LGPL-2.1-only", "LGPL-2.0-only", "GPL-2.0-only" ], "Maintainer": "Debian QA Group \u003cpackages@qa.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libraw1394-11@2.1.2-2+b2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libiec61883.so.0.1.1", "/usr/share/doc/libiec61883-0/NEWS.gz", "/usr/share/doc/libiec61883-0/README", "/usr/share/doc/libiec61883-0/changelog.Debian.gz", "/usr/share/doc/libiec61883-0/changelog.gz", "/usr/share/doc/libiec61883-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libjack-jackd2-0@1.9.22~dfsg-4", "Name": "libjack-jackd2-0", "Identifier": { "PURL": "pkg:deb/debian/libjack-jackd2-0@1.9.22~dfsg-4?arch=amd64\u0026distro=debian-13.7", "UID": "716e3b71e58f0193" }, "Version": "1.9.22~dfsg", "Release": "4", "Arch": "amd64", "SrcName": "jackd2", "SrcVersion": "1.9.22~dfsg", "SrcRelease": "4", "Licenses": [ "LGPL-2.1-or-later", "GPL-2.0-or-later", "GPL-2~either", "GPL-2.0-only", "LGPL-2.0-or-later", "GPL-2~or", "MIT", "BSD-3-Clause", "public-domain~Kroon", "BSD-2-Clause", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdb5.3t64@5.3.28+dfsg2-9", "libgcc-s1@14.2.0-19", "libopus0@1.5.2-2", "libsamplerate0@0.2.2-4+b2", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libjack.so.0.1.0", "/usr/lib/x86_64-linux-gnu/libjacknet.so.0.1.0", "/usr/lib/x86_64-linux-gnu/libjackserver.so.0.1.0", "/usr/share/doc/libjack-jackd2-0/changelog.Debian.gz", "/usr/share/doc/libjack-jackd2-0/changelog.gz", "/usr/share/doc/libjack-jackd2-0/copyright", "/usr/share/lintian/overrides/libjack-jackd2-0" ], "AnalyzedBy": "dpkg" }, { "ID": "libjbig0@2.1-6.1+b2", "Name": "libjbig0", "Identifier": { "PURL": "pkg:deb/debian/libjbig0@2.1-6.1%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "eba54784a1627ead" }, "Version": "2.1", "Release": "6.1+b2", "Arch": "amd64", "SrcName": "jbigkit", "SrcVersion": "2.1", "SrcRelease": "6.1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Michael van der Kolff \u003cmvanderkolff@gmail.com\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libjbig.so.0", "/usr/share/doc/libjbig0/changelog.Debian.amd64.gz", "/usr/share/doc/libjbig0/changelog.Debian.gz", "/usr/share/doc/libjbig0/changelog.gz", "/usr/share/doc/libjbig0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libjpeg62-turbo@1:2.1.5-4", "Name": "libjpeg62-turbo", "Identifier": { "PURL": "pkg:deb/debian/libjpeg62-turbo@2.1.5-4?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "67f1d3745f3ca6a3" }, "Version": "2.1.5", "Release": "4", "Epoch": 1, "Arch": "amd64", "SrcName": "libjpeg-turbo", "SrcVersion": "2.1.5", "SrcRelease": "4", "SrcEpoch": 1, "Licenses": [ "BSD-BY-LC-NE", "Zlib", "BSD-3-Clause", "MIT", "NTP" ], "Maintainer": "Ondřej Surý \u003condrej@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libjpeg.so.62.3.0", "/usr/share/doc/libjpeg62-turbo/changelog.Debian.gz", "/usr/share/doc/libjpeg62-turbo/changelog.gz", "/usr/share/doc/libjpeg62-turbo/copyright", "/usr/share/lintian/overrides/libjpeg62-turbo" ], "AnalyzedBy": "dpkg" }, { "ID": "libjxl0.11@0.11.2-0.1~deb13u3", "Name": "libjxl0.11", "Identifier": { "PURL": "pkg:deb/debian/libjxl0.11@0.11.2-0.1~deb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "c748957f7c25628" }, "Version": "0.11.2", "Release": "0.1~deb13u3", "Arch": "amd64", "SrcName": "jpeg-xl", "SrcVersion": "0.11.2", "SrcRelease": "0.1~deb13u3", "Licenses": [ "BSD-3-clause-Google", "ISC" ], "Maintainer": "Debian PhotoTools Maintainers \u003cpkg-phototools-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbrotli1@1.1.0-2+deb13u1", "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libhwy1t64@1.2.0-2+b2", "liblcms2-2@2.16-2+deb13u2", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libjxl.so.0.11.2", "/usr/lib/x86_64-linux-gnu/libjxl_cms.so.0.11.2", "/usr/lib/x86_64-linux-gnu/libjxl_threads.so.0.11.2", "/usr/share/doc/libjxl0.11/changelog.Debian.gz", "/usr/share/doc/libjxl0.11/changelog.gz", "/usr/share/doc/libjxl0.11/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libk5crypto3@1.21.3-5+deb13u1", "Name": "libk5crypto3", "Identifier": { "PURL": "pkg:deb/debian/libk5crypto3@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "33a579518ddbe2ce" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libkrb5support0@1.21.3-5+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1", "/usr/share/doc/libk5crypto3/changelog.Debian.gz", "/usr/share/doc/libk5crypto3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libkeyutils1@1.6.3-6", "Name": "libkeyutils1", "Identifier": { "PURL": "pkg:deb/debian/libkeyutils1@1.6.3-6?arch=amd64\u0026distro=debian-13.7", "UID": "605bddaf876a1a7" }, "Version": "1.6.3", "Release": "6", "Arch": "amd64", "SrcName": "keyutils", "SrcVersion": "1.6.3", "SrcRelease": "6", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-only" ], "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libkeyutils.so.1.10", "/usr/share/doc/libkeyutils1/changelog.Debian.gz", "/usr/share/doc/libkeyutils1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libkrb5-3@1.21.3-5+deb13u1", "Name": "libkrb5-3", "Identifier": { "PURL": "pkg:deb/debian/libkrb5-3@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "f3696342afc29c47" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcom-err2@1.47.2-3+b12", "libk5crypto3@1.21.3-5+deb13u1", "libkeyutils1@1.6.3-6", "libkrb5support0@1.21.3-5+deb13u1", "libssl3t64@3.5.7-1~deb13u3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so", "/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3", "/usr/share/doc/libkrb5-3/README.Debian", "/usr/share/doc/libkrb5-3/README.gz", "/usr/share/doc/libkrb5-3/changelog.Debian.gz", "/usr/share/doc/libkrb5-3/copyright", "/usr/share/lintian/overrides/libkrb5-3" ], "AnalyzedBy": "dpkg" }, { "ID": "libkrb5support0@1.21.3-5+deb13u1", "Name": "libkrb5support0", "Identifier": { "PURL": "pkg:deb/debian/libkrb5support0@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "fe8daddb753c64db" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1", "/usr/share/doc/libkrb5support0/changelog.Debian.gz", "/usr/share/doc/libkrb5support0/copyright", "/usr/share/lintian/overrides/libkrb5support0" ], "AnalyzedBy": "dpkg" }, { "ID": "liblapack3@3.12.1-6", "Name": "liblapack3", "Identifier": { "PURL": "pkg:deb/debian/liblapack3@3.12.1-6?arch=amd64\u0026distro=debian-13.7", "UID": "965b8963152be940" }, "Version": "3.12.1", "Release": "6", "Arch": "amd64", "SrcName": "lapack", "SrcVersion": "3.12.1", "SrcRelease": "6", "Licenses": [ "BSD-3-Clause", "BSD-3-clause-intel" ], "Maintainer": "Debian Science Team \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libblas3@3.12.1-6", "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libgfortran5@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/lapack/liblapack.so.3.12.1", "/usr/share/doc/liblapack3/changelog.Debian.gz", "/usr/share/doc/liblapack3/copyright", "/usr/share/lintian/overrides/liblapack3" ], "AnalyzedBy": "dpkg" }, { "ID": "liblastlog2-2@2.41.5-0+deb13u1", "Name": "liblastlog2-2", "Identifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "481f2fda004b182b" }, "Version": "2.41.5", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libsqlite3-0@3.46.1-7+deb13u2" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblastlog2.so.2.0.0", "/usr/share/doc/liblastlog2-2/NEWS.Debian.gz", "/usr/share/doc/liblastlog2-2/changelog.Debian.gz", "/usr/share/doc/liblastlog2-2/changelog.gz", "/usr/share/doc/liblastlog2-2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblcms2-2@2.16-2+deb13u2", "Name": "liblcms2-2", "Identifier": { "PURL": "pkg:deb/debian/liblcms2-2@2.16-2%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7", "UID": "751106bb68b680d1" }, "Version": "2.16", "Release": "2+deb13u2", "Arch": "amd64", "SrcName": "lcms2", "SrcVersion": "2.16", "SrcRelease": "2+deb13u2", "Licenses": [ "MIT", "GPL-3.0-only", "IJG", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Thomas Weber \u003ctweber@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblcms2.so.2.0.16", "/usr/share/doc/liblcms2-2/changelog.Debian.gz", "/usr/share/doc/liblcms2-2/changelog.gz", "/usr/share/doc/liblcms2-2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblerc4@4.0.0+ds-5", "Name": "liblerc4", "Identifier": { "PURL": "pkg:deb/debian/liblerc4@4.0.0%2Bds-5?arch=amd64\u0026distro=debian-13.7", "UID": "96f4454b0e6297c" }, "Version": "4.0.0+ds", "Release": "5", "Arch": "amd64", "SrcName": "lerc", "SrcVersion": "4.0.0+ds", "SrcRelease": "5", "Licenses": [ "Apache-2.0" ], "Maintainer": "Debian GIS Project \u003cpkg-grass-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libLerc.so.4", "/usr/share/doc/liblerc4/NOTICE", "/usr/share/doc/liblerc4/changelog.Debian.gz", "/usr/share/doc/liblerc4/changelog.gz", "/usr/share/doc/liblerc4/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblilv-0-0@0.24.26-1", "Name": "liblilv-0-0", "Identifier": { "PURL": "pkg:deb/debian/liblilv-0-0@0.24.26-1?arch=amd64\u0026distro=debian-13.7", "UID": "961f0fa173e038a" }, "Version": "0.24.26", "Release": "1", "Arch": "amd64", "SrcName": "lilv", "SrcVersion": "0.24.26", "SrcRelease": "1", "Licenses": [ "ISC", "0BSD" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libserd-0-0@0.32.4-1", "libsord-0-0@0.16.18-1", "libsratom-0-0@0.6.18-1", "libzix-0-0@0.6.2-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblilv-0.so.0.24.26", "/usr/share/doc/liblilv-0-0/changelog.Debian.gz", "/usr/share/doc/liblilv-0-0/changelog.gz", "/usr/share/doc/liblilv-0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libllvm19@1:19.1.7-3+b1", "Name": "libllvm19", "Identifier": { "PURL": "pkg:deb/debian/libllvm19@19.1.7-3%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "2e054683b040e154" }, "Version": "19.1.7", "Release": "3+b1", "Epoch": 1, "Arch": "amd64", "SrcName": "llvm-toolchain-19", "SrcVersion": "19.1.7", "SrcRelease": "3", "SrcEpoch": 1, "Licenses": [ "APACHE-2-LLVM-EXCEPTIONS", "Apache-2.0", "MIT", "BSD-3-Clause", "solar-public-domain", "Python-2.0" ], "Maintainer": "LLVM Packaging Team \u003cpkg-llvm-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libedit2@3.1-20250104-1", "libffi8@3.4.8-2", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19", "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "libz3-4@4.13.3-1", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libLLVM.so.19.1", "/usr/share/doc/libllvm19/changelog.Debian.amd64.gz", "/usr/share/doc/libllvm19/changelog.Debian.gz", "/usr/share/doc/libllvm19/copyright", "/usr/share/lintian/overrides/libllvm19" ], "AnalyzedBy": "dpkg" }, { "ID": "liblz4-1@1.10.0-4", "Name": "liblz4-1", "Identifier": { "PURL": "pkg:deb/debian/liblz4-1@1.10.0-4?arch=amd64\u0026distro=debian-13.7", "UID": "dcc7de8e33942d8c" }, "Version": "1.10.0", "Release": "4", "Arch": "amd64", "SrcName": "lz4", "SrcVersion": "1.10.0", "SrcRelease": "4", "Licenses": [ "GPL-2.0-or-later", "BSD-2-Clause", "GPL-2.0-only" ], "Maintainer": "Nobuhiro Iwamatsu \u003ciwamatsu@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxxhash0@0.8.3-2" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblz4.so.1.10.0", "/usr/share/doc/liblz4-1/changelog.Debian.gz", "/usr/share/doc/liblz4-1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblzma5@5.8.1-1+deb13u2", "Name": "liblzma5", "Identifier": { "PURL": "pkg:deb/debian/liblzma5@5.8.1-1%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7", "UID": "443b92228913606d" }, "Version": "5.8.1", "Release": "1+deb13u2", "Arch": "amd64", "SrcName": "xz-utils", "SrcVersion": "5.8.1", "SrcRelease": "1+deb13u2", "Licenses": [ "0BSD", "GPL-2.0-or-later", "LGPL-2.1-or-later", "FSFULLR", "GPL-3.0-or-later-WITH-Autoconf-exception-macro", "none", "PD", "permissive-nowarranty", "FSFUL", "noderivs", "PD-debian", "LGPL-2.1-only", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Sebastian Andrzej Siewior \u003csebastian@breakpoint.cc\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblzma.so.5.8.1", "/usr/share/doc/liblzma5/AUTHORS", "/usr/share/doc/liblzma5/NEWS.gz", "/usr/share/doc/liblzma5/THANKS.gz", "/usr/share/doc/liblzma5/changelog.Debian.gz", "/usr/share/doc/liblzma5/changelog.gz", "/usr/share/doc/liblzma5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmbedcrypto16@3.6.6-0.1~deb13u1", "Name": "libmbedcrypto16", "Identifier": { "PURL": "pkg:deb/debian/libmbedcrypto16@3.6.6-0.1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "5ed5a90ba6581329" }, "Version": "3.6.6", "Release": "0.1~deb13u1", "Arch": "amd64", "SrcName": "mbedtls", "SrcVersion": "3.6.6", "SrcRelease": "0.1~deb13u1", "Licenses": [ "Apache-2.0", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian IoT Maintainers \u003cdebian-iot-maintainers@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmbedcrypto.so.3.6.6", "/usr/share/doc/libmbedcrypto16/changelog.Debian.gz", "/usr/share/doc/libmbedcrypto16/changelog.gz", "/usr/share/doc/libmbedcrypto16/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmd0@1.1.0-2+b1", "Name": "libmd0", "Identifier": { "PURL": "pkg:deb/debian/libmd0@1.1.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "6f55e5e0a3458581" }, "Version": "1.1.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libmd", "SrcVersion": "1.1.0", "SrcRelease": "2", "Licenses": [ "BSD-3-Clause", "BSD-3-clause-Aaron-D-Gifford", "BSD-2-Clause", "BSD-2-Clause-NetBSD", "ISC", "Beerware", "public-domain-md4", "public-domain-md5", "public-domain-sha1" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmd.so.0.1.0", "/usr/share/doc/libmd0/changelog.Debian.amd64.gz", "/usr/share/doc/libmd0/changelog.Debian.gz", "/usr/share/doc/libmd0/changelog.gz", "/usr/share/doc/libmd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmount1@2.41.5-0+deb13u1", "Name": "libmount1", "Identifier": { "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d0bfdcf72ddff375" }, "Version": "2.41.5", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libblkid1@2.41.5-0+deb13u1", "libc6@2.41-12+deb13u4", "libselinux1@3.8.1-1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmount.so.1.1.0", "/usr/share/doc/libmount1/NEWS.Debian.gz", "/usr/share/doc/libmount1/changelog.Debian.gz", "/usr/share/doc/libmount1/changelog.gz", "/usr/share/doc/libmount1/copyright", "/usr/share/lintian/overrides/libmount1" ], "AnalyzedBy": "dpkg" }, { "ID": "libmp3lame0@3.100-6+b3", "Name": "libmp3lame0", "Identifier": { "PURL": "pkg:deb/debian/libmp3lame0@3.100-6%2Bb3?arch=amd64\u0026distro=debian-13.7", "UID": "d8f49b383029f589" }, "Version": "3.100", "Release": "6+b3", "Arch": "amd64", "SrcName": "lame", "SrcVersion": "3.100", "SrcRelease": "6", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.1-or-later", "zlib-acknowledgement", "BSD-3-Clause", "GPL-1.0-or-later", "GPL-1.0-only", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmp3lame.so.0.0.0", "/usr/share/doc/libmp3lame0/changelog.Debian.amd64.gz", "/usr/share/doc/libmp3lame0/changelog.Debian.gz", "/usr/share/doc/libmp3lame0/changelog.gz", "/usr/share/doc/libmp3lame0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmpg123-0t64@1.32.10-1+deb13u1", "Name": "libmpg123-0t64", "Identifier": { "PURL": "pkg:deb/debian/libmpg123-0t64@1.32.10-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "8e38574e97c6393c" }, "Version": "1.32.10", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "mpg123", "SrcVersion": "1.32.10", "SrcRelease": "1+deb13u1", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmpg123.so.0.48.3", "/usr/share/doc/libmpg123-0t64/changelog.Debian.gz", "/usr/share/doc/libmpg123-0t64/changelog.gz", "/usr/share/doc/libmpg123-0t64/copyright", "/usr/share/lintian/overrides/libmpg123-0t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libmysofa1@1.3.3+dfsg-1", "Name": "libmysofa1", "Identifier": { "PURL": "pkg:deb/debian/libmysofa1@1.3.3%2Bdfsg-1?arch=amd64\u0026distro=debian-13.7", "UID": "4e270242af3622c" }, "Version": "1.3.3+dfsg", "Release": "1", "Arch": "amd64", "SrcName": "libmysofa", "SrcVersion": "1.3.3+dfsg", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause", "public-domain", "listen-ircam", "mit-kemar", "CC-BY-SA-3.0", "CC-BY-4.0", "cipic" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmysofa.so.1.3.3", "/usr/share/doc/libmysofa1/changelog.Debian.gz", "/usr/share/doc/libmysofa1/copyright", "/usr/share/libmysofa/MIT_KEMAR_normal_pinna.sofa" ], "AnalyzedBy": "dpkg" }, { "ID": "libncursesw6@6.5+20250216-2", "Name": "libncursesw6", "Identifier": { "PURL": "pkg:deb/debian/libncursesw6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7", "UID": "7121209a6392dd9e" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libtinfo6@6.5+20250216-2" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libformw.so.6.5", "/usr/lib/x86_64-linux-gnu/libmenuw.so.6.5", "/usr/lib/x86_64-linux-gnu/libncursesw.so.6.5", "/usr/lib/x86_64-linux-gnu/libpanelw.so.6.5" ], "AnalyzedBy": "dpkg" }, { "ID": "libnettle8t64@3.10.1-1", "Name": "libnettle8t64", "Identifier": { "PURL": "pkg:deb/debian/libnettle8t64@3.10.1-1?arch=amd64\u0026distro=debian-13.7", "UID": "bbd391fef91ccd16" }, "Version": "3.10.1", "Release": "1", "Arch": "amd64", "SrcName": "nettle", "SrcVersion": "3.10.1", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-or-later", "GPL-2.0-or-later", "LGPL-2.0-or-later", "LGPL-2.0-only", "MIT", "GPL-3.0-with-autoconf-exception+", "public-domain", "GPL-2.0-only", "GAP" ], "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libnettle.so.8.10", "/usr/share/doc/libnettle8t64/NEWS.gz", "/usr/share/doc/libnettle8t64/README", "/usr/share/doc/libnettle8t64/changelog.Debian.gz", "/usr/share/doc/libnettle8t64/changelog.gz", "/usr/share/doc/libnettle8t64/copyright", "/usr/share/lintian/overrides/libnettle8t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libnorm1t64@1.5.9+dfsg-3.1+b2", "Name": "libnorm1t64", "Identifier": { "PURL": "pkg:deb/debian/libnorm1t64@1.5.9%2Bdfsg-3.1%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "b8f5e66ab7faa9d9" }, "Version": "1.5.9+dfsg", "Release": "3.1+b2", "Arch": "amd64", "SrcName": "norm", "SrcVersion": "1.5.9+dfsg", "SrcRelease": "3.1", "Licenses": [ "NRL-2-clause", "NRL-3-clause", "BSD-2-Clause", "BSD-4-Clause-UC", "BSD-3-Clause" ], "Maintainer": "Luca Boccassi \u003cbluca@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libnorm.so.1", "/usr/share/doc/libnorm1t64/changelog.Debian.amd64.gz", "/usr/share/doc/libnorm1t64/changelog.Debian.gz", "/usr/share/doc/libnorm1t64/copyright", "/usr/share/lintian/overrides/libnorm1t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libnuma1@2.0.19-1", "Name": "libnuma1", "Identifier": { "PURL": "pkg:deb/debian/libnuma1@2.0.19-1?arch=amd64\u0026distro=debian-13.7", "UID": "8971d0e0e8c8ed16" }, "Version": "2.0.19", "Release": "1", "Arch": "amd64", "SrcName": "numactl", "SrcVersion": "2.0.19", "SrcRelease": "1", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later" ], "Maintainer": "Ian Wienand \u003cianw@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libnuma.so.1.0.0", "/usr/share/doc/libnuma1/changelog.Debian.gz", "/usr/share/doc/libnuma1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libogg0@1.3.5-3+b2", "Name": "libogg0", "Identifier": { "PURL": "pkg:deb/debian/libogg0@1.3.5-3%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "7ddf74af58975f4a" }, "Version": "1.3.5", "Release": "3+b2", "Arch": "amd64", "SrcName": "libogg", "SrcVersion": "1.3.5", "SrcRelease": "3", "Licenses": [ "BSD-3-Clause", "rfc3533-license", "rfc5334-license" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libogg.so.0.8.5", "/usr/share/doc/libogg0/changelog.Debian.amd64.gz", "/usr/share/doc/libogg0/changelog.Debian.gz", "/usr/share/doc/libogg0/changelog.gz", "/usr/share/doc/libogg0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libopenal-data@1:1.24.2-1", "Name": "libopenal-data", "Identifier": { "PURL": "pkg:deb/debian/libopenal-data@1.24.2-1?arch=all\u0026distro=debian-13.7\u0026epoch=1", "UID": "bf5d0095512bf5f3" }, "Version": "1.24.2", "Release": "1", "Epoch": 1, "Arch": "all", "SrcName": "openal-soft", "SrcVersion": "1.24.2", "SrcRelease": "1", "SrcEpoch": 1, "Licenses": [ "LGPL-2.0-or-later", "Apache-2.0", "MIT", "GPL-3.0-or-later", "GPL-3.0-only", "BSD-3-Clause", "GPL-2.0-or-later" ], "Maintainer": "Debian Games Team \u003cpkg-games-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/libopenal-data/changelog.Debian.gz", "/usr/share/doc/libopenal-data/changelog.gz", "/usr/share/doc/libopenal-data/copyright", "/usr/share/openal/alsoftrc.sample", "/usr/share/openal/hrtf/Default HRTF.mhr", "/usr/share/openal/presets/3D7.1.ambdec", "/usr/share/openal/presets/hex-quad.ambdec", "/usr/share/openal/presets/hexagon.ambdec", "/usr/share/openal/presets/itu5.1-nocenter.ambdec", "/usr/share/openal/presets/itu5.1.ambdec", "/usr/share/openal/presets/presets.txt", "/usr/share/openal/presets/rectangle.ambdec", "/usr/share/openal/presets/square.ambdec" ], "AnalyzedBy": "dpkg" }, { "ID": "libopenal1@1:1.24.2-1", "Name": "libopenal1", "Identifier": { "PURL": "pkg:deb/debian/libopenal1@1.24.2-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "91c5a5a1ad6b69fb" }, "Version": "1.24.2", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "openal-soft", "SrcVersion": "1.24.2", "SrcRelease": "1", "SrcEpoch": 1, "Licenses": [ "LGPL-2.0-or-later", "Apache-2.0", "MIT", "GPL-3.0-or-later", "GPL-3.0-only", "BSD-3-Clause", "GPL-2.0-or-later" ], "Maintainer": "Debian Games Team \u003cpkg-games-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libopenal-data@1:1.24.2-1", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libopenal.so.1.24.2", "/usr/share/doc/libopenal1/changelog.Debian.gz", "/usr/share/doc/libopenal1/changelog.gz", "/usr/share/doc/libopenal1/copyright", "/usr/share/doc/libopenal1/examples/alsoftrc.sample" ], "AnalyzedBy": "dpkg" }, { "ID": "libopenjp2-7@2.5.3-2.1~deb13u2", "Name": "libopenjp2-7", "Identifier": { "PURL": "pkg:deb/debian/libopenjp2-7@2.5.3-2.1~deb13u2?arch=amd64\u0026distro=debian-13.7", "UID": "c1211f53c8891026" }, "Version": "2.5.3", "Release": "2.1~deb13u2", "Arch": "amd64", "SrcName": "openjpeg2", "SrcVersion": "2.5.3", "SrcRelease": "2.1~deb13u2", "Licenses": [ "BSD-2-Clause", "MIT", "BSD-3-Clause", "Libpng", "Zlib", "libtiff", "LIBTIFF-PIXAR", "LIBTIFF-GLARSON" ], "Maintainer": "Debian PhotoTools Maintainers \u003cpkg-phototools-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libopenjp2.so.2.5.3", "/usr/share/doc/libopenjp2-7/changelog.Debian.gz", "/usr/share/doc/libopenjp2-7/changelog.gz", "/usr/share/doc/libopenjp2-7/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libopenmpt0t64@0.7.13-1+b1", "Name": "libopenmpt0t64", "Identifier": { "PURL": "pkg:deb/debian/libopenmpt0t64@0.7.13-1%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "eca7f63bd646ee62" }, "Version": "0.7.13", "Release": "1+b1", "Arch": "amd64", "SrcName": "libopenmpt", "SrcVersion": "0.7.13", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-with-autoconf-exception+", "GPL-3.0-with-autoconf-exception+", "X11", "GPL-2+ with LibTool exception", "GPL-3+ with Autoconf Macros exception", "GNU-All-Permissive-License", "GNU-All-Permissive-License-FSF", "BSL-1.0", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libmpg123-0t64@1.32.10-1+deb13u1", "libstdc++6@14.2.0-19", "libvorbis0a@1.3.7-3", "libvorbisfile3@1.3.7-3", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libopenmpt.so.0.4.4", "/usr/share/doc/libopenmpt0t64/changelog.Debian.amd64.gz", "/usr/share/doc/libopenmpt0t64/changelog.Debian.gz", "/usr/share/doc/libopenmpt0t64/changelog.gz", "/usr/share/doc/libopenmpt0t64/copyright", "/usr/share/lintian/overrides/libopenmpt0t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libopus0@1.5.2-2", "Name": "libopus0", "Identifier": { "PURL": "pkg:deb/debian/libopus0@1.5.2-2?arch=amd64\u0026distro=debian-13.7", "UID": "e9ecacfd94a563d4" }, "Version": "1.5.2", "Release": "2", "Arch": "amd64", "SrcName": "opus", "SrcVersion": "1.5.2", "SrcRelease": "2", "Licenses": [ "BSD-3-Clause", "BSD-2-Clause" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libopus.so.0.10.1", "/usr/share/doc/libopus0/changelog.Debian.gz", "/usr/share/doc/libopus0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libp11-kit0@0.25.5-3", "Name": "libp11-kit0", "Identifier": { "PURL": "pkg:deb/debian/libp11-kit0@0.25.5-3?arch=amd64\u0026distro=debian-13.7", "UID": "48af87e486c97e99" }, "Version": "0.25.5", "Release": "3", "Arch": "amd64", "SrcName": "p11-kit", "SrcVersion": "0.25.5", "SrcRelease": "3", "Licenses": [ "BSD-3-Clause", "FSFULLR", "GPL-2+ with Autoconf-data exception", "GPL-3+ with Autoconf-data exception", "X11", "ISC", "customFSFULLRWD", "LGPL-2.1-or-later", "Apache-2.0", "customFSFUL", "FSFAP", "LGPL-2.1-only" ], "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libffi8@3.4.8-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.4.1", "/usr/share/doc/libp11-kit0/changelog.Debian.gz", "/usr/share/doc/libp11-kit0/changelog.gz", "/usr/share/doc/libp11-kit0/copyright", "/usr/share/doc/libp11-kit0/examples/pkcs11.conf.example" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-modules@1.7.0-5", "Name": "libpam-modules", "Identifier": { "PURL": "pkg:deb/debian/libpam-modules@1.7.0-5?arch=amd64\u0026distro=debian-13.7", "UID": "274a704398461ef0" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/security/pam_access.so", "/usr/lib/x86_64-linux-gnu/security/pam_canonicalize_user.so", "/usr/lib/x86_64-linux-gnu/security/pam_debug.so", "/usr/lib/x86_64-linux-gnu/security/pam_deny.so", "/usr/lib/x86_64-linux-gnu/security/pam_echo.so", "/usr/lib/x86_64-linux-gnu/security/pam_env.so", "/usr/lib/x86_64-linux-gnu/security/pam_exec.so", "/usr/lib/x86_64-linux-gnu/security/pam_faildelay.so", "/usr/lib/x86_64-linux-gnu/security/pam_faillock.so", "/usr/lib/x86_64-linux-gnu/security/pam_filter.so", "/usr/lib/x86_64-linux-gnu/security/pam_ftp.so", "/usr/lib/x86_64-linux-gnu/security/pam_group.so", "/usr/lib/x86_64-linux-gnu/security/pam_issue.so", "/usr/lib/x86_64-linux-gnu/security/pam_keyinit.so", "/usr/lib/x86_64-linux-gnu/security/pam_limits.so", "/usr/lib/x86_64-linux-gnu/security/pam_listfile.so", "/usr/lib/x86_64-linux-gnu/security/pam_localuser.so", "/usr/lib/x86_64-linux-gnu/security/pam_loginuid.so", "/usr/lib/x86_64-linux-gnu/security/pam_mail.so", "/usr/lib/x86_64-linux-gnu/security/pam_mkhomedir.so", "/usr/lib/x86_64-linux-gnu/security/pam_motd.so", "/usr/lib/x86_64-linux-gnu/security/pam_namespace.so", "/usr/lib/x86_64-linux-gnu/security/pam_nologin.so", "/usr/lib/x86_64-linux-gnu/security/pam_permit.so", "/usr/lib/x86_64-linux-gnu/security/pam_pwhistory.so", "/usr/lib/x86_64-linux-gnu/security/pam_rhosts.so", "/usr/lib/x86_64-linux-gnu/security/pam_rootok.so", "/usr/lib/x86_64-linux-gnu/security/pam_securetty.so", "/usr/lib/x86_64-linux-gnu/security/pam_selinux.so", "/usr/lib/x86_64-linux-gnu/security/pam_sepermit.so", "/usr/lib/x86_64-linux-gnu/security/pam_setquota.so", "/usr/lib/x86_64-linux-gnu/security/pam_shells.so", "/usr/lib/x86_64-linux-gnu/security/pam_stress.so", "/usr/lib/x86_64-linux-gnu/security/pam_succeed_if.so", "/usr/lib/x86_64-linux-gnu/security/pam_time.so", "/usr/lib/x86_64-linux-gnu/security/pam_timestamp.so", "/usr/lib/x86_64-linux-gnu/security/pam_tty_audit.so", "/usr/lib/x86_64-linux-gnu/security/pam_umask.so", "/usr/lib/x86_64-linux-gnu/security/pam_unix.so", "/usr/lib/x86_64-linux-gnu/security/pam_userdb.so", "/usr/lib/x86_64-linux-gnu/security/pam_usertype.so", "/usr/lib/x86_64-linux-gnu/security/pam_warn.so", "/usr/lib/x86_64-linux-gnu/security/pam_wheel.so", "/usr/lib/x86_64-linux-gnu/security/pam_xauth.so", "/usr/share/doc/libpam-modules/NEWS.Debian.gz", "/usr/share/doc/libpam-modules/changelog.Debian.gz", "/usr/share/doc/libpam-modules/changelog.gz", "/usr/share/doc/libpam-modules/copyright", "/usr/share/doc/libpam-modules/examples/upperLOWER.c", "/usr/share/lintian/overrides/libpam-modules", "/usr/share/pam-configs/mkhomedir" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-modules-bin@1.7.0-5", "Name": "libpam-modules-bin", "Identifier": { "PURL": "pkg:deb/debian/libpam-modules-bin@1.7.0-5?arch=amd64\u0026distro=debian-13.7", "UID": "dbbd2b9769d4b438" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+deb13u1", "libc6@2.41-12+deb13u4", "libcrypt1@1:4.4.38-1", "libpam0g@1.7.0-5", "libselinux1@3.8.1-1", "libsystemd0@257.13-1~deb13u1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/systemd/system/pam_namespace.service", "/usr/sbin/faillock", "/usr/sbin/mkhomedir_helper", "/usr/sbin/pam_namespace_helper", "/usr/sbin/pam_timestamp_check", "/usr/sbin/pwhistory_helper", "/usr/sbin/unix_chkpwd", "/usr/sbin/unix_update", "/usr/share/doc/libpam-modules-bin/changelog.Debian.gz", "/usr/share/doc/libpam-modules-bin/changelog.gz", "/usr/share/doc/libpam-modules-bin/copyright", "/usr/share/lintian/overrides/libpam-modules-bin" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-runtime@1.7.0-5", "Name": "libpam-runtime", "Identifier": { "PURL": "pkg:deb/debian/libpam-runtime@1.7.0-5?arch=all\u0026distro=debian-13.7", "UID": "1d4f3eaf1c0f9548" }, "Version": "1.7.0", "Release": "5", "Arch": "all", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "libpam-modules@1.7.0-5" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/sbin/pam-auth-update", "/usr/sbin/pam_getenv", "/usr/share/doc/libpam-runtime/changelog.Debian.gz", "/usr/share/doc/libpam-runtime/changelog.gz", "/usr/share/doc/libpam-runtime/copyright", "/usr/share/lintian/overrides/libpam-runtime", "/usr/share/locale/af/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/am/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ar/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/as/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/az/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/be/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bg/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bn_IN/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bs/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ca/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/cs/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/cy/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/da/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/de/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/de_CH/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/el/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/eo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/es/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/et/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/eu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fa/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ga/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/gl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/gu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/he/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ia/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/id/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/is/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/it/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ja/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ka/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/km/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ko/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kw_GB/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ky/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/lt/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/lv/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ml/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ms/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/my/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ne/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/or/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pa/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pt/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ro/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ru/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/si/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sq/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sv/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ta/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/te/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tg/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/th/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/uk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/vi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/yo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_HK/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/man/man5/access.conf.5.gz", "/usr/share/man/man5/faillock.conf.5.gz", "/usr/share/man/man5/group.conf.5.gz", "/usr/share/man/man5/limits.conf.5.gz", "/usr/share/man/man5/namespace.conf.5.gz", "/usr/share/man/man5/pam.conf.5.gz", "/usr/share/man/man5/pam_env.conf.5.gz", "/usr/share/man/man5/pwhistory.conf.5.gz", "/usr/share/man/man5/sepermit.conf.5.gz", "/usr/share/man/man5/time.conf.5.gz", "/usr/share/man/man7/PAM.7.gz", "/usr/share/man/man8/faillock.8.gz", "/usr/share/man/man8/mkhomedir_helper.8.gz", "/usr/share/man/man8/pam-auth-update.8.gz", "/usr/share/man/man8/pam_access.8.gz", "/usr/share/man/man8/pam_canonicalize_user.8.gz", "/usr/share/man/man8/pam_debug.8.gz", "/usr/share/man/man8/pam_deny.8.gz", "/usr/share/man/man8/pam_echo.8.gz", "/usr/share/man/man8/pam_env.8.gz", "/usr/share/man/man8/pam_exec.8.gz", "/usr/share/man/man8/pam_faildelay.8.gz", "/usr/share/man/man8/pam_faillock.8.gz", "/usr/share/man/man8/pam_filter.8.gz", "/usr/share/man/man8/pam_ftp.8.gz", "/usr/share/man/man8/pam_getenv.8.gz", "/usr/share/man/man8/pam_group.8.gz", "/usr/share/man/man8/pam_issue.8.gz", "/usr/share/man/man8/pam_keyinit.8.gz", "/usr/share/man/man8/pam_limits.8.gz", "/usr/share/man/man8/pam_listfile.8.gz", "/usr/share/man/man8/pam_localuser.8.gz", "/usr/share/man/man8/pam_loginuid.8.gz", "/usr/share/man/man8/pam_mail.8.gz", "/usr/share/man/man8/pam_mkhomedir.8.gz", "/usr/share/man/man8/pam_motd.8.gz", "/usr/share/man/man8/pam_namespace.8.gz", "/usr/share/man/man8/pam_namespace_helper.8.gz", "/usr/share/man/man8/pam_nologin.8.gz", "/usr/share/man/man8/pam_permit.8.gz", "/usr/share/man/man8/pam_pwhistory.8.gz", "/usr/share/man/man8/pam_rhosts.8.gz", "/usr/share/man/man8/pam_rootok.8.gz", "/usr/share/man/man8/pam_securetty.8.gz", "/usr/share/man/man8/pam_selinux.8.gz", "/usr/share/man/man8/pam_sepermit.8.gz", "/usr/share/man/man8/pam_setquota.8.gz", "/usr/share/man/man8/pam_shells.8.gz", "/usr/share/man/man8/pam_stress.8.gz", "/usr/share/man/man8/pam_succeed_if.8.gz", "/usr/share/man/man8/pam_time.8.gz", "/usr/share/man/man8/pam_timestamp.8.gz", "/usr/share/man/man8/pam_timestamp_check.8.gz", "/usr/share/man/man8/pam_tty_audit.8.gz", "/usr/share/man/man8/pam_umask.8.gz", "/usr/share/man/man8/pam_unix.8.gz", "/usr/share/man/man8/pam_userdb.8.gz", "/usr/share/man/man8/pam_usertype.8.gz", "/usr/share/man/man8/pam_warn.8.gz", "/usr/share/man/man8/pam_wheel.8.gz", "/usr/share/man/man8/pam_xauth.8.gz", "/usr/share/man/man8/pwhistory_helper.8.gz", "/usr/share/man/man8/unix_chkpwd.8.gz", "/usr/share/man/man8/unix_update.8.gz", "/usr/share/pam-configs/unix", "/usr/share/pam/common-account", "/usr/share/pam/common-account.md5sums", "/usr/share/pam/common-auth", "/usr/share/pam/common-auth.md5sums", "/usr/share/pam/common-password", "/usr/share/pam/common-password.md5sums", "/usr/share/pam/common-session", "/usr/share/pam/common-session-noninteractive", "/usr/share/pam/common-session-noninteractive.md5sums", "/usr/share/pam/common-session.md5sums" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam0g@1.7.0-5", "Name": "libpam0g", "Identifier": { "PURL": "pkg:deb/debian/libpam0g@1.7.0-5?arch=amd64\u0026distro=debian-13.7", "UID": "ea209b4d4ec86f20" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "libaudit1@1:4.0.2-2+deb13u1", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpam.so.0.85.1", "/usr/lib/x86_64-linux-gnu/libpam_misc.so.0.82.1", "/usr/lib/x86_64-linux-gnu/libpamc.so.0.82.1", "/usr/share/doc/libpam0g/Debian-PAM-MiniPolicy.gz", "/usr/share/doc/libpam0g/README", "/usr/share/doc/libpam0g/README.Debian", "/usr/share/doc/libpam0g/TODO.Debian", "/usr/share/doc/libpam0g/changelog.Debian.gz", "/usr/share/doc/libpam0g/changelog.gz", "/usr/share/doc/libpam0g/copyright", "/usr/share/lintian/overrides/libpam0g" ], "AnalyzedBy": "dpkg" }, { "ID": "libpango-1.0-0@1.56.3-1", "Name": "libpango-1.0-0", "Identifier": { "PURL": "pkg:deb/debian/libpango-1.0-0@1.56.3-1?arch=amd64\u0026distro=debian-13.7", "UID": "598249dd485f5ddb" }, "Version": "1.56.3", "Release": "1", "Arch": "amd64", "SrcName": "pango1.0", "SrcVersion": "1.56.3", "SrcRelease": "1", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.1-or-later", "Example", "TCL", "Unicode", "ICU", "Chromium-BSD-style", "Apache-2.0", "Bitstream-Vera", "OFL-1.1", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "fontconfig@2.15.0-2.3", "libc6@2.41-12+deb13u4", "libfribidi0@1.0.16-1", "libglib2.0-0t64@2.84.4-3~deb13u5", "libharfbuzz0b@10.2.0-1+deb13u1", "libthai0@0.1.29-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpango-1.0.so.0.5600.3", "/usr/share/doc/libpango-1.0-0/NEWS.gz", "/usr/share/doc/libpango-1.0-0/README.md", "/usr/share/doc/libpango-1.0-0/THANKS", "/usr/share/doc/libpango-1.0-0/changelog.Debian.gz", "/usr/share/doc/libpango-1.0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpangocairo-1.0-0@1.56.3-1", "Name": "libpangocairo-1.0-0", "Identifier": { "PURL": "pkg:deb/debian/libpangocairo-1.0-0@1.56.3-1?arch=amd64\u0026distro=debian-13.7", "UID": "f85ea4150941bbb" }, "Version": "1.56.3", "Release": "1", "Arch": "amd64", "SrcName": "pango1.0", "SrcVersion": "1.56.3", "SrcRelease": "1", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.1-or-later", "Example", "TCL", "Unicode", "ICU", "Chromium-BSD-style", "Apache-2.0", "Bitstream-Vera", "OFL-1.1", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcairo2@1.18.4-1+b1", "libfontconfig1@2.15.0-2.3", "libglib2.0-0t64@2.84.4-3~deb13u5", "libharfbuzz0b@10.2.0-1+deb13u1", "libpango-1.0-0@1.56.3-1", "libpangoft2-1.0-0@1.56.3-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpangocairo-1.0.so.0.5600.3", "/usr/share/doc/libpangocairo-1.0-0/changelog.Debian.gz", "/usr/share/doc/libpangocairo-1.0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpangoft2-1.0-0@1.56.3-1", "Name": "libpangoft2-1.0-0", "Identifier": { "PURL": "pkg:deb/debian/libpangoft2-1.0-0@1.56.3-1?arch=amd64\u0026distro=debian-13.7", "UID": "d32c118cb88819de" }, "Version": "1.56.3", "Release": "1", "Arch": "amd64", "SrcName": "pango1.0", "SrcVersion": "1.56.3", "SrcRelease": "1", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.1-or-later", "Example", "TCL", "Unicode", "ICU", "Chromium-BSD-style", "Apache-2.0", "Bitstream-Vera", "OFL-1.1", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libfontconfig1@2.15.0-2.3", "libfreetype6@2.13.3+dfsg-1+deb13u1", "libglib2.0-0t64@2.84.4-3~deb13u5", "libharfbuzz0b@10.2.0-1+deb13u1", "libpango-1.0-0@1.56.3-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpangoft2-1.0.so.0.5600.3", "/usr/share/doc/libpangoft2-1.0-0/changelog.Debian.gz", "/usr/share/doc/libpangoft2-1.0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpciaccess0@0.17-3+b3", "Name": "libpciaccess0", "Identifier": { "PURL": "pkg:deb/debian/libpciaccess0@0.17-3%2Bb3?arch=amd64\u0026distro=debian-13.7", "UID": "8224f86e200644e0" }, "Version": "0.17", "Release": "3+b3", "Arch": "amd64", "SrcName": "libpciaccess", "SrcVersion": "0.17", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpciaccess.so.0.11.1", "/usr/share/doc/libpciaccess0/changelog.Debian.amd64.gz", "/usr/share/doc/libpciaccess0/changelog.Debian.gz", "/usr/share/doc/libpciaccess0/changelog.gz", "/usr/share/doc/libpciaccess0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpcre2-8-0@10.46-1~deb13u3", "Name": "libpcre2-8-0", "Identifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "738ebb122347d802" }, "Version": "10.46", "Release": "1~deb13u3", "Arch": "amd64", "SrcName": "pcre2", "SrcVersion": "10.46", "SrcRelease": "1~deb13u3", "Licenses": [ "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception", "BSD-3-Clause", "X11", "BSD-2-Clause", "public-domain" ], "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.14.0", "/usr/share/doc/libpcre2-8-0/README.Debian", "/usr/share/doc/libpcre2-8-0/changelog.Debian.gz", "/usr/share/doc/libpcre2-8-0/changelog.gz", "/usr/share/doc/libpcre2-8-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpgm-5.3-0t64@5.3.128~dfsg-2.1+b1", "Name": "libpgm-5.3-0t64", "Identifier": { "PURL": "pkg:deb/debian/libpgm-5.3-0t64@5.3.128~dfsg-2.1%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "396696e708250ca5" }, "Version": "5.3.128~dfsg", "Release": "2.1+b1", "Arch": "amd64", "SrcName": "libpgm", "SrcVersion": "5.3.128~dfsg", "SrcRelease": "2.1", "Licenses": [ "LGPL-2.1-only", "LGPL-2.0-or-later", "LGPL-2.0-only", "BSD-3-Clause", "ISC" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpgm-5.3.so.0.0.128", "/usr/share/doc/libpgm-5.3-0t64/changelog.Debian.amd64.gz", "/usr/share/doc/libpgm-5.3-0t64/changelog.Debian.gz", "/usr/share/doc/libpgm-5.3-0t64/copyright", "/usr/share/lintian/overrides/libpgm-5.3-0t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libpixman-1-0@0.44.0-3", "Name": "libpixman-1-0", "Identifier": { "PURL": "pkg:deb/debian/libpixman-1-0@0.44.0-3?arch=amd64\u0026distro=debian-13.7", "UID": "449cf48800a07937" }, "Version": "0.44.0", "Release": "3", "Arch": "amd64", "SrcName": "pixman", "SrcVersion": "0.44.0", "SrcRelease": "3", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpixman-1.so.0.44.0", "/usr/share/doc/libpixman-1-0/changelog.Debian.gz", "/usr/share/doc/libpixman-1-0/copyright", "/usr/share/lintian/overrides/libpixman-1-0" ], "AnalyzedBy": "dpkg" }, { "ID": "libplacebo349@7.349.0-3", "Name": "libplacebo349", "Identifier": { "PURL": "pkg:deb/debian/libplacebo349@7.349.0-3?arch=amd64\u0026distro=debian-13.7", "UID": "79c32424eed540fa" }, "Version": "7.349.0", "Release": "3", "Arch": "amd64", "SrcName": "libplacebo", "SrcVersion": "7.349.0", "SrcRelease": "3", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "MIT", "Zlib", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "liblcms2-2@2.16-2+deb13u2", "libstdc++6@14.2.0-19", "libvulkan1@1.4.309.0-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libplacebo.so.349", "/usr/share/doc/libplacebo349/changelog.Debian.gz", "/usr/share/doc/libplacebo349/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpng16-16t64@1.6.48-1+deb13u6", "Name": "libpng16-16t64", "Identifier": { "PURL": "pkg:deb/debian/libpng16-16t64@1.6.48-1%2Bdeb13u6?arch=amd64\u0026distro=debian-13.7", "UID": "63a7e7029c2858b1" }, "Version": "1.6.48", "Release": "1+deb13u6", "Arch": "amd64", "SrcName": "libpng1.6", "SrcVersion": "1.6.48", "SrcRelease": "1+deb13u6", "Licenses": [ "Libpng", "MIT", "GPL-2.0-or-later", "BSD-like-with-advertising-clause", "libpng OR Apache-2.0 OR BSD-3-clause", "Apache-2.0", "GPL-2.0-only", "BSD-3-Clause" ], "Maintainer": "Maintainers of libpng1.6 packages \u003clibpng1.6@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpng16.so.16.48.0", "/usr/share/doc-base/libpng16-16t64.libpng16", "/usr/share/doc/libpng16-16t64/ANNOUNCE", "/usr/share/doc/libpng16-16t64/README.gz", "/usr/share/doc/libpng16-16t64/TODO", "/usr/share/doc/libpng16-16t64/changelog.Debian.gz", "/usr/share/doc/libpng16-16t64/changelog.gz", "/usr/share/doc/libpng16-16t64/copyright", "/usr/share/doc/libpng16-16t64/libpng-manual.txt.gz", "/usr/share/lintian/overrides/libpng16-16t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libpocketsphinx3@0.8+5prealpha+1-15+b4", "Name": "libpocketsphinx3", "Identifier": { "PURL": "pkg:deb/debian/libpocketsphinx3@0.8%2B5prealpha%2B1-15%2Bb4?arch=amd64\u0026distro=debian-13.7", "UID": "6e0f0c5040b9d4f9" }, "Version": "0.8+5prealpha+1", "Release": "15+b4", "Arch": "amd64", "SrcName": "pocketsphinx", "SrcVersion": "0.8+5prealpha+1", "SrcRelease": "15", "Licenses": [ "BSD-2-Clause", "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Accessibility Team \u003cpkg-a11y-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libsphinxbase3t64@0.8+5prealpha+1-21+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpocketsphinx.so.3.0.0", "/usr/share/doc/libpocketsphinx3/changelog.Debian.amd64.gz", "/usr/share/doc/libpocketsphinx3/changelog.Debian.gz", "/usr/share/doc/libpocketsphinx3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libpostproc58@7:7.1.5-0+deb13u1", "Name": "libpostproc58", "Identifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libavutil59@7:7.1.5-0+deb13u1", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpostproc.so.58.3.100", "/usr/share/doc/libpostproc58/changelog.Debian.gz", "/usr/share/doc/libpostproc58/changelog.gz", "/usr/share/doc/libpostproc58/copyright", "/usr/share/lintian/overrides/libpostproc58" ], "AnalyzedBy": "dpkg" }, { "ID": "libpsl5t64@0.21.2-1.1+b1", "Name": "libpsl5t64", "Identifier": { "PURL": "pkg:deb/debian/libpsl5t64@0.21.2-1.1%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "5bea3b84356e1906" }, "Version": "0.21.2", "Release": "1.1+b1", "Arch": "amd64", "SrcName": "libpsl", "SrcVersion": "0.21.2", "SrcRelease": "1.1", "Licenses": [ "MIT", "gnulib", "Chromium" ], "Maintainer": "Tim Rühsen \u003ctim.ruehsen@gmx.de\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libidn2-0@2.3.8-2", "libunistring5@1.3-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpsl.so.5.3.4", "/usr/share/doc/libpsl5t64/changelog.Debian.amd64.gz", "/usr/share/doc/libpsl5t64/changelog.Debian.gz", "/usr/share/doc/libpsl5t64/changelog.gz", "/usr/share/doc/libpsl5t64/copyright", "/usr/share/lintian/overrides/libpsl5t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libpulse0@17.0+dfsg1-2+b1", "Name": "libpulse0", "Identifier": { "PURL": "pkg:deb/debian/libpulse0@17.0%2Bdfsg1-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "df8cf76ebba8a5ee" }, "Version": "17.0+dfsg1", "Release": "2+b1", "Arch": "amd64", "SrcName": "pulseaudio", "SrcVersion": "17.0+dfsg1", "SrcRelease": "2", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "other", "LGPL-2.0-only", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later" ], "Maintainer": "Pulseaudio maintenance team \u003cpkg-pulseaudio-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libasyncns0@0.8-6+b5", "libc6@2.41-12+deb13u4", "libdbus-1-3@1.16.2-2", "libsndfile1@1.2.2-2+deb13u1", "libsystemd0@257.13-1~deb13u1", "libx11-6@2:1.8.12-1", "libx11-xcb1@2:1.8.12-1", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpulse-simple.so.0.1.1", "/usr/lib/x86_64-linux-gnu/libpulse.so.0.24.3", "/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-17.0.so", "/usr/share/doc/libpulse0/NEWS.gz", "/usr/share/doc/libpulse0/README", "/usr/share/doc/libpulse0/changelog.Debian.amd64.gz", "/usr/share/doc/libpulse0/changelog.Debian.gz", "/usr/share/doc/libpulse0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "librabbitmq4@0.15.0-1+deb13u2", "Name": "librabbitmq4", "Identifier": { "PURL": "pkg:deb/debian/librabbitmq4@0.15.0-1%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7", "UID": "19e6c7683201aef9" }, "Version": "0.15.0", "Release": "1+deb13u2", "Arch": "amd64", "SrcName": "librabbitmq", "SrcVersion": "0.15.0", "SrcRelease": "1+deb13u2", "Licenses": [ "MIT" ], "Maintainer": "Florian Ernst \u003cflorian@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libssl3t64@3.5.7-1~deb13u3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/librabbitmq.so.0.15.0", "/usr/share/doc/librabbitmq4/changelog.Debian.gz", "/usr/share/doc/librabbitmq4/changelog.gz", "/usr/share/doc/librabbitmq4/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "librav1e0.7@0.7.1-9+b2", "Name": "librav1e0.7", "Identifier": { "PURL": "pkg:deb/debian/librav1e0.7@0.7.1-9%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "94b20c5f6829e2b1" }, "Version": "0.7.1", "Release": "9+b2", "Arch": "amd64", "SrcName": "rust-rav1e", "SrcVersion": "0.7.1", "SrcRelease": "9", "Licenses": [ "BSD-2-Clause", "ISC" ], "Maintainer": "Debian Rust Maintainers \u003cpkg-rust-maintainers@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/librav1e.so.0.7.2", "/usr/share/doc/librav1e0.7/changelog.Debian.amd64.gz", "/usr/share/doc/librav1e0.7/changelog.Debian.gz", "/usr/share/doc/librav1e0.7/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libraw1394-11@2.1.2-2+b2", "Name": "libraw1394-11", "Identifier": { "PURL": "pkg:deb/debian/libraw1394-11@2.1.2-2%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "f7c0483d95f8839" }, "Version": "2.1.2", "Release": "2+b2", "Arch": "amd64", "SrcName": "libraw1394", "SrcVersion": "2.1.2", "SrcRelease": "2", "Licenses": [ "LGPL-2.0-or-later", "GPL-2.0-or-later" ], "Maintainer": "Guus Sliepen \u003cguus@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libraw1394.so.11.1.0", "/usr/share/doc/libraw1394-11/changelog.Debian.amd64.gz", "/usr/share/doc/libraw1394-11/changelog.Debian.gz", "/usr/share/doc/libraw1394-11/changelog.gz", "/usr/share/doc/libraw1394-11/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libreadline8t64@8.2-6", "Name": "libreadline8t64", "Identifier": { "PURL": "pkg:deb/debian/libreadline8t64@8.2-6?arch=amd64\u0026distro=debian-13.7", "UID": "55c7596306f21341" }, "Version": "8.2", "Release": "6", "Arch": "amd64", "SrcName": "readline", "SrcVersion": "8.2", "SrcRelease": "6", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-or-later", "ISC-no-attribution" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libtinfo6@6.5+20250216-2", "readline-common@8.2-6" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhistory.so.8.2", "/usr/lib/x86_64-linux-gnu/libreadline.so.8.2", "/usr/share/doc/libreadline8t64/README.Debian", "/usr/share/doc/libreadline8t64/USAGE", "/usr/share/doc/libreadline8t64/changelog.Debian.gz", "/usr/share/doc/libreadline8t64/changelog.gz", "/usr/share/doc/libreadline8t64/copyright", "/usr/share/doc/libreadline8t64/examples/Inputrc", "/usr/share/doc/libreadline8t64/inputrc.arrows" ], "AnalyzedBy": "dpkg" }, { "ID": "librist4@0.2.11+dfsg-1", "Name": "librist4", "Identifier": { "PURL": "pkg:deb/debian/librist4@0.2.11%2Bdfsg-1?arch=amd64\u0026distro=debian-13.7", "UID": "cff694292da13a18" }, "Version": "0.2.11+dfsg", "Release": "1", "Arch": "amd64", "SrcName": "librist", "SrcVersion": "0.2.11+dfsg", "SrcRelease": "1", "Licenses": [ "BSD-2-Clause", "BSD-1-Clause", "public-domain", "ISC" ], "Maintainer": "Florian Ernst \u003cflorian@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcjson1@1.7.18-3.1+deb13u1", "libmbedcrypto16@3.6.6-0.1~deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/librist.so.4.4.0", "/usr/share/doc/librist4/changelog.Debian.gz", "/usr/share/doc/librist4/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "librsvg2-2@2.60.0+dfsg-1+deb13u1", "Name": "librsvg2-2", "Identifier": { "PURL": "pkg:deb/debian/librsvg2-2@2.60.0%2Bdfsg-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "39ed8855f43dea8d" }, "Version": "2.60.0+dfsg", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "librsvg", "SrcVersion": "2.60.0+dfsg", "SrcRelease": "1+deb13u1", "Licenses": [ "LGPL-2.0-or-later", "FSFAP", "BSD-3-Clause", "MIT", "Apache-2.0", "BSD-2-Clause", "0BSD", "BSL-1.0", "Unlicense", "MPL-2.0", "Sun-permissive", "Zlib", "CC-zero-waive-1.0-us", "OFL-1.1", "LGPL-2.0-only" ], "Maintainer": "Debian GNOME Maintainers \u003cpkg-gnome-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcairo-gobject2@1.18.4-1+b1", "libcairo2@1.18.4-1+b1", "libdav1d7@1.5.1-1", "libgcc-s1@14.2.0-19", "libgdk-pixbuf-2.0-0@2.42.12+dfsg-4+deb13u1", "libglib2.0-0t64@2.84.4-3~deb13u5", "libpango-1.0-0@1.56.3-1", "libpangocairo-1.0-0@1.56.3-1", "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/librsvg-2.so.2.60.0", "/usr/share/doc/librsvg2-2/AUTHORS", "/usr/share/doc/librsvg2-2/NEWS.gz", "/usr/share/doc/librsvg2-2/README.md.gz", "/usr/share/doc/librsvg2-2/changelog.Debian.gz", "/usr/share/doc/librsvg2-2/copyright", "/usr/share/lintian/overrides/librsvg2-2" ], "AnalyzedBy": "dpkg" }, { "ID": "librubberband2@3.3.0+dfsg-2+b3", "Name": "librubberband2", "Identifier": { "PURL": "pkg:deb/debian/librubberband2@3.3.0%2Bdfsg-2%2Bb3?arch=amd64\u0026distro=debian-13.7", "UID": "938a37d4ee789518" }, "Version": "3.3.0+dfsg", "Release": "2+b3", "Arch": "amd64", "SrcName": "rubberband", "SrcVersion": "3.3.0+dfsg", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "MIT", "BSD-3-Clause", "Zlib", "other-1", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libfftw3-double3@3.3.10-2+b1", "libgcc-s1@14.2.0-19", "libsamplerate0@0.2.2-4+b2", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/librubberband.so.2.3.0", "/usr/share/doc/librubberband2/changelog.Debian.amd64.gz", "/usr/share/doc/librubberband2/changelog.Debian.gz", "/usr/share/doc/librubberband2/changelog.gz", "/usr/share/doc/librubberband2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsamplerate0@0.2.2-4+b2", "Name": "libsamplerate0", "Identifier": { "PURL": "pkg:deb/debian/libsamplerate0@0.2.2-4%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "4a868a5de6dfc3f4" }, "Version": "0.2.2", "Release": "4+b2", "Arch": "amd64", "SrcName": "libsamplerate", "SrcVersion": "0.2.2", "SrcRelease": "4", "Licenses": [ "BSD-2-Clause", "GPL-2.0-or-later", "FSFAP", "GPL-3.0-or-later", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsamplerate.so.0.2.2", "/usr/share/doc/libsamplerate0/changelog.Debian.amd64.gz", "/usr/share/doc/libsamplerate0/changelog.Debian.gz", "/usr/share/doc/libsamplerate0/changelog.gz", "/usr/share/doc/libsamplerate0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsdl2-2.0-0@2.32.4+dfsg-1", "Name": "libsdl2-2.0-0", "Identifier": { "PURL": "pkg:deb/debian/libsdl2-2.0-0@2.32.4%2Bdfsg-1?arch=amd64\u0026distro=debian-13.7", "UID": "1628253c08e35682" }, "Version": "2.32.4+dfsg", "Release": "1", "Arch": "amd64", "SrcName": "libsdl2", "SrcVersion": "2.32.4+dfsg", "SrcRelease": "1", "Licenses": [ "zlib-acknowledgement", "zlib-libpng-like-permissive", "Expat-like", "Apache-2.0", "SGI-Free-Software-License-B", "BSD-3-Clause", "GPL-3.0-only", "hidapi-orig", "SunPro", "PublicDomain_Sam_Lantinga", "PublicDomain_David_Ludwig", "BrownUn_UnCalifornia_ErikCorry", "Gareth_McCaughan", "RSA_Data_Security", "Mozilla-permissive", "MIT", "LGPL-2.1-or-later", "PublicDomain_Edgar_Simo", "BSD-3-clause-chromium", "MIT-open-group", "BSD-3-clause-kitware", "LGPL-2.1-only" ], "Maintainer": "Debian SDL packages maintainers \u003cpkg-sdl-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libasound2t64@1.2.14-1+deb13u1", "libc6@2.41-12+deb13u4", "libdecor-0-0@0.2.2-2", "libdrm2@2.4.124-2", "libgbm1@25.0.7-2+deb13u1", "libpulse0@17.0+dfsg1-2+b1", "libsamplerate0@0.2.2-4+b2", "libwayland-client0@1.23.1-3", "libwayland-cursor0@1.23.1-3", "libwayland-egl1@1.23.1-3", "libx11-6@2:1.8.12-1", "libxcursor1@1:1.2.3-1", "libxext6@2:1.3.4-1+b3", "libxfixes3@1:6.0.0-2+b4", "libxi6@2:1.8.2-1", "libxkbcommon0@1.7.0-2", "libxrandr2@2:1.5.4-1+b3", "libxss1@1:1.2.3-1+b3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libSDL2-2.0.so.0.3200.4", "/usr/share/doc/libsdl2-2.0-0/BUGS.txt", "/usr/share/doc/libsdl2-2.0-0/CREDITS.txt", "/usr/share/doc/libsdl2-2.0-0/README-SDL.txt", "/usr/share/doc/libsdl2-2.0-0/README.md", "/usr/share/doc/libsdl2-2.0-0/changelog.Debian.gz", "/usr/share/doc/libsdl2-2.0-0/changelog.gz", "/usr/share/doc/libsdl2-2.0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libseccomp2@2.6.0-2", "Name": "libseccomp2", "Identifier": { "PURL": "pkg:deb/debian/libseccomp2@2.6.0-2?arch=amd64\u0026distro=debian-13.7", "UID": "2af8140f63038666" }, "Version": "2.6.0", "Release": "2", "Arch": "amd64", "SrcName": "libseccomp", "SrcVersion": "2.6.0", "SrcRelease": "2", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Kees Cook \u003ckees@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libseccomp.so.2.6.0", "/usr/share/doc/libseccomp2/changelog.Debian.gz", "/usr/share/doc/libseccomp2/changelog.gz", "/usr/share/doc/libseccomp2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libselinux1@3.8.1-1", "Name": "libselinux1", "Identifier": { "PURL": "pkg:deb/debian/libselinux1@3.8.1-1?arch=amd64\u0026distro=debian-13.7", "UID": "1d32a3f53846138a" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libselinux", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "public-domain", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libpcre2-8-0@10.46-1~deb13u3" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/tmpfiles.d/libselinux1.conf", "/usr/lib/x86_64-linux-gnu/libselinux.so.1", "/usr/share/doc/libselinux1/changelog.Debian.gz", "/usr/share/doc/libselinux1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsemanage-common@3.8.1-1", "Name": "libsemanage-common", "Identifier": { "PURL": "pkg:deb/debian/libsemanage-common@3.8.1-1?arch=all\u0026distro=debian-13.7", "UID": "ecc6b54d8bc6318c" }, "Version": "3.8.1", "Release": "1", "Arch": "all", "SrcName": "libsemanage", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/share/doc/libsemanage-common/changelog.Debian.gz", "/usr/share/doc/libsemanage-common/copyright", "/usr/share/man/man5/semanage.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libsemanage2@3.8.1-1", "Name": "libsemanage2", "Identifier": { "PURL": "pkg:deb/debian/libsemanage2@3.8.1-1?arch=amd64\u0026distro=debian-13.7", "UID": "9b85e9240d41ffa5" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libsemanage", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+deb13u1", "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u4", "libselinux1@3.8.1-1", "libsemanage-common@3.8.1-1", "libsepol2@3.8.1-1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsemanage.so.2", "/usr/share/doc/libsemanage2/changelog.Debian.gz", "/usr/share/doc/libsemanage2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsensors-config@1:3.6.2-2", "Name": "libsensors-config", "Identifier": { "PURL": "pkg:deb/debian/libsensors-config@3.6.2-2?arch=all\u0026distro=debian-13.7\u0026epoch=1", "UID": "404c6b57e32e0309" }, "Version": "3.6.2", "Release": "2", "Epoch": 1, "Arch": "all", "SrcName": "lm-sensors", "SrcVersion": "3.6.2", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-2.0-only", "Linux-man-pages-copyleft", "LGPL-2.1-only" ], "Maintainer": "Aurelien Jarno \u003caurel32@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/libsensors-config/changelog.Debian.gz", "/usr/share/doc/libsensors-config/changelog.gz", "/usr/share/doc/libsensors-config/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsensors5@1:3.6.2-2", "Name": "libsensors5", "Identifier": { "PURL": "pkg:deb/debian/libsensors5@3.6.2-2?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "b8fd69444017db54" }, "Version": "3.6.2", "Release": "2", "Epoch": 1, "Arch": "amd64", "SrcName": "lm-sensors", "SrcVersion": "3.6.2", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-2.0-only", "Linux-man-pages-copyleft", "LGPL-2.1-only" ], "Maintainer": "Aurelien Jarno \u003caurel32@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libsensors-config@1:3.6.2-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsensors.so.5.0.0", "/usr/share/doc/libsensors5/README.Debian", "/usr/share/doc/libsensors5/changelog.Debian.gz", "/usr/share/doc/libsensors5/changelog.gz", "/usr/share/doc/libsensors5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsepol2@3.8.1-1", "Name": "libsepol2", "Identifier": { "PURL": "pkg:deb/debian/libsepol2@3.8.1-1?arch=amd64\u0026distro=debian-13.7", "UID": "ab7918253426cd4" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libsepol", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "Zlib", "GPL-2.0-only", "GPL-2.0-or-later" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsepol.so.2", "/usr/share/doc/libsepol2/changelog.Debian.gz", "/usr/share/doc/libsepol2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libserd-0-0@0.32.4-1", "Name": "libserd-0-0", "Identifier": { "PURL": "pkg:deb/debian/libserd-0-0@0.32.4-1?arch=amd64\u0026distro=debian-13.7", "UID": "eded738e248523c0" }, "Version": "0.32.4", "Release": "1", "Arch": "amd64", "SrcName": "serd", "SrcVersion": "0.32.4", "SrcRelease": "1", "Licenses": [ "ISC", "BSD-3-Clause", "0BSD" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libserd-0.so.0.32.4", "/usr/share/doc/libserd-0-0/changelog.Debian.gz", "/usr/share/doc/libserd-0-0/changelog.gz", "/usr/share/doc/libserd-0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsharpyuv0@1.5.0-0.1", "Name": "libsharpyuv0", "Identifier": { "PURL": "pkg:deb/debian/libsharpyuv0@1.5.0-0.1?arch=amd64\u0026distro=debian-13.7", "UID": "f10e2ad6bd6a202f" }, "Version": "1.5.0", "Release": "0.1", "Arch": "amd64", "SrcName": "libwebp", "SrcVersion": "1.5.0", "SrcRelease": "0.1", "Licenses": [ "BSD-3-Clause", "Apache-2.0" ], "Maintainer": "Jeff Breidenbach \u003cjab@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsharpyuv.so.0.1.1", "/usr/share/doc/libsharpyuv0/changelog.Debian.gz", "/usr/share/doc/libsharpyuv0/changelog.gz", "/usr/share/doc/libsharpyuv0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libshine3@3.1.1-2+b2", "Name": "libshine3", "Identifier": { "PURL": "pkg:deb/debian/libshine3@3.1.1-2%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "2026edcf65f63ce9" }, "Version": "3.1.1", "Release": "2+b2", "Arch": "amd64", "SrcName": "shine", "SrcVersion": "3.1.1", "SrcRelease": "2", "Licenses": [ "LGPL-2.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libshine.so.3.0.1", "/usr/share/doc/libshine3/changelog.Debian.amd64.gz", "/usr/share/doc/libshine3/changelog.Debian.gz", "/usr/share/doc/libshine3/changelog.gz", "/usr/share/doc/libshine3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libslang2@2.3.3-5+b2", "Name": "libslang2", "Identifier": { "PURL": "pkg:deb/debian/libslang2@2.3.3-5%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "10d14bbe7dcd8be8" }, "Version": "2.3.3", "Release": "5+b2", "Arch": "amd64", "SrcName": "slang2", "SrcVersion": "2.3.3", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Alastair McKinstry \u003cmckinstry@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libslang.so.2.3.3", "/usr/share/doc/libslang2/NEWS.gz", "/usr/share/doc/libslang2/README", "/usr/share/doc/libslang2/changelog.Debian.amd64.gz", "/usr/share/doc/libslang2/changelog.Debian.gz", "/usr/share/doc/libslang2/changelog.gz", "/usr/share/doc/libslang2/copyright", "/usr/share/doc/libslang2/slang.txt.gz", "/usr/share/doc/libslang2/slangfun.txt.gz", "/usr/share/lintian/overrides/libslang2" ], "AnalyzedBy": "dpkg" }, { "ID": "libsmartcols1@2.41.5-0+deb13u1", "Name": "libsmartcols1", "Identifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "94502fa5e10395c7" }, "Version": "2.41.5", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsmartcols.so.1.1.0", "/usr/share/doc/libsmartcols1/NEWS.Debian.gz", "/usr/share/doc/libsmartcols1/changelog.Debian.gz", "/usr/share/doc/libsmartcols1/changelog.gz", "/usr/share/doc/libsmartcols1/copyright", "/usr/share/lintian/overrides/libsmartcols1" ], "AnalyzedBy": "dpkg" }, { "ID": "libsnappy1v5@1.2.2-1", "Name": "libsnappy1v5", "Identifier": { "PURL": "pkg:deb/debian/libsnappy1v5@1.2.2-1?arch=amd64\u0026distro=debian-13.7", "UID": "974a5e34dc466511" }, "Version": "1.2.2", "Release": "1", "Arch": "amd64", "SrcName": "snappy", "SrcVersion": "1.2.2", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause", "CC-BY-3.0", "MIT", "CC-BY-4.0", "public-domain" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsnappy.so.1.2.2", "/usr/share/doc/libsnappy1v5/changelog.Debian.gz", "/usr/share/doc/libsnappy1v5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsndfile1@1.2.2-2+deb13u1", "Name": "libsndfile1", "Identifier": { "PURL": "pkg:deb/debian/libsndfile1@1.2.2-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "bdc38513614ea915" }, "Version": "1.2.2", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "libsndfile", "SrcVersion": "1.2.2", "SrcRelease": "2+deb13u1", "Licenses": [ "LGPL-2.1-or-later", "gsm", "Apache-2.0", "sun", "GPL-2.0-or-later", "LGPL-2.0-or-later", "BSD-3-Clause", "BSD-2-Clause", "FSFAP", "GPL-3.0-or-later", "NTP", "LGPL-2.1-only", "LGPL-2.0-only", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libflac14@1.5.0+ds-2", "libmp3lame0@3.100-6+b3", "libmpg123-0t64@1.32.10-1+deb13u1", "libogg0@1.3.5-3+b2", "libopus0@1.5.2-2", "libvorbis0a@1.3.7-3", "libvorbisenc2@1.3.7-3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsndfile.so.1.0.37", "/usr/share/doc/libsndfile1/changelog.Debian.gz", "/usr/share/doc/libsndfile1/changelog.gz", "/usr/share/doc/libsndfile1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsodium23@1.0.18-1+deb13u1", "Name": "libsodium23", "Identifier": { "PURL": "pkg:deb/debian/libsodium23@1.0.18-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "b63dc2522383cf6" }, "Version": "1.0.18", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "libsodium", "SrcVersion": "1.0.18", "SrcRelease": "1+deb13u1", "Licenses": [ "ISC", "BSD-2-Clause", "public-domain", "CC0-1.0", "MIT", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsodium.so.23.3.0", "/usr/share/doc/libsodium23/AUTHORS.gz", "/usr/share/doc/libsodium23/README.markdown", "/usr/share/doc/libsodium23/THANKS", "/usr/share/doc/libsodium23/changelog.Debian.gz", "/usr/share/doc/libsodium23/changelog.gz", "/usr/share/doc/libsodium23/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsord-0-0@0.16.18-1", "Name": "libsord-0-0", "Identifier": { "PURL": "pkg:deb/debian/libsord-0-0@0.16.18-1?arch=amd64\u0026distro=debian-13.7", "UID": "348a527c7f179f4b" }, "Version": "0.16.18", "Release": "1", "Arch": "amd64", "SrcName": "sord", "SrcVersion": "0.16.18", "SrcRelease": "1", "Licenses": [ "ISC" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libserd-0-0@0.32.4-1", "libzix-0-0@0.6.2-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsord-0.so.0.16.18", "/usr/share/doc/libsord-0-0/changelog.Debian.gz", "/usr/share/doc/libsord-0-0/changelog.gz", "/usr/share/doc/libsord-0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsoxr0@0.1.3-4+b2", "Name": "libsoxr0", "Identifier": { "PURL": "pkg:deb/debian/libsoxr0@0.1.3-4%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "f94d15fcd4b1979b" }, "Version": "0.1.3", "Release": "4+b2", "Arch": "amd64", "SrcName": "libsoxr", "SrcVersion": "0.1.3", "SrcRelease": "4", "Licenses": [ "LGPL-2.1-or-later", "Spherepack", "permissive1", "permissive2", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgomp1@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsoxr.so.0.1.2", "/usr/share/doc/libsoxr0/changelog.Debian.amd64.gz", "/usr/share/doc/libsoxr0/changelog.Debian.gz", "/usr/share/doc/libsoxr0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libspeex1@1.2.1-3", "Name": "libspeex1", "Identifier": { "PURL": "pkg:deb/debian/libspeex1@1.2.1-3?arch=amd64\u0026distro=debian-13.7", "UID": "729d59141a102fc4" }, "Version": "1.2.1", "Release": "3", "Arch": "amd64", "SrcName": "speex", "SrcVersion": "1.2.1", "SrcRelease": "3", "Licenses": [ "BSD-3-Clause", "GFDL-1.1-or-later", "custom-1", "LGPL-2.0-or-later", "LGPL-2.0-only", "GFDL-1.2-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libspeex.so.1.5.2", "/usr/share/doc/libspeex1/changelog.Debian.gz", "/usr/share/doc/libspeex1/changelog.gz", "/usr/share/doc/libspeex1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsphinxbase3t64@0.8+5prealpha+1-21+b1", "Name": "libsphinxbase3t64", "Identifier": { "PURL": "pkg:deb/debian/libsphinxbase3t64@0.8%2B5prealpha%2B1-21%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "deae89692f3bc74e" }, "Version": "0.8+5prealpha+1", "Release": "21+b1", "Arch": "amd64", "SrcName": "sphinxbase", "SrcVersion": "0.8+5prealpha+1", "SrcRelease": "21", "Licenses": [ "BSD-2-Clause", "BSD-3-clause-carnegie", "BSD-2-clause-beyond", "u-o-tennesee", "lucent", "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Accessibility Team \u003cpkg-a11y-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libblas3@3.12.1-6", "libc6@2.41-12+deb13u4", "liblapack3@3.12.1-6", "libpulse0@17.0+dfsg1-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsphinxad.so.3.0.0", "/usr/lib/x86_64-linux-gnu/libsphinxbase.so.3.0.0", "/usr/share/doc/libsphinxbase3t64/changelog.Debian.amd64.gz", "/usr/share/doc/libsphinxbase3t64/changelog.Debian.gz", "/usr/share/doc/libsphinxbase3t64/copyright", "/usr/share/lintian/overrides/libsphinxbase3t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libsqlite3-0@3.46.1-7+deb13u2", "Name": "libsqlite3-0", "Identifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7", "UID": "283f5d44571e2d3e" }, "Version": "3.46.1", "Release": "7+deb13u2", "Arch": "amd64", "SrcName": "sqlite3", "SrcVersion": "3.46.1", "SrcRelease": "7+deb13u2", "Licenses": [ "public-domain", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6", "/usr/share/doc/libsqlite3-0/README.Debian", "/usr/share/doc/libsqlite3-0/changelog.Debian.gz", "/usr/share/doc/libsqlite3-0/changelog.gz", "/usr/share/doc/libsqlite3-0/changelog.html.gz", "/usr/share/doc/libsqlite3-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsratom-0-0@0.6.18-1", "Name": "libsratom-0-0", "Identifier": { "PURL": "pkg:deb/debian/libsratom-0-0@0.6.18-1?arch=amd64\u0026distro=debian-13.7", "UID": "a07444c7970dabaf" }, "Version": "0.6.18", "Release": "1", "Arch": "amd64", "SrcName": "sratom", "SrcVersion": "0.6.18", "SrcRelease": "1", "Licenses": [ "ISC", "0BSD" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libserd-0-0@0.32.4-1", "libsord-0-0@0.16.18-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsratom-0.so.0.6.18", "/usr/share/doc/libsratom-0-0/changelog.Debian.gz", "/usr/share/doc/libsratom-0-0/changelog.gz", "/usr/share/doc/libsratom-0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsrt1.5-gnutls@1.5.4-1+deb13u1", "Name": "libsrt1.5-gnutls", "Identifier": { "PURL": "pkg:deb/debian/libsrt1.5-gnutls@1.5.4-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "f4051fb9e25e0d4a" }, "Version": "1.5.4", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "srt", "SrcVersion": "1.5.4", "SrcRelease": "1+deb13u1", "Licenses": [ "MPL-2.0", "BSD-3-Clause", "Zlib", "Unlicense", "LGPL-2.1-or-later", "LGPL-2.1-only" ], "Maintainer": "Florian Ernst \u003cflorian@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libgnutls30t64@3.8.9-3+deb13u4", "libnettle8t64@3.10.1-1", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsrt-gnutls.so.1.5.4", "/usr/share/doc/libsrt1.5-gnutls/changelog.Debian.gz", "/usr/share/doc/libsrt1.5-gnutls/copyright", "/usr/share/lintian/overrides/libsrt1.5-gnutls" ], "AnalyzedBy": "dpkg" }, { "ID": "libssh-4@0.11.5-0+deb13u1", "Name": "libssh-4", "Identifier": { "PURL": "pkg:deb/debian/libssh-4@0.11.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d3f10614a0fac98e" }, "Version": "0.11.5", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "libssh", "SrcVersion": "0.11.5", "SrcRelease": "0+deb13u1", "Licenses": [ "LGPL-2.1+~OpenSSL", "public-domain", "ISC", "LGPL-2.1-only", "BSD-2-Clause", "BSD-3-Clause" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgssapi-krb5-2@1.21.3-5+deb13u1", "libssl3t64@3.5.7-1~deb13u3", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libssh.so.4.10.5", "/usr/share/doc/libssh-4/README.Debian", "/usr/share/doc/libssh-4/changelog.Debian.gz", "/usr/share/doc/libssh-4/changelog.gz", "/usr/share/doc/libssh-4/copyright", "/usr/share/lintian/overrides/libssh-4" ], "AnalyzedBy": "dpkg" }, { "ID": "libssl3t64@3.5.7-1~deb13u3", "Name": "libssl3t64", "Identifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.7-1~deb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "6feadfef6234ca5b" }, "Version": "3.5.7", "Release": "1~deb13u3", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.7", "SrcRelease": "1~deb13u3", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libzstd1@1.5.7+dfsg-1", "openssl-provider-legacy@3.5.7-1~deb13u3", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/engines-3/afalg.so", "/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so", "/usr/lib/x86_64-linux-gnu/engines-3/padlock.so", "/usr/lib/x86_64-linux-gnu/libcrypto.so.3", "/usr/lib/x86_64-linux-gnu/libssl.so.3", "/usr/share/doc/libssl3t64/NEWS.Debian.gz", "/usr/share/doc/libssl3t64/changelog.Debian.gz", "/usr/share/doc/libssl3t64/changelog.gz", "/usr/share/doc/libssl3t64/copyright", "/usr/share/lintian/overrides/libssl3t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libstdc++6@14.2.0-19", "Name": "libstdc++6", "Identifier": { "PURL": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=amd64\u0026distro=debian-13.7", "UID": "13f22117cb429f4d" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33", "/usr/share/gcc/python/libstdcxx/__init__.py", "/usr/share/gcc/python/libstdcxx/v6/__init__.py", "/usr/share/gcc/python/libstdcxx/v6/printers.py", "/usr/share/gcc/python/libstdcxx/v6/xmethods.py", "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33-gdb.py" ], "AnalyzedBy": "dpkg" }, { "ID": "libsvtav1enc2@2.3.0+dfsg-1", "Name": "libsvtav1enc2", "Identifier": { "PURL": "pkg:deb/debian/libsvtav1enc2@2.3.0%2Bdfsg-1?arch=amd64\u0026distro=debian-13.7", "UID": "20b91eee50a81757" }, "Version": "2.3.0+dfsg", "Release": "1", "Arch": "amd64", "SrcName": "svt-av1", "SrcVersion": "2.3.0+dfsg", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause-Clear", "LGPL-2.1-or-later", "BSD-2-Clause", "ISC", "MIT", "BSD-3-Clause", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libSvtAv1Enc.so.2.3.0", "/usr/share/doc/libsvtav1enc2/changelog.Debian.gz", "/usr/share/doc/libsvtav1enc2/changelog.gz", "/usr/share/doc/libsvtav1enc2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libswresample5@7:7.1.5-0+deb13u1", "Name": "libswresample5", "Identifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libavutil59@7:7.1.5-0+deb13u1", "libc6@2.41-12+deb13u4", "libsoxr0@0.1.3-4+b2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libswresample.so.5.3.100", "/usr/share/doc/libswresample5/changelog.Debian.gz", "/usr/share/doc/libswresample5/changelog.gz", "/usr/share/doc/libswresample5/copyright", "/usr/share/lintian/overrides/libswresample5" ], "AnalyzedBy": "dpkg" }, { "ID": "libswscale8@7:7.1.5-0+deb13u1", "Name": "libswscale8", "Identifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "Version": "7.1.5", "Release": "0+deb13u1", "Epoch": 7, "Arch": "amd64", "SrcName": "ffmpeg", "SrcVersion": "7.1.5", "SrcRelease": "0+deb13u1", "SrcEpoch": 7, "Licenses": [ "LGPL-2.1-or-later", "Sundry", "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "GPL-3.0-only", "MIT", "BSD-3-Clause", "public-domain", "ISC", "IJG", "BSD-2-Clause", "Zlib", "BSD-1-Clause", "LGPL-2.0-or-later", "BSL-1.0", "man-page", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libavutil59@7:7.1.5-0+deb13u1", "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libswscale.so.8.3.100", "/usr/share/doc/libswscale8/changelog.Debian.gz", "/usr/share/doc/libswscale8/changelog.gz", "/usr/share/doc/libswscale8/copyright", "/usr/share/lintian/overrides/libswscale8" ], "AnalyzedBy": "dpkg" }, { "ID": "libsystemd0@257.13-1~deb13u1", "Name": "libsystemd0", "Identifier": { "PURL": "pkg:deb/debian/libsystemd0@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "b0cd86eb50280666" }, "Version": "257.13", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "systemd", "SrcVersion": "257.13", "SrcRelease": "1~deb13u1", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "GPL-2 with Linux-syscall-note exception", "MIT", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcap2@1:2.75-10+deb13u1+b3" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsystemd.so.0.40.0", "/usr/share/doc/libsystemd0/NEWS.Debian.gz", "/usr/share/doc/libsystemd0/changelog.Debian.gz", "/usr/share/doc/libsystemd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtasn1-6@4.20.0-2+deb13u1", "Name": "libtasn1-6", "Identifier": { "PURL": "pkg:deb/debian/libtasn1-6@4.20.0-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "777d515fd2eb4a3" }, "Version": "4.20.0", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "libtasn1-6", "SrcVersion": "4.20.0", "SrcRelease": "2+deb13u1", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.1-only", "GPL-3.0-only", "GFDL-1.3-only" ], "Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtasn1.so.6.6.4", "/usr/share/doc/libtasn1-6/AUTHORS", "/usr/share/doc/libtasn1-6/README.md", "/usr/share/doc/libtasn1-6/THANKS", "/usr/share/doc/libtasn1-6/changelog.Debian.gz", "/usr/share/doc/libtasn1-6/changelog.gz", "/usr/share/doc/libtasn1-6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libthai-data@0.1.29-2", "Name": "libthai-data", "Identifier": { "PURL": "pkg:deb/debian/libthai-data@0.1.29-2?arch=all\u0026distro=debian-13.7", "UID": "d36b032d8ddab6b2" }, "Version": "0.1.29", "Release": "2", "Arch": "all", "SrcName": "libthai", "SrcVersion": "0.1.29", "SrcRelease": "2", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Theppitak Karoonboonyanan \u003cthep@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/libthai-data/changelog.Debian.gz", "/usr/share/doc/libthai-data/changelog.gz", "/usr/share/doc/libthai-data/copyright", "/usr/share/libthai/thbrk.tri" ], "AnalyzedBy": "dpkg" }, { "ID": "libthai0@0.1.29-2+b1", "Name": "libthai0", "Identifier": { "PURL": "pkg:deb/debian/libthai0@0.1.29-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "5042a1d2ca30850b" }, "Version": "0.1.29", "Release": "2+b1", "Arch": "amd64", "SrcName": "libthai", "SrcVersion": "0.1.29", "SrcRelease": "2", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Theppitak Karoonboonyanan \u003cthep@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdatrie1@0.2.13-3+b1", "libthai-data@0.1.29-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libthai.so.0.3.1", "/usr/share/doc/libthai0/changelog.Debian.amd64.gz", "/usr/share/doc/libthai0/changelog.Debian.gz", "/usr/share/doc/libthai0/changelog.gz", "/usr/share/doc/libthai0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtheoradec1@1.2.0~alpha1+dfsg-6", "Name": "libtheoradec1", "Identifier": { "PURL": "pkg:deb/debian/libtheoradec1@1.2.0~alpha1%2Bdfsg-6?arch=amd64\u0026distro=debian-13.7", "UID": "2d52aad6aba99a34" }, "Version": "1.2.0~alpha1+dfsg", "Release": "6", "Arch": "amd64", "SrcName": "libtheora", "SrcVersion": "1.2.0~alpha1+dfsg", "SrcRelease": "6", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.0-only", "BSD-4-Clause" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcairo2@1.18.4-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtheoradec.so.1.1.5", "/usr/share/doc/libtheoradec1/changelog.Debian.gz", "/usr/share/doc/libtheoradec1/changelog.gz", "/usr/share/doc/libtheoradec1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtheoraenc1@1.2.0~alpha1+dfsg-6", "Name": "libtheoraenc1", "Identifier": { "PURL": "pkg:deb/debian/libtheoraenc1@1.2.0~alpha1%2Bdfsg-6?arch=amd64\u0026distro=debian-13.7", "UID": "6c80f5d34bde098d" }, "Version": "1.2.0~alpha1+dfsg", "Release": "6", "Arch": "amd64", "SrcName": "libtheora", "SrcVersion": "1.2.0~alpha1+dfsg", "SrcRelease": "6", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.0-only", "BSD-4-Clause" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libogg0@1.3.5-3+b2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtheoraenc.so.1.2.0", "/usr/share/doc/libtheoraenc1/changelog.Debian.gz", "/usr/share/doc/libtheoraenc1/changelog.gz", "/usr/share/doc/libtheoraenc1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtiff6@4.7.0-3+deb13u3", "Name": "libtiff6", "Identifier": { "PURL": "pkg:deb/debian/libtiff6@4.7.0-3%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "d3a7756a38ddf11c" }, "Version": "4.7.0", "Release": "3+deb13u3", "Arch": "amd64", "SrcName": "tiff", "SrcVersion": "4.7.0", "SrcRelease": "3+deb13u3", "Licenses": [ "Hylafax" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdeflate0@1.23-2", "libjbig0@2.1-6.1+b2", "libjpeg62-turbo@1:2.1.5-4", "liblerc4@4.0.0+ds-5", "liblzma5@5.8.1-1+deb13u2", "libwebp7@1.5.0-0.1", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtiff.so.6.1.0", "/usr/share/doc/libtiff6/changelog.Debian.gz", "/usr/share/doc/libtiff6/changelog.gz", "/usr/share/doc/libtiff6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtinfo6@6.5+20250216-2", "Name": "libtinfo6", "Identifier": { "PURL": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7", "UID": "c19e4ba0186ba329" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtic.so.6.5", "/usr/lib/x86_64-linux-gnu/libtinfo.so.6.5", "/usr/share/doc/libtinfo6/changelog.Debian.gz", "/usr/share/doc/libtinfo6/changelog.gz", "/usr/share/doc/libtinfo6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtwolame0@0.4.0-2+b2", "Name": "libtwolame0", "Identifier": { "PURL": "pkg:deb/debian/libtwolame0@0.4.0-2%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "9c7329e2065b7763" }, "Version": "0.4.0", "Release": "2+b2", "Arch": "amd64", "SrcName": "twolame", "SrcVersion": "0.4.0", "SrcRelease": "2", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtwolame.so.0.0.0", "/usr/share/doc/libtwolame0/changelog.Debian.amd64.gz", "/usr/share/doc/libtwolame0/changelog.Debian.gz", "/usr/share/doc/libtwolame0/changelog.gz", "/usr/share/doc/libtwolame0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libudev1@257.13-1~deb13u1", "Name": "libudev1", "Identifier": { "PURL": "pkg:deb/debian/libudev1@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "9d7053ae266a0055" }, "Version": "257.13", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "systemd", "SrcVersion": "257.13", "SrcRelease": "1~deb13u1", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "GPL-2 with Linux-syscall-note exception", "MIT", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libcap2@1:2.75-10+deb13u1+b3" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libudev.so.1.7.10", "/usr/share/doc/libudev1/NEWS.Debian.gz", "/usr/share/doc/libudev1/changelog.Debian.gz", "/usr/share/doc/libudev1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libudfread0@1.1.2-1+b2", "Name": "libudfread0", "Identifier": { "PURL": "pkg:deb/debian/libudfread0@1.1.2-1%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "476813ebd7ad5f0" }, "Version": "1.1.2", "Release": "1+b2", "Arch": "amd64", "SrcName": "libudfread", "SrcVersion": "1.1.2", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "GPL-2+ with autoconf-macro exception", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libudfread.so.0.1.0", "/usr/share/doc/libudfread0/changelog.Debian.amd64.gz", "/usr/share/doc/libudfread0/changelog.Debian.gz", "/usr/share/doc/libudfread0/changelog.gz", "/usr/share/doc/libudfread0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libunibreak6@6.1-3", "Name": "libunibreak6", "Identifier": { "PURL": "pkg:deb/debian/libunibreak6@6.1-3?arch=amd64\u0026distro=debian-13.7", "UID": "e32175f8c314ea5" }, "Version": "6.1", "Release": "3", "Arch": "amd64", "SrcName": "libunibreak", "SrcVersion": "6.1", "SrcRelease": "3", "Licenses": [ "Zlib", "unicode-data" ], "Maintainer": "Debian Qt/KDE Maintainers \u003cdebian-qt-kde@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libunibreak.so.6.0.1", "/usr/share/doc/libunibreak6/changelog.Debian.gz", "/usr/share/doc/libunibreak6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libunistring5@1.3-2", "Name": "libunistring5", "Identifier": { "PURL": "pkg:deb/debian/libunistring5@1.3-2?arch=amd64\u0026distro=debian-13.7", "UID": "c3b5891f8c9de7e3" }, "Version": "1.3", "Release": "2", "Arch": "amd64", "SrcName": "libunistring", "SrcVersion": "1.3", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "LGPL-3.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later", "GFDL-1.2-or-later", "LGPL-3.0-only", "LGPL-2.1-or-later", "BSD-3-Clause", "ISC", "Unicode-DFS-2016", "public-domain", "FreeSoftware", "GPL-2.0-or-later", "GPL-2+ with distribution exception", "MIT", "X11", "GPL-3.0-only", "GPL-2.0-only", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Jörg Frings-Fürst \u003cdebian@jff.email\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libunistring.so.5.2.0", "/usr/share/doc/libunistring5/changelog.Debian.gz", "/usr/share/doc/libunistring5/changelog.gz", "/usr/share/doc/libunistring5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libusb-1.0-0@2:1.0.28-1", "Name": "libusb-1.0-0", "Identifier": { "PURL": "pkg:deb/debian/libusb-1.0-0@1.0.28-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "22483d6ae67996cc" }, "Version": "1.0.28", "Release": "1", "Epoch": 2, "Arch": "amd64", "SrcName": "libusb-1.0", "SrcVersion": "1.0.28", "SrcRelease": "1", "SrcEpoch": 2, "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-or-later", "GPL-2.0-only", "MIT", "FSFAP" ], "Maintainer": "Aurelien Jarno \u003caurel32@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libudev1@257.13-1~deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libusb-1.0.so.0.5.0", "/usr/share/doc/libusb-1.0-0/README", "/usr/share/doc/libusb-1.0-0/changelog.Debian.gz", "/usr/share/doc/libusb-1.0-0/changelog.gz", "/usr/share/doc/libusb-1.0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libuuid1@2.41.5-0+deb13u1", "Name": "libuuid1", "Identifier": { "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "3a03f1816c93c994" }, "Version": "2.41.5", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libuuid.so.1.3.0", "/usr/share/doc/libuuid1/NEWS.Debian.gz", "/usr/share/doc/libuuid1/changelog.Debian.gz", "/usr/share/doc/libuuid1/changelog.gz", "/usr/share/doc/libuuid1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libva-drm2@2.22.0-3", "Name": "libva-drm2", "Identifier": { "PURL": "pkg:deb/debian/libva-drm2@2.22.0-3?arch=amd64\u0026distro=debian-13.7", "UID": "17ec64c851029b2f" }, "Version": "2.22.0", "Release": "3", "Arch": "amd64", "SrcName": "libva", "SrcVersion": "2.22.0", "SrcRelease": "3", "Licenses": [ "MIT", "Expat-advertising", "other", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm2@2.4.124-2", "libva2@2.22.0-3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libva-drm.so.2.2200.0", "/usr/share/doc/libva-drm2/changelog.Debian.gz", "/usr/share/doc/libva-drm2/changelog.gz", "/usr/share/doc/libva-drm2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libva-x11-2@2.22.0-3", "Name": "libva-x11-2", "Identifier": { "PURL": "pkg:deb/debian/libva-x11-2@2.22.0-3?arch=amd64\u0026distro=debian-13.7", "UID": "5c7a3715f799ec1f" }, "Version": "2.22.0", "Release": "3", "Arch": "amd64", "SrcName": "libva", "SrcVersion": "2.22.0", "SrcRelease": "3", "Licenses": [ "MIT", "Expat-advertising", "other", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm2@2.4.124-2", "libva2@2.22.0-3", "libx11-6@2:1.8.12-1", "libx11-xcb1@2:1.8.12-1", "libxcb-dri3-0@1.17.0-2+b1", "libxcb1@1.17.0-2+b1", "libxext6@2:1.3.4-1+b3", "libxfixes3@1:6.0.0-2+b4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libva-x11.so.2.2200.0", "/usr/share/doc/libva-x11-2/changelog.Debian.gz", "/usr/share/doc/libva-x11-2/changelog.gz", "/usr/share/doc/libva-x11-2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libva2@2.22.0-3", "Name": "libva2", "Identifier": { "PURL": "pkg:deb/debian/libva2@2.22.0-3?arch=amd64\u0026distro=debian-13.7", "UID": "4a2fdd712b5195ee" }, "Version": "2.22.0", "Release": "3", "Arch": "amd64", "SrcName": "libva", "SrcVersion": "2.22.0", "SrcRelease": "3", "Licenses": [ "MIT", "Expat-advertising", "other", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libva.so.2.2200.0", "/usr/share/doc/libva2/changelog.Debian.gz", "/usr/share/doc/libva2/changelog.gz", "/usr/share/doc/libva2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libvdpau1@1.5-3+b1", "Name": "libvdpau1", "Identifier": { "PURL": "pkg:deb/debian/libvdpau1@1.5-3%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "4a13e09e1c09f9ce" }, "Version": "1.5", "Release": "3+b1", "Arch": "amd64", "SrcName": "libvdpau", "SrcVersion": "1.5", "SrcRelease": "3", "Licenses": [ "MIT", "other" ], "Maintainer": "Debian NVIDIA Maintainers \u003cpkg-nvidia-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1", "libxext6@2:1.3.4-1+b3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libvdpau.so.1.0.0", "/usr/lib/x86_64-linux-gnu/vdpau/libvdpau_trace.so.1.0.0", "/usr/share/bug/libvdpau1", "/usr/share/doc/libvdpau1/changelog.Debian.amd64.gz", "/usr/share/doc/libvdpau1/changelog.Debian.gz", "/usr/share/doc/libvdpau1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libvidstab1.1@1.1.0-2+b2", "Name": "libvidstab1.1", "Identifier": { "PURL": "pkg:deb/debian/libvidstab1.1@1.1.0-2%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "132da877b3ce0228" }, "Version": "1.1.0", "Release": "2+b2", "Arch": "amd64", "SrcName": "libvidstab", "SrcVersion": "1.1.0", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Keng-Yu Lin \u003ckengyu@lexical.tw\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgomp1@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libvidstab.so.1.1", "/usr/share/doc/libvidstab1.1/changelog.Debian.amd64.gz", "/usr/share/doc/libvidstab1.1/changelog.Debian.gz", "/usr/share/doc/libvidstab1.1/changelog.gz", "/usr/share/doc/libvidstab1.1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libvorbis0a@1.3.7-3", "Name": "libvorbis0a", "Identifier": { "PURL": "pkg:deb/debian/libvorbis0a@1.3.7-3?arch=amd64\u0026distro=debian-13.7", "UID": "56bc902c985c8f38" }, "Version": "1.3.7", "Release": "3", "Arch": "amd64", "SrcName": "libvorbis", "SrcVersion": "1.3.7", "SrcRelease": "3", "Licenses": [ "BSD-3-Clause", "RFC-special" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libogg0@1.3.5-3+b2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.9", "/usr/share/doc/libvorbis0a/changelog.Debian.gz", "/usr/share/doc/libvorbis0a/changelog.gz", "/usr/share/doc/libvorbis0a/copyright", "/usr/share/lintian/overrides/libvorbis0a" ], "AnalyzedBy": "dpkg" }, { "ID": "libvorbisenc2@1.3.7-3", "Name": "libvorbisenc2", "Identifier": { "PURL": "pkg:deb/debian/libvorbisenc2@1.3.7-3?arch=amd64\u0026distro=debian-13.7", "UID": "a0ced99dd0bb49bd" }, "Version": "1.3.7", "Release": "3", "Arch": "amd64", "SrcName": "libvorbis", "SrcVersion": "1.3.7", "SrcRelease": "3", "Licenses": [ "BSD-3-Clause", "RFC-special" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libvorbis0a@1.3.7-3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libvorbisenc.so.2.0.12", "/usr/share/doc/libvorbisenc2/changelog.Debian.gz", "/usr/share/doc/libvorbisenc2/changelog.gz", "/usr/share/doc/libvorbisenc2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libvorbisfile3@1.3.7-3", "Name": "libvorbisfile3", "Identifier": { "PURL": "pkg:deb/debian/libvorbisfile3@1.3.7-3?arch=amd64\u0026distro=debian-13.7", "UID": "f97b20f9f31777a" }, "Version": "1.3.7", "Release": "3", "Arch": "amd64", "SrcName": "libvorbis", "SrcVersion": "1.3.7", "SrcRelease": "3", "Licenses": [ "BSD-3-Clause", "RFC-special" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libogg0@1.3.5-3+b2", "libvorbis0a@1.3.7-3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libvorbisfile.so.3.3.8", "/usr/share/doc/libvorbisfile3/changelog.Debian.gz", "/usr/share/doc/libvorbisfile3/changelog.gz", "/usr/share/doc/libvorbisfile3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libvpl2@1:2.14.0-1+b1", "Name": "libvpl2", "Identifier": { "PURL": "pkg:deb/debian/libvpl2@2.14.0-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "6db93491b8d0fa43" }, "Version": "2.14.0", "Release": "1+b1", "Epoch": 1, "Arch": "amd64", "SrcName": "libvpl", "SrcVersion": "2.14.0", "SrcRelease": "1", "SrcEpoch": 1, "Licenses": [ "MIT", "BSD-3-Clause", "Apache-2.0" ], "Maintainer": "Timo Aaltonen \u003ctjaalton@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libvpl.so.2.14", "/usr/share/doc/libvpl2/changelog.Debian.amd64.gz", "/usr/share/doc/libvpl2/changelog.Debian.gz", "/usr/share/doc/libvpl2/changelog.gz", "/usr/share/doc/libvpl2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libvpx9@1.15.0-2.1+deb13u1", "Name": "libvpx9", "Identifier": { "PURL": "pkg:deb/debian/libvpx9@1.15.0-2.1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "99c9993cc0897e0b" }, "Version": "1.15.0", "Release": "2.1+deb13u1", "Arch": "amd64", "SrcName": "libvpx", "SrcVersion": "1.15.0", "SrcRelease": "2.1+deb13u1", "Licenses": [ "BSD-3-Clause", "public-domain", "ISC" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libvpx.so.9.1.0", "/usr/share/doc/libvpx9/changelog.Debian.gz", "/usr/share/doc/libvpx9/changelog.gz", "/usr/share/doc/libvpx9/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libvulkan1@1.4.309.0-1", "Name": "libvulkan1", "Identifier": { "PURL": "pkg:deb/debian/libvulkan1@1.4.309.0-1?arch=amd64\u0026distro=debian-13.7", "UID": "484f820d5039cc7d" }, "Version": "1.4.309.0", "Release": "1", "Arch": "amd64", "SrcName": "vulkan-loader", "SrcVersion": "1.4.309.0", "SrcRelease": "1", "Licenses": [ "Apache-2.0", "MIT" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libvulkan.so.1.4.309", "/usr/share/doc/libvulkan1/changelog.Debian.gz", "/usr/share/doc/libvulkan1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libwayland-client0@1.23.1-3", "Name": "libwayland-client0", "Identifier": { "PURL": "pkg:deb/debian/libwayland-client0@1.23.1-3?arch=amd64\u0026distro=debian-13.7", "UID": "5fd409d89e654bd5" }, "Version": "1.23.1", "Release": "3", "Arch": "amd64", "SrcName": "wayland", "SrcVersion": "1.23.1", "SrcRelease": "3", "Licenses": [ "X11" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libffi8@3.4.8-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libwayland-client.so.0.23.1", "/usr/share/doc/libwayland-client0/changelog.Debian.gz", "/usr/share/doc/libwayland-client0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libwayland-cursor0@1.23.1-3", "Name": "libwayland-cursor0", "Identifier": { "PURL": "pkg:deb/debian/libwayland-cursor0@1.23.1-3?arch=amd64\u0026distro=debian-13.7", "UID": "65d8ae6596b4b140" }, "Version": "1.23.1", "Release": "3", "Arch": "amd64", "SrcName": "wayland", "SrcVersion": "1.23.1", "SrcRelease": "3", "Licenses": [ "X11" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libwayland-client0@1.23.1-3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libwayland-cursor.so.0.23.1", "/usr/share/doc/libwayland-cursor0/changelog.Debian.gz", "/usr/share/doc/libwayland-cursor0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libwayland-egl1@1.23.1-3", "Name": "libwayland-egl1", "Identifier": { "PURL": "pkg:deb/debian/libwayland-egl1@1.23.1-3?arch=amd64\u0026distro=debian-13.7", "UID": "a099caa21acf37fc" }, "Version": "1.23.1", "Release": "3", "Arch": "amd64", "SrcName": "wayland", "SrcVersion": "1.23.1", "SrcRelease": "3", "Licenses": [ "X11" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libwayland-egl.so.1.23.1", "/usr/share/doc/libwayland-egl1/changelog.Debian.gz", "/usr/share/doc/libwayland-egl1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libwayland-server0@1.23.1-3", "Name": "libwayland-server0", "Identifier": { "PURL": "pkg:deb/debian/libwayland-server0@1.23.1-3?arch=amd64\u0026distro=debian-13.7", "UID": "1dbfb02402ab169f" }, "Version": "1.23.1", "Release": "3", "Arch": "amd64", "SrcName": "wayland", "SrcVersion": "1.23.1", "SrcRelease": "3", "Licenses": [ "X11" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libffi8@3.4.8-2" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libwayland-server.so.0.23.1", "/usr/share/doc/libwayland-server0/changelog.Debian.gz", "/usr/share/doc/libwayland-server0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libwebp7@1.5.0-0.1", "Name": "libwebp7", "Identifier": { "PURL": "pkg:deb/debian/libwebp7@1.5.0-0.1?arch=amd64\u0026distro=debian-13.7", "UID": "d2ba2f7089ff512f" }, "Version": "1.5.0", "Release": "0.1", "Arch": "amd64", "SrcName": "libwebp", "SrcVersion": "1.5.0", "SrcRelease": "0.1", "Licenses": [ "BSD-3-Clause", "Apache-2.0" ], "Maintainer": "Jeff Breidenbach \u003cjab@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libsharpyuv0@1.5.0-0.1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libwebp.so.7.1.10", "/usr/share/doc/libwebp7/changelog.Debian.gz", "/usr/share/doc/libwebp7/changelog.gz", "/usr/share/doc/libwebp7/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libwebpmux3@1.5.0-0.1", "Name": "libwebpmux3", "Identifier": { "PURL": "pkg:deb/debian/libwebpmux3@1.5.0-0.1?arch=amd64\u0026distro=debian-13.7", "UID": "385bb053f88d9182" }, "Version": "1.5.0", "Release": "0.1", "Arch": "amd64", "SrcName": "libwebp", "SrcVersion": "1.5.0", "SrcRelease": "0.1", "Licenses": [ "BSD-3-Clause", "Apache-2.0" ], "Maintainer": "Jeff Breidenbach \u003cjab@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libwebp7@1.5.0-0.1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libwebpmux.so.3.1.1", "/usr/share/doc/libwebpmux3/changelog.Debian.gz", "/usr/share/doc/libwebpmux3/changelog.gz", "/usr/share/doc/libwebpmux3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libx11-6@2:1.8.12-1", "Name": "libx11-6", "Identifier": { "PURL": "pkg:deb/debian/libx11-6@1.8.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "b186f763ff3bf6c6" }, "Version": "1.8.12", "Release": "1", "Epoch": 2, "Arch": "amd64", "SrcName": "libx11", "SrcVersion": "1.8.12", "SrcRelease": "1", "SrcEpoch": 2, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-data@2:1.8.12-1", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libX11.so.6.4.0", "/usr/share/doc/libx11-6/changelog.Debian.gz", "/usr/share/doc/libx11-6/changelog.gz", "/usr/share/doc/libx11-6/copyright", "/usr/share/lintian/overrides/libx11-6" ], "AnalyzedBy": "dpkg" }, { "ID": "libx11-data@2:1.8.12-1", "Name": "libx11-data", "Identifier": { "PURL": "pkg:deb/debian/libx11-data@1.8.12-1?arch=all\u0026distro=debian-13.7\u0026epoch=2", "UID": "e6b7a201b95ba699" }, "Version": "1.8.12", "Release": "1", "Epoch": 2, "Arch": "all", "SrcName": "libx11", "SrcVersion": "1.8.12", "SrcRelease": "1", "SrcEpoch": 2, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/X11/XErrorDB", "/usr/share/X11/locale/C/Compose", "/usr/share/X11/locale/C/XI18N_OBJS", "/usr/share/X11/locale/C/XLC_LOCALE", "/usr/share/X11/locale/am_ET.UTF-8/Compose", "/usr/share/X11/locale/am_ET.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/am_ET.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/armscii-8/Compose", "/usr/share/X11/locale/armscii-8/XI18N_OBJS", "/usr/share/X11/locale/armscii-8/XLC_LOCALE", "/usr/share/X11/locale/compose.dir", "/usr/share/X11/locale/cs_CZ.UTF-8/Compose", "/usr/share/X11/locale/cs_CZ.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/cs_CZ.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/el_GR.UTF-8/Compose", "/usr/share/X11/locale/el_GR.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/el_GR.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/en_US.UTF-8/Compose", "/usr/share/X11/locale/en_US.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/en_US.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/fi_FI.UTF-8/Compose", "/usr/share/X11/locale/fi_FI.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/fi_FI.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/georgian-academy/Compose", "/usr/share/X11/locale/georgian-academy/XI18N_OBJS", "/usr/share/X11/locale/georgian-academy/XLC_LOCALE", "/usr/share/X11/locale/georgian-ps/Compose", "/usr/share/X11/locale/georgian-ps/XI18N_OBJS", "/usr/share/X11/locale/georgian-ps/XLC_LOCALE", "/usr/share/X11/locale/ibm-cp1133/Compose", "/usr/share/X11/locale/ibm-cp1133/XI18N_OBJS", "/usr/share/X11/locale/ibm-cp1133/XLC_LOCALE", "/usr/share/X11/locale/iscii-dev/Compose", "/usr/share/X11/locale/iscii-dev/XI18N_OBJS", "/usr/share/X11/locale/iscii-dev/XLC_LOCALE", "/usr/share/X11/locale/isiri-3342/Compose", "/usr/share/X11/locale/isiri-3342/XI18N_OBJS", "/usr/share/X11/locale/isiri-3342/XLC_LOCALE", "/usr/share/X11/locale/iso8859-1/Compose", "/usr/share/X11/locale/iso8859-1/XI18N_OBJS", "/usr/share/X11/locale/iso8859-1/XLC_LOCALE", "/usr/share/X11/locale/iso8859-10/Compose", "/usr/share/X11/locale/iso8859-10/XI18N_OBJS", "/usr/share/X11/locale/iso8859-10/XLC_LOCALE", "/usr/share/X11/locale/iso8859-11/Compose", "/usr/share/X11/locale/iso8859-11/XI18N_OBJS", "/usr/share/X11/locale/iso8859-11/XLC_LOCALE", "/usr/share/X11/locale/iso8859-13/Compose", "/usr/share/X11/locale/iso8859-13/XI18N_OBJS", "/usr/share/X11/locale/iso8859-13/XLC_LOCALE", "/usr/share/X11/locale/iso8859-14/Compose", "/usr/share/X11/locale/iso8859-14/XI18N_OBJS", "/usr/share/X11/locale/iso8859-14/XLC_LOCALE", "/usr/share/X11/locale/iso8859-15/Compose", "/usr/share/X11/locale/iso8859-15/XI18N_OBJS", "/usr/share/X11/locale/iso8859-15/XLC_LOCALE", "/usr/share/X11/locale/iso8859-2/Compose", "/usr/share/X11/locale/iso8859-2/XI18N_OBJS", "/usr/share/X11/locale/iso8859-2/XLC_LOCALE", "/usr/share/X11/locale/iso8859-3/Compose", "/usr/share/X11/locale/iso8859-3/XI18N_OBJS", "/usr/share/X11/locale/iso8859-3/XLC_LOCALE", "/usr/share/X11/locale/iso8859-4/Compose", "/usr/share/X11/locale/iso8859-4/XI18N_OBJS", "/usr/share/X11/locale/iso8859-4/XLC_LOCALE", "/usr/share/X11/locale/iso8859-5/Compose", "/usr/share/X11/locale/iso8859-5/XI18N_OBJS", "/usr/share/X11/locale/iso8859-5/XLC_LOCALE", "/usr/share/X11/locale/iso8859-6/Compose", "/usr/share/X11/locale/iso8859-6/XI18N_OBJS", "/usr/share/X11/locale/iso8859-6/XLC_LOCALE", "/usr/share/X11/locale/iso8859-7/Compose", "/usr/share/X11/locale/iso8859-7/XI18N_OBJS", "/usr/share/X11/locale/iso8859-7/XLC_LOCALE", "/usr/share/X11/locale/iso8859-8/Compose", "/usr/share/X11/locale/iso8859-8/XI18N_OBJS", "/usr/share/X11/locale/iso8859-8/XLC_LOCALE", "/usr/share/X11/locale/iso8859-9/Compose", "/usr/share/X11/locale/iso8859-9/XI18N_OBJS", "/usr/share/X11/locale/iso8859-9/XLC_LOCALE", "/usr/share/X11/locale/iso8859-9e/Compose", "/usr/share/X11/locale/iso8859-9e/XI18N_OBJS", "/usr/share/X11/locale/iso8859-9e/XLC_LOCALE", "/usr/share/X11/locale/ja.JIS/Compose", "/usr/share/X11/locale/ja.JIS/XI18N_OBJS", "/usr/share/X11/locale/ja.JIS/XLC_LOCALE", "/usr/share/X11/locale/ja.SJIS/Compose", "/usr/share/X11/locale/ja.SJIS/XI18N_OBJS", "/usr/share/X11/locale/ja.SJIS/XLC_LOCALE", "/usr/share/X11/locale/ja/Compose", "/usr/share/X11/locale/ja/XI18N_OBJS", "/usr/share/X11/locale/ja/XLC_LOCALE", "/usr/share/X11/locale/ja_JP.UTF-8/Compose", "/usr/share/X11/locale/ja_JP.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/ja_JP.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/km_KH.UTF-8/Compose", "/usr/share/X11/locale/km_KH.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/km_KH.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/ko/Compose", "/usr/share/X11/locale/ko/XI18N_OBJS", "/usr/share/X11/locale/ko/XLC_LOCALE", "/usr/share/X11/locale/ko_KR.UTF-8/Compose", "/usr/share/X11/locale/ko_KR.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/ko_KR.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/koi8-c/Compose", "/usr/share/X11/locale/koi8-c/XI18N_OBJS", "/usr/share/X11/locale/koi8-c/XLC_LOCALE", "/usr/share/X11/locale/koi8-r/Compose", "/usr/share/X11/locale/koi8-r/XI18N_OBJS", "/usr/share/X11/locale/koi8-r/XLC_LOCALE", "/usr/share/X11/locale/koi8-u/Compose", "/usr/share/X11/locale/koi8-u/XI18N_OBJS", "/usr/share/X11/locale/koi8-u/XLC_LOCALE", "/usr/share/X11/locale/locale.alias", "/usr/share/X11/locale/locale.dir", "/usr/share/X11/locale/microsoft-cp1251/Compose", "/usr/share/X11/locale/microsoft-cp1251/XI18N_OBJS", "/usr/share/X11/locale/microsoft-cp1251/XLC_LOCALE", "/usr/share/X11/locale/microsoft-cp1255/Compose", "/usr/share/X11/locale/microsoft-cp1255/XI18N_OBJS", "/usr/share/X11/locale/microsoft-cp1255/XLC_LOCALE", "/usr/share/X11/locale/microsoft-cp1256/Compose", "/usr/share/X11/locale/microsoft-cp1256/XI18N_OBJS", "/usr/share/X11/locale/microsoft-cp1256/XLC_LOCALE", "/usr/share/X11/locale/mulelao-1/Compose", "/usr/share/X11/locale/mulelao-1/XI18N_OBJS", "/usr/share/X11/locale/mulelao-1/XLC_LOCALE", "/usr/share/X11/locale/nokhchi-1/Compose", "/usr/share/X11/locale/nokhchi-1/XI18N_OBJS", "/usr/share/X11/locale/nokhchi-1/XLC_LOCALE", "/usr/share/X11/locale/pt_BR.UTF-8/Compose", "/usr/share/X11/locale/pt_BR.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/pt_BR.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/pt_PT.UTF-8/Compose", "/usr/share/X11/locale/pt_PT.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/pt_PT.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/ru_RU.UTF-8/Compose", "/usr/share/X11/locale/ru_RU.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/ru_RU.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/sr_RS.UTF-8/Compose", "/usr/share/X11/locale/sr_RS.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/sr_RS.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/tatar-cyr/Compose", "/usr/share/X11/locale/tatar-cyr/XI18N_OBJS", "/usr/share/X11/locale/tatar-cyr/XLC_LOCALE", "/usr/share/X11/locale/th_TH.UTF-8/Compose", "/usr/share/X11/locale/th_TH.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/th_TH.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/th_TH/Compose", "/usr/share/X11/locale/th_TH/XI18N_OBJS", "/usr/share/X11/locale/th_TH/XLC_LOCALE", "/usr/share/X11/locale/tscii-0/Compose", "/usr/share/X11/locale/tscii-0/XI18N_OBJS", "/usr/share/X11/locale/tscii-0/XLC_LOCALE", "/usr/share/X11/locale/vi_VN.tcvn/Compose", "/usr/share/X11/locale/vi_VN.tcvn/XI18N_OBJS", "/usr/share/X11/locale/vi_VN.tcvn/XLC_LOCALE", "/usr/share/X11/locale/vi_VN.viscii/Compose", "/usr/share/X11/locale/vi_VN.viscii/XI18N_OBJS", "/usr/share/X11/locale/vi_VN.viscii/XLC_LOCALE", "/usr/share/X11/locale/zh_CN.UTF-8/Compose", "/usr/share/X11/locale/zh_CN.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/zh_CN.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/zh_CN.gb18030/Compose", "/usr/share/X11/locale/zh_CN.gb18030/XI18N_OBJS", "/usr/share/X11/locale/zh_CN.gb18030/XLC_LOCALE", "/usr/share/X11/locale/zh_CN.gbk/Compose", "/usr/share/X11/locale/zh_CN.gbk/XI18N_OBJS", "/usr/share/X11/locale/zh_CN.gbk/XLC_LOCALE", "/usr/share/X11/locale/zh_CN/Compose", "/usr/share/X11/locale/zh_CN/XI18N_OBJS", "/usr/share/X11/locale/zh_CN/XLC_LOCALE", "/usr/share/X11/locale/zh_HK.UTF-8/Compose", "/usr/share/X11/locale/zh_HK.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/zh_HK.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/zh_HK.big5/Compose", "/usr/share/X11/locale/zh_HK.big5/XI18N_OBJS", "/usr/share/X11/locale/zh_HK.big5/XLC_LOCALE", "/usr/share/X11/locale/zh_HK.big5hkscs/Compose", "/usr/share/X11/locale/zh_HK.big5hkscs/XI18N_OBJS", "/usr/share/X11/locale/zh_HK.big5hkscs/XLC_LOCALE", "/usr/share/X11/locale/zh_TW.UTF-8/Compose", "/usr/share/X11/locale/zh_TW.UTF-8/XI18N_OBJS", "/usr/share/X11/locale/zh_TW.UTF-8/XLC_LOCALE", "/usr/share/X11/locale/zh_TW.big5/Compose", "/usr/share/X11/locale/zh_TW.big5/XI18N_OBJS", "/usr/share/X11/locale/zh_TW.big5/XLC_LOCALE", "/usr/share/X11/locale/zh_TW/Compose", "/usr/share/X11/locale/zh_TW/XI18N_OBJS", "/usr/share/X11/locale/zh_TW/XLC_LOCALE", "/usr/share/doc/libx11-data/changelog.Debian.gz", "/usr/share/doc/libx11-data/changelog.gz", "/usr/share/doc/libx11-data/copyright", "/usr/share/man/man5/Compose.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libx11-xcb1@2:1.8.12-1", "Name": "libx11-xcb1", "Identifier": { "PURL": "pkg:deb/debian/libx11-xcb1@1.8.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "fe2eb71291470eee" }, "Version": "1.8.12", "Release": "1", "Epoch": 2, "Arch": "amd64", "SrcName": "libx11", "SrcVersion": "1.8.12", "SrcRelease": "1", "SrcEpoch": 2, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libx11-6@2:1.8.12-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libX11-xcb.so.1.0.0", "/usr/share/doc/libx11-xcb1/changelog.Debian.gz", "/usr/share/doc/libx11-xcb1/changelog.gz", "/usr/share/doc/libx11-xcb1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libx264-164@2:0.164.3108+git31e19f9-2+b1", "Name": "libx264-164", "Identifier": { "PURL": "pkg:deb/debian/libx264-164@0.164.3108%2Bgit31e19f9-2%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "3e04df8c19582f04" }, "Version": "0.164.3108+git31e19f9", "Release": "2+b1", "Epoch": 2, "Arch": "amd64", "SrcName": "x264", "SrcVersion": "0.164.3108+git31e19f9", "SrcRelease": "2", "SrcEpoch": 2, "Licenses": [ "GPL-2.0-or-later", "ISC", "GPL-2+ with other exception", "LGPL-2.1-or-later", "BSD-3-Clause", "public-domain", "MIT", "GPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libx264.so.164", "/usr/share/doc/libx264-164/changelog.Debian.amd64.gz", "/usr/share/doc/libx264-164/changelog.Debian.gz", "/usr/share/doc/libx264-164/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libx265-215@4.1-2", "Name": "libx265-215", "Identifier": { "PURL": "pkg:deb/debian/libx265-215@4.1-2?arch=amd64\u0026distro=debian-13.7", "UID": "b9b17068a9967181" }, "Version": "4.1", "Release": "2", "Arch": "amd64", "SrcName": "x265", "SrcVersion": "4.1", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "MIT", "LGPL-2.1-or-later", "ISC", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libnuma1@2.0.19-1", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libx265.so.215", "/usr/share/doc/libx265-215/changelog.Debian.gz", "/usr/share/doc/libx265-215/changelog.gz", "/usr/share/doc/libx265-215/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxau6@1:1.0.11-1", "Name": "libxau6", "Identifier": { "PURL": "pkg:deb/debian/libxau6@1.0.11-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "7610482a1442e765" }, "Version": "1.0.11", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "libxau", "SrcVersion": "1.0.11", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXau.so.6.0.0", "/usr/share/doc/libxau6/changelog.Debian.gz", "/usr/share/doc/libxau6/changelog.gz", "/usr/share/doc/libxau6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-dri3-0@1.17.0-2+b1", "Name": "libxcb-dri3-0", "Identifier": { "PURL": "pkg:deb/debian/libxcb-dri3-0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "70d65d4423647443" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-dri3.so.0.1.0", "/usr/share/doc/libxcb-dri3-0/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-dri3-0/changelog.Debian.gz", "/usr/share/doc/libxcb-dri3-0/changelog.gz", "/usr/share/doc/libxcb-dri3-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-glx0@1.17.0-2+b1", "Name": "libxcb-glx0", "Identifier": { "PURL": "pkg:deb/debian/libxcb-glx0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "41173999543323e2" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0", "/usr/share/doc/libxcb-glx0/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-glx0/changelog.Debian.gz", "/usr/share/doc/libxcb-glx0/changelog.gz", "/usr/share/doc/libxcb-glx0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-present0@1.17.0-2+b1", "Name": "libxcb-present0", "Identifier": { "PURL": "pkg:deb/debian/libxcb-present0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "92fe49129fa86a22" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-present.so.0.0.0", "/usr/share/doc/libxcb-present0/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-present0/changelog.Debian.gz", "/usr/share/doc/libxcb-present0/changelog.gz", "/usr/share/doc/libxcb-present0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-randr0@1.17.0-2+b1", "Name": "libxcb-randr0", "Identifier": { "PURL": "pkg:deb/debian/libxcb-randr0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "b2410b9a8aa09e00" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-randr.so.0.1.0", "/usr/share/doc/libxcb-randr0/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-randr0/changelog.Debian.gz", "/usr/share/doc/libxcb-randr0/changelog.gz", "/usr/share/doc/libxcb-randr0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-render0@1.17.0-2+b1", "Name": "libxcb-render0", "Identifier": { "PURL": "pkg:deb/debian/libxcb-render0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "e135ffd83de23b0c" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.0", "/usr/share/doc/libxcb-render0/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-render0/changelog.Debian.gz", "/usr/share/doc/libxcb-render0/changelog.gz", "/usr/share/doc/libxcb-render0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-shape0@1.17.0-2+b1", "Name": "libxcb-shape0", "Identifier": { "PURL": "pkg:deb/debian/libxcb-shape0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "10bb51975452fd5d" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-shape.so.0.0.0", "/usr/share/doc/libxcb-shape0/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-shape0/changelog.Debian.gz", "/usr/share/doc/libxcb-shape0/changelog.gz", "/usr/share/doc/libxcb-shape0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-shm0@1.17.0-2+b1", "Name": "libxcb-shm0", "Identifier": { "PURL": "pkg:deb/debian/libxcb-shm0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "5e9c0b572cf5a551" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-shm.so.0.0.0", "/usr/share/doc/libxcb-shm0/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-shm0/changelog.Debian.gz", "/usr/share/doc/libxcb-shm0/changelog.gz", "/usr/share/doc/libxcb-shm0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-sync1@1.17.0-2+b1", "Name": "libxcb-sync1", "Identifier": { "PURL": "pkg:deb/debian/libxcb-sync1@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "44b139bce42bf5a" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-sync.so.1.0.0", "/usr/share/doc/libxcb-sync1/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-sync1/changelog.Debian.gz", "/usr/share/doc/libxcb-sync1/changelog.gz", "/usr/share/doc/libxcb-sync1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb-xfixes0@1.17.0-2+b1", "Name": "libxcb-xfixes0", "Identifier": { "PURL": "pkg:deb/debian/libxcb-xfixes0@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "fae54489e6ca4a8b" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxcb1@1.17.0-2+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb-xfixes.so.0.0.0", "/usr/share/doc/libxcb-xfixes0/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb-xfixes0/changelog.Debian.gz", "/usr/share/doc/libxcb-xfixes0/changelog.gz", "/usr/share/doc/libxcb-xfixes0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcb1@1.17.0-2+b1", "Name": "libxcb1", "Identifier": { "PURL": "pkg:deb/debian/libxcb1@1.17.0-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "fb5c8aaa4f942214" }, "Version": "1.17.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libxcb", "SrcVersion": "1.17.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libxau6@1:1.0.11-1", "libxdmcp6@1:1.1.5-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxcb.so.1.1.0", "/usr/share/doc/libxcb1/changelog.Debian.amd64.gz", "/usr/share/doc/libxcb1/changelog.Debian.gz", "/usr/share/doc/libxcb1/changelog.gz", "/usr/share/doc/libxcb1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxcursor1@1:1.2.3-1", "Name": "libxcursor1", "Identifier": { "PURL": "pkg:deb/debian/libxcursor1@1.2.3-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "feea02e2b7e92398" }, "Version": "1.2.3", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "libxcursor", "SrcVersion": "1.2.3", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1", "libxfixes3@1:6.0.0-2+b4", "libxrender1@1:0.9.12-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXcursor.so.1.0.2", "/usr/share/doc/libxcursor1/changelog.Debian.gz", "/usr/share/doc/libxcursor1/changelog.gz", "/usr/share/doc/libxcursor1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxdmcp6@1:1.1.5-1", "Name": "libxdmcp6", "Identifier": { "PURL": "pkg:deb/debian/libxdmcp6@1.1.5-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "73ec105c1a33de9e" }, "Version": "1.1.5", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "libxdmcp", "SrcVersion": "1.1.5", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0", "/usr/share/doc/libxdmcp6/changelog.Debian.gz", "/usr/share/doc/libxdmcp6/changelog.gz", "/usr/share/doc/libxdmcp6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxext6@2:1.3.4-1+b3", "Name": "libxext6", "Identifier": { "PURL": "pkg:deb/debian/libxext6@1.3.4-1%2Bb3?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "4dce41f6db1e79a5" }, "Version": "1.3.4", "Release": "1+b3", "Epoch": 2, "Arch": "amd64", "SrcName": "libxext", "SrcVersion": "1.3.4", "SrcRelease": "1", "SrcEpoch": 2, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXext.so.6.4.0", "/usr/share/doc/libxext6/changelog.Debian.amd64.gz", "/usr/share/doc/libxext6/changelog.Debian.gz", "/usr/share/doc/libxext6/changelog.gz", "/usr/share/doc/libxext6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxfixes3@1:6.0.0-2+b4", "Name": "libxfixes3", "Identifier": { "PURL": "pkg:deb/debian/libxfixes3@6.0.0-2%2Bb4?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "542dfb52d202880b" }, "Version": "6.0.0", "Release": "2+b4", "Epoch": 1, "Arch": "amd64", "SrcName": "libxfixes", "SrcVersion": "6.0.0", "SrcRelease": "2", "SrcEpoch": 1, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXfixes.so.3.1.0", "/usr/share/doc/libxfixes3/changelog.Debian.amd64.gz", "/usr/share/doc/libxfixes3/changelog.Debian.gz", "/usr/share/doc/libxfixes3/changelog.gz", "/usr/share/doc/libxfixes3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxi6@2:1.8.2-1", "Name": "libxi6", "Identifier": { "PURL": "pkg:deb/debian/libxi6@1.8.2-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "cb7361e408aedd4e" }, "Version": "1.8.2", "Release": "1", "Epoch": 2, "Arch": "amd64", "SrcName": "libxi", "SrcVersion": "1.8.2", "SrcRelease": "1", "SrcEpoch": 2, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1", "libxext6@2:1.3.4-1+b3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXi.so.6.1.0", "/usr/share/doc/libxi6/changelog.Debian.gz", "/usr/share/doc/libxi6/changelog.gz", "/usr/share/doc/libxi6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxkbcommon0@1.7.0-2", "Name": "libxkbcommon0", "Identifier": { "PURL": "pkg:deb/debian/libxkbcommon0@1.7.0-2?arch=amd64\u0026distro=debian-13.7", "UID": "2b68c19843ee4012" }, "Version": "1.7.0", "Release": "2", "Arch": "amd64", "SrcName": "libxkbcommon", "SrcVersion": "1.7.0", "SrcRelease": "2", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "xkb-data@2.42-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxkbcommon.so.0.0.0", "/usr/share/doc/libxkbcommon0/changelog.Debian.gz", "/usr/share/doc/libxkbcommon0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Name": "libxml2", "Identifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "Version": "2.12.7+dfsg+really2.9.14", "Release": "2.1+deb13u3", "Arch": "amd64", "SrcName": "libxml2", "SrcVersion": "2.12.7+dfsg+really2.9.14", "SrcRelease": "2.1+deb13u3", "Licenses": [ "MIT-1", "ISC" ], "Maintainer": "Debian XML/SGML Group \u003cdebian-xml-sgml-pkgs@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "liblzma5@5.8.1-1+deb13u2", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxml2.so.2.9.14", "/usr/share/doc/libxml2/README.Debian", "/usr/share/doc/libxml2/README.md", "/usr/share/doc/libxml2/changelog.Debian.gz", "/usr/share/doc/libxml2/changelog.gz", "/usr/share/doc/libxml2/copyright", "/usr/share/lintian/overrides/libxml2" ], "AnalyzedBy": "dpkg" }, { "ID": "libxrandr2@2:1.5.4-1+b3", "Name": "libxrandr2", "Identifier": { "PURL": "pkg:deb/debian/libxrandr2@1.5.4-1%2Bb3?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "da886df48dc6beca" }, "Version": "1.5.4", "Release": "1+b3", "Epoch": 2, "Arch": "amd64", "SrcName": "libxrandr", "SrcVersion": "1.5.4", "SrcRelease": "1", "SrcEpoch": 2, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1", "libxext6@2:1.3.4-1+b3", "libxrender1@1:0.9.12-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXrandr.so.2.2.0", "/usr/share/doc/libxrandr2/changelog.Debian.amd64.gz", "/usr/share/doc/libxrandr2/changelog.Debian.gz", "/usr/share/doc/libxrandr2/changelog.gz", "/usr/share/doc/libxrandr2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxrender1@1:0.9.12-1", "Name": "libxrender1", "Identifier": { "PURL": "pkg:deb/debian/libxrender1@0.9.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "cd6cf9ff77ccf04b" }, "Version": "0.9.12", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "libxrender", "SrcVersion": "0.9.12", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXrender.so.1.3.0", "/usr/share/doc/libxrender1/changelog.Debian.gz", "/usr/share/doc/libxrender1/changelog.gz", "/usr/share/doc/libxrender1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxshmfence1@1.3.3-1", "Name": "libxshmfence1", "Identifier": { "PURL": "pkg:deb/debian/libxshmfence1@1.3.3-1?arch=amd64\u0026distro=debian-13.7", "UID": "53fae2419607e64a" }, "Version": "1.3.3", "Release": "1", "Arch": "amd64", "SrcName": "libxshmfence", "SrcVersion": "1.3.3", "SrcRelease": "1", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxshmfence.so.1.0.0", "/usr/share/doc/libxshmfence1/changelog.Debian.gz", "/usr/share/doc/libxshmfence1/changelog.gz", "/usr/share/doc/libxshmfence1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxss1@1:1.2.3-1+b3", "Name": "libxss1", "Identifier": { "PURL": "pkg:deb/debian/libxss1@1.2.3-1%2Bb3?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "9a943af7d0dc1ba3" }, "Version": "1.2.3", "Release": "1+b3", "Epoch": 1, "Arch": "amd64", "SrcName": "libxss", "SrcVersion": "1.2.3", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1", "libxext6@2:1.3.4-1+b3", "x11-common@1:7.7+24+deb13u1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXss.so.1.0.0", "/usr/share/doc/libxss1/changelog.Debian.amd64.gz", "/usr/share/doc/libxss1/changelog.Debian.gz", "/usr/share/doc/libxss1/changelog.gz", "/usr/share/doc/libxss1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxv1@2:1.0.11-1.1+b3", "Name": "libxv1", "Identifier": { "PURL": "pkg:deb/debian/libxv1@1.0.11-1.1%2Bb3?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "d00affe7ae3cca5a" }, "Version": "1.0.11", "Release": "1.1+b3", "Epoch": 2, "Arch": "amd64", "SrcName": "libxv", "SrcVersion": "1.0.11", "SrcRelease": "1.1", "SrcEpoch": 2, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1", "libxext6@2:1.3.4-1+b3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXv.so.1.0.0", "/usr/share/doc/libxv1/changelog.Debian.amd64.gz", "/usr/share/doc/libxv1/changelog.Debian.gz", "/usr/share/doc/libxv1/changelog.gz", "/usr/share/doc/libxv1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxvidcore4@2:1.3.7-1+b2", "Name": "libxvidcore4", "Identifier": { "PURL": "pkg:deb/debian/libxvidcore4@1.3.7-1%2Bb2?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "720335120c766366" }, "Version": "1.3.7", "Release": "1+b2", "Epoch": 2, "Arch": "amd64", "SrcName": "xvidcore", "SrcVersion": "1.3.7", "SrcRelease": "1", "SrcEpoch": 2, "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxvidcore.so.4.3", "/usr/share/doc/libxvidcore4/changelog.Debian.amd64.gz", "/usr/share/doc/libxvidcore4/changelog.Debian.gz", "/usr/share/doc/libxvidcore4/changelog.gz", "/usr/share/doc/libxvidcore4/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxxf86vm1@1:1.1.4-1+b4", "Name": "libxxf86vm1", "Identifier": { "PURL": "pkg:deb/debian/libxxf86vm1@1.1.4-1%2Bb4?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "790c0c91ec092439" }, "Version": "1.1.4", "Release": "1+b4", "Epoch": 1, "Arch": "amd64", "SrcName": "libxxf86vm", "SrcVersion": "1.1.4", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libx11-6@2:1.8.12-1", "libxext6@2:1.3.4-1+b3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libXxf86vm.so.1.0.0", "/usr/share/doc/libxxf86vm1/changelog.Debian.amd64.gz", "/usr/share/doc/libxxf86vm1/changelog.Debian.gz", "/usr/share/doc/libxxf86vm1/changelog.gz", "/usr/share/doc/libxxf86vm1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxxhash0@0.8.3-2", "Name": "libxxhash0", "Identifier": { "PURL": "pkg:deb/debian/libxxhash0@0.8.3-2?arch=amd64\u0026distro=debian-13.7", "UID": "29b199fff138a1f3" }, "Version": "0.8.3", "Release": "2", "Arch": "amd64", "SrcName": "xxhash", "SrcVersion": "0.8.3", "SrcRelease": "2", "Licenses": [ "BSD-2-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Josue Ortega \u003cjosue@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxxhash.so.0.8.3", "/usr/share/doc/libxxhash0/changelog.Debian.gz", "/usr/share/doc/libxxhash0/changelog.gz", "/usr/share/doc/libxxhash0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libz3-4@4.13.3-1", "Name": "libz3-4", "Identifier": { "PURL": "pkg:deb/debian/libz3-4@4.13.3-1?arch=amd64\u0026distro=debian-13.7", "UID": "d5d6fb3b7a9db783" }, "Version": "4.13.3", "Release": "1", "Arch": "amd64", "SrcName": "z3", "SrcVersion": "4.13.3", "SrcRelease": "1", "Licenses": [ "MIT", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "LLVM Packaging Team \u003cpkg-llvm-team@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libz3.so.4", "/usr/share/doc/libz3-4/changelog.Debian.gz", "/usr/share/doc/libz3-4/changelog.gz", "/usr/share/doc/libz3-4/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libzimg2@3.0.5+ds1-1+b2", "Name": "libzimg2", "Identifier": { "PURL": "pkg:deb/debian/libzimg2@3.0.5%2Bds1-1%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "8adda00d8162bc7" }, "Version": "3.0.5+ds1", "Release": "1+b2", "Arch": "amd64", "SrcName": "zimg", "SrcVersion": "3.0.5+ds1", "SrcRelease": "1", "Licenses": [ "WTFPL-2", "GPL-3.0-with-autoconf-exception+", "GPL-3.0-only" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libzimg.so.2.0.0", "/usr/share/doc/libzimg2/changelog.Debian.amd64.gz", "/usr/share/doc/libzimg2/changelog.Debian.gz", "/usr/share/doc/libzimg2/changelog.gz", "/usr/share/doc/libzimg2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libzix-0-0@0.6.2-1", "Name": "libzix-0-0", "Identifier": { "PURL": "pkg:deb/debian/libzix-0-0@0.6.2-1?arch=amd64\u0026distro=debian-13.7", "UID": "61975ffe50eba147" }, "Version": "0.6.2", "Release": "1", "Arch": "amd64", "SrcName": "zix", "SrcVersion": "0.6.2", "SrcRelease": "1", "Licenses": [ "ISC", "0BSD" ], "Maintainer": "Debian Multimedia Maintainers \u003cdebian-multimedia@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libzix-0.so.0.6.2", "/usr/share/doc/libzix-0-0/changelog.Debian.gz", "/usr/share/doc/libzix-0-0/changelog.gz", "/usr/share/doc/libzix-0-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libzmq5@4.3.5-1+b3", "Name": "libzmq5", "Identifier": { "PURL": "pkg:deb/debian/libzmq5@4.3.5-1%2Bb3?arch=amd64\u0026distro=debian-13.7", "UID": "e036b3624eb11a90" }, "Version": "4.3.5", "Release": "1+b3", "Arch": "amd64", "SrcName": "zeromq3", "SrcVersion": "4.3.5", "SrcRelease": "1", "Licenses": [ "MPL-2.0", "MIT", "LGPL-2.0-or-later", "LGPL-2.0-only" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbsd0@0.12.2-2", "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libgssapi-krb5-2@1.21.3-5+deb13u1", "libnorm1t64@1.5.9+dfsg-3.1+b2", "libpgm-5.3-0t64@5.3.128~dfsg-2.1+b1", "libsodium23@1.0.18-1+deb13u1", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libzmq.so.5.2.5", "/usr/share/doc/libzmq5/AUTHORS", "/usr/share/doc/libzmq5/NEWS.gz", "/usr/share/doc/libzmq5/changelog.Debian.amd64.gz", "/usr/share/doc/libzmq5/changelog.Debian.gz", "/usr/share/doc/libzmq5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libzstd1@1.5.7+dfsg-1", "Name": "libzstd1", "Identifier": { "PURL": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64\u0026distro=debian-13.7", "UID": "1edaaf7c1b6cdf0a" }, "Version": "1.5.7+dfsg", "Release": "1", "Arch": "amd64", "SrcName": "libzstd", "SrcVersion": "1.5.7+dfsg", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "Zlib", "MIT" ], "Maintainer": "RPM packaging team \u003cteam+pkg-rpm@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libzstd.so.1.5.7", "/usr/share/doc/libzstd1/changelog.Debian.gz", "/usr/share/doc/libzstd1/changelog.gz", "/usr/share/doc/libzstd1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libzvbi-common@0.2.44-1", "Name": "libzvbi-common", "Identifier": { "PURL": "pkg:deb/debian/libzvbi-common@0.2.44-1?arch=all\u0026distro=debian-13.7", "UID": "917e87e40af6256d" }, "Version": "0.2.44", "Release": "1", "Arch": "all", "SrcName": "zvbi", "SrcVersion": "0.2.44", "SrcRelease": "1", "Licenses": [ "GPL-2.0-or-later", "BSD-2-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-2.0-only", "MIT", "BSD-3-Clause", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Ileana Dumitrescu \u003cileanadumitrescu95@gmail.com\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/libzvbi-common/AUTHORS.gz", "/usr/share/doc/libzvbi-common/NEWS.gz", "/usr/share/doc/libzvbi-common/README.md.gz", "/usr/share/doc/libzvbi-common/TODO", "/usr/share/doc/libzvbi-common/changelog.Debian.gz", "/usr/share/doc/libzvbi-common/changelog.gz", "/usr/share/doc/libzvbi-common/copyright", "/usr/share/locale/de/LC_MESSAGES/zvbi.mo", "/usr/share/locale/en@boldquot/LC_MESSAGES/zvbi.mo", "/usr/share/locale/en@quot/LC_MESSAGES/zvbi.mo", "/usr/share/locale/es/LC_MESSAGES/zvbi.mo", "/usr/share/locale/fr/LC_MESSAGES/zvbi.mo", "/usr/share/locale/it/LC_MESSAGES/zvbi.mo", "/usr/share/locale/ka/LC_MESSAGES/zvbi.mo", "/usr/share/locale/nl/LC_MESSAGES/zvbi.mo", "/usr/share/locale/pl/LC_MESSAGES/zvbi.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libzvbi0t64@0.2.44-1", "Name": "libzvbi0t64", "Identifier": { "PURL": "pkg:deb/debian/libzvbi0t64@0.2.44-1?arch=amd64\u0026distro=debian-13.7", "UID": "568d37397a2440f9" }, "Version": "0.2.44", "Release": "1", "Arch": "amd64", "SrcName": "zvbi", "SrcVersion": "0.2.44", "SrcRelease": "1", "Licenses": [ "GPL-2.0-or-later", "BSD-2-Clause", "LGPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-2.0-only", "MIT", "BSD-3-Clause", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Ileana Dumitrescu \u003cileanadumitrescu95@gmail.com\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libpng16-16t64@1.6.48-1+deb13u6", "libzvbi-common@0.2.44-1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libzvbi-chains.so.0.0.0", "/usr/lib/x86_64-linux-gnu/libzvbi.so.0.13.2", "/usr/share/doc/libzvbi0t64/AUTHORS.gz", "/usr/share/doc/libzvbi0t64/NEWS.gz", "/usr/share/doc/libzvbi0t64/README.md.gz", "/usr/share/doc/libzvbi0t64/TODO", "/usr/share/doc/libzvbi0t64/changelog.Debian.gz", "/usr/share/doc/libzvbi0t64/changelog.gz", "/usr/share/doc/libzvbi0t64/copyright", "/usr/share/lintian/overrides/libzvbi0t64" ], "AnalyzedBy": "dpkg" }, { "ID": "login@1:4.16.0-2+really2.41.5-0+deb13u1", "Name": "login", "Identifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "dc99754e767c40b9" }, "Version": "4.16.0-2+really2.41.5", "Release": "0+deb13u1", "Epoch": 1, "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+deb13u1", "libc6@2.41-12+deb13u4", "libcrypt1@1:4.4.38-1", "libpam-modules@1.7.0-5", "libpam-runtime@1.7.0-5", "libpam0g@1.7.0-5" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/login", "/usr/bin/newgrp", "/usr/sbin/nologin", "/usr/share/bash-completion/completions/newgrp", "/usr/share/doc/login/NEWS.Debian.gz", "/usr/share/doc/login/changelog.Debian.gz", "/usr/share/doc/login/changelog.gz", "/usr/share/doc/login/copyright", "/usr/share/lintian/overrides/login", "/usr/share/man/de/man1/login.1.gz", "/usr/share/man/de/man1/newgrp.1.gz", "/usr/share/man/de/man8/nologin.8.gz", "/usr/share/man/fr/man1/login.1.gz", "/usr/share/man/man1/login.1.gz", "/usr/share/man/man1/newgrp.1.gz", "/usr/share/man/man8/nologin.8.gz", "/usr/share/man/pl/man1/login.1.gz", "/usr/share/man/pl/man1/newgrp.1.gz", "/usr/share/man/pl/man8/nologin.8.gz", "/usr/share/man/ro/man1/login.1.gz", "/usr/share/man/ro/man1/newgrp.1.gz", "/usr/share/man/ro/man8/nologin.8.gz", "/usr/share/man/sr/man1/login.1.gz", "/usr/share/man/sr/man1/newgrp.1.gz", "/usr/share/man/sr/man8/nologin.8.gz", "/usr/share/man/uk/man1/login.1.gz", "/usr/share/man/uk/man1/newgrp.1.gz", "/usr/share/man/uk/man8/nologin.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "login.defs@1:4.17.4-2", "Name": "login.defs", "Identifier": { "PURL": "pkg:deb/debian/login.defs@4.17.4-2?arch=all\u0026distro=debian-13.7\u0026epoch=1", "UID": "b6a337588c67d5a3" }, "Version": "4.17.4", "Release": "2", "Epoch": 1, "Arch": "all", "SrcName": "shadow", "SrcVersion": "4.17.4", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-1.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/share/doc/login.defs/NEWS.Debian.gz", "/usr/share/doc/login.defs/changelog.Debian.gz", "/usr/share/doc/login.defs/changelog.gz", "/usr/share/doc/login.defs/copyright", "/usr/share/man/de/man5/login.defs.5.gz", "/usr/share/man/fr/man5/login.defs.5.gz", "/usr/share/man/it/man5/login.defs.5.gz", "/usr/share/man/ja/man5/login.defs.5.gz", "/usr/share/man/man5/login.defs.5.gz", "/usr/share/man/ru/man5/login.defs.5.gz", "/usr/share/man/uk/man5/login.defs.5.gz", "/usr/share/man/zh_CN/man5/login.defs.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "mawk@1.3.4.20250131-1", "Name": "mawk", "Identifier": { "PURL": "pkg:deb/debian/mawk@1.3.4.20250131-1?arch=amd64\u0026distro=debian-13.7", "UID": "fc097c5651b898a7" }, "Version": "1.3.4.20250131", "Release": "1", "Arch": "amd64", "SrcName": "mawk", "SrcVersion": "1.3.4.20250131", "SrcRelease": "1", "Licenses": [ "GPL-2.0-only", "X11", "CC-BY-3.0" ], "Maintainer": "Boyuan Yang \u003cbyang@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/mawk", "/usr/share/doc/mawk/ACKNOWLEDGMENT", "/usr/share/doc/mawk/README", "/usr/share/doc/mawk/changelog.Debian.gz", "/usr/share/doc/mawk/changelog.gz", "/usr/share/doc/mawk/copyright", "/usr/share/doc/mawk/examples/ct_length.awk", "/usr/share/doc/mawk/examples/decl.awk", "/usr/share/doc/mawk/examples/deps.awk", "/usr/share/doc/mawk/examples/eatc.awk", "/usr/share/doc/mawk/examples/gdecl.awk", "/usr/share/doc/mawk/examples/hcal", "/usr/share/doc/mawk/examples/hical", "/usr/share/doc/mawk/examples/nocomment.awk", "/usr/share/doc/mawk/examples/primes.awk", "/usr/share/doc/mawk/examples/qsort.awk", "/usr/share/man/man1/mawk.1.gz", "/usr/share/man/man7/mawk-arrays.7.gz", "/usr/share/man/man7/mawk-code.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "mesa-libgallium@25.0.7-2+deb13u1", "Name": "mesa-libgallium", "Identifier": { "PURL": "pkg:deb/debian/mesa-libgallium@25.0.7-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "6d4f0d4f264bc329" }, "Version": "25.0.7", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "mesa", "SrcVersion": "25.0.7", "SrcRelease": "2+deb13u1", "Licenses": [ "MIT", "GPL-2.0-only", "GPL-1.0-or-later", "BSD-3-google", "Khronos", "Apache-2.0", "BSL-1.0", "MLAA", "SGI", "BSD-2-Clause", "GPL-2.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libdrm-amdgpu1@2.4.124-2", "libdrm-intel1@2.4.124-2", "libdrm2@2.4.124-2", "libelf1t64@0.192-4", "libexpat1@2.9.0-1~deb13u1", "libgcc-s1@14.2.0-19", "libllvm19@1:19.1.7-3+b1", "libsensors5@1:3.6.2-2", "libstdc++6@14.2.0-19", "libx11-xcb1@2:1.8.12-1", "libxcb-dri3-0@1.17.0-2+b1", "libxcb-present0@1.17.0-2+b1", "libxcb-randr0@1.17.0-2+b1", "libxcb-sync1@1.17.0-2+b1", "libxcb-xfixes0@1.17.0-2+b1", "libxcb1@1.17.0-2+b1", "libxshmfence1@1.3.3-1", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgallium-25.0.7-2+deb13u1.so", "/usr/share/bug/mesa-libgallium/control", "/usr/share/bug/mesa-libgallium/script", "/usr/share/doc/mesa-libgallium/changelog.Debian.gz", "/usr/share/doc/mesa-libgallium/changelog.gz", "/usr/share/doc/mesa-libgallium/copyright", "/usr/share/lintian/overrides/mesa-libgallium" ], "AnalyzedBy": "dpkg" }, { "ID": "mount@2.41.5-0+deb13u1", "Name": "mount", "Identifier": { "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d781ec5616a75c78" }, "Version": "2.41.5", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/mount", "/usr/bin/umount", "/usr/sbin/losetup", "/usr/sbin/swapoff", "/usr/sbin/swapon", "/usr/share/bash-completion/completions/losetup", "/usr/share/bash-completion/completions/mount", "/usr/share/bash-completion/completions/swapoff", "/usr/share/bash-completion/completions/swapon", "/usr/share/bash-completion/completions/umount", "/usr/share/doc/mount/NEWS.Debian.gz", "/usr/share/doc/mount/changelog.Debian.gz", "/usr/share/doc/mount/changelog.gz", "/usr/share/doc/mount/copyright", "/usr/share/doc/mount/examples/filesystems", "/usr/share/doc/mount/examples/fstab", "/usr/share/doc/mount/examples/mount.fstab", "/usr/share/doc/mount/mount.txt", "/usr/share/lintian/overrides/mount", "/usr/share/man/man5/fstab.5.gz", "/usr/share/man/man8/losetup.8.gz", "/usr/share/man/man8/mount.8.gz", "/usr/share/man/man8/swapon.8.gz", "/usr/share/man/man8/umount.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "ncurses-base@6.5+20250216-2", "Name": "ncurses-base", "Identifier": { "PURL": "pkg:deb/debian/ncurses-base@6.5%2B20250216-2?arch=all\u0026distro=debian-13.7", "UID": "767a0231348a5cb5" }, "Version": "6.5+20250216", "Release": "2", "Arch": "all", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/share/doc/ncurses-base/FAQ", "/usr/share/doc/ncurses-base/TODO.Debian", "/usr/share/doc/ncurses-base/changelog.Debian.gz", "/usr/share/doc/ncurses-base/changelog.gz", "/usr/share/doc/ncurses-base/copyright", "/usr/share/lintian/overrides/ncurses-base", "/usr/share/tabset/std", "/usr/share/tabset/stdcrt", "/usr/share/tabset/vt100", "/usr/share/tabset/vt300", "/usr/share/terminfo/E/Eterm", "/usr/share/terminfo/a/ansi", "/usr/share/terminfo/c/cons25", "/usr/share/terminfo/c/cygwin", "/usr/share/terminfo/d/dumb", "/usr/share/terminfo/h/hurd", "/usr/share/terminfo/l/linux", "/usr/share/terminfo/m/mach", "/usr/share/terminfo/m/mach-bold", "/usr/share/terminfo/m/mach-color", "/usr/share/terminfo/m/mach-gnu", "/usr/share/terminfo/m/mach-gnu-color", "/usr/share/terminfo/p/pcansi", "/usr/share/terminfo/r/rxvt", "/usr/share/terminfo/r/rxvt-basic", "/usr/share/terminfo/r/rxvt-unicode", "/usr/share/terminfo/r/rxvt-unicode-256color", "/usr/share/terminfo/s/screen", "/usr/share/terminfo/s/screen-256color", "/usr/share/terminfo/s/screen-256color-bce", "/usr/share/terminfo/s/screen-bce", "/usr/share/terminfo/s/screen-s", "/usr/share/terminfo/s/screen-w", "/usr/share/terminfo/s/screen.xterm-256color", "/usr/share/terminfo/s/sun", "/usr/share/terminfo/t/tmux", "/usr/share/terminfo/t/tmux-256color", "/usr/share/terminfo/v/vt100", "/usr/share/terminfo/v/vt102", "/usr/share/terminfo/v/vt220", "/usr/share/terminfo/v/vt52", "/usr/share/terminfo/w/wsvt25", "/usr/share/terminfo/w/wsvt25m", "/usr/share/terminfo/x/xterm", "/usr/share/terminfo/x/xterm-256color", "/usr/share/terminfo/x/xterm-color", "/usr/share/terminfo/x/xterm-mono", "/usr/share/terminfo/x/xterm-r5", "/usr/share/terminfo/x/xterm-r6", "/usr/share/terminfo/x/xterm-vt220", "/usr/share/terminfo/x/xterm-xfree86" ], "AnalyzedBy": "dpkg" }, { "ID": "ncurses-bin@6.5+20250216-2", "Name": "ncurses-bin", "Identifier": { "PURL": "pkg:deb/debian/ncurses-bin@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7", "UID": "5b541563cf6587e5" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/clear", "/usr/bin/infocmp", "/usr/bin/tabs", "/usr/bin/tic", "/usr/bin/toe", "/usr/bin/tput", "/usr/bin/tset", "/usr/share/doc/ncurses-bin/changelog.Debian.gz", "/usr/share/doc/ncurses-bin/changelog.gz", "/usr/share/doc/ncurses-bin/copyright", "/usr/share/man/man1/captoinfo.1.gz", "/usr/share/man/man1/clear.1.gz", "/usr/share/man/man1/infocmp.1.gz", "/usr/share/man/man1/infotocap.1.gz", "/usr/share/man/man1/tabs.1.gz", "/usr/share/man/man1/tic.1.gz", "/usr/share/man/man1/toe.1.gz", "/usr/share/man/man1/tput.1.gz", "/usr/share/man/man1/tset.1.gz", "/usr/share/man/man5/scr_dump.5.gz", "/usr/share/man/man5/term.5.gz", "/usr/share/man/man5/terminfo.5.gz", "/usr/share/man/man5/user_caps.5.gz", "/usr/share/man/man7/term.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "netbase@6.5", "Name": "netbase", "Identifier": { "PURL": "pkg:deb/debian/netbase@6.5?arch=all\u0026distro=debian-13.7", "UID": "9929ff265179fc61" }, "Version": "6.5", "Arch": "all", "SrcName": "netbase", "SrcVersion": "6.5", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:15239e16ba8b67101747ebe42fecc10c2c0cd24e43645959add815500c1d6769" }, "InstalledFiles": [ "/usr/share/doc/netbase/changelog.gz", "/usr/share/doc/netbase/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "ocl-icd-libopencl1@2.3.3-1", "Name": "ocl-icd-libopencl1", "Identifier": { "PURL": "pkg:deb/debian/ocl-icd-libopencl1@2.3.3-1?arch=amd64\u0026distro=debian-13.7", "UID": "ee7cbe1903dedac" }, "Version": "2.3.3", "Release": "1", "Arch": "amd64", "SrcName": "ocl-icd", "SrcVersion": "2.3.3", "SrcRelease": "1", "Licenses": [ "BSD-2-Clause", "Apache-2.0" ], "Maintainer": "Debian OpenCL Maintainers \u003cpkg-opencl-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libOpenCL.so.1.0.0", "/usr/share/doc-base/ocl-icd-libopencl1.ocl-icd-libopencl1", "/usr/share/doc/ocl-icd-libopencl1/README", "/usr/share/doc/ocl-icd-libopencl1/README.Debian.gz", "/usr/share/doc/ocl-icd-libopencl1/changelog.Debian.gz", "/usr/share/doc/ocl-icd-libopencl1/changelog.gz", "/usr/share/doc/ocl-icd-libopencl1/copyright", "/usr/share/doc/ocl-icd-libopencl1/html/libOpenCL.html", "/usr/share/lintian/overrides/ocl-icd-libopencl1", "/usr/share/man/man7/libOpenCL.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "openssl@3.5.7-1~deb13u3", "Name": "openssl", "Identifier": { "PURL": "pkg:deb/debian/openssl@3.5.7-1~deb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "8d6c820bcbcea8d1" }, "Version": "3.5.7", "Release": "1~deb13u3", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.7", "SrcRelease": "1~deb13u3", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libssl3t64@3.5.7-1~deb13u3" ], "Layer": { "DiffID": "sha256:15239e16ba8b67101747ebe42fecc10c2c0cd24e43645959add815500c1d6769" }, "InstalledFiles": [ "/usr/bin/c_rehash", "/usr/bin/openssl", "/usr/lib/ssl/misc/CA.pl", "/usr/lib/ssl/misc/tsget.pl", "/usr/share/doc/openssl/HOWTO/certificates.txt.gz", "/usr/share/doc/openssl/HOWTO/documenting-functions-and-macros.md.gz", "/usr/share/doc/openssl/HOWTO/keys.txt.gz", "/usr/share/doc/openssl/NEWS.md.gz", "/usr/share/doc/openssl/README-ENGINES.md.gz", "/usr/share/doc/openssl/README-PROVIDERS.md.gz", "/usr/share/doc/openssl/README-QUIC.md.gz", "/usr/share/doc/openssl/README.Debian", "/usr/share/doc/openssl/README.md.gz", "/usr/share/doc/openssl/changelog.Debian.gz", "/usr/share/doc/openssl/changelog.gz", "/usr/share/doc/openssl/copyright", "/usr/share/doc/openssl/fingerprints.txt", "/usr/share/lintian/overrides/openssl", "/usr/share/man/man1/CA.pl.1ssl.gz", "/usr/share/man/man1/openssl-asn1parse.1ssl.gz", "/usr/share/man/man1/openssl-ca.1ssl.gz", "/usr/share/man/man1/openssl-ciphers.1ssl.gz", "/usr/share/man/man1/openssl-cmds.1ssl.gz", "/usr/share/man/man1/openssl-cmp.1ssl.gz", "/usr/share/man/man1/openssl-cms.1ssl.gz", "/usr/share/man/man1/openssl-crl.1ssl.gz", "/usr/share/man/man1/openssl-crl2pkcs7.1ssl.gz", "/usr/share/man/man1/openssl-dgst.1ssl.gz", "/usr/share/man/man1/openssl-dhparam.1ssl.gz", "/usr/share/man/man1/openssl-dsa.1ssl.gz", "/usr/share/man/man1/openssl-dsaparam.1ssl.gz", "/usr/share/man/man1/openssl-ec.1ssl.gz", "/usr/share/man/man1/openssl-ecparam.1ssl.gz", "/usr/share/man/man1/openssl-enc.1ssl.gz", "/usr/share/man/man1/openssl-engine.1ssl.gz", "/usr/share/man/man1/openssl-errstr.1ssl.gz", "/usr/share/man/man1/openssl-fipsinstall.1ssl.gz", "/usr/share/man/man1/openssl-format-options.1ssl.gz", "/usr/share/man/man1/openssl-gendsa.1ssl.gz", "/usr/share/man/man1/openssl-genpkey.1ssl.gz", "/usr/share/man/man1/openssl-genrsa.1ssl.gz", "/usr/share/man/man1/openssl-info.1ssl.gz", "/usr/share/man/man1/openssl-kdf.1ssl.gz", "/usr/share/man/man1/openssl-list.1ssl.gz", "/usr/share/man/man1/openssl-mac.1ssl.gz", "/usr/share/man/man1/openssl-namedisplay-options.1ssl.gz", "/usr/share/man/man1/openssl-nseq.1ssl.gz", "/usr/share/man/man1/openssl-ocsp.1ssl.gz", "/usr/share/man/man1/openssl-passphrase-options.1ssl.gz", "/usr/share/man/man1/openssl-passwd.1ssl.gz", "/usr/share/man/man1/openssl-pkcs12.1ssl.gz", "/usr/share/man/man1/openssl-pkcs7.1ssl.gz", "/usr/share/man/man1/openssl-pkcs8.1ssl.gz", "/usr/share/man/man1/openssl-pkey.1ssl.gz", "/usr/share/man/man1/openssl-pkeyparam.1ssl.gz", "/usr/share/man/man1/openssl-pkeyutl.1ssl.gz", "/usr/share/man/man1/openssl-prime.1ssl.gz", "/usr/share/man/man1/openssl-rand.1ssl.gz", "/usr/share/man/man1/openssl-rehash.1ssl.gz", "/usr/share/man/man1/openssl-req.1ssl.gz", "/usr/share/man/man1/openssl-rsa.1ssl.gz", "/usr/share/man/man1/openssl-rsautl.1ssl.gz", "/usr/share/man/man1/openssl-s_client.1ssl.gz", "/usr/share/man/man1/openssl-s_server.1ssl.gz", "/usr/share/man/man1/openssl-s_time.1ssl.gz", "/usr/share/man/man1/openssl-sess_id.1ssl.gz", "/usr/share/man/man1/openssl-skeyutl.1ssl.gz", "/usr/share/man/man1/openssl-smime.1ssl.gz", "/usr/share/man/man1/openssl-speed.1ssl.gz", "/usr/share/man/man1/openssl-spkac.1ssl.gz", "/usr/share/man/man1/openssl-srp.1ssl.gz", "/usr/share/man/man1/openssl-storeutl.1ssl.gz", "/usr/share/man/man1/openssl-ts.1ssl.gz", "/usr/share/man/man1/openssl-verification-options.1ssl.gz", "/usr/share/man/man1/openssl-verify.1ssl.gz", "/usr/share/man/man1/openssl-version.1ssl.gz", "/usr/share/man/man1/openssl-x509.1ssl.gz", "/usr/share/man/man1/openssl.1ssl.gz", "/usr/share/man/man1/tsget.1ssl.gz", "/usr/share/man/man5/config.5ssl.gz", "/usr/share/man/man5/fips_config.5ssl.gz", "/usr/share/man/man5/x509v3_config.5ssl.gz", "/usr/share/man/man7/EVP_ASYM_CIPHER-RSA.7ssl.gz", "/usr/share/man/man7/EVP_ASYM_CIPHER-SM2.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-AES.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-ARIA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-BLOWFISH.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CAMELLIA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CAST.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CHACHA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-DES.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-IDEA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-NULL.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC2.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC4.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC5.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-SEED.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-SM4.7ssl.gz", "/usr/share/man/man7/EVP_KDF-ARGON2.7ssl.gz", "/usr/share/man/man7/EVP_KDF-HKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-HMAC-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_KDF-KB.7ssl.gz", "/usr/share/man/man7/EVP_KDF-KRB5KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PBKDF1.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PBKDF2.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PKCS12KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PVKKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SCRYPT.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SS.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SSHKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-TLS13_KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-TLS1_PRF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X942-ASN1.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X942-CONCAT.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X963.7ssl.gz", "/usr/share/man/man7/EVP_KEM-EC.7ssl.gz", "/usr/share/man/man7/EVP_KEM-ML-KEM.7ssl.gz", "/usr/share/man/man7/EVP_KEM-RSA.7ssl.gz", "/usr/share/man/man7/EVP_KEM-X25519.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-DH.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-ECDH.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-X25519.7ssl.gz", "/usr/share/man/man7/EVP_MAC-BLAKE2.7ssl.gz", "/usr/share/man/man7/EVP_MAC-CMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-GMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-KMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-Poly1305.7ssl.gz", "/usr/share/man/man7/EVP_MAC-Siphash.7ssl.gz", "/usr/share/man/man7/EVP_MD-BLAKE2.7ssl.gz", "/usr/share/man/man7/EVP_MD-KECCAK.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD2.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD4.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD5-SHA1.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD5.7ssl.gz", "/usr/share/man/man7/EVP_MD-MDC2.7ssl.gz", "/usr/share/man/man7/EVP_MD-NULL.7ssl.gz", "/usr/share/man/man7/EVP_MD-RIPEMD160.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA1.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA2.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA3.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHAKE.7ssl.gz", "/usr/share/man/man7/EVP_MD-SM3.7ssl.gz", "/usr/share/man/man7/EVP_MD-WHIRLPOOL.7ssl.gz", "/usr/share/man/man7/EVP_MD-common.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-DH.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-EC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-FFC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-ML-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-ML-KEM.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-RSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-SLH-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-SM2.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-X25519.7ssl.gz", "/usr/share/man/man7/EVP_RAND-CRNG-TEST.7ssl.gz", "/usr/share/man/man7/EVP_RAND-CTR-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-HASH-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-HMAC-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-JITTER.7ssl.gz", "/usr/share/man/man7/EVP_RAND-SEED-SRC.7ssl.gz", "/usr/share/man/man7/EVP_RAND-TEST-RAND.7ssl.gz", "/usr/share/man/man7/EVP_RAND.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-DSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ECDSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ED25519.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ML-DSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-RSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-SLH-DSA.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-FIPS.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-base.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-default.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-legacy.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-null.7ssl.gz", "/usr/share/man/man7/OSSL_STORE-winstore.7ssl.gz", "/usr/share/man/man7/RAND.7ssl.gz", "/usr/share/man/man7/RSA-PSS.7ssl.gz", "/usr/share/man/man7/X25519.7ssl.gz", "/usr/share/man/man7/bio.7ssl.gz", "/usr/share/man/man7/ct.7ssl.gz", "/usr/share/man/man7/des_modes.7ssl.gz", "/usr/share/man/man7/evp.7ssl.gz", "/usr/share/man/man7/fips_module.7ssl.gz", "/usr/share/man/man7/life_cycle-cipher.7ssl.gz", "/usr/share/man/man7/life_cycle-digest.7ssl.gz", "/usr/share/man/man7/life_cycle-kdf.7ssl.gz", "/usr/share/man/man7/life_cycle-mac.7ssl.gz", "/usr/share/man/man7/life_cycle-pkey.7ssl.gz", "/usr/share/man/man7/life_cycle-rand.7ssl.gz", "/usr/share/man/man7/openssl-core.h.7ssl.gz", "/usr/share/man/man7/openssl-core_dispatch.h.7ssl.gz", "/usr/share/man/man7/openssl-core_names.h.7ssl.gz", "/usr/share/man/man7/openssl-env.7ssl.gz", "/usr/share/man/man7/openssl-glossary.7ssl.gz", "/usr/share/man/man7/openssl-qlog.7ssl.gz", "/usr/share/man/man7/openssl-quic-concurrency.7ssl.gz", "/usr/share/man/man7/openssl-quic.7ssl.gz", "/usr/share/man/man7/openssl-threads.7ssl.gz", "/usr/share/man/man7/openssl_user_macros.7ssl.gz", "/usr/share/man/man7/ossl-guide-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libcrypto-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libraries-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libssl-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-migration.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-client-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-client-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-multi-stream.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-server-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-server-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-client-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-client-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-server-block.7ssl.gz", "/usr/share/man/man7/ossl_store-file.7ssl.gz", "/usr/share/man/man7/ossl_store.7ssl.gz", "/usr/share/man/man7/passphrase-encoding.7ssl.gz", "/usr/share/man/man7/property.7ssl.gz", "/usr/share/man/man7/provider-asym_cipher.7ssl.gz", "/usr/share/man/man7/provider-base.7ssl.gz", "/usr/share/man/man7/provider-cipher.7ssl.gz", "/usr/share/man/man7/provider-decoder.7ssl.gz", "/usr/share/man/man7/provider-digest.7ssl.gz", "/usr/share/man/man7/provider-encoder.7ssl.gz", "/usr/share/man/man7/provider-kdf.7ssl.gz", "/usr/share/man/man7/provider-kem.7ssl.gz", "/usr/share/man/man7/provider-keyexch.7ssl.gz", "/usr/share/man/man7/provider-keymgmt.7ssl.gz", "/usr/share/man/man7/provider-mac.7ssl.gz", "/usr/share/man/man7/provider-object.7ssl.gz", "/usr/share/man/man7/provider-rand.7ssl.gz", "/usr/share/man/man7/provider-signature.7ssl.gz", "/usr/share/man/man7/provider-skeymgmt.7ssl.gz", "/usr/share/man/man7/provider-storemgmt.7ssl.gz", "/usr/share/man/man7/provider.7ssl.gz", "/usr/share/man/man7/proxy-certificates.7ssl.gz", "/usr/share/man/man7/x509.7ssl.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "openssl-provider-legacy@3.5.7-1~deb13u3", "Name": "openssl-provider-legacy", "Identifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.7-1~deb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "abf96993e584b023" }, "Version": "3.5.7", "Release": "1~deb13u3", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.7", "SrcRelease": "1~deb13u3", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libssl3t64@3.5.7-1~deb13u3" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so", "/usr/share/doc/openssl-provider-legacy/changelog.Debian.gz", "/usr/share/doc/openssl-provider-legacy/changelog.gz", "/usr/share/doc/openssl-provider-legacy/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "passwd@1:4.17.4-2", "Name": "passwd", "Identifier": { "PURL": "pkg:deb/debian/passwd@4.17.4-2?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "7e83ab5858a7a76d" }, "Version": "4.17.4", "Release": "2", "Epoch": 1, "Arch": "amd64", "SrcName": "shadow", "SrcVersion": "4.17.4", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-1.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "base-passwd@3.6.7", "libacl1@2.3.2-2+b1", "libattr1@1:2.5.2-3", "libaudit1@1:4.0.2-2+deb13u1", "libbsd0@0.12.2-2", "libc6@2.41-12+deb13u4", "libcrypt1@1:4.4.38-1", "libpam-modules@1.7.0-5", "libpam0g@1.7.0-5", "libselinux1@3.8.1-1", "libsemanage2@3.8.1-1", "login.defs@1:4.17.4-2" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/chage", "/usr/bin/chfn", "/usr/bin/chsh", "/usr/bin/expiry", "/usr/bin/gpasswd", "/usr/bin/passwd", "/usr/lib/tmpfiles.d/passwd.conf", "/usr/sbin/chgpasswd", "/usr/sbin/chpasswd", "/usr/sbin/groupadd", "/usr/sbin/groupdel", "/usr/sbin/groupmod", "/usr/sbin/grpck", "/usr/sbin/grpconv", "/usr/sbin/grpunconv", "/usr/sbin/newusers", "/usr/sbin/pwck", "/usr/sbin/pwconv", "/usr/sbin/pwunconv", "/usr/sbin/shadowconfig", "/usr/sbin/useradd", "/usr/sbin/userdel", "/usr/sbin/usermod", "/usr/sbin/vipw", "/usr/share/doc/passwd/NEWS.Debian.gz", "/usr/share/doc/passwd/README.Debian", "/usr/share/doc/passwd/TODO.Debian", "/usr/share/doc/passwd/changelog.Debian.gz", "/usr/share/doc/passwd/changelog.gz", "/usr/share/doc/passwd/copyright", "/usr/share/doc/passwd/examples/passwd.expire.cron", "/usr/share/lintian/overrides/passwd", "/usr/share/locale/bs/LC_MESSAGES/shadow.mo", "/usr/share/locale/ca/LC_MESSAGES/shadow.mo", "/usr/share/locale/cs/LC_MESSAGES/shadow.mo", "/usr/share/locale/da/LC_MESSAGES/shadow.mo", "/usr/share/locale/de/LC_MESSAGES/shadow.mo", "/usr/share/locale/dz/LC_MESSAGES/shadow.mo", "/usr/share/locale/el/LC_MESSAGES/shadow.mo", "/usr/share/locale/es/LC_MESSAGES/shadow.mo", "/usr/share/locale/eu/LC_MESSAGES/shadow.mo", "/usr/share/locale/fi/LC_MESSAGES/shadow.mo", "/usr/share/locale/fr/LC_MESSAGES/shadow.mo", "/usr/share/locale/gl/LC_MESSAGES/shadow.mo", "/usr/share/locale/he/LC_MESSAGES/shadow.mo", "/usr/share/locale/hu/LC_MESSAGES/shadow.mo", "/usr/share/locale/id/LC_MESSAGES/shadow.mo", "/usr/share/locale/it/LC_MESSAGES/shadow.mo", "/usr/share/locale/ja/LC_MESSAGES/shadow.mo", "/usr/share/locale/ka/LC_MESSAGES/shadow.mo", "/usr/share/locale/kk/LC_MESSAGES/shadow.mo", "/usr/share/locale/km/LC_MESSAGES/shadow.mo", "/usr/share/locale/ko/LC_MESSAGES/shadow.mo", "/usr/share/locale/nb/LC_MESSAGES/shadow.mo", "/usr/share/locale/ne/LC_MESSAGES/shadow.mo", "/usr/share/locale/nl/LC_MESSAGES/shadow.mo", "/usr/share/locale/nn/LC_MESSAGES/shadow.mo", "/usr/share/locale/pl/LC_MESSAGES/shadow.mo", "/usr/share/locale/pt/LC_MESSAGES/shadow.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/shadow.mo", "/usr/share/locale/ro/LC_MESSAGES/shadow.mo", "/usr/share/locale/ru/LC_MESSAGES/shadow.mo", "/usr/share/locale/sk/LC_MESSAGES/shadow.mo", "/usr/share/locale/sq/LC_MESSAGES/shadow.mo", "/usr/share/locale/sv/LC_MESSAGES/shadow.mo", "/usr/share/locale/tl/LC_MESSAGES/shadow.mo", "/usr/share/locale/tr/LC_MESSAGES/shadow.mo", "/usr/share/locale/uk/LC_MESSAGES/shadow.mo", "/usr/share/locale/vi/LC_MESSAGES/shadow.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/shadow.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/shadow.mo", "/usr/share/man/cs/man1/expiry.1.gz", "/usr/share/man/cs/man1/gpasswd.1.gz", "/usr/share/man/cs/man5/gshadow.5.gz", "/usr/share/man/cs/man5/passwd.5.gz", "/usr/share/man/cs/man5/shadow.5.gz", "/usr/share/man/cs/man8/groupadd.8.gz", "/usr/share/man/cs/man8/groupdel.8.gz", "/usr/share/man/cs/man8/groupmod.8.gz", "/usr/share/man/cs/man8/grpck.8.gz", "/usr/share/man/cs/man8/vipw.8.gz", "/usr/share/man/da/man1/chfn.1.gz", "/usr/share/man/da/man5/gshadow.5.gz", "/usr/share/man/da/man8/groupdel.8.gz", "/usr/share/man/da/man8/vipw.8.gz", "/usr/share/man/de/man1/chage.1.gz", "/usr/share/man/de/man1/chfn.1.gz", "/usr/share/man/de/man1/chsh.1.gz", "/usr/share/man/de/man1/expiry.1.gz", "/usr/share/man/de/man1/gpasswd.1.gz", "/usr/share/man/de/man1/passwd.1.gz", "/usr/share/man/de/man5/gshadow.5.gz", "/usr/share/man/de/man5/passwd.5.gz", "/usr/share/man/de/man5/shadow.5.gz", "/usr/share/man/de/man8/chgpasswd.8.gz", "/usr/share/man/de/man8/chpasswd.8.gz", "/usr/share/man/de/man8/groupadd.8.gz", "/usr/share/man/de/man8/groupdel.8.gz", "/usr/share/man/de/man8/groupmod.8.gz", "/usr/share/man/de/man8/grpck.8.gz", "/usr/share/man/de/man8/newusers.8.gz", "/usr/share/man/de/man8/pwck.8.gz", "/usr/share/man/de/man8/pwconv.8.gz", "/usr/share/man/de/man8/useradd.8.gz", "/usr/share/man/de/man8/userdel.8.gz", "/usr/share/man/de/man8/usermod.8.gz", "/usr/share/man/de/man8/vipw.8.gz", "/usr/share/man/fi/man1/chfn.1.gz", "/usr/share/man/fi/man1/chsh.1.gz", "/usr/share/man/fr/man1/chage.1.gz", "/usr/share/man/fr/man1/chfn.1.gz", "/usr/share/man/fr/man1/chsh.1.gz", "/usr/share/man/fr/man1/expiry.1.gz", "/usr/share/man/fr/man1/gpasswd.1.gz", "/usr/share/man/fr/man1/passwd.1.gz", "/usr/share/man/fr/man5/gshadow.5.gz", "/usr/share/man/fr/man5/passwd.5.gz", "/usr/share/man/fr/man5/shadow.5.gz", "/usr/share/man/fr/man5/subgid.5.gz", "/usr/share/man/fr/man5/subuid.5.gz", "/usr/share/man/fr/man8/chgpasswd.8.gz", "/usr/share/man/fr/man8/chpasswd.8.gz", "/usr/share/man/fr/man8/groupadd.8.gz", "/usr/share/man/fr/man8/groupdel.8.gz", "/usr/share/man/fr/man8/groupmod.8.gz", "/usr/share/man/fr/man8/grpck.8.gz", "/usr/share/man/fr/man8/newusers.8.gz", "/usr/share/man/fr/man8/pwck.8.gz", "/usr/share/man/fr/man8/pwconv.8.gz", "/usr/share/man/fr/man8/useradd.8.gz", "/usr/share/man/fr/man8/userdel.8.gz", "/usr/share/man/fr/man8/usermod.8.gz", "/usr/share/man/fr/man8/vipw.8.gz", "/usr/share/man/hu/man1/chsh.1.gz", "/usr/share/man/hu/man1/gpasswd.1.gz", "/usr/share/man/hu/man1/passwd.1.gz", "/usr/share/man/hu/man5/passwd.5.gz", "/usr/share/man/id/man1/chsh.1.gz", "/usr/share/man/id/man8/useradd.8.gz", "/usr/share/man/it/man1/chage.1.gz", "/usr/share/man/it/man1/chfn.1.gz", "/usr/share/man/it/man1/chsh.1.gz", "/usr/share/man/it/man1/expiry.1.gz", "/usr/share/man/it/man1/gpasswd.1.gz", "/usr/share/man/it/man1/passwd.1.gz", "/usr/share/man/it/man5/gshadow.5.gz", "/usr/share/man/it/man5/passwd.5.gz", "/usr/share/man/it/man5/shadow.5.gz", "/usr/share/man/it/man8/chgpasswd.8.gz", "/usr/share/man/it/man8/chpasswd.8.gz", "/usr/share/man/it/man8/groupadd.8.gz", "/usr/share/man/it/man8/groupdel.8.gz", "/usr/share/man/it/man8/groupmod.8.gz", "/usr/share/man/it/man8/grpck.8.gz", "/usr/share/man/it/man8/newusers.8.gz", "/usr/share/man/it/man8/pwck.8.gz", "/usr/share/man/it/man8/pwconv.8.gz", "/usr/share/man/it/man8/useradd.8.gz", "/usr/share/man/it/man8/userdel.8.gz", "/usr/share/man/it/man8/usermod.8.gz", "/usr/share/man/it/man8/vipw.8.gz", "/usr/share/man/ja/man1/chage.1.gz", "/usr/share/man/ja/man1/chfn.1.gz", "/usr/share/man/ja/man1/chsh.1.gz", "/usr/share/man/ja/man1/expiry.1.gz", "/usr/share/man/ja/man1/gpasswd.1.gz", "/usr/share/man/ja/man1/passwd.1.gz", "/usr/share/man/ja/man5/passwd.5.gz", "/usr/share/man/ja/man5/shadow.5.gz", "/usr/share/man/ja/man8/chpasswd.8.gz", "/usr/share/man/ja/man8/groupadd.8.gz", "/usr/share/man/ja/man8/groupdel.8.gz", "/usr/share/man/ja/man8/groupmod.8.gz", "/usr/share/man/ja/man8/grpck.8.gz", "/usr/share/man/ja/man8/newusers.8.gz", "/usr/share/man/ja/man8/pwck.8.gz", "/usr/share/man/ja/man8/pwconv.8.gz", "/usr/share/man/ja/man8/useradd.8.gz", "/usr/share/man/ja/man8/userdel.8.gz", "/usr/share/man/ja/man8/usermod.8.gz", "/usr/share/man/ja/man8/vipw.8.gz", "/usr/share/man/ko/man1/chfn.1.gz", "/usr/share/man/ko/man1/chsh.1.gz", "/usr/share/man/ko/man5/passwd.5.gz", "/usr/share/man/ko/man8/vipw.8.gz", "/usr/share/man/man1/chage.1.gz", "/usr/share/man/man1/chfn.1.gz", "/usr/share/man/man1/chsh.1.gz", "/usr/share/man/man1/expiry.1.gz", "/usr/share/man/man1/gpasswd.1.gz", "/usr/share/man/man1/passwd.1.gz", "/usr/share/man/man5/gshadow.5.gz", "/usr/share/man/man5/passwd.5.gz", "/usr/share/man/man5/shadow.5.gz", "/usr/share/man/man5/subgid.5.gz", "/usr/share/man/man5/subuid.5.gz", "/usr/share/man/man8/chgpasswd.8.gz", "/usr/share/man/man8/chpasswd.8.gz", "/usr/share/man/man8/groupadd.8.gz", "/usr/share/man/man8/groupdel.8.gz", "/usr/share/man/man8/groupmod.8.gz", "/usr/share/man/man8/grpck.8.gz", "/usr/share/man/man8/newusers.8.gz", "/usr/share/man/man8/pwck.8.gz", "/usr/share/man/man8/pwconv.8.gz", "/usr/share/man/man8/shadowconfig.8.gz", "/usr/share/man/man8/useradd.8.gz", "/usr/share/man/man8/userdel.8.gz", "/usr/share/man/man8/usermod.8.gz", "/usr/share/man/man8/vipw.8.gz", "/usr/share/man/pl/man1/chage.1.gz", "/usr/share/man/pl/man1/chsh.1.gz", "/usr/share/man/pl/man1/expiry.1.gz", "/usr/share/man/pl/man8/groupadd.8.gz", "/usr/share/man/pl/man8/groupdel.8.gz", "/usr/share/man/pl/man8/groupmod.8.gz", "/usr/share/man/pl/man8/grpck.8.gz", "/usr/share/man/pl/man8/userdel.8.gz", "/usr/share/man/pl/man8/usermod.8.gz", "/usr/share/man/pl/man8/vipw.8.gz", "/usr/share/man/pt_BR/man1/gpasswd.1.gz", "/usr/share/man/pt_BR/man5/passwd.5.gz", "/usr/share/man/pt_BR/man5/shadow.5.gz", "/usr/share/man/pt_BR/man8/groupadd.8.gz", "/usr/share/man/pt_BR/man8/groupdel.8.gz", "/usr/share/man/pt_BR/man8/groupmod.8.gz", "/usr/share/man/ru/man1/chage.1.gz", "/usr/share/man/ru/man1/chfn.1.gz", "/usr/share/man/ru/man1/chsh.1.gz", "/usr/share/man/ru/man1/expiry.1.gz", "/usr/share/man/ru/man1/gpasswd.1.gz", "/usr/share/man/ru/man1/passwd.1.gz", "/usr/share/man/ru/man5/gshadow.5.gz", "/usr/share/man/ru/man5/passwd.5.gz", "/usr/share/man/ru/man5/shadow.5.gz", "/usr/share/man/ru/man8/chgpasswd.8.gz", "/usr/share/man/ru/man8/chpasswd.8.gz", "/usr/share/man/ru/man8/groupadd.8.gz", "/usr/share/man/ru/man8/groupdel.8.gz", "/usr/share/man/ru/man8/groupmod.8.gz", "/usr/share/man/ru/man8/grpck.8.gz", "/usr/share/man/ru/man8/newusers.8.gz", "/usr/share/man/ru/man8/pwck.8.gz", "/usr/share/man/ru/man8/pwconv.8.gz", "/usr/share/man/ru/man8/useradd.8.gz", "/usr/share/man/ru/man8/userdel.8.gz", "/usr/share/man/ru/man8/usermod.8.gz", "/usr/share/man/ru/man8/vipw.8.gz", "/usr/share/man/sv/man1/chage.1.gz", "/usr/share/man/sv/man1/chsh.1.gz", "/usr/share/man/sv/man1/expiry.1.gz", "/usr/share/man/sv/man1/passwd.1.gz", "/usr/share/man/sv/man5/gshadow.5.gz", "/usr/share/man/sv/man5/passwd.5.gz", "/usr/share/man/sv/man8/groupadd.8.gz", "/usr/share/man/sv/man8/groupdel.8.gz", "/usr/share/man/sv/man8/groupmod.8.gz", "/usr/share/man/sv/man8/grpck.8.gz", "/usr/share/man/sv/man8/pwck.8.gz", "/usr/share/man/sv/man8/userdel.8.gz", "/usr/share/man/sv/man8/vipw.8.gz", "/usr/share/man/tr/man1/chage.1.gz", "/usr/share/man/tr/man1/chfn.1.gz", "/usr/share/man/tr/man1/passwd.1.gz", "/usr/share/man/tr/man5/passwd.5.gz", "/usr/share/man/tr/man5/shadow.5.gz", "/usr/share/man/tr/man8/groupadd.8.gz", "/usr/share/man/tr/man8/groupdel.8.gz", "/usr/share/man/tr/man8/groupmod.8.gz", "/usr/share/man/tr/man8/useradd.8.gz", "/usr/share/man/tr/man8/userdel.8.gz", "/usr/share/man/tr/man8/usermod.8.gz", "/usr/share/man/uk/man1/chage.1.gz", "/usr/share/man/uk/man1/chfn.1.gz", "/usr/share/man/uk/man1/chsh.1.gz", "/usr/share/man/uk/man1/expiry.1.gz", "/usr/share/man/uk/man1/gpasswd.1.gz", "/usr/share/man/uk/man1/passwd.1.gz", "/usr/share/man/uk/man5/gshadow.5.gz", "/usr/share/man/uk/man5/passwd.5.gz", "/usr/share/man/uk/man5/shadow.5.gz", "/usr/share/man/uk/man8/chgpasswd.8.gz", "/usr/share/man/uk/man8/chpasswd.8.gz", "/usr/share/man/uk/man8/groupadd.8.gz", "/usr/share/man/uk/man8/groupdel.8.gz", "/usr/share/man/uk/man8/groupmod.8.gz", "/usr/share/man/uk/man8/grpck.8.gz", "/usr/share/man/uk/man8/newusers.8.gz", "/usr/share/man/uk/man8/pwck.8.gz", "/usr/share/man/uk/man8/pwconv.8.gz", "/usr/share/man/uk/man8/useradd.8.gz", "/usr/share/man/uk/man8/userdel.8.gz", "/usr/share/man/uk/man8/usermod.8.gz", "/usr/share/man/uk/man8/vipw.8.gz", "/usr/share/man/zh_CN/man1/chage.1.gz", "/usr/share/man/zh_CN/man1/chfn.1.gz", "/usr/share/man/zh_CN/man1/chsh.1.gz", "/usr/share/man/zh_CN/man1/expiry.1.gz", "/usr/share/man/zh_CN/man1/gpasswd.1.gz", "/usr/share/man/zh_CN/man1/passwd.1.gz", "/usr/share/man/zh_CN/man5/gshadow.5.gz", "/usr/share/man/zh_CN/man5/passwd.5.gz", "/usr/share/man/zh_CN/man5/shadow.5.gz", "/usr/share/man/zh_CN/man8/chgpasswd.8.gz", "/usr/share/man/zh_CN/man8/chpasswd.8.gz", "/usr/share/man/zh_CN/man8/groupadd.8.gz", "/usr/share/man/zh_CN/man8/groupdel.8.gz", "/usr/share/man/zh_CN/man8/groupmod.8.gz", "/usr/share/man/zh_CN/man8/grpck.8.gz", "/usr/share/man/zh_CN/man8/newusers.8.gz", "/usr/share/man/zh_CN/man8/pwck.8.gz", "/usr/share/man/zh_CN/man8/pwconv.8.gz", "/usr/share/man/zh_CN/man8/useradd.8.gz", "/usr/share/man/zh_CN/man8/userdel.8.gz", "/usr/share/man/zh_CN/man8/usermod.8.gz", "/usr/share/man/zh_CN/man8/vipw.8.gz", "/usr/share/man/zh_TW/man1/chfn.1.gz", "/usr/share/man/zh_TW/man1/chsh.1.gz", "/usr/share/man/zh_TW/man5/passwd.5.gz", "/usr/share/man/zh_TW/man8/chpasswd.8.gz", "/usr/share/man/zh_TW/man8/groupadd.8.gz", "/usr/share/man/zh_TW/man8/groupdel.8.gz", "/usr/share/man/zh_TW/man8/groupmod.8.gz", "/usr/share/man/zh_TW/man8/useradd.8.gz", "/usr/share/man/zh_TW/man8/userdel.8.gz", "/usr/share/man/zh_TW/man8/usermod.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "perl-base@5.40.1-6+deb13u1", "Name": "perl-base", "Identifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e64a633beeac3a7d" }, "Version": "5.40.1", "Release": "6+deb13u1", "Arch": "amd64", "SrcName": "perl", "SrcVersion": "5.40.1", "SrcRelease": "6+deb13u1", "Licenses": [ "GPL-1.0-or-later", "Artistic-2.0", "MIT", "REGCOMP", "GPL-2.0-with-bison-exception+", "Unicode", "BZIP", "Zlib", "GPL-2.0-or-later", "FSFAP", "BSD-3-clause-with-weird-numbering", "CC0-1.0", "TEXT-TABS", "BSD-4-clause-POWERDOG", "BSD-3-clause-GENERIC", "BSD-3-Clause", "SDBM-PUBLIC-DOMAIN", "DONT-CHANGE-THE-GPL", "Artistic-dist", "LGPL-2.1-only", "GPL-1.0-only", "GPL-2.0-only", "Artistic-2" ], "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/perl", "/usr/bin/perl5.40.1", "/usr/lib/x86_64-linux-gnu/perl-base/AutoLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Carp.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Carp/Heavy.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Config.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Config_git.pl", "/usr/lib/x86_64-linux-gnu/perl-base/Config_heavy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/Cwd.pm", "/usr/lib/x86_64-linux-gnu/perl-base/DynaLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Errno.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Exporter.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Exporter/Heavy.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Fcntl.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Basename.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Glob.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Path.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Temp.pm", "/usr/lib/x86_64-linux-gnu/perl-base/FileHandle.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long/Parser.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Hash/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/File.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Handle.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Pipe.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Seekable.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Select.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/INET.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/IP.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/UNIX.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open2.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open3.pm", "/usr/lib/x86_64-linux-gnu/perl-base/List/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/POSIX.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Scalar/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/SelectSaver.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Symbol.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/ParseWords.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/Tabs.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/Wrap.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Tie/Hash.pm", "/usr/lib/x86_64-linux-gnu/perl-base/XSLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/attributes.pm", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Cwd/Cwd.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Fcntl/Fcntl.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/File/Glob/Glob.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Hash/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/IO/IO.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/List/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/POSIX/POSIX.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Socket/Socket.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/attributes/attributes.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/re/re.so", "/usr/lib/x86_64-linux-gnu/perl-base/base.pm", "/usr/lib/x86_64-linux-gnu/perl-base/builtin.pm", "/usr/lib/x86_64-linux-gnu/perl-base/bytes.pm", "/usr/lib/x86_64-linux-gnu/perl-base/constant.pm", "/usr/lib/x86_64-linux-gnu/perl-base/feature.pm", "/usr/lib/x86_64-linux-gnu/perl-base/fields.pm", "/usr/lib/x86_64-linux-gnu/perl-base/integer.pm", "/usr/lib/x86_64-linux-gnu/perl-base/lib.pm", "/usr/lib/x86_64-linux-gnu/perl-base/locale.pm", "/usr/lib/x86_64-linux-gnu/perl-base/overload.pm", "/usr/lib/x86_64-linux-gnu/perl-base/overloading.pm", "/usr/lib/x86_64-linux-gnu/perl-base/parent.pm", "/usr/lib/x86_64-linux-gnu/perl-base/re.pm", "/usr/lib/x86_64-linux-gnu/perl-base/strict.pm", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Age.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bmg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Cf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Ea.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/EqUIdeo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/GCB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Gc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Hst.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identif2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identifi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InPC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InSC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Isc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFCQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFDQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCCF.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKDQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Na1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NameAlia.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nv.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/PerlDeci.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/SB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Sc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Scx.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Tc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Uc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Vo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/WB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlLB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlSCX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V100.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V11.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V110.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V120.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V130.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V140.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V150.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V20.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V30.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V31.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V32.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V40.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V41.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V50.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V51.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V52.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V60.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V61.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V70.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V80.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V90.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Alpha/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/B.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/BN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/CS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/EN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ES.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ET.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/NSM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ON.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/WS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Blk/NB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/O.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CE/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CI/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCF/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWKCF/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWL/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWT/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWU/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Cased/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/A.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/ATAR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/B.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/BR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/DB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NK.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/OV.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/VR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CompEx/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/DI/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dash/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dep/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dia/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Com.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Enc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Fin.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Font.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Init.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Iso.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Med.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nar.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/NonCanon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sqr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sub.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sup.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Vert.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EBase/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EComp/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EPres/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/A.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/H.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/Na.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/W.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Emoji/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ext/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/ExtPict/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/CN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LV.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LVT.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/PP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/SM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/LC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ll.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/M.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Me.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/No.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/P.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pe.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Po.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ps.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/S.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sk.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/So.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Z.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Zs.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrBase/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrExt/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hex/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hst/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hyphen/T.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Allowed.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Restrict.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/DefaultI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Exclusio.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Inclusio.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/LimitedU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotChara.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotNFKC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotXID.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Obsolete.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Recommen.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Technica.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Uncommon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ideo/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/10_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/11_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/13_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/14_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/15_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/7_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/8_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/9_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Bottom.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/BottomAn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Left.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/LeftAndR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Overstru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Right.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Top.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndBo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndL2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndLe.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndRi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/VisualOr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Avagraha.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Bindu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Cantilla.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona5.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona7.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona9.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consonan.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Geminati.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Invisibl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Nukta.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Number.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Other.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/PureKill.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Syllable.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/ToneMark.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Virama.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Visarga.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Vowel.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelDep.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelInd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Ain.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Alef.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Beh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Dal.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/FarsiYeh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Feh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Gaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Hah.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/HanifiRo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Kaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Lam.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/NoJoinin.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Noon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Qaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Reh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Sad.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Seen.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Tah.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Waw.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Yeh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/D.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/T.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/U.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CJ.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/GL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/ID.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/OP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/QU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/SA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lower/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Math/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/M.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Di.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/None.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Nu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/11.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/12.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/13.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/14.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/15.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/17.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/18.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/19.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/200.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/300.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/400.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/500.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/600.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/700.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/800.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/900.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PCM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PatSyn/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Alnum.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Assigned.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Blank.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Graph.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PerlWord.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PosixPun.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Print.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/SpacePer.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Title.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Word.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/XPosixPu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlAny.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCh2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCha.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlFol.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIsI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlNch.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPat.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPr2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPro.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlQuo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/QMark/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/AT.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/CL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/FO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LE.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/SC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/ST.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/Sp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/UP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SD/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/STerm/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Arab.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Beng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cprt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cyrl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Deva.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Dupl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Geor.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Glag.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gonm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gran.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Grek.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gujr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Guru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Han.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hira.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Kana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Knda.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Latn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Limb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Linb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mlym.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mult.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Orya.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Sinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Syrc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Taml.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Telu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zyyy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Adlm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Arab.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Armn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Beng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bhks.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bopo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cakm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cham.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Copt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cprt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cyrl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Deva.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Diak.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Dupl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Ethi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Geor.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Glag.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gonm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gran.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Grek.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gujr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Guru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Han.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hebr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hira.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmnp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khar.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khmr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khoj.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Knda.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kthi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lao.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Latn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Limb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lina.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Linb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mlym.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mult.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mymr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nand.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nko.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Orya.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Phlp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Rohg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Shrd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sind.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Syrc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tagb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Takr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Talu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Taml.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Telu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Thaa.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tibt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tirh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Vith.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Xsux.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yezi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zyyy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zzzz.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Term/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/UIdeo/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Upper/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/VS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/U.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/Extend.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/FO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/HL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/KA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/LE.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/ML.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/WSegSpac.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/utf8.pm", "/usr/lib/x86_64-linux-gnu/perl-base/vars.pm", "/usr/lib/x86_64-linux-gnu/perl-base/warnings.pm", "/usr/lib/x86_64-linux-gnu/perl-base/warnings/register.pm", "/usr/share/doc/perl-base/changelog.Debian.gz", "/usr/share/doc/perl-base/changelog.gz", "/usr/share/doc/perl-base/copyright", "/usr/share/doc/perl/AUTHORS.gz", "/usr/share/doc/perl/Documentation", "/usr/share/lintian/overrides/perl-base", "/usr/share/man/man1/perl.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "readline-common@8.2-6", "Name": "readline-common", "Identifier": { "PURL": "pkg:deb/debian/readline-common@8.2-6?arch=all\u0026distro=debian-13.7", "UID": "c4beab42d2a9a634" }, "Version": "8.2", "Release": "6", "Arch": "all", "SrcName": "readline", "SrcVersion": "8.2", "SrcRelease": "6", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-or-later", "ISC-no-attribution" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "InstalledFiles": [ "/usr/share/doc/readline-common/changelog.Debian.gz", "/usr/share/doc/readline-common/changelog.gz", "/usr/share/doc/readline-common/copyright", "/usr/share/doc/readline-common/inputrc.arrows", "/usr/share/info/rluserman.info.gz", "/usr/share/lintian/overrides/readline-common", "/usr/share/man/man3/history.3readline.gz", "/usr/share/man/man3/readline.3readline.gz", "/usr/share/readline/inputrc" ], "AnalyzedBy": "dpkg" }, { "ID": "sed@4.9-2+deb13u1", "Name": "sed", "Identifier": { "PURL": "pkg:deb/debian/sed@4.9-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "a041ea16982bb927" }, "Version": "4.9", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "sed", "SrcVersion": "4.9", "SrcRelease": "2+deb13u1", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "X11", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-only", "ISC", "BSD-4-Clause-UC", "BSL-1", "pcre" ], "Maintainer": "Clint Adams \u003cclint@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/sed", "/usr/share/doc/sed/AUTHORS", "/usr/share/doc/sed/BUGS.gz", "/usr/share/doc/sed/NEWS.gz", "/usr/share/doc/sed/README", "/usr/share/doc/sed/THANKS.gz", "/usr/share/doc/sed/changelog.Debian.gz", "/usr/share/doc/sed/changelog.gz", "/usr/share/doc/sed/copyright", "/usr/share/doc/sed/examples/dc.sed", "/usr/share/doc/sed/sedfaq.txt.gz", "/usr/share/info/sed.info.gz", "/usr/share/locale/af/LC_MESSAGES/sed.mo", "/usr/share/locale/ast/LC_MESSAGES/sed.mo", "/usr/share/locale/bg/LC_MESSAGES/sed.mo", "/usr/share/locale/ca/LC_MESSAGES/sed.mo", "/usr/share/locale/cs/LC_MESSAGES/sed.mo", "/usr/share/locale/da/LC_MESSAGES/sed.mo", "/usr/share/locale/de/LC_MESSAGES/sed.mo", "/usr/share/locale/el/LC_MESSAGES/sed.mo", "/usr/share/locale/eo/LC_MESSAGES/sed.mo", "/usr/share/locale/es/LC_MESSAGES/sed.mo", "/usr/share/locale/et/LC_MESSAGES/sed.mo", "/usr/share/locale/eu/LC_MESSAGES/sed.mo", "/usr/share/locale/fi/LC_MESSAGES/sed.mo", "/usr/share/locale/fr/LC_MESSAGES/sed.mo", "/usr/share/locale/ga/LC_MESSAGES/sed.mo", "/usr/share/locale/gl/LC_MESSAGES/sed.mo", "/usr/share/locale/he/LC_MESSAGES/sed.mo", "/usr/share/locale/hr/LC_MESSAGES/sed.mo", "/usr/share/locale/hu/LC_MESSAGES/sed.mo", "/usr/share/locale/id/LC_MESSAGES/sed.mo", "/usr/share/locale/it/LC_MESSAGES/sed.mo", "/usr/share/locale/ja/LC_MESSAGES/sed.mo", "/usr/share/locale/ka/LC_MESSAGES/sed.mo", "/usr/share/locale/ko/LC_MESSAGES/sed.mo", "/usr/share/locale/nb/LC_MESSAGES/sed.mo", "/usr/share/locale/nl/LC_MESSAGES/sed.mo", "/usr/share/locale/pl/LC_MESSAGES/sed.mo", "/usr/share/locale/pt/LC_MESSAGES/sed.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/sed.mo", "/usr/share/locale/ro/LC_MESSAGES/sed.mo", "/usr/share/locale/ru/LC_MESSAGES/sed.mo", "/usr/share/locale/sk/LC_MESSAGES/sed.mo", "/usr/share/locale/sl/LC_MESSAGES/sed.mo", "/usr/share/locale/sr/LC_MESSAGES/sed.mo", "/usr/share/locale/sv/LC_MESSAGES/sed.mo", "/usr/share/locale/tr/LC_MESSAGES/sed.mo", "/usr/share/locale/uk/LC_MESSAGES/sed.mo", "/usr/share/locale/vi/LC_MESSAGES/sed.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/sed.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo", "/usr/share/man/man1/sed.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "shared-mime-info@2.4-5+b2", "Name": "shared-mime-info", "Identifier": { "PURL": "pkg:deb/debian/shared-mime-info@2.4-5%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "c3241cdbc96e4bd8" }, "Version": "2.4", "Release": "5+b2", "Arch": "amd64", "SrcName": "shared-mime-info", "SrcVersion": "2.4", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Debian freedesktop.org maintainers \u003cpkg-freedesktop-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libglib2.0-0t64@2.84.4-3~deb13u5", "libstdc++6@14.2.0-19", "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/bin/update-mime-database", "/usr/share/doc-base/shared-mime-info.shared-mime-info", "/usr/share/doc/shared-mime-info/NEWS.gz", "/usr/share/doc/shared-mime-info/README.md", "/usr/share/doc/shared-mime-info/changelog.Debian.amd64.gz", "/usr/share/doc/shared-mime-info/changelog.Debian.gz", "/usr/share/doc/shared-mime-info/copyright", "/usr/share/doc/shared-mime-info/shared-mime-info-spec.html/b521.html", "/usr/share/doc/shared-mime-info/shared-mime-info-spec.html/index.html", "/usr/share/doc/shared-mime-info/shared-mime-info-spec.html/x34.html", "/usr/share/doc/shared-mime-info/shared-mime-info-spec.html/x500.html", "/usr/share/doc/shared-mime-info/shared-mime-info-spec.pdf", "/usr/share/doc/shared-mime-info/shared-mime-info-spec.xml.gz", "/usr/share/gettext/its/shared-mime-info.its", "/usr/share/gettext/its/shared-mime-info.loc", "/usr/share/locale/af/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ar/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/as/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ast/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/az/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/be/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/be@latin/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/bg/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/bn_IN/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ca/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ca@valencia/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/cs/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/cy/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/da/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/de/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/el/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/en_GB/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/eo/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/es/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/et/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/eu/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/fa/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/fi/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/fo/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/fr/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/fur/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ga/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/gl/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/gu/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/he/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/hi/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/hr/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/hu/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ia/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/id/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/is/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/it/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ja/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ka/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/kk/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/kn/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ko/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ky/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/lt/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/lv/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ml/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/mr/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ms/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/nb/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/nl/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/nn/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/oc/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/or/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/pa/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/pl/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/pt/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ro/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ru/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/rw/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/si/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/sk/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/sl/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/sq/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/sr/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/sr@latin/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/sv/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/ta/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/te/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/th/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/tr/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/uk/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/vi/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/wa/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/zh_HK/LC_MESSAGES/shared-mime-info.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/shared-mime-info.mo", "/usr/share/man/man1/update-mime-database.1.gz", "/usr/share/mime/packages/freedesktop.org.xml", "/usr/share/pkgconfig/shared-mime-info.pc" ], "AnalyzedBy": "dpkg" }, { "ID": "sqv@1.3.0-3+b2", "Name": "sqv", "Identifier": { "PURL": "pkg:deb/debian/sqv@1.3.0-3%2Bb2?arch=amd64\u0026distro=debian-13.7", "UID": "71acebf687a567ad" }, "Version": "1.3.0", "Release": "3+b2", "Arch": "amd64", "SrcName": "rust-sequoia-sqv", "SrcVersion": "1.3.0", "SrcRelease": "3", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.0-only" ], "Maintainer": "Debian Rust Maintainers \u003cpkg-rust-maintainers@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgcc-s1@14.2.0-19", "libgmp10@2:6.3.0+dfsg-3", "libhogweed6t64@3.10.1-1", "libnettle8t64@3.10.1-1" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/sqv", "/usr/share/bash-completion/completions/sqv.bash", "/usr/share/doc/sqv/NEWS.gz", "/usr/share/doc/sqv/changelog.Debian.amd64.gz", "/usr/share/doc/sqv/changelog.Debian.gz", "/usr/share/doc/sqv/copyright", "/usr/share/fish/completions/sqv.fish", "/usr/share/man/man1/sqv.1.gz", "/usr/share/zsh/vendor-completions/_sqv" ], "AnalyzedBy": "dpkg" }, { "ID": "sysvinit-utils@3.14-4", "Name": "sysvinit-utils", "Identifier": { "PURL": "pkg:deb/debian/sysvinit-utils@3.14-4?arch=amd64\u0026distro=debian-13.7", "UID": "19ecbcb3d5bf6b26" }, "Version": "3.14", "Release": "4", "Arch": "amd64", "SrcName": "sysvinit", "SrcVersion": "3.14", "SrcRelease": "4", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-only", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian sysvinit maintainers \u003cdebian-init-diversity@chiark.greenend.org.uk\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/init/init-d-script", "/usr/lib/init/vars.sh", "/usr/lib/lsb/init-functions", "/usr/lib/lsb/init-functions.d/00-verbose", "/usr/sbin/fstab-decode", "/usr/sbin/killall5", "/usr/share/doc/sysvinit-utils/changelog.Debian.gz", "/usr/share/doc/sysvinit-utils/copyright", "/usr/share/man/man5/init-d-script.5.gz", "/usr/share/man/man8/fstab-decode.8.gz", "/usr/share/man/man8/killall5.8.gz", "/usr/share/man/man8/pidof.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "tar@1.35+dfsg-3.1", "Name": "tar", "Identifier": { "PURL": "pkg:deb/debian/tar@1.35%2Bdfsg-3.1?arch=amd64\u0026distro=debian-13.7", "UID": "4f69996c49afbaca" }, "Version": "1.35+dfsg", "Release": "3.1", "Arch": "amd64", "SrcName": "tar", "SrcVersion": "1.35+dfsg", "SrcRelease": "3.1", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-3+ with Bison exception", "LGPL-2.1-or-later", "LGPL-2.1-only", "LGPL-3.0-or-later", "LGPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Janos Lenart \u003cocsi@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/tar", "/usr/lib/mime/packages/tar", "/usr/sbin/rmt-tar", "/usr/sbin/tarcat", "/usr/share/doc/tar/AUTHORS", "/usr/share/doc/tar/NEWS.gz", "/usr/share/doc/tar/README.Debian", "/usr/share/doc/tar/THANKS.gz", "/usr/share/doc/tar/changelog.1.gz", "/usr/share/doc/tar/changelog.Debian.gz", "/usr/share/doc/tar/changelog.gz", "/usr/share/doc/tar/copyright", "/usr/share/locale/bg/LC_MESSAGES/tar.mo", "/usr/share/locale/ca/LC_MESSAGES/tar.mo", "/usr/share/locale/cs/LC_MESSAGES/tar.mo", "/usr/share/locale/da/LC_MESSAGES/tar.mo", "/usr/share/locale/de/LC_MESSAGES/tar.mo", "/usr/share/locale/el/LC_MESSAGES/tar.mo", "/usr/share/locale/eo/LC_MESSAGES/tar.mo", "/usr/share/locale/es/LC_MESSAGES/tar.mo", "/usr/share/locale/et/LC_MESSAGES/tar.mo", "/usr/share/locale/eu/LC_MESSAGES/tar.mo", "/usr/share/locale/fi/LC_MESSAGES/tar.mo", "/usr/share/locale/fr/LC_MESSAGES/tar.mo", "/usr/share/locale/ga/LC_MESSAGES/tar.mo", "/usr/share/locale/gl/LC_MESSAGES/tar.mo", "/usr/share/locale/hr/LC_MESSAGES/tar.mo", "/usr/share/locale/hu/LC_MESSAGES/tar.mo", "/usr/share/locale/id/LC_MESSAGES/tar.mo", "/usr/share/locale/it/LC_MESSAGES/tar.mo", "/usr/share/locale/ja/LC_MESSAGES/tar.mo", "/usr/share/locale/ka/LC_MESSAGES/tar.mo", "/usr/share/locale/ko/LC_MESSAGES/tar.mo", "/usr/share/locale/ky/LC_MESSAGES/tar.mo", "/usr/share/locale/ms/LC_MESSAGES/tar.mo", "/usr/share/locale/nb/LC_MESSAGES/tar.mo", "/usr/share/locale/nl/LC_MESSAGES/tar.mo", "/usr/share/locale/pl/LC_MESSAGES/tar.mo", "/usr/share/locale/pt/LC_MESSAGES/tar.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/tar.mo", "/usr/share/locale/ro/LC_MESSAGES/tar.mo", "/usr/share/locale/ru/LC_MESSAGES/tar.mo", "/usr/share/locale/sk/LC_MESSAGES/tar.mo", "/usr/share/locale/sl/LC_MESSAGES/tar.mo", "/usr/share/locale/sr/LC_MESSAGES/tar.mo", "/usr/share/locale/sv/LC_MESSAGES/tar.mo", "/usr/share/locale/tr/LC_MESSAGES/tar.mo", "/usr/share/locale/uk/LC_MESSAGES/tar.mo", "/usr/share/locale/vi/LC_MESSAGES/tar.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/tar.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/tar.mo", "/usr/share/man/man1/tar.1.gz", "/usr/share/man/man1/tarcat.1.gz", "/usr/share/man/man8/rmt-tar.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "tzdata@2026e-0+deb13u1", "Name": "tzdata", "Identifier": { "PURL": "pkg:deb/debian/tzdata@2026e-0%2Bdeb13u1?arch=all\u0026distro=debian-13.7", "UID": "3f131ce141aa0bb7" }, "Version": "2026e", "Release": "0+deb13u1", "Arch": "all", "SrcName": "tzdata", "SrcVersion": "2026e", "SrcRelease": "0+deb13u1", "Licenses": [ "public-domain" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/share/doc/tzdata/NEWS.Debian.gz", "/usr/share/doc/tzdata/README.Debian", "/usr/share/doc/tzdata/changelog.Debian.gz", "/usr/share/doc/tzdata/changelog.gz", "/usr/share/doc/tzdata/copyright", "/usr/share/lintian/overrides/tzdata", "/usr/share/zoneinfo/Africa/Abidjan", "/usr/share/zoneinfo/Africa/Accra", "/usr/share/zoneinfo/Africa/Addis_Ababa", "/usr/share/zoneinfo/Africa/Algiers", "/usr/share/zoneinfo/Africa/Asmara", "/usr/share/zoneinfo/Africa/Bamako", "/usr/share/zoneinfo/Africa/Bangui", "/usr/share/zoneinfo/Africa/Banjul", "/usr/share/zoneinfo/Africa/Bissau", "/usr/share/zoneinfo/Africa/Blantyre", "/usr/share/zoneinfo/Africa/Brazzaville", "/usr/share/zoneinfo/Africa/Bujumbura", "/usr/share/zoneinfo/Africa/Cairo", "/usr/share/zoneinfo/Africa/Casablanca", "/usr/share/zoneinfo/Africa/Ceuta", "/usr/share/zoneinfo/Africa/Conakry", "/usr/share/zoneinfo/Africa/Dakar", "/usr/share/zoneinfo/Africa/Dar_es_Salaam", "/usr/share/zoneinfo/Africa/Djibouti", "/usr/share/zoneinfo/Africa/Douala", "/usr/share/zoneinfo/Africa/El_Aaiun", "/usr/share/zoneinfo/Africa/Freetown", "/usr/share/zoneinfo/Africa/Gaborone", "/usr/share/zoneinfo/Africa/Harare", "/usr/share/zoneinfo/Africa/Johannesburg", "/usr/share/zoneinfo/Africa/Juba", "/usr/share/zoneinfo/Africa/Kampala", "/usr/share/zoneinfo/Africa/Khartoum", "/usr/share/zoneinfo/Africa/Kigali", "/usr/share/zoneinfo/Africa/Kinshasa", "/usr/share/zoneinfo/Africa/Lagos", "/usr/share/zoneinfo/Africa/Libreville", "/usr/share/zoneinfo/Africa/Lome", "/usr/share/zoneinfo/Africa/Luanda", "/usr/share/zoneinfo/Africa/Lubumbashi", "/usr/share/zoneinfo/Africa/Lusaka", "/usr/share/zoneinfo/Africa/Malabo", "/usr/share/zoneinfo/Africa/Maputo", "/usr/share/zoneinfo/Africa/Maseru", "/usr/share/zoneinfo/Africa/Mbabane", "/usr/share/zoneinfo/Africa/Mogadishu", "/usr/share/zoneinfo/Africa/Monrovia", "/usr/share/zoneinfo/Africa/Nairobi", "/usr/share/zoneinfo/Africa/Ndjamena", "/usr/share/zoneinfo/Africa/Niamey", "/usr/share/zoneinfo/Africa/Nouakchott", "/usr/share/zoneinfo/Africa/Ouagadougou", "/usr/share/zoneinfo/Africa/Porto-Novo", "/usr/share/zoneinfo/Africa/Sao_Tome", "/usr/share/zoneinfo/Africa/Tripoli", "/usr/share/zoneinfo/Africa/Tunis", "/usr/share/zoneinfo/Africa/Windhoek", "/usr/share/zoneinfo/America/Adak", "/usr/share/zoneinfo/America/Anchorage", "/usr/share/zoneinfo/America/Anguilla", "/usr/share/zoneinfo/America/Antigua", "/usr/share/zoneinfo/America/Araguaina", "/usr/share/zoneinfo/America/Argentina/Buenos_Aires", "/usr/share/zoneinfo/America/Argentina/Catamarca", "/usr/share/zoneinfo/America/Argentina/Cordoba", "/usr/share/zoneinfo/America/Argentina/Jujuy", "/usr/share/zoneinfo/America/Argentina/La_Rioja", "/usr/share/zoneinfo/America/Argentina/Mendoza", "/usr/share/zoneinfo/America/Argentina/Rio_Gallegos", "/usr/share/zoneinfo/America/Argentina/Salta", "/usr/share/zoneinfo/America/Argentina/San_Juan", "/usr/share/zoneinfo/America/Argentina/San_Luis", "/usr/share/zoneinfo/America/Argentina/Tucuman", "/usr/share/zoneinfo/America/Argentina/Ushuaia", "/usr/share/zoneinfo/America/Aruba", "/usr/share/zoneinfo/America/Asuncion", "/usr/share/zoneinfo/America/Atikokan", "/usr/share/zoneinfo/America/Bahia", "/usr/share/zoneinfo/America/Bahia_Banderas", "/usr/share/zoneinfo/America/Barbados", "/usr/share/zoneinfo/America/Belem", "/usr/share/zoneinfo/America/Belize", "/usr/share/zoneinfo/America/Blanc-Sablon", "/usr/share/zoneinfo/America/Boa_Vista", "/usr/share/zoneinfo/America/Bogota", "/usr/share/zoneinfo/America/Boise", "/usr/share/zoneinfo/America/Cambridge_Bay", "/usr/share/zoneinfo/America/Campo_Grande", "/usr/share/zoneinfo/America/Cancun", "/usr/share/zoneinfo/America/Caracas", "/usr/share/zoneinfo/America/Cayenne", "/usr/share/zoneinfo/America/Cayman", "/usr/share/zoneinfo/America/Chicago", "/usr/share/zoneinfo/America/Chihuahua", "/usr/share/zoneinfo/America/Ciudad_Juarez", "/usr/share/zoneinfo/America/Costa_Rica", "/usr/share/zoneinfo/America/Coyhaique", "/usr/share/zoneinfo/America/Creston", "/usr/share/zoneinfo/America/Cuiaba", "/usr/share/zoneinfo/America/Curacao", "/usr/share/zoneinfo/America/Danmarkshavn", "/usr/share/zoneinfo/America/Dawson", "/usr/share/zoneinfo/America/Dawson_Creek", "/usr/share/zoneinfo/America/Denver", "/usr/share/zoneinfo/America/Detroit", "/usr/share/zoneinfo/America/Dominica", "/usr/share/zoneinfo/America/Edmonton", "/usr/share/zoneinfo/America/Eirunepe", "/usr/share/zoneinfo/America/El_Salvador", "/usr/share/zoneinfo/America/Fort_Nelson", "/usr/share/zoneinfo/America/Fortaleza", "/usr/share/zoneinfo/America/Glace_Bay", "/usr/share/zoneinfo/America/Goose_Bay", "/usr/share/zoneinfo/America/Grand_Turk", "/usr/share/zoneinfo/America/Grenada", "/usr/share/zoneinfo/America/Guadeloupe", "/usr/share/zoneinfo/America/Guatemala", "/usr/share/zoneinfo/America/Guayaquil", "/usr/share/zoneinfo/America/Guyana", "/usr/share/zoneinfo/America/Halifax", "/usr/share/zoneinfo/America/Havana", "/usr/share/zoneinfo/America/Hermosillo", "/usr/share/zoneinfo/America/Indiana/Indianapolis", "/usr/share/zoneinfo/America/Indiana/Knox", "/usr/share/zoneinfo/America/Indiana/Marengo", "/usr/share/zoneinfo/America/Indiana/Petersburg", "/usr/share/zoneinfo/America/Indiana/Tell_City", "/usr/share/zoneinfo/America/Indiana/Vevay", "/usr/share/zoneinfo/America/Indiana/Vincennes", "/usr/share/zoneinfo/America/Indiana/Winamac", "/usr/share/zoneinfo/America/Inuvik", "/usr/share/zoneinfo/America/Iqaluit", "/usr/share/zoneinfo/America/Jamaica", "/usr/share/zoneinfo/America/Juneau", "/usr/share/zoneinfo/America/Kentucky/Louisville", "/usr/share/zoneinfo/America/Kentucky/Monticello", "/usr/share/zoneinfo/America/La_Paz", "/usr/share/zoneinfo/America/Lima", "/usr/share/zoneinfo/America/Los_Angeles", "/usr/share/zoneinfo/America/Maceio", "/usr/share/zoneinfo/America/Managua", "/usr/share/zoneinfo/America/Manaus", "/usr/share/zoneinfo/America/Martinique", "/usr/share/zoneinfo/America/Matamoros", "/usr/share/zoneinfo/America/Mazatlan", "/usr/share/zoneinfo/America/Menominee", "/usr/share/zoneinfo/America/Merida", "/usr/share/zoneinfo/America/Metlakatla", "/usr/share/zoneinfo/America/Mexico_City", "/usr/share/zoneinfo/America/Miquelon", "/usr/share/zoneinfo/America/Moncton", "/usr/share/zoneinfo/America/Monterrey", "/usr/share/zoneinfo/America/Montevideo", "/usr/share/zoneinfo/America/Montserrat", "/usr/share/zoneinfo/America/Nassau", "/usr/share/zoneinfo/America/New_York", "/usr/share/zoneinfo/America/Nome", "/usr/share/zoneinfo/America/Noronha", "/usr/share/zoneinfo/America/North_Dakota/Beulah", "/usr/share/zoneinfo/America/North_Dakota/Center", "/usr/share/zoneinfo/America/North_Dakota/New_Salem", "/usr/share/zoneinfo/America/Nuuk", "/usr/share/zoneinfo/America/Ojinaga", "/usr/share/zoneinfo/America/Panama", "/usr/share/zoneinfo/America/Paramaribo", "/usr/share/zoneinfo/America/Phoenix", "/usr/share/zoneinfo/America/Port-au-Prince", "/usr/share/zoneinfo/America/Port_of_Spain", "/usr/share/zoneinfo/America/Porto_Velho", "/usr/share/zoneinfo/America/Puerto_Rico", "/usr/share/zoneinfo/America/Punta_Arenas", "/usr/share/zoneinfo/America/Rankin_Inlet", "/usr/share/zoneinfo/America/Recife", "/usr/share/zoneinfo/America/Regina", "/usr/share/zoneinfo/America/Resolute", "/usr/share/zoneinfo/America/Rio_Branco", "/usr/share/zoneinfo/America/Santarem", "/usr/share/zoneinfo/America/Santiago", "/usr/share/zoneinfo/America/Santo_Domingo", "/usr/share/zoneinfo/America/Sao_Paulo", "/usr/share/zoneinfo/America/Scoresbysund", "/usr/share/zoneinfo/America/Sitka", "/usr/share/zoneinfo/America/St_Johns", "/usr/share/zoneinfo/America/St_Kitts", "/usr/share/zoneinfo/America/St_Lucia", "/usr/share/zoneinfo/America/St_Thomas", "/usr/share/zoneinfo/America/St_Vincent", "/usr/share/zoneinfo/America/Swift_Current", "/usr/share/zoneinfo/America/Tegucigalpa", "/usr/share/zoneinfo/America/Thule", "/usr/share/zoneinfo/America/Tijuana", "/usr/share/zoneinfo/America/Toronto", "/usr/share/zoneinfo/America/Tortola", "/usr/share/zoneinfo/America/Vancouver", "/usr/share/zoneinfo/America/Whitehorse", "/usr/share/zoneinfo/America/Winnipeg", "/usr/share/zoneinfo/America/Yakutat", "/usr/share/zoneinfo/Antarctica/Casey", "/usr/share/zoneinfo/Antarctica/Davis", "/usr/share/zoneinfo/Antarctica/DumontDUrville", "/usr/share/zoneinfo/Antarctica/Macquarie", "/usr/share/zoneinfo/Antarctica/Mawson", "/usr/share/zoneinfo/Antarctica/McMurdo", "/usr/share/zoneinfo/Antarctica/Palmer", "/usr/share/zoneinfo/Antarctica/Rothera", "/usr/share/zoneinfo/Antarctica/Syowa", "/usr/share/zoneinfo/Antarctica/Troll", "/usr/share/zoneinfo/Antarctica/Vostok", "/usr/share/zoneinfo/Asia/Aden", "/usr/share/zoneinfo/Asia/Almaty", "/usr/share/zoneinfo/Asia/Amman", "/usr/share/zoneinfo/Asia/Anadyr", "/usr/share/zoneinfo/Asia/Aqtau", "/usr/share/zoneinfo/Asia/Aqtobe", "/usr/share/zoneinfo/Asia/Ashgabat", "/usr/share/zoneinfo/Asia/Atyrau", "/usr/share/zoneinfo/Asia/Baghdad", "/usr/share/zoneinfo/Asia/Bahrain", "/usr/share/zoneinfo/Asia/Baku", "/usr/share/zoneinfo/Asia/Bangkok", "/usr/share/zoneinfo/Asia/Barnaul", "/usr/share/zoneinfo/Asia/Beirut", "/usr/share/zoneinfo/Asia/Bishkek", "/usr/share/zoneinfo/Asia/Brunei", "/usr/share/zoneinfo/Asia/Chita", "/usr/share/zoneinfo/Asia/Colombo", "/usr/share/zoneinfo/Asia/Damascus", "/usr/share/zoneinfo/Asia/Dhaka", "/usr/share/zoneinfo/Asia/Dili", "/usr/share/zoneinfo/Asia/Dubai", "/usr/share/zoneinfo/Asia/Dushanbe", "/usr/share/zoneinfo/Asia/Famagusta", "/usr/share/zoneinfo/Asia/Gaza", "/usr/share/zoneinfo/Asia/Hebron", "/usr/share/zoneinfo/Asia/Ho_Chi_Minh", "/usr/share/zoneinfo/Asia/Hong_Kong", "/usr/share/zoneinfo/Asia/Hovd", "/usr/share/zoneinfo/Asia/Irkutsk", "/usr/share/zoneinfo/Asia/Jakarta", "/usr/share/zoneinfo/Asia/Jayapura", "/usr/share/zoneinfo/Asia/Jerusalem", "/usr/share/zoneinfo/Asia/Kabul", "/usr/share/zoneinfo/Asia/Kamchatka", "/usr/share/zoneinfo/Asia/Karachi", "/usr/share/zoneinfo/Asia/Kathmandu", "/usr/share/zoneinfo/Asia/Khandyga", "/usr/share/zoneinfo/Asia/Kolkata", "/usr/share/zoneinfo/Asia/Krasnoyarsk", "/usr/share/zoneinfo/Asia/Kuala_Lumpur", "/usr/share/zoneinfo/Asia/Kuching", "/usr/share/zoneinfo/Asia/Kuwait", "/usr/share/zoneinfo/Asia/Macau", "/usr/share/zoneinfo/Asia/Magadan", "/usr/share/zoneinfo/Asia/Makassar", "/usr/share/zoneinfo/Asia/Manila", "/usr/share/zoneinfo/Asia/Muscat", "/usr/share/zoneinfo/Asia/Nicosia", "/usr/share/zoneinfo/Asia/Novokuznetsk", "/usr/share/zoneinfo/Asia/Novosibirsk", "/usr/share/zoneinfo/Asia/Omsk", "/usr/share/zoneinfo/Asia/Oral", "/usr/share/zoneinfo/Asia/Phnom_Penh", "/usr/share/zoneinfo/Asia/Pontianak", "/usr/share/zoneinfo/Asia/Pyongyang", "/usr/share/zoneinfo/Asia/Qatar", "/usr/share/zoneinfo/Asia/Qostanay", "/usr/share/zoneinfo/Asia/Qyzylorda", "/usr/share/zoneinfo/Asia/Riyadh", "/usr/share/zoneinfo/Asia/Sakhalin", "/usr/share/zoneinfo/Asia/Samarkand", "/usr/share/zoneinfo/Asia/Seoul", "/usr/share/zoneinfo/Asia/Shanghai", "/usr/share/zoneinfo/Asia/Singapore", "/usr/share/zoneinfo/Asia/Srednekolymsk", "/usr/share/zoneinfo/Asia/Taipei", "/usr/share/zoneinfo/Asia/Tashkent", "/usr/share/zoneinfo/Asia/Tbilisi", "/usr/share/zoneinfo/Asia/Tehran", "/usr/share/zoneinfo/Asia/Thimphu", "/usr/share/zoneinfo/Asia/Tokyo", "/usr/share/zoneinfo/Asia/Tomsk", "/usr/share/zoneinfo/Asia/Ulaanbaatar", "/usr/share/zoneinfo/Asia/Urumqi", "/usr/share/zoneinfo/Asia/Ust-Nera", "/usr/share/zoneinfo/Asia/Vientiane", "/usr/share/zoneinfo/Asia/Vladivostok", "/usr/share/zoneinfo/Asia/Yakutsk", "/usr/share/zoneinfo/Asia/Yangon", "/usr/share/zoneinfo/Asia/Yekaterinburg", "/usr/share/zoneinfo/Asia/Yerevan", "/usr/share/zoneinfo/Atlantic/Azores", "/usr/share/zoneinfo/Atlantic/Bermuda", "/usr/share/zoneinfo/Atlantic/Canary", "/usr/share/zoneinfo/Atlantic/Cape_Verde", "/usr/share/zoneinfo/Atlantic/Faroe", "/usr/share/zoneinfo/Atlantic/Madeira", "/usr/share/zoneinfo/Atlantic/Reykjavik", "/usr/share/zoneinfo/Atlantic/South_Georgia", "/usr/share/zoneinfo/Atlantic/St_Helena", "/usr/share/zoneinfo/Atlantic/Stanley", "/usr/share/zoneinfo/Australia/Adelaide", "/usr/share/zoneinfo/Australia/Brisbane", "/usr/share/zoneinfo/Australia/Broken_Hill", "/usr/share/zoneinfo/Australia/Darwin", "/usr/share/zoneinfo/Australia/Eucla", "/usr/share/zoneinfo/Australia/Hobart", "/usr/share/zoneinfo/Australia/Lindeman", "/usr/share/zoneinfo/Australia/Lord_Howe", "/usr/share/zoneinfo/Australia/Melbourne", "/usr/share/zoneinfo/Australia/Perth", "/usr/share/zoneinfo/Australia/Sydney", "/usr/share/zoneinfo/Etc/GMT", "/usr/share/zoneinfo/Etc/GMT+1", "/usr/share/zoneinfo/Etc/GMT+10", "/usr/share/zoneinfo/Etc/GMT+11", "/usr/share/zoneinfo/Etc/GMT+12", "/usr/share/zoneinfo/Etc/GMT+2", "/usr/share/zoneinfo/Etc/GMT+3", "/usr/share/zoneinfo/Etc/GMT+4", "/usr/share/zoneinfo/Etc/GMT+5", "/usr/share/zoneinfo/Etc/GMT+6", "/usr/share/zoneinfo/Etc/GMT+7", "/usr/share/zoneinfo/Etc/GMT+8", "/usr/share/zoneinfo/Etc/GMT+9", "/usr/share/zoneinfo/Etc/GMT-1", "/usr/share/zoneinfo/Etc/GMT-10", "/usr/share/zoneinfo/Etc/GMT-11", "/usr/share/zoneinfo/Etc/GMT-12", "/usr/share/zoneinfo/Etc/GMT-13", "/usr/share/zoneinfo/Etc/GMT-14", "/usr/share/zoneinfo/Etc/GMT-2", "/usr/share/zoneinfo/Etc/GMT-3", "/usr/share/zoneinfo/Etc/GMT-4", "/usr/share/zoneinfo/Etc/GMT-5", "/usr/share/zoneinfo/Etc/GMT-6", "/usr/share/zoneinfo/Etc/GMT-7", "/usr/share/zoneinfo/Etc/GMT-8", "/usr/share/zoneinfo/Etc/GMT-9", "/usr/share/zoneinfo/Etc/UTC", "/usr/share/zoneinfo/Europe/Amsterdam", "/usr/share/zoneinfo/Europe/Andorra", "/usr/share/zoneinfo/Europe/Astrakhan", "/usr/share/zoneinfo/Europe/Athens", "/usr/share/zoneinfo/Europe/Belgrade", "/usr/share/zoneinfo/Europe/Berlin", "/usr/share/zoneinfo/Europe/Brussels", "/usr/share/zoneinfo/Europe/Bucharest", "/usr/share/zoneinfo/Europe/Budapest", "/usr/share/zoneinfo/Europe/Chisinau", "/usr/share/zoneinfo/Europe/Copenhagen", "/usr/share/zoneinfo/Europe/Dublin", "/usr/share/zoneinfo/Europe/Gibraltar", "/usr/share/zoneinfo/Europe/Guernsey", "/usr/share/zoneinfo/Europe/Helsinki", "/usr/share/zoneinfo/Europe/Isle_of_Man", "/usr/share/zoneinfo/Europe/Istanbul", "/usr/share/zoneinfo/Europe/Jersey", "/usr/share/zoneinfo/Europe/Kaliningrad", "/usr/share/zoneinfo/Europe/Kirov", "/usr/share/zoneinfo/Europe/Kyiv", "/usr/share/zoneinfo/Europe/Lisbon", "/usr/share/zoneinfo/Europe/Ljubljana", "/usr/share/zoneinfo/Europe/London", "/usr/share/zoneinfo/Europe/Luxembourg", "/usr/share/zoneinfo/Europe/Madrid", "/usr/share/zoneinfo/Europe/Malta", "/usr/share/zoneinfo/Europe/Minsk", "/usr/share/zoneinfo/Europe/Monaco", "/usr/share/zoneinfo/Europe/Moscow", "/usr/share/zoneinfo/Europe/Oslo", "/usr/share/zoneinfo/Europe/Paris", "/usr/share/zoneinfo/Europe/Prague", "/usr/share/zoneinfo/Europe/Riga", "/usr/share/zoneinfo/Europe/Rome", "/usr/share/zoneinfo/Europe/Samara", "/usr/share/zoneinfo/Europe/Sarajevo", "/usr/share/zoneinfo/Europe/Saratov", "/usr/share/zoneinfo/Europe/Simferopol", "/usr/share/zoneinfo/Europe/Skopje", "/usr/share/zoneinfo/Europe/Sofia", "/usr/share/zoneinfo/Europe/Stockholm", "/usr/share/zoneinfo/Europe/Tallinn", "/usr/share/zoneinfo/Europe/Tirane", "/usr/share/zoneinfo/Europe/Ulyanovsk", "/usr/share/zoneinfo/Europe/Vaduz", "/usr/share/zoneinfo/Europe/Vienna", "/usr/share/zoneinfo/Europe/Vilnius", "/usr/share/zoneinfo/Europe/Volgograd", "/usr/share/zoneinfo/Europe/Warsaw", "/usr/share/zoneinfo/Europe/Zagreb", "/usr/share/zoneinfo/Europe/Zurich", "/usr/share/zoneinfo/Factory", "/usr/share/zoneinfo/Indian/Antananarivo", "/usr/share/zoneinfo/Indian/Chagos", "/usr/share/zoneinfo/Indian/Christmas", "/usr/share/zoneinfo/Indian/Cocos", "/usr/share/zoneinfo/Indian/Comoro", "/usr/share/zoneinfo/Indian/Kerguelen", "/usr/share/zoneinfo/Indian/Mahe", "/usr/share/zoneinfo/Indian/Maldives", "/usr/share/zoneinfo/Indian/Mauritius", "/usr/share/zoneinfo/Indian/Mayotte", "/usr/share/zoneinfo/Indian/Reunion", "/usr/share/zoneinfo/Pacific/Apia", "/usr/share/zoneinfo/Pacific/Auckland", "/usr/share/zoneinfo/Pacific/Bougainville", "/usr/share/zoneinfo/Pacific/Chatham", "/usr/share/zoneinfo/Pacific/Chuuk", "/usr/share/zoneinfo/Pacific/Easter", "/usr/share/zoneinfo/Pacific/Efate", "/usr/share/zoneinfo/Pacific/Fakaofo", "/usr/share/zoneinfo/Pacific/Fiji", "/usr/share/zoneinfo/Pacific/Funafuti", "/usr/share/zoneinfo/Pacific/Galapagos", "/usr/share/zoneinfo/Pacific/Gambier", "/usr/share/zoneinfo/Pacific/Guadalcanal", "/usr/share/zoneinfo/Pacific/Guam", "/usr/share/zoneinfo/Pacific/Honolulu", "/usr/share/zoneinfo/Pacific/Kanton", "/usr/share/zoneinfo/Pacific/Kiritimati", "/usr/share/zoneinfo/Pacific/Kosrae", "/usr/share/zoneinfo/Pacific/Kwajalein", "/usr/share/zoneinfo/Pacific/Majuro", "/usr/share/zoneinfo/Pacific/Marquesas", "/usr/share/zoneinfo/Pacific/Midway", "/usr/share/zoneinfo/Pacific/Nauru", "/usr/share/zoneinfo/Pacific/Niue", "/usr/share/zoneinfo/Pacific/Norfolk", "/usr/share/zoneinfo/Pacific/Noumea", "/usr/share/zoneinfo/Pacific/Pago_Pago", "/usr/share/zoneinfo/Pacific/Palau", "/usr/share/zoneinfo/Pacific/Pitcairn", "/usr/share/zoneinfo/Pacific/Pohnpei", "/usr/share/zoneinfo/Pacific/Port_Moresby", "/usr/share/zoneinfo/Pacific/Rarotonga", "/usr/share/zoneinfo/Pacific/Saipan", "/usr/share/zoneinfo/Pacific/Tahiti", "/usr/share/zoneinfo/Pacific/Tarawa", "/usr/share/zoneinfo/Pacific/Tongatapu", "/usr/share/zoneinfo/Pacific/Wake", "/usr/share/zoneinfo/Pacific/Wallis", "/usr/share/zoneinfo/iso3166.tab", "/usr/share/zoneinfo/leap-seconds.list", "/usr/share/zoneinfo/leapseconds", "/usr/share/zoneinfo/tzdata.zi", "/usr/share/zoneinfo/zone.tab", "/usr/share/zoneinfo/zone1970.tab", "/usr/share/zoneinfo/zonenow.tab" ], "AnalyzedBy": "dpkg" }, { "ID": "util-linux@2.41.5-0+deb13u1", "Name": "util-linux", "Identifier": { "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e4d9863928456765" }, "Version": "2.41.5", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41.5", "SrcRelease": "0+deb13u1", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/bin/choom", "/usr/bin/chrt", "/usr/bin/dmesg", "/usr/bin/fallocate", "/usr/bin/findmnt", "/usr/bin/flock", "/usr/bin/getopt", "/usr/bin/hardlink", "/usr/bin/ionice", "/usr/bin/ipcmk", "/usr/bin/ipcrm", "/usr/bin/ipcs", "/usr/bin/lsblk", "/usr/bin/lscpu", "/usr/bin/lsipc", "/usr/bin/lslocks", "/usr/bin/lslogins", "/usr/bin/lsmem", "/usr/bin/lsns", "/usr/bin/mcookie", "/usr/bin/more", "/usr/bin/mountpoint", "/usr/bin/namei", "/usr/bin/nsenter", "/usr/bin/partx", "/usr/bin/prlimit", "/usr/bin/rename.ul", "/usr/bin/rev", "/usr/bin/setarch", "/usr/bin/setpriv", "/usr/bin/setsid", "/usr/bin/setterm", "/usr/bin/su", "/usr/bin/taskset", "/usr/bin/uclampset", "/usr/bin/unshare", "/usr/bin/wdctl", "/usr/bin/whereis", "/usr/lib/mime/packages/util-linux", "/usr/lib/systemd/system/fstrim.service", "/usr/lib/systemd/system/fstrim.timer", "/usr/sbin/agetty", "/usr/sbin/blkdiscard", "/usr/sbin/blkid", "/usr/sbin/blkzone", "/usr/sbin/blockdev", "/usr/sbin/chcpu", "/usr/sbin/chmem", "/usr/sbin/findfs", "/usr/sbin/fsck", "/usr/sbin/fsfreeze", "/usr/sbin/fstrim", "/usr/sbin/isosize", "/usr/sbin/ldattach", "/usr/sbin/mkfs", "/usr/sbin/mkswap", "/usr/sbin/pivot_root", "/usr/sbin/readprofile", "/usr/sbin/rtcwake", "/usr/sbin/runuser", "/usr/sbin/sulogin", "/usr/sbin/swaplabel", "/usr/sbin/switch_root", "/usr/sbin/wipefs", "/usr/sbin/zramctl", "/usr/share/bash-completion/completions/blkdiscard", "/usr/share/bash-completion/completions/blkid", "/usr/share/bash-completion/completions/blkzone", "/usr/share/bash-completion/completions/blockdev", "/usr/share/bash-completion/completions/chcpu", "/usr/share/bash-completion/completions/chmem", "/usr/share/bash-completion/completions/chrt", "/usr/share/bash-completion/completions/dmesg", "/usr/share/bash-completion/completions/fallocate", "/usr/share/bash-completion/completions/findfs", "/usr/share/bash-completion/completions/findmnt", "/usr/share/bash-completion/completions/flock", "/usr/share/bash-completion/completions/fsck", "/usr/share/bash-completion/completions/fsfreeze", "/usr/share/bash-completion/completions/fstrim", "/usr/share/bash-completion/completions/getopt", "/usr/share/bash-completion/completions/hardlink", "/usr/share/bash-completion/completions/ionice", "/usr/share/bash-completion/completions/ipcmk", "/usr/share/bash-completion/completions/ipcrm", "/usr/share/bash-completion/completions/ipcs", "/usr/share/bash-completion/completions/isosize", "/usr/share/bash-completion/completions/ldattach", "/usr/share/bash-completion/completions/lsblk", "/usr/share/bash-completion/completions/lscpu", "/usr/share/bash-completion/completions/lsipc", "/usr/share/bash-completion/completions/lslocks", "/usr/share/bash-completion/completions/lslogins", "/usr/share/bash-completion/completions/lsmem", "/usr/share/bash-completion/completions/lsns", "/usr/share/bash-completion/completions/mcookie", "/usr/share/bash-completion/completions/mkfs", "/usr/share/bash-completion/completions/mkswap", "/usr/share/bash-completion/completions/more", "/usr/share/bash-completion/completions/mountpoint", "/usr/share/bash-completion/completions/namei", "/usr/share/bash-completion/completions/nsenter", "/usr/share/bash-completion/completions/partx", "/usr/share/bash-completion/completions/pivot_root", "/usr/share/bash-completion/completions/prlimit", "/usr/share/bash-completion/completions/readprofile", "/usr/share/bash-completion/completions/rename.ul", "/usr/share/bash-completion/completions/rev", "/usr/share/bash-completion/completions/rtcwake", "/usr/share/bash-completion/completions/setarch", "/usr/share/bash-completion/completions/setpriv", "/usr/share/bash-completion/completions/setsid", "/usr/share/bash-completion/completions/setterm", "/usr/share/bash-completion/completions/su", "/usr/share/bash-completion/completions/swaplabel", "/usr/share/bash-completion/completions/taskset", "/usr/share/bash-completion/completions/uclampset", "/usr/share/bash-completion/completions/unshare", "/usr/share/bash-completion/completions/wdctl", "/usr/share/bash-completion/completions/whereis", "/usr/share/bash-completion/completions/wipefs", "/usr/share/bash-completion/completions/zramctl", "/usr/share/doc/util-linux/00-about-docs.txt", "/usr/share/doc/util-linux/AUTHORS.gz", "/usr/share/doc/util-linux/NEWS.Debian.gz", "/usr/share/doc/util-linux/PAM-configuration.txt", "/usr/share/doc/util-linux/README.Debian", "/usr/share/doc/util-linux/blkid.txt", "/usr/share/doc/util-linux/cal.txt", "/usr/share/doc/util-linux/changelog.Debian.gz", "/usr/share/doc/util-linux/changelog.gz", "/usr/share/doc/util-linux/col.txt", "/usr/share/doc/util-linux/copyright", "/usr/share/doc/util-linux/deprecated.txt", "/usr/share/doc/util-linux/examples/getopt-example.bash", "/usr/share/doc/util-linux/getopt.txt", "/usr/share/doc/util-linux/getopt_changelog.txt", "/usr/share/doc/util-linux/howto-build-sys.txt", "/usr/share/doc/util-linux/howto-compilation.txt", "/usr/share/doc/util-linux/howto-contribute.txt.gz", "/usr/share/doc/util-linux/howto-debug.txt", "/usr/share/doc/util-linux/howto-man-page.txt", "/usr/share/doc/util-linux/howto-pull-request.txt.gz", "/usr/share/doc/util-linux/howto-tests.txt", "/usr/share/doc/util-linux/howto-usage-function.txt.gz", "/usr/share/doc/util-linux/hwclock.txt", "/usr/share/doc/util-linux/modems-with-agetty.txt", "/usr/share/doc/util-linux/mount.txt", "/usr/share/doc/util-linux/parse-date.txt.gz", "/usr/share/doc/util-linux/pg.txt", "/usr/share/doc/util-linux/poeigl.txt.gz", "/usr/share/doc/util-linux/release-schedule.txt", "/usr/share/doc/util-linux/releases/v2.13-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.14-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.15-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.16-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.17-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.18-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.19-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.20-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.21-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.22-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.23-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.24-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.25-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.26-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.27-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.28-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.29-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.30-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.31-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.32-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.33-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.34-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.35-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.36-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.37-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.38-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.39-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.40-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.41-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.41.1-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.41.2-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.41.3-ReleaseNotes", "/usr/share/doc/util-linux/releases/v2.41.4-ReleaseNotes", "/usr/share/doc/util-linux/releases/v2.41.5-ReleaseNotes", "/usr/share/lintian/overrides/util-linux", "/usr/share/man/man1/choom.1.gz", "/usr/share/man/man1/chrt.1.gz", "/usr/share/man/man1/dmesg.1.gz", "/usr/share/man/man1/fallocate.1.gz", "/usr/share/man/man1/flock.1.gz", "/usr/share/man/man1/getopt.1.gz", "/usr/share/man/man1/hardlink.1.gz", "/usr/share/man/man1/ionice.1.gz", "/usr/share/man/man1/ipcmk.1.gz", "/usr/share/man/man1/ipcrm.1.gz", "/usr/share/man/man1/ipcs.1.gz", "/usr/share/man/man1/lscpu.1.gz", "/usr/share/man/man1/lsipc.1.gz", "/usr/share/man/man1/lslogins.1.gz", "/usr/share/man/man1/lsmem.1.gz", "/usr/share/man/man1/mcookie.1.gz", "/usr/share/man/man1/more.1.gz", "/usr/share/man/man1/mountpoint.1.gz", "/usr/share/man/man1/namei.1.gz", "/usr/share/man/man1/nsenter.1.gz", "/usr/share/man/man1/prlimit.1.gz", "/usr/share/man/man1/rename.ul.1.gz", "/usr/share/man/man1/rev.1.gz", "/usr/share/man/man1/runuser.1.gz", "/usr/share/man/man1/setpriv.1.gz", "/usr/share/man/man1/setsid.1.gz", "/usr/share/man/man1/setterm.1.gz", "/usr/share/man/man1/su.1.gz", "/usr/share/man/man1/taskset.1.gz", "/usr/share/man/man1/uclampset.1.gz", "/usr/share/man/man1/unshare.1.gz", "/usr/share/man/man1/whereis.1.gz", "/usr/share/man/man5/adjtime_config.5.gz", "/usr/share/man/man5/scols-filter.5.gz", "/usr/share/man/man5/terminal-colors.d.5.gz", "/usr/share/man/man8/agetty.8.gz", "/usr/share/man/man8/blkdiscard.8.gz", "/usr/share/man/man8/blkid.8.gz", "/usr/share/man/man8/blkzone.8.gz", "/usr/share/man/man8/blockdev.8.gz", "/usr/share/man/man8/chcpu.8.gz", "/usr/share/man/man8/chmem.8.gz", "/usr/share/man/man8/findfs.8.gz", "/usr/share/man/man8/findmnt.8.gz", "/usr/share/man/man8/fsck.8.gz", "/usr/share/man/man8/fsfreeze.8.gz", "/usr/share/man/man8/fstrim.8.gz", "/usr/share/man/man8/isosize.8.gz", "/usr/share/man/man8/ldattach.8.gz", "/usr/share/man/man8/lsblk.8.gz", "/usr/share/man/man8/lslocks.8.gz", "/usr/share/man/man8/lsns.8.gz", "/usr/share/man/man8/mkfs.8.gz", "/usr/share/man/man8/mkswap.8.gz", "/usr/share/man/man8/partx.8.gz", "/usr/share/man/man8/pivot_root.8.gz", "/usr/share/man/man8/readprofile.8.gz", "/usr/share/man/man8/rtcwake.8.gz", "/usr/share/man/man8/setarch.8.gz", "/usr/share/man/man8/sulogin.8.gz", "/usr/share/man/man8/swaplabel.8.gz", "/usr/share/man/man8/switch_root.8.gz", "/usr/share/man/man8/wdctl.8.gz", "/usr/share/man/man8/wipefs.8.gz", "/usr/share/man/man8/zramctl.8.gz", "/usr/share/util-linux/logcheck/ignore.d.server/util-linux" ], "AnalyzedBy": "dpkg" }, { "ID": "wget@1.25.0-2", "Name": "wget", "Identifier": { "PURL": "pkg:deb/debian/wget@1.25.0-2?arch=amd64\u0026distro=debian-13.7", "UID": "b3a8a3db76954bbb" }, "Version": "1.25.0", "Release": "2", "Arch": "amd64", "SrcName": "wget", "SrcVersion": "1.25.0", "SrcRelease": "2", "Licenses": [ "GPL-3.0-only", "GFDL-1.2-only" ], "Maintainer": "Noël Köthe \u003cnoel@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4", "libgnutls30t64@3.8.9-3+deb13u4", "libidn2-0@2.3.8-2", "libnettle8t64@3.10.1-1", "libpcre2-8-0@10.46-1~deb13u3", "libpsl5t64@0.21.2-1.1+b1", "libuuid1@2.41.5-0+deb13u1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/bin/wget", "/usr/share/doc/wget/AUTHORS.gz", "/usr/share/doc/wget/MAILING-LIST", "/usr/share/doc/wget/NEWS.gz", "/usr/share/doc/wget/README.gz", "/usr/share/doc/wget/changelog.Debian.gz", "/usr/share/doc/wget/changelog.gz", "/usr/share/doc/wget/copyright", "/usr/share/info/wget.info.gz", "/usr/share/locale/af/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/be/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/be/LC_MESSAGES/wget.mo", "/usr/share/locale/bg/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/bg/LC_MESSAGES/wget.mo", "/usr/share/locale/ca/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/ca/LC_MESSAGES/wget.mo", "/usr/share/locale/cs/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/cs/LC_MESSAGES/wget.mo", "/usr/share/locale/da/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/da/LC_MESSAGES/wget.mo", "/usr/share/locale/de/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/de/LC_MESSAGES/wget.mo", "/usr/share/locale/el/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/el/LC_MESSAGES/wget.mo", "/usr/share/locale/en_GB/LC_MESSAGES/wget.mo", "/usr/share/locale/eo/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/eo/LC_MESSAGES/wget.mo", "/usr/share/locale/es/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/es/LC_MESSAGES/wget.mo", "/usr/share/locale/et/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/et/LC_MESSAGES/wget.mo", "/usr/share/locale/eu/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/eu/LC_MESSAGES/wget.mo", "/usr/share/locale/fi/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/fi/LC_MESSAGES/wget.mo", "/usr/share/locale/fr/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/fr/LC_MESSAGES/wget.mo", "/usr/share/locale/ga/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/ga/LC_MESSAGES/wget.mo", "/usr/share/locale/gl/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/gl/LC_MESSAGES/wget.mo", "/usr/share/locale/he/LC_MESSAGES/wget.mo", "/usr/share/locale/hr/LC_MESSAGES/wget.mo", "/usr/share/locale/hu/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/hu/LC_MESSAGES/wget.mo", "/usr/share/locale/id/LC_MESSAGES/wget.mo", "/usr/share/locale/it/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/it/LC_MESSAGES/wget.mo", "/usr/share/locale/ja/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/ja/LC_MESSAGES/wget.mo", "/usr/share/locale/ka/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/ka/LC_MESSAGES/wget.mo", "/usr/share/locale/ko/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/ko/LC_MESSAGES/wget.mo", "/usr/share/locale/lt/LC_MESSAGES/wget.mo", "/usr/share/locale/ms/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/nb/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/nb/LC_MESSAGES/wget.mo", "/usr/share/locale/nl/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/nl/LC_MESSAGES/wget.mo", "/usr/share/locale/pl/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/pl/LC_MESSAGES/wget.mo", "/usr/share/locale/pt/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/pt/LC_MESSAGES/wget.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/wget.mo", "/usr/share/locale/ro/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/ro/LC_MESSAGES/wget.mo", "/usr/share/locale/ru/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/ru/LC_MESSAGES/wget.mo", "/usr/share/locale/rw/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/sk/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/sk/LC_MESSAGES/wget.mo", "/usr/share/locale/sl/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/sl/LC_MESSAGES/wget.mo", "/usr/share/locale/sr/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/sr/LC_MESSAGES/wget.mo", "/usr/share/locale/sv/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/sv/LC_MESSAGES/wget.mo", "/usr/share/locale/tr/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/tr/LC_MESSAGES/wget.mo", "/usr/share/locale/uk/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/uk/LC_MESSAGES/wget.mo", "/usr/share/locale/vi/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/vi/LC_MESSAGES/wget.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/wget.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/wget-gnulib.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/wget.mo", "/usr/share/man/man1/wget.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "x11-common@1:7.7+24+deb13u1", "Name": "x11-common", "Identifier": { "PURL": "pkg:deb/debian/x11-common@7.7%2B24%2Bdeb13u1?arch=all\u0026distro=debian-13.7\u0026epoch=1", "UID": "821f09237a6368c2" }, "Version": "7.7+24+deb13u1", "Epoch": 1, "Arch": "all", "SrcName": "xorg", "SrcVersion": "7.7+24+deb13u1", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/doc/x11-common/changelog.Debian.old.gz", "/usr/share/doc/x11-common/changelog.gz", "/usr/share/doc/x11-common/copyright", "/usr/share/lintian/overrides/x11-common", "/usr/share/man/man5/Xsession.5.gz", "/usr/share/man/man5/Xsession.options.5.gz", "/usr/share/man/man5/Xsession.options.d.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "xkb-data@2.42-1", "Name": "xkb-data", "Identifier": { "PURL": "pkg:deb/debian/xkb-data@2.42-1?arch=all\u0026distro=debian-13.7", "UID": "d10ac508afd1a768" }, "Version": "2.42", "Release": "1", "Arch": "all", "SrcName": "xkeyboard-config", "SrcVersion": "2.42", "SrcRelease": "1", "Maintainer": "Debian X Strike Force \u003cdebian-x@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "InstalledFiles": [ "/usr/share/X11/xkb/compat/README", "/usr/share/X11/xkb/compat/accessx", "/usr/share/X11/xkb/compat/basic", "/usr/share/X11/xkb/compat/caps", "/usr/share/X11/xkb/compat/complete", "/usr/share/X11/xkb/compat/grab", "/usr/share/X11/xkb/compat/grp_led", "/usr/share/X11/xkb/compat/iso9995", "/usr/share/X11/xkb/compat/japan", "/usr/share/X11/xkb/compat/ledcaps", "/usr/share/X11/xkb/compat/ledcompose", "/usr/share/X11/xkb/compat/lednum", "/usr/share/X11/xkb/compat/ledscroll", "/usr/share/X11/xkb/compat/level5", "/usr/share/X11/xkb/compat/misc", "/usr/share/X11/xkb/compat/mod_led", "/usr/share/X11/xkb/compat/mousekeys", "/usr/share/X11/xkb/compat/olpc", "/usr/share/X11/xkb/compat/pc", "/usr/share/X11/xkb/compat/pc98", "/usr/share/X11/xkb/compat/xfree86", "/usr/share/X11/xkb/compat/xtest", "/usr/share/X11/xkb/geometry/README", "/usr/share/X11/xkb/geometry/amiga", "/usr/share/X11/xkb/geometry/ataritt", "/usr/share/X11/xkb/geometry/chicony", "/usr/share/X11/xkb/geometry/dell", "/usr/share/X11/xkb/geometry/digital_vndr/lk", "/usr/share/X11/xkb/geometry/digital_vndr/pc", "/usr/share/X11/xkb/geometry/digital_vndr/unix", "/usr/share/X11/xkb/geometry/everex", "/usr/share/X11/xkb/geometry/fujitsu", "/usr/share/X11/xkb/geometry/hhk", "/usr/share/X11/xkb/geometry/hp", "/usr/share/X11/xkb/geometry/keytronic", "/usr/share/X11/xkb/geometry/kinesis", "/usr/share/X11/xkb/geometry/macintosh", "/usr/share/X11/xkb/geometry/microsoft", "/usr/share/X11/xkb/geometry/nec", "/usr/share/X11/xkb/geometry/northgate", "/usr/share/X11/xkb/geometry/pc", "/usr/share/X11/xkb/geometry/sanwa", "/usr/share/X11/xkb/geometry/sgi_vndr/O2", "/usr/share/X11/xkb/geometry/sgi_vndr/indigo", "/usr/share/X11/xkb/geometry/sgi_vndr/indy", "/usr/share/X11/xkb/geometry/sony", "/usr/share/X11/xkb/geometry/steelseries", "/usr/share/X11/xkb/geometry/sun", "/usr/share/X11/xkb/geometry/teck", "/usr/share/X11/xkb/geometry/thinkpad", "/usr/share/X11/xkb/geometry/typematrix", "/usr/share/X11/xkb/geometry/winbook", "/usr/share/X11/xkb/keycodes/README", "/usr/share/X11/xkb/keycodes/aliases", "/usr/share/X11/xkb/keycodes/amiga", "/usr/share/X11/xkb/keycodes/ataritt", "/usr/share/X11/xkb/keycodes/digital_vndr/lk", "/usr/share/X11/xkb/keycodes/digital_vndr/pc", "/usr/share/X11/xkb/keycodes/empty", "/usr/share/X11/xkb/keycodes/evdev", "/usr/share/X11/xkb/keycodes/fujitsu", "/usr/share/X11/xkb/keycodes/hp", "/usr/share/X11/xkb/keycodes/ibm", "/usr/share/X11/xkb/keycodes/jolla", "/usr/share/X11/xkb/keycodes/macintosh", "/usr/share/X11/xkb/keycodes/olpc", "/usr/share/X11/xkb/keycodes/sgi_vndr/indigo", "/usr/share/X11/xkb/keycodes/sgi_vndr/indy", "/usr/share/X11/xkb/keycodes/sgi_vndr/iris", "/usr/share/X11/xkb/keycodes/sony", "/usr/share/X11/xkb/keycodes/sun", "/usr/share/X11/xkb/keycodes/xfree86", "/usr/share/X11/xkb/keycodes/xfree98", "/usr/share/X11/xkb/rules/README", "/usr/share/X11/xkb/rules/base", "/usr/share/X11/xkb/rules/base.extras.xml", "/usr/share/X11/xkb/rules/base.lst", "/usr/share/X11/xkb/rules/base.xml", "/usr/share/X11/xkb/rules/evdev", "/usr/share/X11/xkb/rules/evdev.extras.xml", "/usr/share/X11/xkb/rules/evdev.lst", "/usr/share/X11/xkb/rules/evdev.xml", "/usr/share/X11/xkb/rules/xfree98", "/usr/share/X11/xkb/rules/xkb.dtd", "/usr/share/X11/xkb/symbols/af", "/usr/share/X11/xkb/symbols/al", "/usr/share/X11/xkb/symbols/altwin", "/usr/share/X11/xkb/symbols/am", "/usr/share/X11/xkb/symbols/ancient", "/usr/share/X11/xkb/symbols/apl", "/usr/share/X11/xkb/symbols/ara", "/usr/share/X11/xkb/symbols/at", "/usr/share/X11/xkb/symbols/au", "/usr/share/X11/xkb/symbols/az", "/usr/share/X11/xkb/symbols/ba", "/usr/share/X11/xkb/symbols/bd", "/usr/share/X11/xkb/symbols/be", "/usr/share/X11/xkb/symbols/bg", "/usr/share/X11/xkb/symbols/bqn", "/usr/share/X11/xkb/symbols/br", "/usr/share/X11/xkb/symbols/brai", "/usr/share/X11/xkb/symbols/bt", "/usr/share/X11/xkb/symbols/bw", "/usr/share/X11/xkb/symbols/by", "/usr/share/X11/xkb/symbols/ca", "/usr/share/X11/xkb/symbols/capslock", "/usr/share/X11/xkb/symbols/cd", "/usr/share/X11/xkb/symbols/ch", "/usr/share/X11/xkb/symbols/cm", "/usr/share/X11/xkb/symbols/cn", "/usr/share/X11/xkb/symbols/compose", "/usr/share/X11/xkb/symbols/ctrl", "/usr/share/X11/xkb/symbols/cz", "/usr/share/X11/xkb/symbols/de", "/usr/share/X11/xkb/symbols/digital_vndr/lk", "/usr/share/X11/xkb/symbols/digital_vndr/pc", "/usr/share/X11/xkb/symbols/digital_vndr/us", "/usr/share/X11/xkb/symbols/digital_vndr/vt", "/usr/share/X11/xkb/symbols/dk", "/usr/share/X11/xkb/symbols/dz", "/usr/share/X11/xkb/symbols/ee", "/usr/share/X11/xkb/symbols/eg", "/usr/share/X11/xkb/symbols/empty", "/usr/share/X11/xkb/symbols/epo", "/usr/share/X11/xkb/symbols/es", "/usr/share/X11/xkb/symbols/et", "/usr/share/X11/xkb/symbols/eu", "/usr/share/X11/xkb/symbols/eurosign", "/usr/share/X11/xkb/symbols/fi", "/usr/share/X11/xkb/symbols/fo", "/usr/share/X11/xkb/symbols/fr", "/usr/share/X11/xkb/symbols/fujitsu_vndr/jp", "/usr/share/X11/xkb/symbols/fujitsu_vndr/us", "/usr/share/X11/xkb/symbols/gb", "/usr/share/X11/xkb/symbols/ge", "/usr/share/X11/xkb/symbols/gh", "/usr/share/X11/xkb/symbols/gn", "/usr/share/X11/xkb/symbols/gr", "/usr/share/X11/xkb/symbols/grab", "/usr/share/X11/xkb/symbols/group", "/usr/share/X11/xkb/symbols/hp_vndr/us", "/usr/share/X11/xkb/symbols/hr", "/usr/share/X11/xkb/symbols/hu", "/usr/share/X11/xkb/symbols/id", "/usr/share/X11/xkb/symbols/ie", "/usr/share/X11/xkb/symbols/il", "/usr/share/X11/xkb/symbols/in", "/usr/share/X11/xkb/symbols/inet", "/usr/share/X11/xkb/symbols/iq", "/usr/share/X11/xkb/symbols/ir", "/usr/share/X11/xkb/symbols/is", "/usr/share/X11/xkb/symbols/it", "/usr/share/X11/xkb/symbols/jolla_vndr/sbj", "/usr/share/X11/xkb/symbols/jp", "/usr/share/X11/xkb/symbols/ke", "/usr/share/X11/xkb/symbols/keypad", "/usr/share/X11/xkb/symbols/kg", "/usr/share/X11/xkb/symbols/kh", "/usr/share/X11/xkb/symbols/kpdl", "/usr/share/X11/xkb/symbols/kr", "/usr/share/X11/xkb/symbols/kz", "/usr/share/X11/xkb/symbols/la", "/usr/share/X11/xkb/symbols/latam", "/usr/share/X11/xkb/symbols/latin", "/usr/share/X11/xkb/symbols/level2", "/usr/share/X11/xkb/symbols/level3", "/usr/share/X11/xkb/symbols/level5", "/usr/share/X11/xkb/symbols/lk", "/usr/share/X11/xkb/symbols/lt", "/usr/share/X11/xkb/symbols/lv", "/usr/share/X11/xkb/symbols/ma", "/usr/share/X11/xkb/symbols/macintosh_vndr/apple", "/usr/share/X11/xkb/symbols/macintosh_vndr/ch", "/usr/share/X11/xkb/symbols/macintosh_vndr/de", "/usr/share/X11/xkb/symbols/macintosh_vndr/dk", "/usr/share/X11/xkb/symbols/macintosh_vndr/fi", "/usr/share/X11/xkb/symbols/macintosh_vndr/fr", "/usr/share/X11/xkb/symbols/macintosh_vndr/gb", "/usr/share/X11/xkb/symbols/macintosh_vndr/is", "/usr/share/X11/xkb/symbols/macintosh_vndr/it", "/usr/share/X11/xkb/symbols/macintosh_vndr/jp", "/usr/share/X11/xkb/symbols/macintosh_vndr/latam", "/usr/share/X11/xkb/symbols/macintosh_vndr/nl", "/usr/share/X11/xkb/symbols/macintosh_vndr/no", "/usr/share/X11/xkb/symbols/macintosh_vndr/pt", "/usr/share/X11/xkb/symbols/macintosh_vndr/se", "/usr/share/X11/xkb/symbols/macintosh_vndr/us", "/usr/share/X11/xkb/symbols/md", "/usr/share/X11/xkb/symbols/me", "/usr/share/X11/xkb/symbols/mk", "/usr/share/X11/xkb/symbols/ml", "/usr/share/X11/xkb/symbols/mm", "/usr/share/X11/xkb/symbols/mn", "/usr/share/X11/xkb/symbols/mt", "/usr/share/X11/xkb/symbols/mv", "/usr/share/X11/xkb/symbols/my", "/usr/share/X11/xkb/symbols/nbsp", "/usr/share/X11/xkb/symbols/nec_vndr/jp", "/usr/share/X11/xkb/symbols/ng", "/usr/share/X11/xkb/symbols/nl", "/usr/share/X11/xkb/symbols/no", "/usr/share/X11/xkb/symbols/np", "/usr/share/X11/xkb/symbols/nz", "/usr/share/X11/xkb/symbols/olpc", "/usr/share/X11/xkb/symbols/parens", "/usr/share/X11/xkb/symbols/pc", "/usr/share/X11/xkb/symbols/ph", "/usr/share/X11/xkb/symbols/pk", "/usr/share/X11/xkb/symbols/pl", "/usr/share/X11/xkb/symbols/pt", "/usr/share/X11/xkb/symbols/ro", "/usr/share/X11/xkb/symbols/rs", "/usr/share/X11/xkb/symbols/ru", "/usr/share/X11/xkb/symbols/rupeesign", "/usr/share/X11/xkb/symbols/scrolllock", "/usr/share/X11/xkb/symbols/se", "/usr/share/X11/xkb/symbols/sgi_vndr/jp", "/usr/share/X11/xkb/symbols/sharp_vndr/sl-c3x00", "/usr/share/X11/xkb/symbols/sharp_vndr/ws003sh", "/usr/share/X11/xkb/symbols/sharp_vndr/ws007sh", "/usr/share/X11/xkb/symbols/sharp_vndr/ws011sh", "/usr/share/X11/xkb/symbols/sharp_vndr/ws020sh", "/usr/share/X11/xkb/symbols/shift", "/usr/share/X11/xkb/symbols/si", "/usr/share/X11/xkb/symbols/sk", "/usr/share/X11/xkb/symbols/sn", "/usr/share/X11/xkb/symbols/sony_vndr/us", "/usr/share/X11/xkb/symbols/srvr_ctrl", "/usr/share/X11/xkb/symbols/srvrkeys", "/usr/share/X11/xkb/symbols/sun_vndr/ara", "/usr/share/X11/xkb/symbols/sun_vndr/be", "/usr/share/X11/xkb/symbols/sun_vndr/br", "/usr/share/X11/xkb/symbols/sun_vndr/ca", "/usr/share/X11/xkb/symbols/sun_vndr/ch", "/usr/share/X11/xkb/symbols/sun_vndr/cz", "/usr/share/X11/xkb/symbols/sun_vndr/de", "/usr/share/X11/xkb/symbols/sun_vndr/dk", "/usr/share/X11/xkb/symbols/sun_vndr/ee", "/usr/share/X11/xkb/symbols/sun_vndr/es", "/usr/share/X11/xkb/symbols/sun_vndr/fi", "/usr/share/X11/xkb/symbols/sun_vndr/fr", "/usr/share/X11/xkb/symbols/sun_vndr/gb", "/usr/share/X11/xkb/symbols/sun_vndr/gr", "/usr/share/X11/xkb/symbols/sun_vndr/it", "/usr/share/X11/xkb/symbols/sun_vndr/jp", "/usr/share/X11/xkb/symbols/sun_vndr/kr", "/usr/share/X11/xkb/symbols/sun_vndr/lt", "/usr/share/X11/xkb/symbols/sun_vndr/lv", "/usr/share/X11/xkb/symbols/sun_vndr/nl", "/usr/share/X11/xkb/symbols/sun_vndr/no", "/usr/share/X11/xkb/symbols/sun_vndr/pl", "/usr/share/X11/xkb/symbols/sun_vndr/pt", "/usr/share/X11/xkb/symbols/sun_vndr/ro", "/usr/share/X11/xkb/symbols/sun_vndr/ru", "/usr/share/X11/xkb/symbols/sun_vndr/se", "/usr/share/X11/xkb/symbols/sun_vndr/sk", "/usr/share/X11/xkb/symbols/sun_vndr/solaris", "/usr/share/X11/xkb/symbols/sun_vndr/tr", "/usr/share/X11/xkb/symbols/sun_vndr/tw", "/usr/share/X11/xkb/symbols/sun_vndr/ua", "/usr/share/X11/xkb/symbols/sun_vndr/us", "/usr/share/X11/xkb/symbols/sy", "/usr/share/X11/xkb/symbols/terminate", "/usr/share/X11/xkb/symbols/tg", "/usr/share/X11/xkb/symbols/th", "/usr/share/X11/xkb/symbols/tj", "/usr/share/X11/xkb/symbols/tm", "/usr/share/X11/xkb/symbols/tr", "/usr/share/X11/xkb/symbols/trans", "/usr/share/X11/xkb/symbols/tw", "/usr/share/X11/xkb/symbols/typo", "/usr/share/X11/xkb/symbols/tz", "/usr/share/X11/xkb/symbols/ua", "/usr/share/X11/xkb/symbols/us", "/usr/share/X11/xkb/symbols/uz", "/usr/share/X11/xkb/symbols/vn", "/usr/share/X11/xkb/symbols/xfree68_vndr/amiga", "/usr/share/X11/xkb/symbols/xfree68_vndr/ataritt", "/usr/share/X11/xkb/symbols/za", "/usr/share/X11/xkb/types/README", "/usr/share/X11/xkb/types/basic", "/usr/share/X11/xkb/types/cancel", "/usr/share/X11/xkb/types/caps", "/usr/share/X11/xkb/types/complete", "/usr/share/X11/xkb/types/default", "/usr/share/X11/xkb/types/extra", "/usr/share/X11/xkb/types/iso9995", "/usr/share/X11/xkb/types/level5", "/usr/share/X11/xkb/types/mousekeys", "/usr/share/X11/xkb/types/numpad", "/usr/share/X11/xkb/types/pc", "/usr/share/doc/xkb-data/NEWS.Debian.gz", "/usr/share/doc/xkb-data/README.Debian", "/usr/share/doc/xkb-data/changelog.Debian.gz", "/usr/share/doc/xkb-data/changelog.gz", "/usr/share/doc/xkb-data/copyright", "/usr/share/locale/af/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/ar/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/az/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/bg/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/ca/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/crh/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/cs/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/da/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/de/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/el/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/en_GB/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/eo/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/es/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/fi/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/fr/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/fur/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/gl/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/he/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/hr/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/hu/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/id/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/it/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/ja/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/ka/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/ko/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/ky/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/lt/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/nb/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/nl/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/pl/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/pt/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/ro/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/ru/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/rw/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/sk/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/sl/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/sq/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/sr/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/sv/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/tr/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/uk/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/vi/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/xkeyboard-config.mo", "/usr/share/man/man7/xkeyboard-config.7.gz", "/usr/share/pkgconfig/xkeyboard-config.pc" ], "AnalyzedBy": "dpkg" }, { "ID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "Name": "zlib1g", "Identifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "ec1c0574f56f96a0" }, "Version": "1.3.dfsg+really1.3.1", "Release": "1+b1", "Epoch": 1, "Arch": "amd64", "SrcName": "zlib", "SrcVersion": "1.3.dfsg+really1.3.1", "SrcRelease": "1", "SrcEpoch": 1, "Licenses": [ "Zlib" ], "Maintainer": "Mark Brown \u003cbroonie@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u4" ], "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libz.so.1.3.1", "/usr/share/doc/zlib1g/changelog.Debian.amd64.gz", "/usr/share/doc/zlib1g/changelog.Debian.gz", "/usr/share/doc/zlib1g/changelog.gz", "/usr/share/doc/zlib1g/copyright" ], "AnalyzedBy": "dpkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-109518", "VendorIDs": [ "DSA-6607-1" ], "PkgID": "apt@3.0.3", "PkgName": "apt", "PkgIdentifier": { "PURL": "pkg:deb/debian/apt@3.0.3?arch=amd64\u0026distro=debian-13.7", "UID": "18dd1ec95ee04059" }, "InstalledVersion": "3.0.3", "FixedVersion": "3.0.4", "Status": "fixed", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6c4486d675def14dba154eb08b17964737dd0050b3c8a6e0fafd1b1aa0dacfa3", "Title": "apt: apt: Remote code execution via hard link reuse during package download retries", "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration", "Severity": "HIGH", "CweIDs": [ "CWE-62", "CWE-367" ], "VendorSeverity": { "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/11/04/12", "https://access.redhat.com/security/cve/CVE-2026-109518", "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html", "https://lists.debian.org/debian-security-announce/2026/msg00526.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-109518", "https://ubuntu.com/blog/apt-vulnerability-fixes-available", "https://ubuntu.com/security/notices/USN-8996-1", "https://www.cve.org/CVERecord?id=CVE-2026-109518" ], "PublishedDate": "2026-11-04T16:17:33.01Z", "LastModifiedDate": "2026-11-05T05:18:19.033Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "bsdutils@1:2.41.5-0+deb13u1", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "a4b47561565a3535" }, "InstalledVersion": "1:2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5a37b9bd8697896b9c3a018802cb49c5b7782ad5a710564391b5fbbad299790b", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "bsdutils@1:2.41.5-0+deb13u1", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "a4b47561565a3535" }, "InstalledVersion": "1:2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d2bef99b483682c106a783e2e7ade1428a1081fab90e51880be201d6ee801bba", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "bsdutils@1:2.41.5-0+deb13u1", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "a4b47561565a3535" }, "InstalledVersion": "1:2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6f9a44cb19cdbf4964f6a89a3805151fc1af593a944eb9a4069fced8b2593c1a", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "bsdutils@1:2.41.5-0+deb13u1", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "a4b47561565a3535" }, "InstalledVersion": "1:2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:317881c9b591caf809ede33bfae6a18a7043ebffc672666d4a9cf6de814744fd", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f30dfe56963bc6693703086012338c125963e0112db94969a8228aae75c09d20", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f976688020965d8f28b7b309542116aa69a266bc273cc77ca872deb1813a886c", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6a5c0aaf5e5821f1e47db94f26f3b72f5f9057289c6900a938029f7ec639511c", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7c86a72ca3ced16bee1c785d92f7d17ff75b206448d42b21f40b0cffc600ee82", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ca6ea581362df3dbbbac0928decd97163207c3f698283ffe4722bcaa696a7d49", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d77d039b48233f72622c06377ded6319f53af35b353cb8c4191a0dd7272cc2bf", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:433e9ebff15a086e277a00766e780ab7e639fbbcffa478915d3f565a5575ffc0", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bc7cf5a26e53b622afef480c9d0787f663e17eaa07454cfaaa43b2e5d7a78fc1", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:65d96a47a0d45f713ecc75fb88f2455a9734ae8d44f281cf2a53fc503c71bed9", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ba33af39d925a86e00003448847bdd921f4d86bf69171e3959368d8303a5f8fb", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a943eb7c01abbabcf31eb326136dc0a33376a8b0e1e762f25c26044400e6c34c", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f4133cd43e4a7abab394fb96c8b2a46189c45e6320a76f7dd894ffb005b28477", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5975b1a8a0a0649f8b126512c3b1b023037afefcbe72fff2fb4e1f4dad08135b", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c714ea6c20fe9c915d8860c32f9c15edf657a57d80082892cfffd4f5570374af", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b64075df795d254f9cfdb876b0de22b8cef7168893f3e8c6ecaf24eb396cb973", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:68d6cab465a1944fdbd64bd33c6d8cc3d366906bad1d89127201bc2db66e5382", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "ffmpeg@7:7.1.5-0+deb13u1", "PkgName": "ffmpeg", "PkgIdentifier": { "PURL": "pkg:deb/debian/ffmpeg@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "7ea1064ff918f341" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7cba9f92fc362746f8ebf7e5ba52c6ed938c9c7baa56f190a2761eac587d3c25", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-54369", "PkgID": "libacl1@2.3.2-2+b1", "PkgName": "libacl1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libacl1@2.3.2-2%2Bb1?arch=amd64\u0026distro=debian-13.7", "UID": "cc40ccea052c10a8" }, "InstalledVersion": "2.3.2-2+b1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54369", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bdf06818b2a54113a1af1d5ae6bc6cea74eacab2b0731cafa3e1d17a4446243c", "Title": "acl: Symlink traversal privilege escalation via libacl functions", "Description": "acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:34351", "https://access.redhat.com/errata/RHSA-2026:42736", "https://access.redhat.com/errata/RHSA-2026:42739", "https://access.redhat.com/errata/RHSA-2026:43420", "https://access.redhat.com/errata/RHSA-2026:44481", "https://access.redhat.com/errata/RHSA-2026:46836", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:53371", "https://access.redhat.com/errata/RHSA-2026:54769", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/errata/RHSA-2026:64805", "https://access.redhat.com/errata/RHSA-2026:67140", "https://access.redhat.com/errata/RHSA-2026:67142", "https://access.redhat.com/errata/RHSA-2026:67144", "https://access.redhat.com/security/cve/CVE-2026-54369", "https://bugzilla.redhat.com/2490277", "https://bugzilla.redhat.com/2490279", "https://bugzilla.redhat.com/show_bug.cgi?id=2490277", "https://bugzilla.redhat.com/show_bug.cgi?id=2490279", "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5", "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370", "https://errata.almalinux.org/9/ALSA-2026-42736.html", "https://errata.rockylinux.org/RLSA-2026:42736", "https://linux.oracle.com/cve/CVE-2026-54369.html", "https://linux.oracle.com/errata/ELSA-2026-43420.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54369", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json", "https://www.cve.org/CVERecord?id=CVE-2026-54369", "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions" ], "PublishedDate": "2026-06-29T14:16:57.487Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-109518", "VendorIDs": [ "DSA-6607-1" ], "PkgID": "libapt-pkg7.0@3.0.3", "PkgName": "libapt-pkg7.0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libapt-pkg7.0@3.0.3?arch=amd64\u0026distro=debian-13.7", "UID": "158032a20d7e3dfd" }, "InstalledVersion": "3.0.3", "FixedVersion": "3.0.4", "Status": "fixed", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ae65ff87ef2b899966764118ff993d04358e70ddbf071c7b87d9c4349b59f0be", "Title": "apt: apt: Remote code execution via hard link reuse during package download retries", "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration", "Severity": "HIGH", "CweIDs": [ "CWE-62", "CWE-367" ], "VendorSeverity": { "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/11/04/12", "https://access.redhat.com/security/cve/CVE-2026-109518", "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html", "https://lists.debian.org/debian-security-announce/2026/msg00526.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-109518", "https://ubuntu.com/blog/apt-vulnerability-fixes-available", "https://ubuntu.com/security/notices/USN-8996-1", "https://www.cve.org/CVERecord?id=CVE-2026-109518" ], "PublishedDate": "2026-11-04T16:17:33.01Z", "LastModifiedDate": "2026-11-05T05:18:19.033Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:69135dc01436cc4009172fe3eb4f1b4a908145eed4d6026f5fa305c8ec1fb56e", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f29327eba9f7aecc9927c5686e775d06b9dabb36f2b017578fc97ea011601c5e", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:13766be5e5d63fa1a4aba66ed5bb71e8875ae18676513c5579fdd33b2530ff75", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f7de59dd2df6b94b987e098892e1c267af29545fff41fd85be7ba23e60ffe77d", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:88a19174fc7ea06fd7a1fbea89f04c683b00ae0a10b7c82f98eeda9596497a29", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4c2ac4bbf1cd48f64f31610017df7afcfdf501e30fbd45939b79d9bfabe6dfea", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ec6753cf3f990de82d3c3a7963a497db46b145d87e8577a4745c13cb35c77526", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:77d1eb69e4590220808bd7355c185e06f4ab5834087c32e91c2a6972454913e1", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d20cb7313c85e678f177ccbbf2e8618f434968ae78259afa2feea3025779518e", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c1e80e22e74954af4f6f9af48f839b0e2a59367ffd195c932bfdddaaa0bd559d", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2c37474b5bf4255dcb72aceb47bfeb0472eedb8864f13d774041a91a7db10d57", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:31c11992dee11e8fbc7696017c98456121fa05dce22c13a2fb3bfa8a979b9c70", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d5664341f6dfeb0c00e9af55ef91bf2caabbac1fd0e10e26cf0a0361a3f214d3", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4d861a96077e7e5a5e0121b40ca9e7a95ffbfd6fd82a681f9bdfe61fcaa9fa5d", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9c8b12cbe12ea86feed517d7dc44dbe21eb0fed956eeff1118c57c0dd96063ef", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:440257414ad1a37c10fd3e10cfc90469a9d353ee308b4a0cbed1f79f16294b93", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "libavcodec61@7:7.1.5-0+deb13u1", "PkgName": "libavcodec61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavcodec61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4a6b02ca2f18b594" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:64ce2f4c9f8366cb57b95c772d91d254cb3e6068b0d47f25937f97e8f73b9437", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:739a71f2baace2207d9dca4391bfb84a2e5723472f32c85a1e5f712efff45ab5", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:26661f5165b9e166cc8a87d321b9583dcd4326dbb44a14e3d970988e9b3f5bb0", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ff5b2d923fb9ae1a23116bccd0b7ac9b85945a5241d3da89114452572ae8b85b", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ab4a80f765c00ba7d9e8cc72d2e11c5542b14e24a6f2766d80b4b5fb7dd9279b", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f75626f875189f230530dcee415b8cbb17b07f4815d7d0734aca7f2d372a196c", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1ca4e105075b57164ca052d1375bdcdbcee05eb1dab2a3291fa8e6ffbb66ae17", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b05d46ea445ffad40471147f01344b5bd05d988cde33671513dd69542e397100", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a18db0d91b6e8e657b661d45dc2c5a6d0d09d33866de992120f9148958f0320c", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a1a1be8a8a6d50aaf9bd64d753fd9db89ecc5fdadae666f1634cb814fd7f7a36", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e24933ac7e0f24dea86d3aaa8560c0fdfd1a537fc3fdc4168533268f5c0d53e6", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4dc716bf5ee7cc50e44f4e8b8da4b1a93984ed10a5c3f775c6d2bfa71ae1f494", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:83a6504ca8f21777b86115da7cff9f82db6580fa6b68b50250657cb01f7f0ea4", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:38d0e52e522b51d1146bc35d62aaee4f28980974850ce2ba86f913380e36207f", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a70011ad458702194654c2971708d38605a4e0ce3eba7139b092063c3dd62df0", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:96d56d4e1f4058c9e8d67f7ccaa6d7f31e1ad7cdad4fbb9a3c947d49f345a518", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:315865f513794b02da261fd666b90d8953c4faccf904fdac2ac6e3cda29fecdb", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "libavdevice61@7:7.1.5-0+deb13u1", "PkgName": "libavdevice61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavdevice61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "fd522db697bb9a96" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d4ad9673dc265ad78261eb15a9afecf41ff4f26ea04e04ae58b93cc075f8772b", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:393b04e47b6ede549e9aa0aff600fa4bd6e136c240184ea7b7c738f2d9f37c2b", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:067c30538dbb64b05ec6b44aaa7f37b933ab7a2bd72880d3cf948b14e9d5709a", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:85b836b38be3f1e3857f1092d1d517c1121a4bf082331b596cdfb72606fabe12", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:10aa87c6434fe33f193956483bf1c2fc1d2b94ddee09c92729f9a1295d52cde4", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f74e89c86ff9b501013dd3e3b7d1c93ef9d3cc5a5a1d14910f31b8978db59f7d", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d1a4e37b9b9f1bcafee364aca4ce008d157fd1673f5f21c6c93b4a92fc2293ac", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fb7efa64eb608d9b949c790a1556911eccf7b17745a10f423762d63e03bad5b6", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d1193746bae24b74d032984b9897c94277caeb6e95a3cfea51e54583e334c227", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fd1d6529a6a343dda1f5e719d9d64777a49c402c5f95da5239556f3cf0735653", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:97beacd46b0ec9b242da56a4b1dfeba596797646472ebc2d2f8cc19ebd2d2f5e", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:426fc0946381c58d2c3247a06ca79889dfdea3063c4a44515d1f764af042f0f5", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5c24f278df2fab2aa7c82e68fc975d1e00c8d755d94ec197eac692520c14aee8", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:27bb44888329c20b6a6e794caca3f1f2ca7c174219fe9e1ca9e1bbc94c9e683c", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9e645c49cc1bbe20f0bbe64c6beb5a51b90290503f6a638fe5e27fffede4f840", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:281e870cf235bd38d44b98bf3b06e9d828de7facf890dbbada696cd0a11e61fb", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f9ef222f1e8e437014f1c1b5df77912bdaaa4cdc391d09fcccd6a7668c7ff2b2", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "libavfilter10@7:7.1.5-0+deb13u1", "PkgName": "libavfilter10", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavfilter10@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "4de0df1f90fa8fe5" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6ddb70321b4712b8597fcf86e5bb65c7faa9709df9d6b73fb28c5e1f3ef89ec1", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3f63600246a0990e05c5c1e6b8d4492a375ed59b94369a5722b757323539feff", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:45da60716ab502f4a2cee6c959b2c6fb2f7b71c447f37d5f77b9d6cea0a51d14", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bc9d26848c855a077a62b07dc089f2e7efdc460acfa974d23c007c5f9b3d44c7", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ce86992040ba8bf3236f4f964513db92e94b0b94e1d088249f63cdb092f470db", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:91b5d2d86ca167f8046e620d14e1d8a33e83fe76f2164f563bec08398a8df8cb", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:477baaf9e3cf9a0e4cf8e80ac14bd2d6c06bd36413ebb0bac41c3e33366fb73c", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dba4d30d621a6ac3822db1b8035a9f5658dac38279a6f558f82b417164ff3397", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e398bb462f6abf55e0949d2ed6ff626a00ce98c018695a5347f7ee4f8bda831b", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b40e17da4c25780b7cf7c98eea8d917e71328ccb2d24aa796cbca560e013fd55", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4dd01226be813902d2e35ede54f4d969874423ae3c09e957f340d2c551256aed", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a8b4289506b7f3d3dafc981c90be50eb656e01bd1b517dcb50f944ff76e8210a", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:be2546bfcf6a8f82b1786ec3ff1f5d4cab3e90c19c862a4610142bc9159d7b30", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a337c9d999ef53b33ce4744700eb47d55230fe1c4e48d2fd3b9dbf5cdfeab21c", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d8fca15bc2ad883dac9f336bed14f73ee26641a297b2bdb79e271009a8858b3d", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f8af39b61c091253b09ec1815ebc6e41ad9e5744348ecd4942a2ef648f71e751", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:31d348bc27fec81e55810d5520ef5ba81bce500b8077673593c2bd8767869db7", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "libavformat61@7:7.1.5-0+deb13u1", "PkgName": "libavformat61", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavformat61@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "1a67f02ec1f77c5b" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1b36e7234b08daa13c52b80b5d4aa81945cc4e9466e509301fc4041975244f41", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d99c1d8e2d6d442157018e6bed70991abb7ab7a125a8358ca1c130599f1a05fa", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:64fda0a5b98ab099db177a26f71aa59126962952e9956fe2859db56f0520af21", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fb9e0121f29e8144499628f063862c5335316a14c2bdb62bc1dff1180591b6dd", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d50df0a01bea5e3ae6322a656d412970a059b1861994cd045160ae9dcadc8acd", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e467826dcd2823797c084e73a8a185c833670bd7aaa03017c301cc0c1226c4da", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3c87a59e641d30af5e8ca7bbb0c98e0da6d971630ec929d09acb38ec3acc4424", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e4d82f061a23dbb542c06752db18b683d111dd7b7d1f68424de832b45a671a28", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6eeb68aac809ed9539b8ab1a79b7db7cafd52b1fe2224115cd64eccf8591d7a1", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:75f90b64875ab87d23dc15287315ca4581eb8458fdf9a94168ce08c5ea7f7050", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:89b5a507827a8da44cda68a83bafd53c4769ea5dd6a2cdeba91f11ec964a7adb", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e55d0b7ae5794418d7dfdce4a5115c750ef6b5b217aec1a5df5b8822997327b0", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:317a731b171e1dd474023cc4c5c692e1f8686810b6cad391c0f9081c9a51182c", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f3e58bc70c12df98d45642507ff96f9a1ed6cb154e83c9e8214b153c2f008e39", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:550780b9d3ddb4abf48c3e826e4af72a692b8ef619514c711aba50917ab249ea", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:521ce1d127f3859be1b028a9f8e75d08656da4ef89c92826c4f1f1f2cf7bf4f9", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7911622f50deb902d653a706453739e406b34da12d1b5d0b7ba191aa1ec06dbe", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "libavutil59@7:7.1.5-0+deb13u1", "PkgName": "libavutil59", "PkgIdentifier": { "PURL": "pkg:deb/debian/libavutil59@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "98c8fc77de6d783f" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:54d5012ce306d18edfb30596394ac0504b8277b13719abfb572d0a2d781caaf7", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libblkid1@2.41.5-0+deb13u1", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e20c3ed37f6020d7" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:be91d795dd5db4ced967c2bf244b09ce119a4e574a6da67f4bfc748730d09480", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libblkid1@2.41.5-0+deb13u1", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e20c3ed37f6020d7" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b388c7ac17d1a2a32bd13a0e52eb7f21df259e20e897a1d1284089d922fad78b", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libblkid1@2.41.5-0+deb13u1", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e20c3ed37f6020d7" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:05ddc4b473133c3121a3f7e11803309a5aa72f3a54bbbb7b68ceb78bd294835c", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libblkid1@2.41.5-0+deb13u1", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e20c3ed37f6020d7" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4db4b7d05e84cc5ea63d697198dc05f728c84e610b9f4bc2b7ea5b5da4ebbe9c", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-16554", "PkgID": "libcjson1@1.7.18-3.1+deb13u1", "PkgName": "libcjson1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libcjson1@1.7.18-3.1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d70fd114750ffef9" }, "InstalledVersion": "1.7.18-3.1+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16554", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5bda6195b1a545f72bf73e466521517ca30939b085fde45ede535281cf05c73a", "Title": "cJSON: cJSON: Remote code execution due to integer overflow via crafted JSON", "Description": "cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, a 32-bit size_t, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be allocated based on an underestimated length. When cJSON_PrintBuffered() is used with a pre-allocated buffer, the subsequent write loop overflows the heap allocation. An attacker supplying a crafted JSON string to an application using cJSON on a 32-bit platform can cause a heap buffer overflow, potentially leading to remote code execution, information disclosure, or denial of service.\n\n\n\n\nBecause project creator contact attempts were unsuccessful, the vulnerability has only been confirmed in version 1.7.19 but may also affect other versions.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "V3Score": 6.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/30/26", "http://www.openwall.com/lists/oss-security/2026/07/31/4", "https://access.redhat.com/security/cve/CVE-2026-16554", "https://cert.pl/en/posts/2026/07/CVE-2026-16554", "https://github.com/DaveGamble/cJSON", "https://nvd.nist.gov/vuln/detail/CVE-2026-16554", "https://www.cve.org/CVERecord?id=CVE-2026-16554" ], "PublishedDate": "2026-07-27T09:16:37.383Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-29036", "PkgID": "libcjson1@1.7.18-3.1+deb13u1", "PkgName": "libcjson1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libcjson1@1.7.18-3.1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d70fd114750ffef9" }, "InstalledVersion": "1.7.18-3.1+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-29036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7de310acb3688e94ea94f8c66626e838e04e19f748b3e1a019d4033d0e0b4639", "Title": "cJSON: cJSON: Data corruption and unauthorized modification via JSON Pointer escape decoding", "Description": "cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointer_inplace() function within cJSON_Utils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape sequences (~0 or ~1) in patch paths. Attackers can submit malicious RFC 6902 JSON Patch input to applications using cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() to silently corrupt data or delete unintended keys, potentially bypassing authorization controls in applications that rely on JSON Patch for access-controlled data modification.", "Severity": "HIGH", "CweIDs": [ "CWE-706" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-29036", "https://github.com/DaveGamble/cJSON", "https://nvd.nist.gov/vuln/detail/CVE-2026-29036", "https://www.cve.org/CVERecord?id=CVE-2026-29036", "https://www.vulncheck.com/advisories/cjson-wrong-key-modification-via-json-pointer-escape-decoding" ], "PublishedDate": "2026-08-11T22:17:22.257Z", "LastModifiedDate": "2026-10-23T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-67215", "PkgID": "libcjson1@1.7.18-3.1+deb13u1", "PkgName": "libcjson1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libcjson1@1.7.18-3.1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d70fd114750ffef9" }, "InstalledVersion": "1.7.18-3.1+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-67215", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:86fe97577ebc0bc13f5d859bb72fb4aa7f977088bf68fc5af48287c942b5e471", "Title": "cJSON: cJSON: Denial of Service via uncontrolled recursion in JSON Patch application", "Description": "cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees to amplify document depth beyond the parser's nesting limit: cJSON_Delete() recurses with no depth bound, and the cJSON_Duplicate() guard CJSON_CIRCULAR_LIMIT is set to 10000, ten times the parser's 1000-level nesting limit and high enough to overflow a default thread stack. An attacker who can supply the patch document can crash the process, resulting in denial of service.", "Severity": "HIGH", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-67215", "https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L253-L261", "https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON_Utils.c#L906-L940", "https://joshua.hu/cjson-json-parser-cve-vulnerabilities", "https://nvd.nist.gov/vuln/detail/CVE-2026-67215", "https://www.cve.org/CVERecord?id=CVE-2026-67215", "https://www.vulncheck.com/advisories/cjson-json-patch-copy-add-uncontrolled-recursion-stack-exhaustion" ], "PublishedDate": "2026-07-29T14:16:35.187Z", "LastModifiedDate": "2026-10-23T23:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-67216", "PkgID": "libcjson1@1.7.18-3.1+deb13u1", "PkgName": "libcjson1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libcjson1@1.7.18-3.1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d70fd114750ffef9" }, "InstalledVersion": "1.7.18-3.1+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-67216", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:699345f76b6c4707d850ca58a0047cd9a530fa1fb767f048beb4d1d439aa15c4", "Title": "cJSON: Denial of Service due to inefficient JSON object comparison", "Description": "cJSON through 1.7.19 contains an inefficient algorithmic complexity flaw in cJSON_Compare(). When comparing objects, the function recurses into each shared subtree twice, once in each direction, with no depth guard, making the running time exponential in nesting depth. A small, deeply nested document of a few hundred bytes (depth around 40) compared for equality consumes hours of CPU, and the cost roughly doubles with each additional level of nesting. An application that calls cJSON_Compare() on attacker-influenced JSON that is structurally equal to a reference document is exposed to a denial-of-service condition.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-67216", "https://github.com/DaveGamble/cJSON/blob/v1.7.19/cJSON.c#L3057-L3180", "https://joshua.hu/cjson-json-parser-cve-vulnerabilities", "https://nvd.nist.gov/vuln/detail/CVE-2026-67216", "https://www.cve.org/CVERecord?id=CVE-2026-67216", "https://www.vulncheck.com/advisories/cjson-cjson-compare-exponential-complexity-denial-of-service" ], "PublishedDate": "2026-07-29T14:16:35.333Z", "LastModifiedDate": "2026-10-23T23:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-87933", "PkgID": "libcjson1@1.7.18-3.1+deb13u1", "PkgName": "libcjson1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libcjson1@1.7.18-3.1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d70fd114750ffef9" }, "InstalledVersion": "1.7.18-3.1+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-87933", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7dcc5ef351eb7ff004bc315c8f95e0e4c6c4bfdc8d04520b5933023866de7ff0", "Title": "cJSON: cJSON: Memory corruption via use after free in cJSONUtils_MergePatch", "Description": "A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch of the file cJSON_Utils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.", "Severity": "HIGH", "CweIDs": [ "CWE-119", "CWE-416" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-87933", "https://github.com/DaveGamble/cJSON/", "https://github.com/DaveGamble/cJSON/issues/1060", "https://github.com/DaveGamble/cJSON/pull/1065", "https://nvd.nist.gov/vuln/detail/CVE-2026-87933", "https://vuldb.com/cve/CVE-2026-87933", "https://vuldb.com/submit/911136", "https://vuldb.com/vuln/401815", "https://vuldb.com/vuln/401815/cti", "https://www.cve.org/CVERecord?id=CVE-2026-87933" ], "PublishedDate": "2026-09-10T01:16:35.65Z", "LastModifiedDate": "2026-09-10T20:17:31.073Z" }, { "VulnerabilityID": "CVE-2026-113351", "PkgID": "libexpat1@2.9.0-1~deb13u1", "PkgName": "libexpat1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e303fe8e0766825b" }, "InstalledVersion": "2.9.0-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-113351", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1cc3487cc290d14fbb3b8dd57af924336a3cfe08d2fa459d17302023b4ec8d09", "Title": "expat: expat: Denial of Service via improper memory tracking in XML_ParserReset", "Description": "libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated.", "Severity": "HIGH", "CweIDs": [ "CWE-909" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-113351", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884", "https://github.com/libexpat/libexpat/pull/1431", "https://nvd.nist.gov/vuln/detail/CVE-2026-113351", "https://www.cve.org/CVERecord?id=CVE-2026-113351", "https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset" ], "PublishedDate": "2026-10-20T11:17:19.363Z", "LastModifiedDate": "2026-11-03T21:26:47.25Z" }, { "VulnerabilityID": "CVE-2026-115506", "PkgID": "libexpat1@2.9.0-1~deb13u1", "PkgName": "libexpat1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e303fe8e0766825b" }, "InstalledVersion": "2.9.0-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115506", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e3dc01e8b5168eade6178630a3f6be74718d3baa4f2ffd028ebf399ad53b3779", "Title": "expat: expat: Denial of Service via delayed entity amplification detection", "Description": "libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse.", "Severity": "HIGH", "CweIDs": [ "CWE-776" ], "VendorSeverity": { "photon": 3, "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115506", "https://github.com/hannob/lololol", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/issues/1160", "https://github.com/libexpat/libexpat/pull/1433", "https://nvd.nist.gov/vuln/detail/CVE-2026-115506", "https://www.cve.org/CVERecord?id=CVE-2026-115506", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay" ], "PublishedDate": "2026-10-22T20:17:06.62Z", "LastModifiedDate": "2026-11-02T18:27:06.127Z" }, { "VulnerabilityID": "CVE-2026-117610", "PkgID": "libexpat1@2.9.0-1~deb13u1", "PkgName": "libexpat1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e303fe8e0766825b" }, "InstalledVersion": "2.9.0-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-117610", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6cd6b357c1db869e10b322930bb7cebbeb11abebeb1d69c6b62b05f29cf42426", "Title": "expat: expat: Denial of Service via NULL pointer dereference in external entity parsing", "Description": "libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-117610", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510", "https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d", "https://github.com/libexpat/libexpat/pull/1444", "https://nvd.nist.gov/vuln/detail/CVE-2026-117610", "https://www.cve.org/CVERecord?id=CVE-2026-117610", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser" ], "PublishedDate": "2026-10-28T03:17:12.777Z", "LastModifiedDate": "2026-11-05T16:17:35.787Z" }, { "VulnerabilityID": "CVE-2026-118370", "PkgID": "libexpat1@2.9.0-1~deb13u1", "PkgName": "libexpat1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libexpat1@2.9.0-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e303fe8e0766825b" }, "InstalledVersion": "2.9.0-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-118370", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:797682b5428640ca78cdeb9e94d0c5d2c351b6dfe195f79a78437bb3328cf32d", "Title": "expat: expat: Denial of Service via integer overflow during XML attribute parsing", "Description": "libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and nPrefixes, crashing applications or corrupting heap memory.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-118370", "https://github.com/libexpat/libexpat", "https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140", "https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae", "https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c", "https://github.com/libexpat/libexpat/pull/1450", "https://nvd.nist.gov/vuln/detail/CVE-2026-118370", "https://www.cve.org/CVERecord?id=CVE-2026-118370", "https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes" ], "PublishedDate": "2026-10-28T03:17:13.293Z", "LastModifiedDate": "2026-11-02T20:17:37.377Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "liblastlog2-2@2.41.5-0+deb13u1", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "481f2fda004b182b" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:59d4a9c3d80bf40b4b32d1527fb1c3acfb77c7329714bec9e07c34d05abeb046", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "liblastlog2-2@2.41.5-0+deb13u1", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "481f2fda004b182b" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bcbe2f412605f48f633f2df30913b4341fca9348e6fd4faeff32a9adbdcf2ca0", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "liblastlog2-2@2.41.5-0+deb13u1", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "481f2fda004b182b" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4926ac37bfe65fe231a6ad3089cd46ed35069197e177d36a5612e49775fb831b", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "liblastlog2-2@2.41.5-0+deb13u1", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "481f2fda004b182b" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:534fdf5dd093a4a6446d0d257221c5d85f65ece3f4aadb447ad7734b0a132190", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libmount1@2.41.5-0+deb13u1", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d0bfdcf72ddff375" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:674a63fbedd5d7b6c675175027b39611b21ea72223c05bba6725192665fdb26e", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libmount1@2.41.5-0+deb13u1", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d0bfdcf72ddff375" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:26716654a0df9d9599017077cec08a601698590fd43c5f3c679b64e20d171759", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libmount1@2.41.5-0+deb13u1", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d0bfdcf72ddff375" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:898aed5fae49b7fd19a5a421f4d9c718409248c3a8823dcf4a9e442a72881ebf", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libmount1@2.41.5-0+deb13u1", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d0bfdcf72ddff375" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f95cc96774d8fd62ad8b6ee80128b2c4848f2651c71da1e7888f7ba00d281575", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "libncursesw6@6.5+20250216-2", "PkgName": "libncursesw6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libncursesw6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7", "UID": "7121209a6392dd9e" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:64549d9eeaf8eba6e0bd6b83d7f8f33c48132a04753c97de1749c4bd87b8b30a", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8384379ba786a835154cf7ca62628c07b53bc4ba30bb8d1e99ba67dec9e69953", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a44205eec42354582c269cfc407258869e71e485c91902ce53d0e2e9cdfb5eac", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:50a9362c10f440c6b00524ecfbbfb5bdf3ad90de171bec404c750a41851c4ab5", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9041dc3f178d6f384baf075b595c516b502ac9b1ce09a08115d5580166200b73", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d82b68bb0abada45c5111da59f0a38dccb15454def3d728fc77521c0936bfafd", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ac8269d86ed76c889406df70313ba8b78a009a15aa00f5d5a2d6a1e5f87ddcbd", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0cacacbdfd5f9cb16b860fc9a1de807a12eb5cc5d5d4965a1d3fa642230ed086", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b0ea062bdb3ff8c0b98e96c939c595ee9ca63b99f7776c87131be1e824ea636f", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:56dd8ea1c640e577814dba87cf97ae8ea40c16ef35ff51bdfeac900c5c8c5081", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8a7311c382a8865e7e3b2f78021e5ad5a676f34085ac77304bb7bfa137865ba8", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:73f65ee660a72ba3656e471d184e014620cc65ab0c7128e5c8bf74a7002ca008", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b6d863d26cf8f5d5ab700601f785476b65d910768b8d3d531e35d60cf4005edf", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:763c8cdfb49574f3a0cda6d3d6c2f18e098416c9b783a092ae173418d2f4ae1e", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ef7aa9abac577540a34b9549979ac49c6399c05b30151c5b4c54fa10e5a3c2c7", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:14509dc10bc5178accc44ba6982e2dea76af7a770f0162d18eb5490fa6734d80", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:02f2760b829c456d1353f4667ded00b0ea67d9a4632be3d4424cd21db0505b79", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "libpostproc58@7:7.1.5-0+deb13u1", "PkgName": "libpostproc58", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpostproc58@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "87e07467144e5864" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:434ea2d40e9b74b04034a81626f11a9a4ec777cec2b311f0cfb3e15a270fbb16", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libsmartcols1@2.41.5-0+deb13u1", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "94502fa5e10395c7" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4b5b3c388a99b6dad4c0938f2c27095adb0dafb16c603fb943e329dace98bca6", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libsmartcols1@2.41.5-0+deb13u1", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "94502fa5e10395c7" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ba162172e53634bbb5802eed4b5f252c05e834035ea66f3d806e7313e892506a", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libsmartcols1@2.41.5-0+deb13u1", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "94502fa5e10395c7" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9f88f7eaeff7b95b4302a4d7db45ee69a081168cfbe65b149669b7a0851e79fe", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libsmartcols1@2.41.5-0+deb13u1", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "94502fa5e10395c7" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:53656b61d332a8f49fe2bb987e1cd3c4a7db92c9ee3502af55f24566204a7db3", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-37555", "PkgID": "libsndfile1@1.2.2-2+deb13u1", "PkgName": "libsndfile1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsndfile1@1.2.2-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "bdc38513614ea915" }, "InstalledVersion": "1.2.2-2+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-37555", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:973bd257087bfb922f867fbefd1823ab9db619390744be90d94613611a602838", "Title": "libsndfile: integer overflow in ima_reader_init()", "Description": "An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:19559", "https://access.redhat.com/errata/RHSA-2026:19560", "https://access.redhat.com/errata/RHSA-2026:19610", "https://access.redhat.com/errata/RHSA-2026:23221", "https://access.redhat.com/errata/RHSA-2026:23222", "https://access.redhat.com/errata/RHSA-2026:23223", "https://access.redhat.com/errata/RHSA-2026:25092", "https://access.redhat.com/errata/RHSA-2026:25197", "https://access.redhat.com/errata/RHSA-2026:25198", "https://access.redhat.com/errata/RHSA-2026:25227", "https://access.redhat.com/errata/RHSA-2026:30078", "https://access.redhat.com/errata/RHSA-2026:30087", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/security/cve/CVE-2026-37555", "https://bugzilla.redhat.com/2463856", "https://bugzilla.redhat.com/show_bug.cgi?id=2463856", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-37555", "https://errata.almalinux.org/9/ALSA-2026-19610.html", "https://errata.rockylinux.org/RLSA-2026:19610", "https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1", "https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151", "https://github.com/libsndfile/libsndfile/issues/833", "https://linux.oracle.com/cve/CVE-2026-37555.html", "https://linux.oracle.com/errata/ELSA-2026-19610.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-37555", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-37555.json", "https://www.cve.org/CVERecord?id=CVE-2026-37555", "https://www.openwall.com/lists/oss-security/2026/04/30/7" ], "PublishedDate": "2026-04-29T16:16:23.41Z", "LastModifiedDate": "2026-07-15T02:20:44.847Z" }, { "VulnerabilityID": "CVE-2026-119373", "PkgID": "libsqlite3-0@3.46.1-7+deb13u2", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7", "UID": "283f5d44571e2d3e" }, "InstalledVersion": "3.46.1-7+deb13u2", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119373", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2af3662e221c4ec468df5d34f0524ab38af47e9d1fcc107a560b01a391bcda2b", "Title": "sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5", "Description": "SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge", "https://access.redhat.com/security/cve/CVE-2026-119373", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107", "https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80", "https://nvd.nist.gov/vuln/detail/CVE-2026-119373", "https://sqlite.org/bugs/info/2026-08-04T08:49:27Z", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/a7f8c92f62", "https://www.cve.org/CVERecord?id=CVE-2026-119373", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists" ], "PublishedDate": "2026-10-30T12:16:36.027Z", "LastModifiedDate": "2026-11-05T21:18:41.047Z" }, { "VulnerabilityID": "CVE-2026-119374", "PkgID": "libsqlite3-0@3.46.1-7+deb13u2", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7", "UID": "283f5d44571e2d3e" }, "InstalledVersion": "3.46.1-7+deb13u2", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119374", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9cbf715030a0df8ce4568c81cd7264fd44e2e02aa8a87d8b5848a9da391c293e", "Title": "sqlite: sqlite: Arbitrary code execution via corrupted FTS5 index", "Description": "SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-fts5-securedel", "https://access.redhat.com/security/cve/CVE-2026-119374", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525", "https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9", "https://nvd.nist.gov/vuln/detail/CVE-2026-119374", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/9cd4f9e920", "https://www.cve.org/CVERecord?id=CVE-2026-119374", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete" ], "PublishedDate": "2026-10-30T12:16:36.187Z", "LastModifiedDate": "2026-11-03T16:09:06.143Z" }, { "VulnerabilityID": "CVE-2026-119379", "PkgID": "libsqlite3-0@3.46.1-7+deb13u2", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u2?arch=amd64\u0026distro=debian-13.7", "UID": "283f5d44571e2d3e" }, "InstalledVersion": "3.46.1-7+deb13u2", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119379", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:426c0c77b3f2686b9f7605bfa38f2bd5229f6e708977103d12f5a8b199533a32", "Title": "sqlite: sqlite: Arbitrary code execution via crafted session changesets", "Description": "SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-session-ncol", "https://access.redhat.com/security/cve/CVE-2026-119379", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619", "https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52", "https://nvd.nist.gov/vuln/detail/CVE-2026-119379", "https://sqlite.org/bugs/info/2026-08-16T10:15:25Z", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/3f57024aecea0f3b", "https://www.cve.org/CVERecord?id=CVE-2026-119379", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind" ], "PublishedDate": "2026-10-30T12:16:36.967Z", "LastModifiedDate": "2026-11-03T15:38:24.827Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f01b580803def174778d6d3db8ab33bcf58b7ba2ac1dcaf9d80b0ae8c9f19a7d", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c592955142adfb69f00a813b35b678dc68ead42e32065b8aff7aa0eb20bf5d66", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7a04a14573e6ee3a16554b85fde556f39d840266f8315421e4c4691354dbcd93", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f48e1a98b319c555217b95fc02f096e74e5c2cbcdc4769c634698e15dcf96048", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6b9b847bd61f2ed43971051e61c1e4323623c09e055e90a8b609370d0b4fac09", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3115f869fe9a84422ccad85b8bbca408dcdb021927f4d109561f24b6518d5fb1", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dd09164274578d14262a5182af6406c95e9c591458c385c2dceb175ba656caab", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a7853d0e485f371cfc4ae2dd5636310ba24f37c60ea53c147c38f9f4224a57b1", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:855d57be6b8a6a8947ad4d56a815e2f69dc1be695057f0f4c8632f15811fa2bd", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5bffd5bc793c51f4ce4fd2acf7203c92dbf13a04c3109eb28692e9eed12ba706", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4b996f8ad10bbee7fa395e5e7695d3cba06dbaa3b6a775c9b38505e62d645f94", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0da1a24777fb822c8b0eff99128597564ef90ff4a575838b5ee96f35e416bfaa", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2ab5cbce3591394aaf89596e36ec75c345be0e9a510d9805da3a8a9a639cf470", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f0e2ae57cb111e535d557e0fe29027500930eb4b7c9891e148eaf535848f9594", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:03c080660efd55e1e14bea21af117fbcf0a32c27b717d01ce07e0aa63bf555a0", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:79b18e47c954c7aa9bdf363502f247676abe037cafddb764def85dc661d1b69d", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "libswresample5@7:7.1.5-0+deb13u1", "PkgName": "libswresample5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswresample5@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "9444f883324515e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:60a35eb7fee8390512deb6b588074577612fa1bfc7a2d53057e4fd9091c023b2", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-58049", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fc562845a63e29d8f133702064db3177894ad6980c1696c014570f807879400a", "Title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream", "Description": "FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A crafted media stream using the RASC FourCC, decoded by libavcodec, triggers a bitstream-controlled out-of-bounds heap write and adjacent out-of-bounds read, leading to memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.6, "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:43711", "https://access.redhat.com/errata/RHSA-2026:51180", "https://access.redhat.com/errata/RHSA-2026:52832", "https://access.redhat.com/errata/RHSA-2026:52833", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/errata/RHSA-2026:61627", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:61629", "https://access.redhat.com/security/cve/CVE-2026-58049", "https://bugzilla.redhat.com/show_bug.cgi?id=2493952", "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c", "https://github.com/advisories/GHSA-mjxr-6gqf-w78h", "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc", "https://nvd.nist.gov/vuln/detail/CVE-2026-58049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58049.json", "https://ubuntu.com/security/notices/USN-8750-1", "https://www.cve.org/CVERecord?id=CVE-2026-58049", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta" ], "PublishedDate": "2026-06-28T02:16:30.477Z", "LastModifiedDate": "2026-09-01T13:19:51.89Z" }, { "VulnerabilityID": "CVE-2026-64830", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64830", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2c2c0073ddf89b18c6af137345af4cbb9534ee5aa46f32e9d5270d3a9f66b3a8", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.", "Description": "FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declaring more distinct stream IDs than the fixed-size array bounds in libavformat/mpeg.c. Attackers can craft a subtitle file with excessive distinct stream IDs to trigger unbounded writes beyond the vobsub-\u003eq[] array boundary via ff_subtitles_queue_insert(), potentially achieving arbitrary code execution in any application using FFmpeg's VobSub demuxer.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64830", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/dbd495f066a85ba96b17433f4306582aa37c3951", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23657", "https://github.com/advisories/GHSA-jphx-q7f7-4x8r", "https://nvd.nist.gov/vuln/detail/CVE-2026-64830", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64830", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-vobsub-subtitle-demuxer" ], "PublishedDate": "2026-07-22T17:16:58.557Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64832", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64832", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f5c29d6bf9a4f120c1f1af9b7045ed9a24b91ad8a7f38962e9e6a6cf77ddb769", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video file in NVDEC hardware decoder", "Description": "FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows attackers to trigger memory corruption by supplying a crafted video file. When no decoder surfaces remain, the ff_nvdec_start_frame_sep_ref error path frees memory via nvdec_fdd_priv_free while the calling layer subsequently frees the same frame description data, resulting in a double-free of the underlying decoder context in any FFmpeg-based application using NVDEC hardware-accelerated decoding.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64832", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23664", "https://github.com/advisories/GHSA-jc8j-9799-c943", "https://nvd.nist.gov/vuln/detail/CVE-2026-64832", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64832", "https://www.vulncheck.com/advisories/ffmpeg-double-free-in-nvdec-hardware-decoder-via-nvdec-c" ], "PublishedDate": "2026-07-22T18:17:05.483Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64833", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64833", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2ec8b408c824a4969f75b9051d7bdc6e4fa0c20277fb97bfffabdae0698fb24f", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in S/PDIF muxer", "Description": "FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the actual packet length. Attackers can exploit the missing bounds check in the spdif_header_dts4 function by providing a malicious DTS-HD audio stream during S/PDIF re-muxing to trigger unauthorized memory reads beyond the packet buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64833", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6f80e2765492700622596af720534cef33dd31b4", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23661", "https://github.com/advisories/GHSA-34g6-m4cp-w5c9", "https://nvd.nist.gov/vuln/detail/CVE-2026-64833", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64833", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-via-s-pdif-muxer-spdifenc-c" ], "PublishedDate": "2026-07-22T18:17:05.627Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64834", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64834", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:df87db34589147880112cc175f594b342d308847761be5ba7a72d6dd312c5022", "Title": "FFmpeg: Denial of Service via crafted RTP/ASF stream", "Description": "FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtp_asf_fix_header function fails to validate a minimum chunksize when iterating over ASF objects, causing the loop pointer to never advance when a chunksize is smaller than the 24-byte minimum ASF object header size, resulting in CPU exhaustion that denies service to legitimate users.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64834", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/11d5f475be95d22d5f0692220cc772b116abc632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23663", "https://github.com/advisories/GHSA-5xcx-3qx2-qv4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-64834", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64834", "https://www.vulncheck.com/advisories/ffmpeg-infinite-loop-dos-via-rtp-asf-demuxer" ], "PublishedDate": "2026-07-22T18:17:05.78Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-64835", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64835", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ef20f1af5b9e089ee438c23d0070a87c0b96427ceaa5d64ef786850b1ef264a2", "Title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files", "Description": "FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying a crafted ADX or AAX audio file with a mid-stream channel layout change. When AV_PKT_DATA_NEW_EXTRADATA side data is received mid-stream, the adx_decode_frame function re-parses the stream header but fails to update the internal channel state, causing subsequent decoding operations to access the prev[] state array using a stale channel count.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64835", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659", "https://github.com/advisories/GHSA-p2v8-4c4f-rwpq", "https://nvd.nist.gov/vuln/detail/CVE-2026-64835", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-64835", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder" ], "PublishedDate": "2026-07-22T18:17:05.917Z", "LastModifiedDate": "2026-10-24T15:10:00.19Z" }, { "VulnerabilityID": "CVE-2026-66036", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b15a3273159d1c1b98d6fbd00bdd2c23edcd6cb377cb3507fdd3ae478b7a65de", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted video in vf_hqdn3d filter", "Description": "FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution increases between frames when filtergraph reinitialization is disabled via the -reinit_filter 0 option. Attackers can provide a malicious video input where vf_hqdn3d.config_input() allocates undersized per-plane line-history buffers based on the initial frame width, and subsequent larger frames cause denoise_spatial() to write beyond the allocation boundary, resulting in heap memory corruption.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66036", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/5d7112c60e6f0f0742ce47d448e6da0718a70f4c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23783", "https://github.com/advisories/GHSA-575m-jfmw-q76c", "https://nvd.nist.gov/vuln/detail/CVE-2026-66036", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66036", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-vf-hqdn3d-filter" ], "PublishedDate": "2026-07-24T20:18:20.433Z", "LastModifiedDate": "2026-08-07T01:05:17.87Z" }, { "VulnerabilityID": "CVE-2026-66039", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66039", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a1d2f515f22586069cf106165feebba8cb597f480f8ff35235b3ce62233a602c", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file", "Description": "FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122", "CWE-190" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66039", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aafb5c655edc76a753275c383ebb139feb032718", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23631", "https://github.com/advisories/GHSA-84qc-6h9r-4w33", "https://nvd.nist.gov/vuln/detail/CVE-2026-66039", "https://ubuntu.com/security/notices/USN-8671-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-66039", "https://www.vulncheck.com/advisories/ffmpeg-mace6-audio-decoder-heap-out-of-bounds-write-via-caf-file" ], "PublishedDate": "2026-07-24T20:18:20.88Z", "LastModifiedDate": "2026-08-07T00:46:17.303Z" }, { "VulnerabilityID": "CVE-2026-66040", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66040", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:88693139effe58d40e3821c1fdd3c890a1490f0d6cf4b5c9626a5f5ba9b4a381", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PNG image", "Description": "FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple IFD entries reference the same large value payload, causing canonical serialization to expand the output far beyond the undersized allocation estimated by add_exif_profile_size(), resulting in png_write_chunk() writing tens of thousands of bytes past the buffer boundary, leading to deterministic heap corruption, process crash, and potentially arbitrary code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 8.8, "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66040", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b506fafec9a19fcbc2be5271875fd4a63d6615bc", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23786", "https://github.com/advisories/GHSA-6vcg-882j-82v5", "https://nvd.nist.gov/vuln/detail/CVE-2026-66040", "https://www.cve.org/CVERecord?id=CVE-2026-66040", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-png-apng-exif-encoder" ], "PublishedDate": "2026-07-24T20:18:21.063Z", "LastModifiedDate": "2026-08-07T00:35:29.773Z" }, { "VulnerabilityID": "CVE-2026-66041", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-66041", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e9aa9b7ccb73f009241d9d5f663b0bf5f8dac4647d8f7ddbe36424016cab5a54", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted PGS/SUP subtitle file", "Description": "FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker to corrupt heap memory by supplying a crafted PGS/SUP subtitle file with mismatched frame dimensions. Attackers can provide a subtitle file whose second presentation has larger dimensions than its first, causing av_image_copy_plane() to copy data exceeding the initial allocation size into the undersized libquirc grayscale image buffer, resulting in heap corruption and process crash with potential for code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-66041", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625", "https://github.com/advisories/GHSA-frhp-m687-9g3q", "https://nvd.nist.gov/vuln/detail/CVE-2026-66041", "https://www.cve.org/CVERecord?id=CVE-2026-66041", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-via-vf-quirc-filter" ], "PublishedDate": "2026-07-24T20:18:21.24Z", "LastModifiedDate": "2026-10-24T13:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-70628", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70628", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8f1813ef6de828abf53b7dc2b47bfa7f87facc1793d1f20e338251874a95f541", "Title": "ffmpeg: FFmpeg: Arbitrary code execution via crafted WTV file in DVB subtitle parser", "Description": "FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows attackers to trigger a heap buffer overflow by supplying a crafted WTV file. The overflow causes the bounds-check guard expression to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacker-controlled data into a heap buffer, resulting in an out-of-bounds heap write and potential memory corruption or code execution.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70628", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897", "https://github.com/advisories/GHSA-qw9h-2hhv-hpfr", "https://nvd.nist.gov/vuln/detail/CVE-2026-70628", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70628", "https://www.vulncheck.com/advisories/ffmpeg-dvb-subtitle-parser-heap-buffer-overflow-via-wtv-file" ], "PublishedDate": "2026-08-06T22:18:26.957Z", "LastModifiedDate": "2026-09-01T15:36:28.407Z" }, { "VulnerabilityID": "CVE-2026-70632", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-70632", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5f5837be82b62abddbc8bea75e7821f20140186e5c3aa62d4640a76aa18dd399", "Title": "ffmpeg: FFmpeg: Arbitrary Code Execution in CFHD Decoder via Crafted AVI File", "Description": "FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) decoder that allows remote attackers to corrupt heap memory by supplying a crafted AVI file during stream probing. The cfhd_decode() function fails to enforce the non-Bayer logical output-width invariant in the transform-type-2 reconstruction path, causing horiz_filter_clip() to write oversized 16-bit sample rows far beyond the allocated output frame buffer, which can be escalated to arbitrary code execution via overwrite of a live cleanup callback pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "julia": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.8, "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-70632", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898", "https://github.com/advisories/GHSA-q24x-99v6-6hxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-70632", "https://ubuntu.com/security/notices/USN-8680-1", "https://ubuntu.com/security/notices/USN-8738-1", "https://www.cve.org/CVERecord?id=CVE-2026-70632", "https://www.vulncheck.com/advisories/ffmpeg-heap-out-of-bounds-write-in-cfhd-decoder-via-avi-demuxing" ], "PublishedDate": "2026-08-06T22:18:27.567Z", "LastModifiedDate": "2026-09-01T15:32:31.087Z" }, { "VulnerabilityID": "CVE-2026-75141", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75141", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4916e8150953a499d66994cea1f2b32c0a5722a532b9df88e37538723bec0630", "Title": "ffmpeg: FFmpeg: Heap buffer overflow via crafted HEVC input file during muxing", "Description": "FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75141", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088", "https://nvd.nist.gov/vuln/detail/CVE-2026-75141", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75141", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing" ], "PublishedDate": "2026-08-19T17:21:12.287Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75142", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b762b6e7513fa91b4ccd0a761a593d84d894aa36c44abc090b47bbb3161a7b5b", "Title": "ffmpeg: FFmpeg: Stack Buffer Overflow in MPEG-PS Muxer", "Description": "FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer (libavformat/mpegenc.c). When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow during MPEG-PS muxing.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75142", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087", "https://nvd.nist.gov/vuln/detail/CVE-2026-75142", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75142", "https://www.vulncheck.com/advisories/ffmpeg-stack-buffer-overflow-in-mpeg-ps-muxer-via-mpegenc-c" ], "PublishedDate": "2026-08-19T17:21:12.437Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75143", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:148432583ffebcb47e47685c425cd6ddf4d58a8b76ed5f76a5206d6130a3b4d1", "Title": "ffmpeg: FFmpeg Heap Buffer Overflow via RIST Protocol Reader", "Description": "FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). librist_read() ignored its size argument and copied the full received payload length into the caller-provided destination buffer, overflowing it when the payload exceeds the destination size. This is reachable via the async:rist:// URL scheme, where the async wrapper supplies a smaller buffer than the received payload. A remote RIST sender can trigger the overflow by sending a packet whose payload exceeds the caller buffer size.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75143", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089", "https://nvd.nist.gov/vuln/detail/CVE-2026-75143", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75143", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-via-rist-protocol-reader" ], "PublishedDate": "2026-08-19T17:21:12.577Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75144", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8fa4c2643e2c55f6c6fb8ff2b6400178e39fd4df9f2c927ee1e4071d7ae41e77", "Title": "ffmpeg: FFmpeg: Memory corruption via crafted Dirac data unit", "Description": "FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerability in the VC-2/Dirac RTP packetizer (libavformat/rtpenc_vc2hq.c) that allows attackers to trigger memory corruption by supplying a crafted Dirac data unit. The packetizer copies an input-derived data unit or fragment size into a fixed-size buffer without an upper bound check, causing a heap buffer overflow when the crafted input is packetized for RTP output.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75144", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091", "https://nvd.nist.gov/vuln/detail/CVE-2026-75144", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75144", "https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-vc-2-dirac-rtp-packetizer" ], "PublishedDate": "2026-08-19T17:21:12.72Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-75146", "PkgID": "libswscale8@7:7.1.5-0+deb13u1", "PkgName": "libswscale8", "PkgIdentifier": { "PURL": "pkg:deb/debian/libswscale8@7.1.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=7", "UID": "41fbe65987e2430e" }, "InstalledVersion": "7:7.1.5-0+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-75146", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:db31bff175dcfbd26f82885a6d41078c0b2970584a32beaeb3c7a4ad8362f8b1", "Title": "ffmpeg: FFmpeg: Information disclosure and denial of service via out-of-bounds read in DASH demuxer", "Description": "FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). When a live DASH manifest is refreshed with a startNumber that is lower than the previous value, the current sequence number is driven negative. The fragment retrieval function checked only the upper bound before indexing the fragments array, allowing a negative index to be used and causing an out-of-bounds read. A malicious or misconfigured DASH server can trigger this by serving a live manifest with a decreasing startNumber across a manifest refresh.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-75146", "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0", "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093", "https://nvd.nist.gov/vuln/detail/CVE-2026-75146", "https://ubuntu.com/security/notices/USN-8716-1", "https://ubuntu.com/security/notices/USN-8716-2", "https://www.cve.org/CVERecord?id=CVE-2026-75146", "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-read-in-dash-demuxer-via-dashdec-c" ], "PublishedDate": "2026-08-19T17:21:13.057Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-16742", "PkgID": "libsystemd0@257.13-1~deb13u1", "PkgName": "libsystemd0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsystemd0@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "b0cd86eb50280666" }, "InstalledVersion": "257.13-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3f3ee864ea8a8072484815412243efe7a28f21d757ced9ce92d50c78b42e3e9e", "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification", "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-347" ], "VendorSeverity": { "amazon": 3, "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-16742", "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv", "https://nvd.nist.gov/vuln/detail/CVE-2026-16742", "https://ubuntu.com/security/notices/USN-8626-1", "https://www.cve.org/CVERecord?id=CVE-2026-16742" ], "PublishedDate": "2026-08-10T14:17:21.277Z", "LastModifiedDate": "2026-10-23T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-36849", "PkgID": "libtiff6@4.7.0-3+deb13u3", "PkgName": "libtiff6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libtiff6@4.7.0-3%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "d3a7756a38ddf11c" }, "InstalledVersion": "4.7.0-3+deb13u3", "Status": "will_not_fix", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-36849", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:47b885c7ac4f6414eefaf617d167e52caed8fa57819138aa802ca291badb5abc", "Title": "[Denial of Service via large SamplesPerPixel tag]", "Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-36849:\n\tDenial of Service via large SamplesPerPixel tag\n\nCVE-2026-12912:\n\tA flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).\n", "Severity": "HIGH", "VendorSeverity": { "amazon": 3 } }, { "VulnerabilityID": "CVE-2026-52490", "PkgID": "libtiff6@4.7.0-3+deb13u3", "PkgName": "libtiff6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libtiff6@4.7.0-3%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "d3a7756a38ddf11c" }, "InstalledVersion": "4.7.0-3+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-52490", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f50303d92305965712d8c53d19d230d273ea418e71fa3d0f8d53864a3fb491bb", "Title": "libtiff: libtiff: Arbitrary code execution via process_command_opts() function", "Description": "An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c", "Severity": "HIGH", "CweIDs": [ "CWE-94" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69095", "https://access.redhat.com/security/cve/CVE-2026-52490", "https://bugzilla.redhat.com/2523148", "https://bugzilla.redhat.com/show_bug.cgi?id=2523148", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52490", "https://errata.almalinux.org/8/ALSA-2026-69095.html", "https://errata.rockylinux.org/RLSA-2026:69095", "https://gist.github.com/okyfh/122c2d72e991a78c8af80a3af3be8671", "https://gitlab.com/libtiff/libtiff/-/work_items/846", "https://linux.oracle.com/cve/CVE-2026-52490.html", "https://linux.oracle.com/errata/ELSA-2026-69095.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-52490", "https://www.cve.org/CVERecord?id=CVE-2026-52490" ], "PublishedDate": "2026-08-24T21:17:19.803Z", "LastModifiedDate": "2026-10-12T21:10:00.227Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "libtinfo6@6.5+20250216-2", "PkgName": "libtinfo6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7", "UID": "c19e4ba0186ba329" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1e6978c29ae2605277b30f62415badc851e72fa5475087558f11c5df259843fb", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-16742", "PkgID": "libudev1@257.13-1~deb13u1", "PkgName": "libudev1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libudev1@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "9d7053ae266a0055" }, "InstalledVersion": "257.13-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:81691073fccbdc1c3feb8623031a170c00b3e05a1b54e1b76310dedbce506104", "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification", "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-347" ], "VendorSeverity": { "amazon": 3, "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-16742", "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv", "https://nvd.nist.gov/vuln/detail/CVE-2026-16742", "https://ubuntu.com/security/notices/USN-8626-1", "https://www.cve.org/CVERecord?id=CVE-2026-16742" ], "PublishedDate": "2026-08-10T14:17:21.277Z", "LastModifiedDate": "2026-10-23T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libuuid1@2.41.5-0+deb13u1", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "3a03f1816c93c994" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a0aeca68800d9a56613a9cf2064d2f43398eec34558761e8cf57c402c98dd104", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libuuid1@2.41.5-0+deb13u1", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "3a03f1816c93c994" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a9bf69559a73288992ad81def62fec905d6ef09e96a489212093353ce292b98e", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libuuid1@2.41.5-0+deb13u1", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "3a03f1816c93c994" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:749944177389b35d3faffa1982a2caeaf4677494e7a0de284316873bbd144449", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libuuid1@2.41.5-0+deb13u1", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "3a03f1816c93c994" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8e8db9acf31dda61ead0189cfe94e9af9433fb3470d4434a08103277a65db9d8", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-88806", "PkgID": "libx11-6@2:1.8.12-1", "PkgName": "libx11-6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libx11-6@1.8.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "b186f763ff3bf6c6" }, "InstalledVersion": "2:1.8.12-1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88806", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ee429c0ba382a4301a707d29a69d5e3394cfa3f780196ef5d718576f7f3f06d3", "Title": "libX11: libX11: Heap-based buffer overflow via malicious X server", "Description": "A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:91365", "https://access.redhat.com/security/cve/CVE-2026-88806", "https://bugzilla.redhat.com/2538514", "https://bugzilla.redhat.com/show_bug.cgi?id=2538514", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806", "https://errata.almalinux.org/9/ALSA-2026-91365.html", "https://errata.rockylinux.org/RLSA-2026:91365", "https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309", "https://linux.oracle.com/cve/CVE-2026-88806.html", "https://linux.oracle.com/errata/ELSA-2026-91366.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-88806", "https://ubuntu.com/security/notices/USN-8913-1", "https://www.cve.org/CVERecord?id=CVE-2026-88806" ], "PublishedDate": "2026-09-21T14:17:22.273Z", "LastModifiedDate": "2026-09-22T19:40:05.87Z" }, { "VulnerabilityID": "CVE-2026-88806", "PkgID": "libx11-data@2:1.8.12-1", "PkgName": "libx11-data", "PkgIdentifier": { "PURL": "pkg:deb/debian/libx11-data@1.8.12-1?arch=all\u0026distro=debian-13.7\u0026epoch=2", "UID": "e6b7a201b95ba699" }, "InstalledVersion": "2:1.8.12-1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88806", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d151bc063344890564e188029ca322696b92d96a40a095924dcc79bf958a291a", "Title": "libX11: libX11: Heap-based buffer overflow via malicious X server", "Description": "A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:91365", "https://access.redhat.com/security/cve/CVE-2026-88806", "https://bugzilla.redhat.com/2538514", "https://bugzilla.redhat.com/show_bug.cgi?id=2538514", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806", "https://errata.almalinux.org/9/ALSA-2026-91365.html", "https://errata.rockylinux.org/RLSA-2026:91365", "https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309", "https://linux.oracle.com/cve/CVE-2026-88806.html", "https://linux.oracle.com/errata/ELSA-2026-91366.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-88806", "https://ubuntu.com/security/notices/USN-8913-1", "https://www.cve.org/CVERecord?id=CVE-2026-88806" ], "PublishedDate": "2026-09-21T14:17:22.273Z", "LastModifiedDate": "2026-09-22T19:40:05.87Z" }, { "VulnerabilityID": "CVE-2026-88806", "PkgID": "libx11-xcb1@2:1.8.12-1", "PkgName": "libx11-xcb1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libx11-xcb1@1.8.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "fe2eb71291470eee" }, "InstalledVersion": "2:1.8.12-1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88806", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d5a43b836786f1baea3d566c120b306bb87150de5d876d32eb93cca764241f87", "Title": "libX11: libX11: Heap-based buffer overflow via malicious X server", "Description": "A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:91365", "https://access.redhat.com/security/cve/CVE-2026-88806", "https://bugzilla.redhat.com/2538514", "https://bugzilla.redhat.com/show_bug.cgi?id=2538514", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88806", "https://errata.almalinux.org/9/ALSA-2026-91365.html", "https://errata.rockylinux.org/RLSA-2026:91365", "https://gitlab.freedesktop.org/xorg/lib/libx11/-/merge_requests/309", "https://linux.oracle.com/cve/CVE-2026-88806.html", "https://linux.oracle.com/errata/ELSA-2026-91366.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-88806", "https://ubuntu.com/security/notices/USN-8913-1", "https://www.cve.org/CVERecord?id=CVE-2026-88806" ], "PublishedDate": "2026-09-21T14:17:22.273Z", "LastModifiedDate": "2026-09-22T19:40:05.87Z" }, { "VulnerabilityID": "CVE-2026-109089", "PkgID": "libxi6@2:1.8.2-1", "PkgName": "libxi6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxi6@1.8.2-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "cb7361e408aedd4e" }, "InstalledVersion": "2:1.8.2-1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109089", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:91431a7b955f0513d3244510ff06ef588c8a0138d2d33c2e91c926ef2c7948c5", "Title": "libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow", "Description": "A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93439", "https://access.redhat.com/security/cve/CVE-2026-109089", "https://bugzilla.redhat.com/show_bug.cgi?id=2562069", "https://bugzilla.redhat.com/show_bug.cgi?id=2562191", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090", "https://errata.almalinux.org/9/ALSA-2026-93439.html", "https://errata.rockylinux.org/RLSA-2026:93439", "https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/f7836d0a0", "https://linux.oracle.com/cve/CVE-2026-109089.html", "https://linux.oracle.com/errata/ELSA-2026-93441.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-109089", "https://www.cve.org/CVERecord?id=CVE-2026-109089" ], "PublishedDate": "2026-10-27T17:16:57.81Z", "LastModifiedDate": "2026-11-04T21:17:47.61Z" }, { "VulnerabilityID": "CVE-2026-109090", "PkgID": "libxi6@2:1.8.2-1", "PkgName": "libxi6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxi6@1.8.2-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=2", "UID": "cb7361e408aedd4e" }, "InstalledVersion": "2:1.8.2-1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109090", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:056f60b37e0f45ea9828c9bee208441f0b9b36914237629a178389041baa9cdb", "Title": "libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply", "Description": "A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93439", "https://access.redhat.com/security/cve/CVE-2026-109090", "https://bugzilla.redhat.com/show_bug.cgi?id=2562069", "https://bugzilla.redhat.com/show_bug.cgi?id=2562191", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109089", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109090", "https://errata.almalinux.org/9/ALSA-2026-93439.html", "https://errata.rockylinux.org/RLSA-2026:93439", "https://gitlab.freedesktop.org/xorg/lib/libxi/-/commit/4eb9f70b6", "https://linux.oracle.com/cve/CVE-2026-109090.html", "https://linux.oracle.com/errata/ELSA-2026-93441.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-109090", "https://www.cve.org/CVERecord?id=CVE-2026-109090" ], "PublishedDate": "2026-10-27T17:16:57.93Z", "LastModifiedDate": "2026-11-04T21:17:47.743Z" }, { "VulnerabilityID": "CVE-2026-6653", "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "PkgName": "libxml2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6653", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5d348353a842c82ad4fab8a7c754ddee8dcdc0f1bed683a42d08cd6634bb1832", "Title": "libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free", "Description": "Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via maliciously crafted XML input with improper entity resolution handling.", "Severity": "CRITICAL", "CweIDs": [ "CWE-416", "CWE-611" ], "VendorSeverity": { "alma": 2, "amazon": 2, "julia": 3, "nvd": 4, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "V3Score": 9.8, "V40Score": 7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:61247", "https://access.redhat.com/security/cve/CVE-2026-6653", "https://bugs.launchpad.net/ubuntu/+source/libxml2/+bug/2141260", "https://bugzilla.redhat.com/2491354", "https://bugzilla.redhat.com/2494191", "https://bugzilla.redhat.com/show_bug.cgi?id=2491354", "https://bugzilla.redhat.com/show_bug.cgi?id=2494191", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11979", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6653", "https://errata.almalinux.org/9/ALSA-2026-61247.html", "https://errata.rockylinux.org/RLSA-2026:61247", "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1058", "https://linux.oracle.com/cve/CVE-2026-6653.html", "https://linux.oracle.com/errata/ELSA-2026-69655.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-6653", "https://ubuntu.com/security/notices/USN-8456-1", "https://www.cve.org/CVERecord?id=CVE-2026-6653" ], "PublishedDate": "2026-06-22T14:17:51.113Z", "LastModifiedDate": "2026-10-25T23:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-74860", "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "PkgName": "libxml2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74860", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f7297901da3436a2fd71b3978e3f2c36502fac451551a9f6e82b664fdf68b325", "Title": "libxml2: double-free/UAF in libxml2 Python bindings", "Description": "A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings.", "Severity": "HIGH", "CweIDs": [ "CWE-763" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:64463", "https://access.redhat.com/errata/RHSA-2026:71585", "https://access.redhat.com/errata/RHSA-2026:71586", "https://access.redhat.com/errata/RHSA-2026:71641", "https://access.redhat.com/errata/RHSA-2026:72470", "https://access.redhat.com/errata/RHSA-2026:72475", "https://access.redhat.com/errata/RHSA-2026:72476", "https://access.redhat.com/errata/RHSA-2026:79357", "https://access.redhat.com/errata/RHSA-2026:82939", "https://access.redhat.com/errata/RHSA-2026:89750", "https://access.redhat.com/errata/RHSA-2026:89759", "https://access.redhat.com/errata/RHSA-2026:90309", "https://access.redhat.com/errata/RHSA-2026:91202", "https://access.redhat.com/errata/RHSA-2026:91204", "https://access.redhat.com/errata/RHSA-2026:91206", "https://access.redhat.com/errata/RHSA-2026:91207", "https://access.redhat.com/errata/RHSA-2026:91217", "https://access.redhat.com/errata/RHSA-2026:91218", "https://access.redhat.com/errata/RHSA-2026:91219", "https://access.redhat.com/errata/RHSA-2026:91224", "https://access.redhat.com/errata/RHSA-2026:91232", "https://access.redhat.com/errata/RHSA-2026:91233", "https://access.redhat.com/errata/RHSA-2026:91234", "https://access.redhat.com/errata/RHSA-2026:91235", "https://access.redhat.com/errata/RHSA-2026:91236", "https://access.redhat.com/errata/RHSA-2026:91237", "https://access.redhat.com/errata/RHSA-2026:91238", "https://access.redhat.com/errata/RHSA-2026:91241", "https://access.redhat.com/errata/RHSA-2026:91242", "https://access.redhat.com/errata/RHSA-2026:91243", "https://access.redhat.com/errata/RHSA-2026:91244", "https://access.redhat.com/errata/RHSA-2026:91245", "https://access.redhat.com/errata/RHSA-2026:91246", "https://access.redhat.com/errata/RHSA-2026:91248", "https://access.redhat.com/errata/RHSA-2026:91249", "https://access.redhat.com/errata/RHSA-2026:92352", "https://access.redhat.com/errata/RHSA-2026:92589", "https://access.redhat.com/errata/RHSA-2026:93463", "https://access.redhat.com/errata/RHSA-2026:93473", "https://access.redhat.com/errata/RHSA-2026:93791", "https://access.redhat.com/errata/RHSA-2026:94459", "https://access.redhat.com/errata/RHSA-2026:94468", "https://access.redhat.com/errata/RHSA-2026:94474", "https://access.redhat.com/errata/RHSA-2026:94476", "https://access.redhat.com/security/cve/CVE-2026-74860", "https://bugzilla.redhat.com/2528986", "https://bugzilla.redhat.com/2528987", "https://bugzilla.redhat.com/2528989", "https://bugzilla.redhat.com/2528990", "https://bugzilla.redhat.com/2528992", "https://bugzilla.redhat.com/2529697", "https://bugzilla.redhat.com/show_bug.cgi?id=2528986", "https://bugzilla.redhat.com/show_bug.cgi?id=2528987", "https://bugzilla.redhat.com/show_bug.cgi?id=2528989", "https://bugzilla.redhat.com/show_bug.cgi?id=2528990", "https://bugzilla.redhat.com/show_bug.cgi?id=2528992", "https://bugzilla.redhat.com/show_bug.cgi?id=2529697", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144", "https://errata.almalinux.org/9/ALSA-2026-71585.html", "https://errata.rockylinux.org/RLSA-2026:71585", "https://linux.oracle.com/cve/CVE-2026-74860.html", "https://linux.oracle.com/errata/ELSA-2026-71641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-74860", "https://ubuntu.com/security/notices/USN-8787-1", "https://www.cve.org/CVERecord?id=CVE-2026-74860" ], "PublishedDate": "2026-09-08T12:16:58.083Z", "LastModifiedDate": "2026-11-06T07:17:46.083Z" }, { "VulnerabilityID": "CVE-2026-86138", "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "PkgName": "libxml2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86138", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4ee65b6bd4d967180e4d1cf7f62d552a1117a22aa3e440c72015a477c98cf5c1", "Title": "libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow", "Description": "In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 6.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:71585", "https://access.redhat.com/security/cve/CVE-2026-86138", "https://bugzilla.redhat.com/2528986", "https://bugzilla.redhat.com/2528987", "https://bugzilla.redhat.com/2528989", "https://bugzilla.redhat.com/2528990", "https://bugzilla.redhat.com/2528992", "https://bugzilla.redhat.com/2529697", "https://bugzilla.redhat.com/show_bug.cgi?id=2528986", "https://bugzilla.redhat.com/show_bug.cgi?id=2528987", "https://bugzilla.redhat.com/show_bug.cgi?id=2528989", "https://bugzilla.redhat.com/show_bug.cgi?id=2528990", "https://bugzilla.redhat.com/show_bug.cgi?id=2528992", "https://bugzilla.redhat.com/show_bug.cgi?id=2529697", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144", "https://errata.almalinux.org/9/ALSA-2026-71585.html", "https://errata.rockylinux.org/RLSA-2026:71585", "https://github.com/GNOME/libxml2/commit/a4cba4b5b5a8c42e155ed42d2d2a44955465a2e4", "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4", "https://linux.oracle.com/cve/CVE-2026-86138.html", "https://linux.oracle.com/errata/ELSA-2026-71641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-86138", "https://ubuntu.com/security/notices/USN-8910-1", "https://www.cve.org/CVERecord?id=CVE-2026-86138" ], "PublishedDate": "2026-09-05T05:17:12.6Z", "LastModifiedDate": "2026-09-15T19:40:47.56Z" }, { "VulnerabilityID": "CVE-2026-86139", "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "PkgName": "libxml2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86139", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:be1101cc25f7d1b22a4729917760f49482a2756c69163e8bcbab6b53537f2533", "Title": "libxml2: libxml2: Integer overflow in xmlURIEscapeStr may lead to arbitrary code execution", "Description": "In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 6.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-86139", "https://github.com/GNOME/libxml2/commit/8edbbdb09f24d26a2f900141fddc2b9d014f53b0", "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4", "https://nvd.nist.gov/vuln/detail/CVE-2026-86139", "https://ubuntu.com/security/notices/USN-8910-1", "https://www.cve.org/CVERecord?id=CVE-2026-86139" ], "PublishedDate": "2026-09-05T05:17:12.73Z", "LastModifiedDate": "2026-09-15T19:39:45.267Z" }, { "VulnerabilityID": "CVE-2026-86140", "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "PkgName": "libxml2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86140", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7af16a0b478aead07a5323216d38407ab5ff9cd9d0ebf266b4f3841039da0b4e", "Title": "libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements", "Description": "In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:71585", "https://access.redhat.com/security/cve/CVE-2026-86140", "https://bugzilla.redhat.com/2528986", "https://bugzilla.redhat.com/2528987", "https://bugzilla.redhat.com/2528989", "https://bugzilla.redhat.com/2528990", "https://bugzilla.redhat.com/2528992", "https://bugzilla.redhat.com/2529697", "https://bugzilla.redhat.com/show_bug.cgi?id=2528986", "https://bugzilla.redhat.com/show_bug.cgi?id=2528987", "https://bugzilla.redhat.com/show_bug.cgi?id=2528989", "https://bugzilla.redhat.com/show_bug.cgi?id=2528990", "https://bugzilla.redhat.com/show_bug.cgi?id=2528992", "https://bugzilla.redhat.com/show_bug.cgi?id=2529697", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144", "https://errata.almalinux.org/9/ALSA-2026-71585.html", "https://errata.rockylinux.org/RLSA-2026:71585", "https://github.com/GNOME/libxml2/commit/d1686f91dbda141a752200419d35639fd6b38340", "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4", "https://linux.oracle.com/cve/CVE-2026-86140.html", "https://linux.oracle.com/errata/ELSA-2026-71641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-86140", "https://ubuntu.com/security/notices/USN-8787-1", "https://www.cve.org/CVERecord?id=CVE-2026-86140" ], "PublishedDate": "2026-09-05T05:17:12.877Z", "LastModifiedDate": "2026-09-15T19:39:17.01Z" }, { "VulnerabilityID": "CVE-2026-86142", "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "PkgName": "libxml2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86142", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:827ab3891c90186aaaba0f9d6aab33cd5a104d6dc733682b2e0ad6ac2f45d540", "Title": "libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation", "Description": "In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 6.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:71585", "https://access.redhat.com/security/cve/CVE-2026-86142", "https://bugzilla.redhat.com/2528986", "https://bugzilla.redhat.com/2528987", "https://bugzilla.redhat.com/2528989", "https://bugzilla.redhat.com/2528990", "https://bugzilla.redhat.com/2528992", "https://bugzilla.redhat.com/2529697", "https://bugzilla.redhat.com/show_bug.cgi?id=2528986", "https://bugzilla.redhat.com/show_bug.cgi?id=2528987", "https://bugzilla.redhat.com/show_bug.cgi?id=2528989", "https://bugzilla.redhat.com/show_bug.cgi?id=2528990", "https://bugzilla.redhat.com/show_bug.cgi?id=2528992", "https://bugzilla.redhat.com/show_bug.cgi?id=2529697", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144", "https://errata.almalinux.org/9/ALSA-2026-71585.html", "https://errata.rockylinux.org/RLSA-2026:71585", "https://github.com/GNOME/libxml2/commit/6b3a736c0edc74ceec3d82f5252499d7911b3a58", "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4", "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1113", "https://linux.oracle.com/cve/CVE-2026-86142.html", "https://linux.oracle.com/errata/ELSA-2026-80675.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-86142", "https://ubuntu.com/security/notices/USN-8910-1", "https://www.cve.org/CVERecord?id=CVE-2026-86142" ], "PublishedDate": "2026-09-05T05:17:13.133Z", "LastModifiedDate": "2026-09-15T19:35:48.663Z" }, { "VulnerabilityID": "CVE-2026-86143", "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "PkgName": "libxml2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86143", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:447a1bbf1052bf35698a78e7d6f54b778db00cd6a2a0812afd79827b204a683b", "Title": "libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks", "Description": "In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a callback.", "Severity": "HIGH", "CweIDs": [ "CWE-192" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "V3Score": 6.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:71585", "https://access.redhat.com/security/cve/CVE-2026-86143", "https://bugzilla.redhat.com/2528986", "https://bugzilla.redhat.com/2528987", "https://bugzilla.redhat.com/2528989", "https://bugzilla.redhat.com/2528990", "https://bugzilla.redhat.com/2528992", "https://bugzilla.redhat.com/2529697", "https://bugzilla.redhat.com/show_bug.cgi?id=2528986", "https://bugzilla.redhat.com/show_bug.cgi?id=2528987", "https://bugzilla.redhat.com/show_bug.cgi?id=2528989", "https://bugzilla.redhat.com/show_bug.cgi?id=2528990", "https://bugzilla.redhat.com/show_bug.cgi?id=2528992", "https://bugzilla.redhat.com/show_bug.cgi?id=2529697", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144", "https://errata.almalinux.org/9/ALSA-2026-71585.html", "https://errata.rockylinux.org/RLSA-2026:71585", "https://github.com/GNOME/libxml2/commit/90f293ba74d28b1d570920382e707586f68ebf35", "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4", "https://gitlab.gnome.org/GNOME/libxml2/-/work_items/1111", "https://linux.oracle.com/cve/CVE-2026-86143.html", "https://linux.oracle.com/errata/ELSA-2026-71641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-86143", "https://ubuntu.com/security/notices/USN-8910-1", "https://www.cve.org/CVERecord?id=CVE-2026-86143" ], "PublishedDate": "2026-09-05T05:17:13.27Z", "LastModifiedDate": "2026-09-15T19:31:15.857Z" }, { "VulnerabilityID": "CVE-2026-86144", "PkgID": "libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3", "PkgName": "libxml2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxml2@2.12.7%2Bdfsg%2Breally2.9.14-2.1%2Bdeb13u3?arch=amd64\u0026distro=debian-13.7", "UID": "4281623863b2817f" }, "InstalledVersion": "2.12.7+dfsg+really2.9.14-2.1+deb13u3", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86144", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4129eb57057a716cbff67ba51f7b909621448e645ac9ced647734bdcd4a01980", "Title": "libxml2: libxml2: Information disclosure, SSRF, or denial of service due to improper parseFlags propagation.", "Description": "In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for example, the XML_PARSE_NONET flag, if (without it) a custom resource loader accesses the internet and triggers XML external entity injection, SSRF, or a denial of service (e.g., for an attacker-controlled internet resource that is intentionally slow).", "Severity": "HIGH", "CweIDs": [ "CWE-669" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "V3Score": 5.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:71585", "https://access.redhat.com/security/cve/CVE-2026-86144", "https://bugzilla.redhat.com/2528986", "https://bugzilla.redhat.com/2528987", "https://bugzilla.redhat.com/2528989", "https://bugzilla.redhat.com/2528990", "https://bugzilla.redhat.com/2528992", "https://bugzilla.redhat.com/2529697", "https://bugzilla.redhat.com/show_bug.cgi?id=2528986", "https://bugzilla.redhat.com/show_bug.cgi?id=2528987", "https://bugzilla.redhat.com/show_bug.cgi?id=2528989", "https://bugzilla.redhat.com/show_bug.cgi?id=2528990", "https://bugzilla.redhat.com/show_bug.cgi?id=2528992", "https://bugzilla.redhat.com/show_bug.cgi?id=2529697", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74860", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86138", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86142", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86144", "https://errata.almalinux.org/9/ALSA-2026-71585.html", "https://errata.rockylinux.org/RLSA-2026:71585", "https://github.com/GNOME/libxml2/commit/b63cd517afecb76582dd9488c55e54ceaf50de61", "https://github.com/GNOME/libxml2/compare/v2.15.3...v2.15.4", "https://linux.oracle.com/cve/CVE-2026-86144.html", "https://linux.oracle.com/errata/ELSA-2026-71641.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-86144", "https://ubuntu.com/security/notices/USN-8910-1", "https://www.cve.org/CVERecord?id=CVE-2026-86144" ], "PublishedDate": "2026-09-05T05:17:13.407Z", "LastModifiedDate": "2026-09-15T19:20:15.06Z" }, { "VulnerabilityID": "CVE-2026-88807", "PkgID": "libxrender1@1:0.9.12-1", "PkgName": "libxrender1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libxrender1@0.9.12-1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "cd6cf9ff77ccf04b" }, "InstalledVersion": "1:0.9.12-1", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-88807", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6b07de8ba6806688cbdd31e3798ed9bba665caa870d3e2797f56109f224db574", "Title": "libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats", "Description": "A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:91057", "https://access.redhat.com/security/cve/CVE-2026-88807", "https://bugzilla.redhat.com/2537924", "https://bugzilla.redhat.com/show_bug.cgi?id=2537924", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88807", "https://errata.almalinux.org/9/ALSA-2026-91057.html", "https://errata.rockylinux.org/RLSA-2026:91057", "https://gitlab.freedesktop.org/xorg/lib/libxrender/-/merge_requests/19", "https://linux.oracle.com/cve/CVE-2026-88807.html", "https://linux.oracle.com/errata/ELSA-2026-91267.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-88807", "https://www.cve.org/CVERecord?id=CVE-2026-88807" ], "PublishedDate": "2026-09-21T14:17:22.41Z", "LastModifiedDate": "2026-09-22T19:40:05.87Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "login@1:4.16.0-2+really2.41.5-0+deb13u1", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "dc99754e767c40b9" }, "InstalledVersion": "1:4.16.0-2+really2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:54147e8be54c85b59f2aafb2daf54e480247735d1cf8dfee948f8e0710315ef7", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "login@1:4.16.0-2+really2.41.5-0+deb13u1", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "dc99754e767c40b9" }, "InstalledVersion": "1:4.16.0-2+really2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:99b3d3d89a32a2507021477647834d524a22b5d85e5b2a0f29335fa3957781e2", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "login@1:4.16.0-2+really2.41.5-0+deb13u1", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "dc99754e767c40b9" }, "InstalledVersion": "1:4.16.0-2+really2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9773d704e4edf3b896c506954a93952b48c9b16ca5772e6d65e6acd625a58bbc", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "login@1:4.16.0-2+really2.41.5-0+deb13u1", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "dc99754e767c40b9" }, "InstalledVersion": "1:4.16.0-2+really2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:82c6bdf6f6ca7bb5b6b5cab0ebf85c5317a49a8c2b982403ca10659bccee7420", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "mount@2.41.5-0+deb13u1", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d781ec5616a75c78" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7a8b851223e884f97653865b9c8e5333ecc86ba30f500c538f69b933b00f68cf", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "mount@2.41.5-0+deb13u1", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d781ec5616a75c78" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5f327c9959f271fe1e39d56b4a4280a19434bd8f786fd3c8ef5a04bc2d782f9c", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "mount@2.41.5-0+deb13u1", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d781ec5616a75c78" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5986754a57c4b4f0efa191f552f8f2334784f271d5e98a6f0bd7cb3a567fb675", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "mount@2.41.5-0+deb13u1", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "d781ec5616a75c78" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f1cec1415deee88dfd1ef6e761e576d97b61eb244cd4703493a8973418bc9132", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "ncurses-base@6.5+20250216-2", "PkgName": "ncurses-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/ncurses-base@6.5%2B20250216-2?arch=all\u0026distro=debian-13.7", "UID": "767a0231348a5cb5" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2c8c385663f6d743f47dba07b27e2292271a778a5ab14ee631bbd1f4380ef75e", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "ncurses-bin@6.5+20250216-2", "PkgName": "ncurses-bin", "PkgIdentifier": { "PURL": "pkg:deb/debian/ncurses-bin@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.7", "UID": "5b541563cf6587e5" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1aa90ee547d3f20a30a0e720041063da84693502e5d3e5bd0c8ed0bdcde44fe6", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-9538", "PkgID": "perl-base@5.40.1-6+deb13u1", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e64a633beeac3a7d" }, "InstalledVersion": "5.40.1-6+deb13u1", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:270538e4978b8ffa792c20f12a239ea2df823eee7d1a4b64453c90de9b9bbd08", "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size", "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/4", "https://access.redhat.com/errata/RHSA-2026:49525", "https://access.redhat.com/security/cve/CVE-2026-9538", "https://bugzilla.redhat.com/2481315", "https://bugzilla.redhat.com/show_bug.cgi?id=2481315", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538", "https://errata.almalinux.org/9/ALSA-2026-49525.html", "https://errata.rockylinux.org/RLSA-2026:49525", "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch", "https://linux.oracle.com/cve/CVE-2026-9538.html", "https://linux.oracle.com/errata/ELSA-2026-49525.html", "https://lists.security.metacpan.org/cve-announce/msg/40396448/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-9538", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-9538" ], "PublishedDate": "2026-05-26T02:16:41.15Z", "LastModifiedDate": "2026-07-23T11:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "util-linux@2.41.5-0+deb13u1", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e4d9863928456765" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e261d574a1b976876b5ef349c7cf1ed351ae0f00c69e58359a899e873cf4c9de", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "util-linux@2.41.5-0+deb13u1", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e4d9863928456765" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dc711574e5de2ba376d0029013122723baab0a63615c3b0576d1014ffe46c552", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "util-linux@2.41.5-0+deb13u1", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e4d9863928456765" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6e4dc02e7edcf230fbe7b9a195d6480aa10c037db73ae16d4dabf910cc12d1f8", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "util-linux@2.41.5-0+deb13u1", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41.5-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.7", "UID": "e4d9863928456765" }, "InstalledVersion": "2.41.5-0+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:aa78f5cd9165bc0144cc487e45f60536d25ce99dcc578f3a37370f6ddd6033ad", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-58471", "PkgID": "wget@1.25.0-2", "PkgName": "wget", "PkgIdentifier": { "PURL": "pkg:deb/debian/wget@1.25.0-2?arch=amd64\u0026distro=debian-13.7", "UID": "b3a8a3db76954bbb" }, "InstalledVersion": "1.25.0-2", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58471", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3c465ad9583887a6d6449bdd17622aeeeb276bb65237539be31fd573a461dcc6", "Title": "wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption", "Description": "GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 2, "julia": 2, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:62143", "https://access.redhat.com/security/cve/CVE-2026-58471", "https://bugzilla.redhat.com/2497850", "https://bugzilla.redhat.com/2497857", "https://bugzilla.redhat.com/show_bug.cgi?id=2497850", "https://bugzilla.redhat.com/show_bug.cgi?id=2497857", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58471", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58472", "https://errata.almalinux.org/9/ALSA-2026-62143.html", "https://errata.rockylinux.org/RLSA-2026:62143", "https://github.com/advisories/GHSA-vv88-699v-w5rh", "https://gitlab.com/gnuwget/wget/-/commit/c2640fe5171c59f87c58dc9fcb195b2d18b010ee", "https://linux.oracle.com/cve/CVE-2026-58471.html", "https://linux.oracle.com/errata/ELSA-2026-62144-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-58471", "https://ubuntu.com/security/notices/USN-8543-1", "https://www.cve.org/CVERecord?id=CVE-2026-58471", "https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-convert-fname-in-url-c" ], "PublishedDate": "2026-07-07T21:17:28.71Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-58472", "PkgID": "wget@1.25.0-2", "PkgName": "wget", "PkgIdentifier": { "PURL": "pkg:deb/debian/wget@1.25.0-2?arch=amd64\u0026distro=debian-13.7", "UID": "b3a8a3db76954bbb" }, "InstalledVersion": "1.25.0-2", "Status": "affected", "Layer": { "DiffID": "sha256:ceb894db30df93b46f076515474b41c6d71337232c060b57d000bcf641784d60" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-58472", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:58567b24ec229113b72544a14838516ce67dcedaccbf00428416099929d66f51", "Title": "wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute", "Description": "GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 2, "julia": 2, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", "V3Score": 7.1, "V40Score": 6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:62143", "https://access.redhat.com/security/cve/CVE-2026-58472", "https://bugzilla.redhat.com/2497850", "https://bugzilla.redhat.com/2497857", "https://bugzilla.redhat.com/show_bug.cgi?id=2497850", "https://bugzilla.redhat.com/show_bug.cgi?id=2497857", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58471", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-58472", "https://errata.almalinux.org/9/ALSA-2026-62143.html", "https://errata.rockylinux.org/RLSA-2026:62143", "https://github.com/advisories/GHSA-332r-8pmf-8m9p", "https://gitlab.com/gnuwget/wget/-/commit/dd692d9cea5335b181d877ae917fe6e75587a812", "https://linux.oracle.com/cve/CVE-2026-58472.html", "https://linux.oracle.com/errata/ELSA-2026-62144-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-58472", "https://ubuntu.com/security/notices/USN-8543-1", "https://www.cve.org/CVERecord?id=CVE-2026-58472", "https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-html-attribute-encoding" ], "PublishedDate": "2026-07-07T21:17:28.873Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-76844", "VendorIDs": [ "DSA-6613-1" ], "PkgID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "PkgName": "zlib1g", "PkgIdentifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "ec1c0574f56f96a0" }, "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1", "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76844", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:35399543a8e32852fcfa212affa6384b7fcb10b60438c9e3c696e839b984d9a5", "Title": "webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal", "Description": "zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 2, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-76844", "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490", "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "https://github.com/madler/zlib", "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", "https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148", "https://github.com/webpack/webpack-dev-middleware", "https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js", "https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b", "https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b", "https://github.com/webpack/webpack-dev-middleware/pull/2404", "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6", "https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0", "https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c", "https://nvd.nist.gov/vuln/detail/CVE-2026-76844", "https://www.cve.org/CVERecord?id=CVE-2026-76844", "https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath", "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate" ], "PublishedDate": "2026-08-24T14:17:02.25Z", "LastModifiedDate": "2026-10-12T17:10:00.163Z" }, { "VulnerabilityID": "CVE-2026-85091", "VendorIDs": [ "DSA-6613-1" ], "PkgID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "PkgName": "zlib1g", "PkgIdentifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.7\u0026epoch=1", "UID": "ec1c0574f56f96a0" }, "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1", "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a5d6d345f6afa08d7c31272055746d60a838b290bfcc82c0a23e8e984d61a933" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-85091", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0a60a419558fcce370222c1fe012d8d3c15e2df37db49a9a3a39541d3474091e", "Title": "zlib: zlib: Heap buffer overflow in gz_vacate() allows arbitrary code execution", "Description": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-85091", "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490", "https://github.com/madler/zlib", "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", "https://nvd.nist.gov/vuln/detail/CVE-2026-85091", "https://ubuntu.com/security/notices/USN-8954-1", "https://www.cve.org/CVERecord?id=CVE-2026-85091", "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate" ], "PublishedDate": "2026-09-03T13:06:20.573Z", "LastModifiedDate": "2026-09-09T20:41:07.123Z" } ] }, { "Target": "Python", "Class": "lang-pkgs", "Type": "python-pkg", "Packages": [ { "Name": "PyYAML", "Identifier": { "PURL": "pkg:pypi/pyyaml@6.0.3", "UID": "200d8384c5c91a41" }, "Version": "6.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/pyyaml-6.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "annotated-types", "Identifier": { "PURL": "pkg:pypi/annotated-types@0.8.0", "UID": "334ad696bbf87e9f" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/annotated_types-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "anyio", "Identifier": { "PURL": "pkg:pypi/anyio@4.15.1", "UID": "527b59970faa7cdf" }, "Version": "4.15.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/anyio-4.15.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "autocommand", "Identifier": { "PURL": "pkg:pypi/autocommand@2.2.2", "UID": "de2aeb22213f7255" }, "Version": "2.2.2", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/autocommand-2.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "backports.tarfile", "Identifier": { "PURL": "pkg:pypi/backports.tarfile@1.2.0", "UID": "1333ca5d453000df" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cffi", "Identifier": { "PURL": "pkg:pypi/cffi@2.1.1", "UID": "5cf91c7f9fa09cb6" }, "Version": "2.1.1", "Licenses": [ "MIT-0" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/cffi-2.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "click", "Identifier": { "PURL": "pkg:pypi/click@8.5.0", "UID": "fbb719e4c671a20a" }, "Version": "8.5.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/click-8.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fastapi", "Identifier": { "PURL": "pkg:pypi/fastapi@0.115.14", "UID": "5d7f2d1eefea7787" }, "Version": "0.115.14", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/fastapi-0.115.14.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "h11", "Identifier": { "PURL": "pkg:pypi/h11@0.16.0", "UID": "455db3a00bf72" }, "Version": "0.16.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/h11-0.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httptools", "Identifier": { "PURL": "pkg:pypi/httptools@0.9.0", "UID": "8ff50dc4914d5831" }, "Version": "0.9.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/httptools-0.9.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "idna", "Identifier": { "PURL": "pkg:pypi/idna@3.20", "UID": "f918988c150387c6" }, "Version": "3.20", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/idna-3.20.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "importlib_metadata", "Identifier": { "PURL": "pkg:pypi/importlib-metadata@8.0.0", "UID": "347a36bc9e660761" }, "Version": "8.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/importlib_metadata-8.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "inflect", "Identifier": { "PURL": "pkg:pypi/inflect@7.3.1", "UID": "51e7d1c898b69383" }, "Version": "7.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/inflect-7.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.collections", "Identifier": { "PURL": "pkg:pypi/jaraco.collections@5.1.0", "UID": "b2e77b8a0b175ddd" }, "Version": "5.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.collections-5.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.context", "Identifier": { "PURL": "pkg:pypi/jaraco.context@5.3.0", "UID": "d6550b81e52efabe" }, "Version": "5.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.context-5.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.functools", "Identifier": { "PURL": "pkg:pypi/jaraco.functools@4.0.1", "UID": "f42118e4940a83a5" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.functools-4.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.text", "Identifier": { "PURL": "pkg:pypi/jaraco.text@3.12.1", "UID": "cac1fcd2d9755e50" }, "Version": "3.12.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.text-3.12.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "more-itertools", "Identifier": { "PURL": "pkg:pypi/more-itertools@10.3.0", "UID": "cab6d07375997e08" }, "Version": "10.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/more_itertools-10.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "numpy", "Identifier": { "PURL": "pkg:pypi/numpy@2.4.6", "UID": "d9c8d8354bc53af0" }, "Version": "2.4.6", "Licenses": [ "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/numpy-2.4.6.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "packaging", "Identifier": { "PURL": "pkg:pypi/packaging@24.2", "UID": "dd0943476d1773a8" }, "Version": "24.2", "Licenses": [ "Apache-2.0", "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/packaging-24.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "packaging", "Identifier": { "PURL": "pkg:pypi/packaging@26.3", "UID": "c2637f54d6182f69" }, "Version": "26.3", "Licenses": [ "Apache-2.0 OR BSD-2-Clause" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/packaging-26.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pip", "Identifier": { "PURL": "pkg:pypi/pip@24.0", "UID": "7a4293168b845101" }, "Version": "24.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/pip-24.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "platformdirs", "Identifier": { "PURL": "pkg:pypi/platformdirs@4.2.2", "UID": "f93e5b8c438aeaf6" }, "Version": "4.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/platformdirs-4.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycparser", "Identifier": { "PURL": "pkg:pypi/pycparser@3.12", "UID": "e9a3c7b3aeffa52f" }, "Version": "3.12", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/pycparser-3.12.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic", "Identifier": { "PURL": "pkg:pypi/pydantic@2.14.1", "UID": "120c4bf1013d3a44" }, "Version": "2.14.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/pydantic-2.14.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic_core", "Identifier": { "PURL": "pkg:pypi/pydantic-core@2.50.1", "UID": "e016b54774957f9b" }, "Version": "2.50.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/pydantic_core-2.50.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-dotenv", "Identifier": { "PURL": "pkg:pypi/python-dotenv@1.2.4", "UID": "9bba54e75e59e92b" }, "Version": "1.2.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/python_dotenv-1.2.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "setuptools", "Identifier": { "PURL": "pkg:pypi/setuptools@79.0.1", "UID": "a34f48aa76be299c" }, "Version": "79.0.1", "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools-79.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sherpa-onnx-core", "Identifier": { "PURL": "pkg:pypi/sherpa-onnx-core@1.12.40", "UID": "9a4ce6a044822232" }, "Version": "1.12.40", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/sherpa_onnx_core-1.12.40.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sherpa_onnx", "Identifier": { "PURL": "pkg:pypi/sherpa-onnx@1.12.40", "UID": "7914bc8f7483075c" }, "Version": "1.12.40", "Licenses": [ "Apache-2.0", "as found in the LICENSE file" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/sherpa_onnx-1.12.40.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "soundfile", "Identifier": { "PURL": "pkg:pypi/soundfile@0.12.1", "UID": "94eebea207170c24" }, "Version": "0.12.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/soundfile-0.12.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "starlette", "Identifier": { "PURL": "pkg:pypi/starlette@0.46.2", "UID": "a1adcb7d69d624bd" }, "Version": "0.46.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/starlette-0.46.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tomli", "Identifier": { "PURL": "pkg:pypi/tomli@2.0.1", "UID": "53abaa0d00072d9e" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/tomli-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typeguard", "Identifier": { "PURL": "pkg:pypi/typeguard@4.3.0", "UID": "f19abdf9377301a1" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/typeguard-4.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing-inspection", "Identifier": { "PURL": "pkg:pypi/typing-inspection@0.4.4", "UID": "2b16272f72c4bd22" }, "Version": "0.4.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/typing_inspection-0.4.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing_extensions", "Identifier": { "PURL": "pkg:pypi/typing-extensions@4.12.2", "UID": "4b1f19157aef399d" }, "Version": "4.12.2", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/typing_extensions-4.12.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing_extensions", "Identifier": { "PURL": "pkg:pypi/typing-extensions@4.16.0", "UID": "14e8a5608945c20e" }, "Version": "4.16.0", "Licenses": [ "PSF-2.0" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/typing_extensions-4.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uvicorn", "Identifier": { "PURL": "pkg:pypi/uvicorn@0.32.1", "UID": "3818a6f1ed6609ef" }, "Version": "0.32.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/uvicorn-0.32.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uvloop", "Identifier": { "PURL": "pkg:pypi/uvloop@0.23.0", "UID": "ed0927794f2645c0" }, "Version": "0.23.0", "Licenses": [ "Apache-2.0", "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/uvloop-0.23.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "watchfiles", "Identifier": { "PURL": "pkg:pypi/watchfiles@1.3.0", "UID": "3797a5aade9c8df2" }, "Version": "1.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/watchfiles-1.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "websockets", "Identifier": { "PURL": "pkg:pypi/websockets@17.3", "UID": "b4c35e5bc1c23c9c" }, "Version": "17.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "FilePath": "usr/local/lib/python3.11/site-packages/websockets-17.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wheel", "Identifier": { "PURL": "pkg:pypi/wheel@0.45.1", "UID": "68d1f5691b386b62" }, "Version": "0.45.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/wheel-0.45.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wheel", "Identifier": { "PURL": "pkg:pypi/wheel@0.46.3", "UID": "28350f0a99874b2b" }, "Version": "0.46.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/wheel-0.46.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zipp", "Identifier": { "PURL": "pkg:pypi/zipp@3.19.2", "UID": "92d9047d0b817060" }, "Version": "3.19.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/zipp-3.19.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-23949", "VendorIDs": [ "GHSA-58pv-8j8x-9vj2" ], "PkgName": "jaraco.context", "PkgPath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.context-5.3.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/jaraco.context@5.3.0", "UID": "d6550b81e52efabe" }, "InstalledVersion": "5.3.0", "FixedVersion": "6.1.0", "Status": "fixed", "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23949", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:70142285c777b5afec7253fecfbdc250df20b31d3cf65e9a318b1ef56f3753c5", "Title": "jaraco.context: jaraco.context: Path traversal via malicious tar archives", "Description": "jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the `jaraco.context.tarball()` function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract files outside the intended extraction directory when malicious tar archives are processed. The strip_first_component filter splits the path on the first `/` and extracts the second component, while allowing `../` sequences. Paths like `dummy_dir/../../etc/passwd` become `../../etc/passwd`. Note that this suffers from a nested tarball attack as well with multi-level tar files such as `dummy_dir/inner.tar.gz`, where the inner.tar.gz includes a traversal `dummy_dir/../../config/.env` that also gets translated to `../../config/.env`. Version 6.1.0 contains a patch for the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-23949", "https://advisory.echohq.com/cve/CVE-2026-23949", "https://github.com/jaraco/jaraco.context", "https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91", "https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9", "https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2", "https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76", "https://nvd.nist.gov/vuln/detail/CVE-2026-23949", "https://ubuntu.com/security/notices/USN-7979-1", "https://www.cve.org/CVERecord?id=CVE-2026-23949" ], "PublishedDate": "2026-01-20T01:15:57.723Z", "LastModifiedDate": "2026-06-17T10:22:20.2Z" }, { "VulnerabilityID": "CVE-2025-62727", "VendorIDs": [ "GHSA-7f5h-v6xp-fcq8" ], "PkgName": "starlette", "PkgPath": "usr/local/lib/python3.11/site-packages/starlette-0.46.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/starlette@0.46.2", "UID": "a1adcb7d69d624bd" }, "InstalledVersion": "0.46.2", "FixedVersion": "0.49.1", "Status": "fixed", "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-62727", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:bbec3c5ee33b7da37a24d1df52212db4c6f623355923ca0ad45c7a03b70e8551", "Title": "starlette: Starlette DoS via Range header merging", "Description": "Starlette is a lightweight ASGI framework/toolkit. Starting in version 0.39.0 and prior to version 0.49.1 , an unauthenticated attacker can send a crafted HTTP Range header that triggers quadratic-time processing in Starlette's FileResponse Range parsing/merging logic. This enables CPU exhaustion per request, causing denial‑of‑service for endpoints serving files (e.g., StaticFiles or any use of FileResponse). This vulnerability is fixed in 0.49.1.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-62727", "https://advisory.echohq.com/cve/CVE-2025-62727", "https://github.com/Kludex/starlette", "https://github.com/Kludex/starlette/commit/4ea6e22b489ec388d6004cfbca52dd5b147127c5", "https://github.com/Kludex/starlette/commit/69ed26a85956ef4bd0161807eb27abf49be7cd3c", "https://github.com/Kludex/starlette/releases/tag/0.49.1", "https://github.com/Kludex/starlette/security/advisories/GHSA-7f5h-v6xp-fcq8", "https://nvd.nist.gov/vuln/detail/CVE-2025-62727", "https://www.cve.org/CVERecord?id=CVE-2025-62727" ], "PublishedDate": "2025-10-28T21:15:40.447Z", "LastModifiedDate": "2026-10-08T11:10:00.25Z" }, { "VulnerabilityID": "CVE-2026-48818", "VendorIDs": [ "GHSA-wqp7-x3pw-xc5r" ], "PkgName": "starlette", "PkgPath": "usr/local/lib/python3.11/site-packages/starlette-0.46.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/starlette@0.46.2", "UID": "a1adcb7d69d624bd" }, "InstalledVersion": "0.46.2", "FixedVersion": "1.1.0", "Status": "fixed", "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48818", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:8269d7900f20a8fa07e367178bbef89e613695c0856c04648b54f0f7c00760b8", "Title": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows", "Description": "Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Windows is vulnerable to SSRF. An UNC path such as \\\\attacker.com\\share can cause os.path.realpath to initiate an outbound SMB connection before the path is rejected, exposing the service account’s NTLMv2 credentials for offline cracking or relay even though the HTTP response is only a 404. The issue affects default follow_symlink=False deployments, including frameworks built on Starlette such as FastAPI; POSIX systems and follow_symlink=True are unaffected. The issue is fixed in 1.1.0.", "Severity": "HIGH", "CweIDs": [ "CWE-918" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30087", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/security/cve/CVE-2026-48818", "https://advisory.echohq.com/cve/CVE-2026-48818", "https://bugzilla.redhat.com/show_bug.cgi?id=2490020", "https://github.com/Kludex/starlette", "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5", "https://github.com/Kludex/starlette/pull/3287", "https://github.com/Kludex/starlette/releases/tag/1.1.0", "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r", "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-2281.yaml", "https://nvd.nist.gov/vuln/detail/CVE-2026-48818", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json", "https://www.cve.org/CVERecord?id=CVE-2026-48818" ], "PublishedDate": "2026-06-17T19:18:09.807Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-54283", "VendorIDs": [ "GHSA-82w8-qh3p-5jfq" ], "PkgName": "starlette", "PkgPath": "usr/local/lib/python3.11/site-packages/starlette-0.46.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/starlette@0.46.2", "UID": "a1adcb7d69d624bd" }, "InstalledVersion": "0.46.2", "FixedVersion": "1.3.1", "Status": "fixed", "Layer": { "DiffID": "sha256:8da2223ac1b3f939f85c279a1b4ae8080494025f32644da1ad69a6cf88585c36" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54283", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a36002e8dc3291fd095698a473867b41ba71b8f205569b572b9129c2252e01dd", "Title": "starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS", "Description": "Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data. These limits are enforced for multipart/form-data, but silently ignored for application/x-www-form-urlencoded. An unauthenticated attacker can therefore send a urlencoded body with an arbitrarily large number of fields or an arbitrarily large field, even when the application configured limits it believed would apply. This vulnerability is fixed in 1.3.1.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-54283", "https://advisory.echohq.com/cve/CVE-2026-54283", "https://github.com/Kludex/starlette", "https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq", "https://nvd.nist.gov/vuln/detail/CVE-2026-54283", "https://www.cve.org/CVERecord?id=CVE-2026-54283" ], "PublishedDate": "2026-06-22T18:16:46.943Z", "LastModifiedDate": "2026-10-25T23:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-24049", "VendorIDs": [ "GHSA-8rrh-rw8j-w5fx" ], "PkgName": "wheel", "PkgPath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/wheel-0.45.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/wheel@0.45.1", "UID": "68d1f5691b386b62" }, "InstalledVersion": "0.45.1", "FixedVersion": "0.46.2", "Status": "fixed", "Layer": { "DiffID": "sha256:2fb9adeb99a2773f9f7d1e14c8f6fb518c555fb00e0fca9d565574df2a1eba26" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24049", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:9f761748a2df1e2740689b3ef3377059b12983d37dc1153c8356402f04fa67b9", "Title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking", "Description": "wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts. This issue has been fixed in version 0.46.2.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-732" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "cbl-mariner": 2, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:1504", "https://access.redhat.com/errata/RHSA-2026:17599", "https://access.redhat.com/errata/RHSA-2026:1902", "https://access.redhat.com/errata/RHSA-2026:1939", "https://access.redhat.com/errata/RHSA-2026:1942", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20089", "https://access.redhat.com/errata/RHSA-2026:2090", "https://access.redhat.com/errata/RHSA-2026:2106", "https://access.redhat.com/errata/RHSA-2026:2139", "https://access.redhat.com/errata/RHSA-2026:2675", "https://access.redhat.com/errata/RHSA-2026:2681", "https://access.redhat.com/errata/RHSA-2026:2694", "https://access.redhat.com/errata/RHSA-2026:2695", "https://access.redhat.com/errata/RHSA-2026:2710", "https://access.redhat.com/errata/RHSA-2026:2754", "https://access.redhat.com/errata/RHSA-2026:2762", "https://access.redhat.com/errata/RHSA-2026:2823", "https://access.redhat.com/errata/RHSA-2026:2865", "https://access.redhat.com/errata/RHSA-2026:2866", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:2925", "https://access.redhat.com/errata/RHSA-2026:3461", "https://access.redhat.com/errata/RHSA-2026:3462", "https://access.redhat.com/errata/RHSA-2026:3713", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:3958", "https://access.redhat.com/errata/RHSA-2026:3959", "https://access.redhat.com/errata/RHSA-2026:3960", "https://access.redhat.com/errata/RHSA-2026:4185", "https://access.redhat.com/errata/RHSA-2026:4215", "https://access.redhat.com/errata/RHSA-2026:4271", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:5119", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:62115", "https://access.redhat.com/errata/RHSA-2026:6555", "https://access.redhat.com/errata/RHSA-2026:6562", "https://access.redhat.com/errata/RHSA-2026:6565", "https://access.redhat.com/errata/RHSA-2026:7250", "https://access.redhat.com/security/cve/CVE-2026-24049", "https://advisory.echohq.com/cve/CVE-2026-24049", "https://bugzilla.redhat.com/2431959", "https://bugzilla.redhat.com/show_bug.cgi?id=2431959", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049", "https://errata.almalinux.org/9/ALSA-2026-1939.html", "https://errata.rockylinux.org/RLSA-2026:1939", "https://github.com/pypa/wheel", "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef", "https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e", "https://github.com/pypa/wheel/releases/tag/0.46.2", "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx", "https://linux.oracle.com/cve/CVE-2026-24049.html", "https://linux.oracle.com/errata/ELSA-2026-2090.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-24049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json", "https://ubuntu.com/security/notices/USN-8221-1", "https://www.cve.org/CVERecord?id=CVE-2026-24049" ], "PublishedDate": "2026-01-22T05:16:23.157Z", "LastModifiedDate": "2026-09-10T13:17:45.017Z" } ] } ] }