{ "SchemaVersion": 2, "Trivy": { "Version": "0.70.0" }, "ReportID": "01a1b91c-6169-7747-afcd-38c59d112a5f", "CreatedAt": "2026-11-08T04:03:27.337478467+01:00", "ArtifactID": "sha256:0a6ad41613387b811ae81fca59b1de1e991d7c6570f8e8b8461c3b2aa828f80e", "ArtifactName": "traefik-stack-meta-ads-mcp", "ArtifactType": "container_image", "Metadata": { "Size": 472372224, "OS": { "Family": "debian", "Name": "13.3" }, "ImageID": "sha256:dc213325b45ebbf17daba335cf30e4bcd3f2c606bcdf873d5d201b28e8712170", "DiffIDs": [ "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f", "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587", "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464", "sha256:3780204f6b74b4ebc29821a7b50259cf6942b09202a6ae150e5f365eafbf6979", "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178", "sha256:9c6af83705d66e1d5ac5f4161701112e082b0ae227635f6efb3446ab4cbfda46", "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6", "sha256:177533fcaa703418e8a278831c830d333e7ad1f0a9f08649d19e79cb25de2bdb", "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1", "sha256:b5afa19da79f71d2e63c6b8a328ffc5e8f9956ec6b5135b8bb32d8eded7bb020" ], "RepoTags": [ "traefik-stack-meta-ads-mcp:latest" ], "Reference": "traefik-stack-meta-ads-mcp:latest", "ImageConfig": { "architecture": "amd64", "created": "2026-04-26T09:39:42.23048187Z", "history": [ { "created": "2026-02-23T00:00:00Z", "created_by": "# debian.sh --arch 'amd64' out/ 'trixie' '@1771804800'", "comment": "debuerreotype 0.17" }, { "created": "2026-02-24T19:39:14Z", "created_by": "ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-02-24T19:39:14Z", "created_by": "ENV LANG=C.UTF-8", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-02-24T19:39:14Z", "created_by": "RUN /bin/sh -c set -eux; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tca-certificates \t\tnetbase \t\ttzdata \t; \tapt-get dist-clean # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-02-24T19:39:14Z", "created_by": "ENV GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-02-24T19:39:14Z", "created_by": "ENV PYTHON_VERSION=3.11.14", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-02-24T19:39:14Z", "created_by": "ENV PYTHON_SHA256=8d3ed8ec5c88c1c95f5e558612a725450d2452813ddad5e58fdb1a53b1209b78", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-02-24T19:46:53Z", "created_by": "RUN /bin/sh -c set -eux; \t\tsavedAptMark=\"$(apt-mark showmanual)\"; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tdpkg-dev \t\tgcc \t\tgnupg \t\tlibbluetooth-dev \t\tlibbz2-dev \t\tlibc6-dev \t\tlibdb-dev \t\tlibffi-dev \t\tlibgdbm-dev \t\tliblzma-dev \t\tlibncursesw5-dev \t\tlibreadline-dev \t\tlibsqlite3-dev \t\tlibssl-dev \t\tmake \t\ttk-dev \t\tuuid-dev \t\twget \t\txz-utils \t\tzlib1g-dev \t; \t\twget -O python.tar.xz \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz\"; \techo \"$PYTHON_SHA256 *python.tar.xz\" | sha256sum -c -; \twget -O python.tar.xz.asc \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc\"; \tGNUPGHOME=\"$(mktemp -d)\"; export GNUPGHOME; \tgpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$GPG_KEY\"; \tgpg --batch --verify python.tar.xz.asc python.tar.xz; \tgpgconf --kill all; \trm -rf \"$GNUPGHOME\" python.tar.xz.asc; \tmkdir -p /usr/src/python; \ttar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; \trm python.tar.xz; \t\tcd /usr/src/python; \tgnuArch=\"$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)\"; \t./configure \t\t--build=\"$gnuArch\" \t\t--enable-loadable-sqlite-extensions \t\t--enable-optimizations \t\t--enable-option-checking=fatal \t\t--enable-shared \t\t$(test \"${gnuArch%%-*}\" != 'riscv64' \u0026\u0026 echo '--with-lto') \t\t--with-ensurepip \t; \tnproc=\"$(nproc)\"; \tEXTRA_CFLAGS=\"$(dpkg-buildflags --get CFLAGS)\"; \tLDFLAGS=\"$(dpkg-buildflags --get LDFLAGS)\"; \tLDFLAGS=\"${LDFLAGS:-} -Wl,--strip-all\"; \tmake -j \"$nproc\" \t\t\"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}\" \t\t\"LDFLAGS=${LDFLAGS:-}\" \t; \trm python; \tmake -j \"$nproc\" \t\t\"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}\" \t\t\"LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\\$\\$ORIGIN/../lib'\" \t\tpython \t; \tmake install; \t\tcd /; \trm -rf /usr/src/python; \t\tfind /usr/local -depth \t\t\\( \t\t\t\\( -type d -a \\( -name test -o -name tests -o -name idle_test \\) \\) \t\t\t-o \\( -type f -a \\( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \\) \\) \t\t\\) -exec rm -rf '{}' + \t; \t\tldconfig; \t\tapt-mark auto '.*' \u003e /dev/null; \tapt-mark manual $savedAptMark; \tfind /usr/local -type f -executable -not \\( -name '*tkinter*' \\) -exec ldd '{}' ';' \t\t| awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); printf \"*%s\\n\", so }' \t\t| sort -u \t\t| xargs -rt dpkg-query --search \t\t| awk 'sub(\":$\", \"\", $1) { print $1 }' \t\t| sort -u \t\t| xargs -r apt-mark manual \t; \tapt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \tapt-get dist-clean; \t\texport PYTHONDONTWRITEBYTECODE=1; \tpython3 --version; \t\tpip3 install \t\t--disable-pip-version-check \t\t--no-cache-dir \t\t--no-compile \t\t'setuptools==79.0.1' \t\t'wheel\u003c0.46' \t; \tpip3 --version # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-02-24T19:46:53Z", "created_by": "RUN /bin/sh -c set -eux; \tfor src in idle3 pip3 pydoc3 python3 python3-config; do \t\tdst=\"$(echo \"$src\" | tr -d 3)\"; \t\t[ -s \"/usr/local/bin/$src\" ]; \t\t[ ! -e \"/usr/local/bin/$dst\" ]; \t\tln -svT \"$src\" \"/usr/local/bin/$dst\"; \tdone # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-02-24T19:46:53Z", "created_by": "CMD [\"python3\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-04-26T09:39:19Z", "created_by": "RUN /bin/sh -c apt-get update \u0026\u0026 apt-get install -y --no-install-recommends gcc \u0026\u0026 rm -rf /var/lib/apt/lists/* # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-04-26T09:39:23Z", "created_by": "WORKDIR /app", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-04-26T09:39:33Z", "created_by": "RUN /bin/sh -c pip install --upgrade pip \u0026\u0026 pip install uv # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-04-26T09:39:35Z", "created_by": "COPY requirements.txt . # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-04-26T09:39:41Z", "created_by": "RUN /bin/sh -c uv pip install --system -r requirements.txt # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-04-26T09:39:42Z", "created_by": "COPY . . # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-04-26T09:39:42Z", "created_by": "CMD [\"python\" \"-m\" \"meta_ads_mcp\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true } ], "os": "linux", "rootfs": { "type": "layers", "diff_ids": [ "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f", "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587", "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464", "sha256:3780204f6b74b4ebc29821a7b50259cf6942b09202a6ae150e5f365eafbf6979", "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178", "sha256:9c6af83705d66e1d5ac5f4161701112e082b0ae227635f6efb3446ab4cbfda46", "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6", "sha256:177533fcaa703418e8a278831c830d333e7ad1f0a9f08649d19e79cb25de2bdb", "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1", "sha256:b5afa19da79f71d2e63c6b8a328ffc5e8f9956ec6b5135b8bb32d8eded7bb020" ] }, "config": { "Cmd": [ "python", "-m", "meta_ads_mcp" ], "Env": [ "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "LANG=C.UTF-8", "GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D", "PYTHON_VERSION=3.11.14", "PYTHON_SHA256=8d3ed8ec5c88c1c95f5e558612a725450d2452813ddad5e58fdb1a53b1209b78" ], "Labels": { "com.docker.compose.project": "traefik-stack", "com.docker.compose.service": "meta-ads-mcp", "com.docker.compose.version": "5.0.2" }, "WorkingDir": "/app", "ArgsEscaped": true } }, "Layers": [ { "Size": 81039360, "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, { "Size": 4122624, "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, { "Size": 43836928, "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, { "Size": 5120, "DiffID": "sha256:3780204f6b74b4ebc29821a7b50259cf6942b09202a6ae150e5f365eafbf6979" }, { "Size": 175277056, "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, { "Size": 1536, "DiffID": "sha256:9c6af83705d66e1d5ac5f4161701112e082b0ae227635f6efb3446ab4cbfda46" }, { "Size": 105408000, "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, { "Size": 2560, "DiffID": "sha256:177533fcaa703418e8a278831c830d333e7ad1f0a9f08649d19e79cb25de2bdb" }, { "Size": 60755968, "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, { "Size": 1923072, "DiffID": "sha256:b5afa19da79f71d2e63c6b8a328ffc5e8f9956ec6b5135b8bb32d8eded7bb020" } ] }, "Results": [ { "Target": "traefik-stack-meta-ads-mcp (debian 13.3)", "Class": "os-pkgs", "Type": "debian", "Packages": [ { "ID": "adduser@3.152", "Name": "adduser", "Identifier": { "PURL": "pkg:deb/debian/adduser@3.152?arch=all\u0026distro=debian-13.3", "UID": "17a3839c9950603e" }, "Version": "3.152", "Arch": "all", "SrcName": "adduser", "SrcVersion": "3.152", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Adduser Developers \u003cadduser@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "passwd@1:4.17.4-2" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "InstalledFiles": [ "/usr/sbin/adduser", "/usr/sbin/deluser", "/usr/share/doc/adduser/NEWS.Debian.gz", "/usr/share/doc/adduser/README.gz", "/usr/share/doc/adduser/TODO", "/usr/share/doc/adduser/changelog.gz", "/usr/share/doc/adduser/copyright", "/usr/share/doc/adduser/examples/INSTALL", "/usr/share/doc/adduser/examples/README", "/usr/share/doc/adduser/examples/adduser.conf", "/usr/share/doc/adduser/examples/adduser.local", "/usr/share/doc/adduser/examples/adduser.local.conf", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/bash.bashrc", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/profile", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel.other/index.html", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_logout", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_profile", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bashrc", "/usr/share/doc/adduser/examples/deluser.conf", "/usr/share/man/da/man5/deluser.conf.5.gz", "/usr/share/man/de/man5/adduser.conf.5.gz", "/usr/share/man/de/man5/deluser.conf.5.gz", "/usr/share/man/de/man8/adduser.8.gz", "/usr/share/man/de/man8/adduser.local.8.gz", "/usr/share/man/de/man8/deluser.8.gz", "/usr/share/man/es/man5/deluser.conf.5.gz", "/usr/share/man/fr/man5/adduser.conf.5.gz", "/usr/share/man/fr/man5/deluser.conf.5.gz", "/usr/share/man/fr/man8/adduser.8.gz", "/usr/share/man/fr/man8/deluser.8.gz", "/usr/share/man/it/man5/deluser.conf.5.gz", "/usr/share/man/man5/adduser.conf.5.gz", "/usr/share/man/man5/deluser.conf.5.gz", "/usr/share/man/man8/adduser.8.gz", "/usr/share/man/man8/adduser.local.8.gz", "/usr/share/man/man8/deluser.8.gz", "/usr/share/man/nl/man5/adduser.conf.5.gz", "/usr/share/man/nl/man5/deluser.conf.5.gz", "/usr/share/man/nl/man8/adduser.8.gz", "/usr/share/man/nl/man8/adduser.local.8.gz", "/usr/share/man/nl/man8/deluser.8.gz", "/usr/share/man/pl/man5/deluser.conf.5.gz", "/usr/share/man/pt/man5/adduser.conf.5.gz", "/usr/share/man/pt/man5/deluser.conf.5.gz", "/usr/share/man/pt/man8/adduser.8.gz", "/usr/share/man/pt/man8/adduser.local.8.gz", "/usr/share/man/pt/man8/deluser.8.gz", "/usr/share/man/ro/man5/adduser.conf.5.gz", "/usr/share/man/ro/man5/deluser.conf.5.gz", "/usr/share/man/ro/man8/adduser.8.gz", "/usr/share/man/ro/man8/adduser.local.8.gz", "/usr/share/man/ro/man8/deluser.8.gz", "/usr/share/man/ru/man5/deluser.conf.5.gz", "/usr/share/man/sv/man5/deluser.conf.5.gz", "/usr/share/perl5/Debian/AdduserCommon.pm", "/usr/share/perl5/Debian/AdduserLogging.pm", "/usr/share/perl5/Debian/AdduserRetvalues.pm" ], "AnalyzedBy": "dpkg" }, { "ID": "apt@3.0.3", "Name": "apt", "Identifier": { "PURL": "pkg:deb/debian/apt@3.0.3?arch=amd64\u0026distro=debian-13.3", "UID": "6e58fdc12982f258" }, "Version": "3.0.3", "Arch": "amd64", "SrcName": "apt", "SrcVersion": "3.0.3", "Licenses": [ "GPL-2.0-or-later", "curl", "BSD-3-Clause", "MIT", "GPL-2.0-only" ], "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "adduser@3.152", "base-passwd@3.6.7", "debian-archive-keyring@2025.1", "libapt-pkg7.0@3.0.3", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19", "libseccomp2@2.6.0-2", "libssl3t64@3.5.4-1~deb13u2", "libstdc++6@14.2.0-19", "libsystemd0@257.9-1~deb13u1", "sqv@1.3.0-3+b2" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/apt", "/usr/bin/apt-cache", "/usr/bin/apt-cdrom", "/usr/bin/apt-config", "/usr/bin/apt-get", "/usr/bin/apt-mark", "/usr/lib/apt/apt-extracttemplates", "/usr/lib/apt/apt-helper", "/usr/lib/apt/apt.systemd.daily", "/usr/lib/apt/methods/cdrom", "/usr/lib/apt/methods/copy", "/usr/lib/apt/methods/file", "/usr/lib/apt/methods/gpgv", "/usr/lib/apt/methods/http", "/usr/lib/apt/methods/mirror", "/usr/lib/apt/methods/rred", "/usr/lib/apt/methods/sqv", "/usr/lib/apt/methods/store", "/usr/lib/apt/solvers/dump", "/usr/lib/dpkg/methods/apt/desc.apt", "/usr/lib/dpkg/methods/apt/install", "/usr/lib/dpkg/methods/apt/names", "/usr/lib/dpkg/methods/apt/setup", "/usr/lib/dpkg/methods/apt/update", "/usr/lib/systemd/system/apt-daily-upgrade.service", "/usr/lib/systemd/system/apt-daily-upgrade.timer", "/usr/lib/systemd/system/apt-daily.service", "/usr/lib/systemd/system/apt-daily.timer", "/usr/lib/x86_64-linux-gnu/libapt-private.so.0.0.0", "/usr/share/apt/default-sequoia.config", "/usr/share/bash-completion/completions/apt", "/usr/share/bug/apt/script", "/usr/share/doc/apt/NEWS.Debian.gz", "/usr/share/doc/apt/README.md.gz", "/usr/share/doc/apt/changelog.gz", "/usr/share/doc/apt/copyright", "/usr/share/doc/apt/examples/apt.conf", "/usr/share/doc/apt/examples/configure-index", "/usr/share/doc/apt/examples/debian.sources", "/usr/share/doc/apt/examples/preferences", "/usr/share/lintian/overrides/apt", "/usr/share/locale/ar/LC_MESSAGES/apt.mo", "/usr/share/locale/ast/LC_MESSAGES/apt.mo", "/usr/share/locale/bg/LC_MESSAGES/apt.mo", "/usr/share/locale/bs/LC_MESSAGES/apt.mo", "/usr/share/locale/ca/LC_MESSAGES/apt.mo", "/usr/share/locale/cs/LC_MESSAGES/apt.mo", "/usr/share/locale/cy/LC_MESSAGES/apt.mo", "/usr/share/locale/da/LC_MESSAGES/apt.mo", "/usr/share/locale/de/LC_MESSAGES/apt.mo", "/usr/share/locale/dz/LC_MESSAGES/apt.mo", "/usr/share/locale/el/LC_MESSAGES/apt.mo", "/usr/share/locale/es/LC_MESSAGES/apt.mo", "/usr/share/locale/eu/LC_MESSAGES/apt.mo", "/usr/share/locale/fi/LC_MESSAGES/apt.mo", "/usr/share/locale/fr/LC_MESSAGES/apt.mo", "/usr/share/locale/gl/LC_MESSAGES/apt.mo", "/usr/share/locale/hu/LC_MESSAGES/apt.mo", "/usr/share/locale/it/LC_MESSAGES/apt.mo", "/usr/share/locale/ja/LC_MESSAGES/apt.mo", "/usr/share/locale/km/LC_MESSAGES/apt.mo", "/usr/share/locale/ko/LC_MESSAGES/apt.mo", "/usr/share/locale/ku/LC_MESSAGES/apt.mo", "/usr/share/locale/lt/LC_MESSAGES/apt.mo", "/usr/share/locale/mr/LC_MESSAGES/apt.mo", "/usr/share/locale/nb/LC_MESSAGES/apt.mo", "/usr/share/locale/ne/LC_MESSAGES/apt.mo", "/usr/share/locale/nl/LC_MESSAGES/apt.mo", "/usr/share/locale/nn/LC_MESSAGES/apt.mo", "/usr/share/locale/pl/LC_MESSAGES/apt.mo", "/usr/share/locale/pt/LC_MESSAGES/apt.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/apt.mo", "/usr/share/locale/ro/LC_MESSAGES/apt.mo", "/usr/share/locale/ru/LC_MESSAGES/apt.mo", "/usr/share/locale/sk/LC_MESSAGES/apt.mo", "/usr/share/locale/sl/LC_MESSAGES/apt.mo", "/usr/share/locale/sv/LC_MESSAGES/apt.mo", "/usr/share/locale/th/LC_MESSAGES/apt.mo", "/usr/share/locale/tl/LC_MESSAGES/apt.mo", "/usr/share/locale/tr/LC_MESSAGES/apt.mo", "/usr/share/locale/uk/LC_MESSAGES/apt.mo", "/usr/share/locale/vi/LC_MESSAGES/apt.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/apt.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/apt.mo", "/usr/share/man/de/man1/apt-transport-http.1.gz", "/usr/share/man/de/man1/apt-transport-https.1.gz", "/usr/share/man/de/man1/apt-transport-mirror.1.gz", "/usr/share/man/de/man5/apt.conf.5.gz", "/usr/share/man/de/man5/apt_auth.conf.5.gz", "/usr/share/man/de/man5/apt_preferences.5.gz", "/usr/share/man/de/man5/sources.list.5.gz", "/usr/share/man/de/man7/apt-patterns.7.gz", "/usr/share/man/de/man8/apt-cache.8.gz", "/usr/share/man/de/man8/apt-cdrom.8.gz", "/usr/share/man/de/man8/apt-config.8.gz", "/usr/share/man/de/man8/apt-get.8.gz", "/usr/share/man/de/man8/apt-mark.8.gz", "/usr/share/man/de/man8/apt-secure.8.gz", "/usr/share/man/de/man8/apt.8.gz", "/usr/share/man/es/man5/apt_preferences.5.gz", "/usr/share/man/es/man8/apt-cache.8.gz", "/usr/share/man/es/man8/apt-cdrom.8.gz", "/usr/share/man/es/man8/apt-config.8.gz", "/usr/share/man/fr/man1/apt-transport-http.1.gz", "/usr/share/man/fr/man1/apt-transport-https.1.gz", "/usr/share/man/fr/man1/apt-transport-mirror.1.gz", "/usr/share/man/fr/man5/apt.conf.5.gz", "/usr/share/man/fr/man5/apt_auth.conf.5.gz", "/usr/share/man/fr/man5/apt_preferences.5.gz", "/usr/share/man/fr/man5/sources.list.5.gz", "/usr/share/man/fr/man7/apt-patterns.7.gz", "/usr/share/man/fr/man8/apt-cache.8.gz", "/usr/share/man/fr/man8/apt-cdrom.8.gz", "/usr/share/man/fr/man8/apt-config.8.gz", "/usr/share/man/fr/man8/apt-get.8.gz", "/usr/share/man/fr/man8/apt-mark.8.gz", "/usr/share/man/fr/man8/apt-secure.8.gz", "/usr/share/man/fr/man8/apt.8.gz", "/usr/share/man/it/man5/apt.conf.5.gz", "/usr/share/man/it/man5/apt_preferences.5.gz", "/usr/share/man/it/man8/apt-cache.8.gz", "/usr/share/man/it/man8/apt-cdrom.8.gz", "/usr/share/man/it/man8/apt-config.8.gz", "/usr/share/man/it/man8/apt-mark.8.gz", "/usr/share/man/it/man8/apt.8.gz", "/usr/share/man/ja/man5/apt.conf.5.gz", "/usr/share/man/ja/man5/apt_preferences.5.gz", "/usr/share/man/ja/man8/apt-cache.8.gz", "/usr/share/man/ja/man8/apt-cdrom.8.gz", "/usr/share/man/ja/man8/apt-config.8.gz", "/usr/share/man/ja/man8/apt-mark.8.gz", "/usr/share/man/ja/man8/apt.8.gz", "/usr/share/man/man1/apt-transport-http.1.gz", "/usr/share/man/man1/apt-transport-https.1.gz", "/usr/share/man/man1/apt-transport-mirror.1.gz", "/usr/share/man/man5/apt.conf.5.gz", "/usr/share/man/man5/apt_auth.conf.5.gz", "/usr/share/man/man5/apt_preferences.5.gz", "/usr/share/man/man5/sources.list.5.gz", "/usr/share/man/man7/apt-patterns.7.gz", "/usr/share/man/man8/apt-cache.8.gz", "/usr/share/man/man8/apt-cdrom.8.gz", "/usr/share/man/man8/apt-config.8.gz", "/usr/share/man/man8/apt-get.8.gz", "/usr/share/man/man8/apt-mark.8.gz", "/usr/share/man/man8/apt-secure.8.gz", "/usr/share/man/man8/apt.8.gz", "/usr/share/man/nl/man1/apt-transport-http.1.gz", "/usr/share/man/nl/man1/apt-transport-https.1.gz", "/usr/share/man/nl/man1/apt-transport-mirror.1.gz", "/usr/share/man/nl/man5/apt.conf.5.gz", "/usr/share/man/nl/man5/apt_auth.conf.5.gz", "/usr/share/man/nl/man5/apt_preferences.5.gz", "/usr/share/man/nl/man5/sources.list.5.gz", "/usr/share/man/nl/man7/apt-patterns.7.gz", "/usr/share/man/nl/man8/apt-cache.8.gz", "/usr/share/man/nl/man8/apt-cdrom.8.gz", "/usr/share/man/nl/man8/apt-config.8.gz", "/usr/share/man/nl/man8/apt-get.8.gz", "/usr/share/man/nl/man8/apt-mark.8.gz", "/usr/share/man/nl/man8/apt-secure.8.gz", "/usr/share/man/nl/man8/apt.8.gz", "/usr/share/man/pl/man5/apt_preferences.5.gz", "/usr/share/man/pl/man8/apt-cache.8.gz", "/usr/share/man/pl/man8/apt-cdrom.8.gz", "/usr/share/man/pl/man8/apt-config.8.gz", "/usr/share/man/pt/man1/apt-transport-http.1.gz", "/usr/share/man/pt/man1/apt-transport-https.1.gz", "/usr/share/man/pt/man1/apt-transport-mirror.1.gz", "/usr/share/man/pt/man5/apt.conf.5.gz", "/usr/share/man/pt/man5/apt_auth.conf.5.gz", "/usr/share/man/pt/man5/apt_preferences.5.gz", "/usr/share/man/pt/man5/sources.list.5.gz", "/usr/share/man/pt/man7/apt-patterns.7.gz", "/usr/share/man/pt/man8/apt-cache.8.gz", "/usr/share/man/pt/man8/apt-cdrom.8.gz", "/usr/share/man/pt/man8/apt-config.8.gz", "/usr/share/man/pt/man8/apt-get.8.gz", "/usr/share/man/pt/man8/apt-mark.8.gz", "/usr/share/man/pt/man8/apt-secure.8.gz", "/usr/share/man/pt/man8/apt.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "base-files@13.8+deb13u3", "Name": "base-files", "Identifier": { "PURL": "pkg:deb/debian/base-files@13.8%2Bdeb13u3?arch=amd64\u0026distro=debian-13.3", "UID": "7ffc3183526b0864" }, "Version": "13.8+deb13u3", "Arch": "amd64", "SrcName": "base-files", "SrcVersion": "13.8+deb13u3", "Licenses": [ "GPL-2.0-or-later", "verbatim" ], "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/os-release", "/usr/share/base-files/dot.bashrc", "/usr/share/base-files/dot.profile", "/usr/share/base-files/dot.profile.md5sums", "/usr/share/base-files/info.dir", "/usr/share/base-files/motd", "/usr/share/base-files/profile", "/usr/share/base-files/profile.md5sums", "/usr/share/base-files/staff-group-for-usr-local", "/usr/share/common-licenses/Apache-2.0", "/usr/share/common-licenses/Artistic", "/usr/share/common-licenses/BSD", "/usr/share/common-licenses/CC0-1.0", "/usr/share/common-licenses/GFDL-1.2", "/usr/share/common-licenses/GFDL-1.3", "/usr/share/common-licenses/GPL-1", "/usr/share/common-licenses/GPL-2", "/usr/share/common-licenses/GPL-3", "/usr/share/common-licenses/LGPL-2", "/usr/share/common-licenses/LGPL-2.1", "/usr/share/common-licenses/LGPL-3", "/usr/share/common-licenses/MPL-1.1", "/usr/share/common-licenses/MPL-2.0", "/usr/share/doc/base-files/NEWS.Debian.gz", "/usr/share/doc/base-files/README", "/usr/share/doc/base-files/README.FHS", "/usr/share/doc/base-files/changelog.gz", "/usr/share/doc/base-files/copyright", "/usr/share/lintian/overrides/base-files" ], "AnalyzedBy": "dpkg" }, { "ID": "base-passwd@3.6.7", "Name": "base-passwd", "Identifier": { "PURL": "pkg:deb/debian/base-passwd@3.6.7?arch=amd64\u0026distro=debian-13.3", "UID": "a6ecad478bab2315" }, "Version": "3.6.7", "Arch": "amd64", "SrcName": "base-passwd", "SrcVersion": "3.6.7", "Licenses": [ "GPL-2.0-only", "public-domain" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libdebconfclient0@0.280", "libselinux1@3.8.1-1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/sbin/update-passwd", "/usr/share/base-passwd/group.master", "/usr/share/base-passwd/passwd.master", "/usr/share/doc-base/base-passwd.users-and-groups", "/usr/share/doc/base-passwd/README", "/usr/share/doc/base-passwd/changelog.gz", "/usr/share/doc/base-passwd/copyright", "/usr/share/doc/base-passwd/users-and-groups.html", "/usr/share/doc/base-passwd/users-and-groups.txt.gz", "/usr/share/lintian/overrides/base-passwd", "/usr/share/man/de/man8/update-passwd.8.gz", "/usr/share/man/es/man8/update-passwd.8.gz", "/usr/share/man/fr/man8/update-passwd.8.gz", "/usr/share/man/ja/man8/update-passwd.8.gz", "/usr/share/man/man8/update-passwd.8.gz", "/usr/share/man/pl/man8/update-passwd.8.gz", "/usr/share/man/ro/man8/update-passwd.8.gz", "/usr/share/man/ru/man8/update-passwd.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "bash@5.2.37-2+b7", "Name": "bash", "Identifier": { "PURL": "pkg:deb/debian/bash@5.2.37-2%2Bb7?arch=amd64\u0026distro=debian-13.3", "UID": "6fa5b17aa4f75d55" }, "Version": "5.2.37", "Release": "2+b7", "Arch": "amd64", "SrcName": "bash", "SrcVersion": "5.2.37", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-3+ with Bison exception", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-only", "GFDL-1.3-only", "Latex2e", "BSD-4-Clause-UC", "MIT", "permissive" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "base-files@13.8+deb13u3", "debianutils@5.23.2" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/bash", "/usr/bin/bashbug", "/usr/bin/clear_console", "/usr/share/debianutils/shells.d/bash", "/usr/share/doc/bash/CHANGES.gz", "/usr/share/doc/bash/COMPAT.gz", "/usr/share/doc/bash/INTRO.gz", "/usr/share/doc/bash/NEWS.gz", "/usr/share/doc/bash/POSIX.gz", "/usr/share/doc/bash/RBASH", "/usr/share/doc/bash/README.Debian.gz", "/usr/share/doc/bash/README.abs-guide", "/usr/share/doc/bash/README.commands.gz", "/usr/share/doc/bash/README.gz", "/usr/share/doc/bash/changelog.Debian.amd64.gz", "/usr/share/doc/bash/changelog.Debian.gz", "/usr/share/doc/bash/changelog.gz", "/usr/share/doc/bash/copyright", "/usr/share/doc/bash/inputrc.arrows", "/usr/share/lintian/overrides/bash", "/usr/share/locale/af/LC_MESSAGES/bash.mo", "/usr/share/locale/bg/LC_MESSAGES/bash.mo", "/usr/share/locale/ca/LC_MESSAGES/bash.mo", "/usr/share/locale/cs/LC_MESSAGES/bash.mo", "/usr/share/locale/da/LC_MESSAGES/bash.mo", "/usr/share/locale/de/LC_MESSAGES/bash.mo", "/usr/share/locale/el/LC_MESSAGES/bash.mo", "/usr/share/locale/en@boldquot/LC_MESSAGES/bash.mo", "/usr/share/locale/en@quot/LC_MESSAGES/bash.mo", "/usr/share/locale/eo/LC_MESSAGES/bash.mo", "/usr/share/locale/es/LC_MESSAGES/bash.mo", "/usr/share/locale/et/LC_MESSAGES/bash.mo", "/usr/share/locale/fi/LC_MESSAGES/bash.mo", "/usr/share/locale/fr/LC_MESSAGES/bash.mo", "/usr/share/locale/ga/LC_MESSAGES/bash.mo", "/usr/share/locale/gl/LC_MESSAGES/bash.mo", "/usr/share/locale/hr/LC_MESSAGES/bash.mo", "/usr/share/locale/hu/LC_MESSAGES/bash.mo", "/usr/share/locale/id/LC_MESSAGES/bash.mo", "/usr/share/locale/it/LC_MESSAGES/bash.mo", "/usr/share/locale/ja/LC_MESSAGES/bash.mo", "/usr/share/locale/ko/LC_MESSAGES/bash.mo", "/usr/share/locale/lt/LC_MESSAGES/bash.mo", "/usr/share/locale/nb/LC_MESSAGES/bash.mo", "/usr/share/locale/nl/LC_MESSAGES/bash.mo", "/usr/share/locale/pl/LC_MESSAGES/bash.mo", "/usr/share/locale/pt/LC_MESSAGES/bash.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/bash.mo", "/usr/share/locale/ro/LC_MESSAGES/bash.mo", "/usr/share/locale/ru/LC_MESSAGES/bash.mo", "/usr/share/locale/sk/LC_MESSAGES/bash.mo", "/usr/share/locale/sl/LC_MESSAGES/bash.mo", "/usr/share/locale/sr/LC_MESSAGES/bash.mo", "/usr/share/locale/sv/LC_MESSAGES/bash.mo", "/usr/share/locale/tr/LC_MESSAGES/bash.mo", "/usr/share/locale/uk/LC_MESSAGES/bash.mo", "/usr/share/locale/vi/LC_MESSAGES/bash.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/bash.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/bash.mo", "/usr/share/man/man1/bash.1.gz", "/usr/share/man/man1/bashbug.1.gz", "/usr/share/man/man1/clear_console.1.gz", "/usr/share/man/man1/rbash.1.gz", "/usr/share/man/man7/bash-builtins.7.gz", "/usr/share/menu/bash" ], "AnalyzedBy": "dpkg" }, { "ID": "binutils@2.44-3", "Name": "binutils", "Identifier": { "PURL": "pkg:deb/debian/binutils@2.44-3?arch=amd64\u0026distro=debian-13.3", "UID": "834035bd36197cec" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils-common@2.44-3", "binutils-x86-64-linux-gnu@2.44-3", "libbinutils@2.44-3", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19", "libgprofng0@2.44-3", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/etc/gprofng.rc", "/usr/bin/gprofng", "/usr/bin/gprofng-archive", "/usr/bin/gprofng-collect-app", "/usr/bin/gprofng-display-html", "/usr/bin/gprofng-display-src", "/usr/bin/gprofng-display-text", "/usr/share/bug/binutils/presubj", "/usr/share/doc/binutils/changelog.Debian.gz", "/usr/share/doc/binutils/copyright", "/usr/share/lintian/overrides/binutils", "/usr/share/man/man1/gprofng-archive.1.gz", "/usr/share/man/man1/gprofng-collect-app.1.gz", "/usr/share/man/man1/gprofng-display-html.1.gz", "/usr/share/man/man1/gprofng-display-src.1.gz", "/usr/share/man/man1/gprofng-display-text.1.gz", "/usr/share/man/man1/gprofng.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "binutils-common@2.44-3", "Name": "binutils-common", "Identifier": { "PURL": "pkg:deb/debian/binutils-common@2.44-3?arch=amd64\u0026distro=debian-13.3", "UID": "187222e6920af349" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/share/doc/binutils-common/changelog.Debian.gz", "/usr/share/doc/binutils-common/copyright", "/usr/share/doc/binutils/NEWS.gz", "/usr/share/doc/binutils/README.cross.gz", "/usr/share/doc/binutils/bfd/ChangeLog.gz", "/usr/share/doc/binutils/bfd/PORTING.gz", "/usr/share/doc/binutils/bfd/TODO.gz", "/usr/share/doc/binutils/changelog.gz", "/usr/share/doc/binutils/gas/ChangeLog.gz", "/usr/share/doc/binutils/gas/NEWS.gz", "/usr/share/doc/binutils/gprof/ChangeLog.gz", "/usr/share/doc/binutils/gprof/TEST.gz", "/usr/share/doc/binutils/gprof/TODO.gz", "/usr/share/doc/binutils/gprof/bbconv.pl", "/usr/share/doc/binutils/ld/ChangeLog.gz", "/usr/share/doc/binutils/ld/NEWS.gz", "/usr/share/doc/binutils/ld/TODO.gz", "/usr/share/lintian/overrides/binutils-common", "/usr/share/locale/bg/LC_MESSAGES/binutils.mo", "/usr/share/locale/bg/LC_MESSAGES/gprof.mo", "/usr/share/locale/bg/LC_MESSAGES/ld.mo", "/usr/share/locale/ca/LC_MESSAGES/binutils.mo", "/usr/share/locale/da/LC_MESSAGES/bfd.mo", "/usr/share/locale/da/LC_MESSAGES/binutils.mo", "/usr/share/locale/da/LC_MESSAGES/gprof.mo", "/usr/share/locale/da/LC_MESSAGES/ld.mo", "/usr/share/locale/da/LC_MESSAGES/opcodes.mo", "/usr/share/locale/de/LC_MESSAGES/gprof.mo", "/usr/share/locale/de/LC_MESSAGES/ld.mo", "/usr/share/locale/de/LC_MESSAGES/opcodes.mo", "/usr/share/locale/eo/LC_MESSAGES/gprof.mo", "/usr/share/locale/es/LC_MESSAGES/bfd.mo", "/usr/share/locale/es/LC_MESSAGES/binutils.mo", "/usr/share/locale/es/LC_MESSAGES/gas.mo", "/usr/share/locale/es/LC_MESSAGES/gprof.mo", "/usr/share/locale/es/LC_MESSAGES/ld.mo", "/usr/share/locale/es/LC_MESSAGES/opcodes.mo", "/usr/share/locale/fi/LC_MESSAGES/bfd.mo", "/usr/share/locale/fi/LC_MESSAGES/binutils.mo", "/usr/share/locale/fi/LC_MESSAGES/gas.mo", "/usr/share/locale/fi/LC_MESSAGES/gprof.mo", "/usr/share/locale/fi/LC_MESSAGES/ld.mo", "/usr/share/locale/fi/LC_MESSAGES/opcodes.mo", "/usr/share/locale/fr/LC_MESSAGES/bfd.mo", "/usr/share/locale/fr/LC_MESSAGES/binutils.mo", "/usr/share/locale/fr/LC_MESSAGES/gas.mo", "/usr/share/locale/fr/LC_MESSAGES/gprof.mo", "/usr/share/locale/fr/LC_MESSAGES/ld.mo", "/usr/share/locale/fr/LC_MESSAGES/opcodes.mo", "/usr/share/locale/ga/LC_MESSAGES/gprof.mo", "/usr/share/locale/ga/LC_MESSAGES/ld.mo", "/usr/share/locale/ga/LC_MESSAGES/opcodes.mo", "/usr/share/locale/hr/LC_MESSAGES/bfd.mo", "/usr/share/locale/hr/LC_MESSAGES/binutils.mo", "/usr/share/locale/hu/LC_MESSAGES/gprof.mo", "/usr/share/locale/id/LC_MESSAGES/bfd.mo", "/usr/share/locale/id/LC_MESSAGES/binutils.mo", "/usr/share/locale/id/LC_MESSAGES/gas.mo", "/usr/share/locale/id/LC_MESSAGES/gprof.mo", "/usr/share/locale/id/LC_MESSAGES/ld.mo", "/usr/share/locale/id/LC_MESSAGES/opcodes.mo", "/usr/share/locale/it/LC_MESSAGES/binutils.mo", "/usr/share/locale/it/LC_MESSAGES/gprof.mo", "/usr/share/locale/it/LC_MESSAGES/ld.mo", "/usr/share/locale/it/LC_MESSAGES/opcodes.mo", "/usr/share/locale/ja/LC_MESSAGES/bfd.mo", "/usr/share/locale/ja/LC_MESSAGES/binutils.mo", "/usr/share/locale/ja/LC_MESSAGES/gas.mo", "/usr/share/locale/ja/LC_MESSAGES/gprof.mo", "/usr/share/locale/ja/LC_MESSAGES/ld.mo", "/usr/share/locale/ka/LC_MESSAGES/bfd.mo", "/usr/share/locale/ka/LC_MESSAGES/gprof.mo", "/usr/share/locale/ka/LC_MESSAGES/ld.mo", "/usr/share/locale/ms/LC_MESSAGES/bfd.mo", "/usr/share/locale/ms/LC_MESSAGES/gprof.mo", "/usr/share/locale/nl/LC_MESSAGES/gprof.mo", "/usr/share/locale/nl/LC_MESSAGES/opcodes.mo", "/usr/share/locale/pt/LC_MESSAGES/bfd.mo", "/usr/share/locale/pt/LC_MESSAGES/binutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/gprof.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/ld.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/opcodes.mo", "/usr/share/locale/ro/LC_MESSAGES/bfd.mo", "/usr/share/locale/ro/LC_MESSAGES/binutils.mo", "/usr/share/locale/ro/LC_MESSAGES/gas.mo", "/usr/share/locale/ro/LC_MESSAGES/gprof.mo", "/usr/share/locale/ro/LC_MESSAGES/ld.mo", "/usr/share/locale/ro/LC_MESSAGES/opcodes.mo", "/usr/share/locale/ru/LC_MESSAGES/bfd.mo", "/usr/share/locale/ru/LC_MESSAGES/binutils.mo", "/usr/share/locale/ru/LC_MESSAGES/gas.mo", "/usr/share/locale/ru/LC_MESSAGES/gprof.mo", "/usr/share/locale/ru/LC_MESSAGES/ld.mo", "/usr/share/locale/rw/LC_MESSAGES/bfd.mo", "/usr/share/locale/rw/LC_MESSAGES/binutils.mo", "/usr/share/locale/rw/LC_MESSAGES/gas.mo", "/usr/share/locale/rw/LC_MESSAGES/gprof.mo", "/usr/share/locale/sk/LC_MESSAGES/binutils.mo", "/usr/share/locale/sr/LC_MESSAGES/bfd.mo", "/usr/share/locale/sr/LC_MESSAGES/binutils.mo", "/usr/share/locale/sr/LC_MESSAGES/gprof.mo", "/usr/share/locale/sr/LC_MESSAGES/ld.mo", "/usr/share/locale/sr/LC_MESSAGES/opcodes.mo", "/usr/share/locale/sv/LC_MESSAGES/bfd.mo", "/usr/share/locale/sv/LC_MESSAGES/binutils.mo", "/usr/share/locale/sv/LC_MESSAGES/gas.mo", "/usr/share/locale/sv/LC_MESSAGES/gprof.mo", "/usr/share/locale/sv/LC_MESSAGES/ld.mo", "/usr/share/locale/sv/LC_MESSAGES/opcodes.mo", "/usr/share/locale/tr/LC_MESSAGES/bfd.mo", "/usr/share/locale/tr/LC_MESSAGES/binutils.mo", "/usr/share/locale/tr/LC_MESSAGES/gas.mo", "/usr/share/locale/tr/LC_MESSAGES/gprof.mo", "/usr/share/locale/tr/LC_MESSAGES/ld.mo", "/usr/share/locale/tr/LC_MESSAGES/opcodes.mo", "/usr/share/locale/uk/LC_MESSAGES/bfd.mo", "/usr/share/locale/uk/LC_MESSAGES/binutils.mo", "/usr/share/locale/uk/LC_MESSAGES/gas.mo", "/usr/share/locale/uk/LC_MESSAGES/gprof.mo", "/usr/share/locale/uk/LC_MESSAGES/ld.mo", "/usr/share/locale/uk/LC_MESSAGES/opcodes.mo", "/usr/share/locale/vi/LC_MESSAGES/bfd.mo", "/usr/share/locale/vi/LC_MESSAGES/binutils.mo", "/usr/share/locale/vi/LC_MESSAGES/gprof.mo", "/usr/share/locale/vi/LC_MESSAGES/ld.mo", "/usr/share/locale/vi/LC_MESSAGES/opcodes.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/bfd.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/binutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/gas.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/ld.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/opcodes.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/binutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/ld.mo", "/usr/share/man/man1/addr2line.1.gz", "/usr/share/man/man1/ar.1.gz", "/usr/share/man/man1/as.1.gz", "/usr/share/man/man1/c++filt.1.gz", "/usr/share/man/man1/elfedit.1.gz", "/usr/share/man/man1/gprof.1.gz", "/usr/share/man/man1/ld.bfd.1.gz", "/usr/share/man/man1/nm.1.gz", "/usr/share/man/man1/objcopy.1.gz", "/usr/share/man/man1/objdump.1.gz", "/usr/share/man/man1/ranlib.1.gz", "/usr/share/man/man1/readelf.1.gz", "/usr/share/man/man1/size.1.gz", "/usr/share/man/man1/strings.1.gz", "/usr/share/man/man1/strip.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "binutils-x86-64-linux-gnu@2.44-3", "Name": "binutils-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/binutils-x86-64-linux-gnu@2.44-3?arch=amd64\u0026distro=debian-13.3", "UID": "df9ef58270077d79" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils-common@2.44-3", "libbinutils@2.44-3", "libc6@2.41-12+deb13u1", "libctf-nobfd0@2.44-3", "libctf0@2.44-3", "libjansson4@2.14-2+b3", "libsframe1@2.44-3", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/bin/x86_64-linux-gnu-addr2line", "/usr/bin/x86_64-linux-gnu-ar", "/usr/bin/x86_64-linux-gnu-as", "/usr/bin/x86_64-linux-gnu-c++filt", "/usr/bin/x86_64-linux-gnu-elfedit", "/usr/bin/x86_64-linux-gnu-gprof", "/usr/bin/x86_64-linux-gnu-ld.bfd", "/usr/bin/x86_64-linux-gnu-nm", "/usr/bin/x86_64-linux-gnu-objcopy", "/usr/bin/x86_64-linux-gnu-objdump", "/usr/bin/x86_64-linux-gnu-ranlib", "/usr/bin/x86_64-linux-gnu-readelf", "/usr/bin/x86_64-linux-gnu-size", "/usr/bin/x86_64-linux-gnu-strings", "/usr/bin/x86_64-linux-gnu-strip", "/usr/lib/x86_64-linux-gnu/bfd-plugins/libdep.so", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.x", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xd", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xde", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xder", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xs", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xscer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xse", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xser", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xswe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xswer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.x", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xd", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xde", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xder", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xs", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xscer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xse", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xser", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xswe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xswer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.x", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xd", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xde", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xder", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xs", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xscer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xse", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xser", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xswe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xswer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.x", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xd", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xde", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xder", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xs", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xscer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xse", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xser", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xswe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xswer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xwer", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.x", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xa", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.x", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xa", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/stamp", "/usr/share/doc/binutils/test-summary-amd64.gz", "/usr/share/lintian/overrides/binutils-x86-64-linux-gnu" ], "AnalyzedBy": "dpkg" }, { "ID": "bsdutils@1:2.41-5", "Name": "bsdutils", "Identifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "Version": "2.41", "Release": "5", "Epoch": 1, "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/logger", "/usr/bin/renice", "/usr/bin/script", "/usr/bin/scriptlive", "/usr/bin/scriptreplay", "/usr/bin/wall", "/usr/share/bash-completion/completions/logger", "/usr/share/bash-completion/completions/renice", "/usr/share/bash-completion/completions/script", "/usr/share/bash-completion/completions/scriptlive", "/usr/share/bash-completion/completions/scriptreplay", "/usr/share/bash-completion/completions/wall", "/usr/share/doc/bsdutils/NEWS.Debian.gz", "/usr/share/doc/bsdutils/changelog.Debian.gz", "/usr/share/doc/bsdutils/changelog.gz", "/usr/share/doc/bsdutils/copyright", "/usr/share/lintian/overrides/bsdutils", "/usr/share/man/man1/logger.1.gz", "/usr/share/man/man1/renice.1.gz", "/usr/share/man/man1/script.1.gz", "/usr/share/man/man1/scriptlive.1.gz", "/usr/share/man/man1/scriptreplay.1.gz", "/usr/share/man/man1/wall.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "ca-certificates@20250419", "Name": "ca-certificates", "Identifier": { "PURL": "pkg:deb/debian/ca-certificates@20250419?arch=all\u0026distro=debian-13.3", "UID": "1973cdf1772a78d5" }, "Version": "20250419", "Arch": "all", "SrcName": "ca-certificates", "SrcVersion": "20250419", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "MPL-2.0" ], "Maintainer": "Julien Cristau \u003cjcristau@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "openssl@3.5.4-1~deb13u2" ], "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "InstalledFiles": [ "/usr/sbin/update-ca-certificates", "/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt", "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt", "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt", "/usr/share/ca-certificates/mozilla/ANF_Secure_Server_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt", "/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt", "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt", "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt", "/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt", "/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt", "/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt", "/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt", "/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Certainly_Root_E1.crt", "/usr/share/ca-certificates/mozilla/Certainly_Root_R1.crt", "/usr/share/ca-certificates/mozilla/Certigna.crt", "/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_EC-384_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt", "/usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_2_2023.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_2_2023.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt", "/usr/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt", "/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/FIRMAPROFESIONAL_CA_ROOT-A_WEB.crt", "/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt", "/usr/share/ca-certificates/mozilla/GLOBALTRUST_2020.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_E46.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_R46.crt", "/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt", "/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/HARICA_TLS_ECC_Root_CA_2021.crt", "/usr/share/ca-certificates/mozilla/HARICA_TLS_RSA_Root_CA_2021.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt", "/usr/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt", "/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt", "/usr/share/ca-certificates/mozilla/ISRG_Root_X2.crt", "/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Izenpe.com.crt", "/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt", "/usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt", "/usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt", "/usr/share/ca-certificates/mozilla/NAVER_Global_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt", "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt", "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt", "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt", "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt", "/usr/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt", "/usr/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt", "/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt", "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt", "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA12.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA14.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA15.crt", "/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt", "/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt", "/usr/share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt", "/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt", "/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt", "/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt", "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt", "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt", "/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt", "/usr/share/ca-certificates/mozilla/TWCA_CYBER_Root_CA.crt", "/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt", "/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_ECC_Root_2020.crt", "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_RSA_Root_2023.crt", "/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt", "/usr/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt", "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt", "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/TunTrust_Root_CA.crt", "/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt", "/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt", "/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt", "/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt", "/usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt", "/usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt", "/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt", "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt", "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt", "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt", "/usr/share/ca-certificates/mozilla/vTrus_ECC_Root_CA.crt", "/usr/share/ca-certificates/mozilla/vTrus_Root_CA.crt", "/usr/share/doc/ca-certificates/README.Debian", "/usr/share/doc/ca-certificates/changelog.gz", "/usr/share/doc/ca-certificates/copyright", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/Makefile", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/README", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/ca-certificates-local.triggers", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/changelog", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/compat", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/control", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/copyright", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/postrm", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/rules", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/source/format", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Local_Root_CA.crt", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Makefile", "/usr/share/man/man8/update-ca-certificates.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "coreutils@9.7-3", "Name": "coreutils", "Identifier": { "PURL": "pkg:deb/debian/coreutils@9.7-3?arch=amd64\u0026distro=debian-13.3", "UID": "cb4a55f50bda2393" }, "Version": "9.7", "Release": "3", "Arch": "amd64", "SrcName": "coreutils", "SrcVersion": "9.7", "SrcRelease": "3", "Licenses": [ "GPL-3.0-or-later", "BSD-4-Clause-UC", "GPL-3.0-only", "ISC", "FSFULLR", "GFDL-1.3-no-invariants-only", "GFDL-1.3-only" ], "Maintainer": "Michael Stone \u003cmstone@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/[", "/usr/bin/arch", "/usr/bin/b2sum", "/usr/bin/base32", "/usr/bin/base64", "/usr/bin/basename", "/usr/bin/basenc", "/usr/bin/cat", "/usr/bin/chcon", "/usr/bin/chgrp", "/usr/bin/chmod", "/usr/bin/chown", "/usr/bin/cksum", "/usr/bin/comm", "/usr/bin/cp", "/usr/bin/csplit", "/usr/bin/cut", "/usr/bin/date", "/usr/bin/dd", "/usr/bin/df", "/usr/bin/dir", "/usr/bin/dircolors", "/usr/bin/dirname", "/usr/bin/du", "/usr/bin/echo", "/usr/bin/env", "/usr/bin/expand", "/usr/bin/expr", "/usr/bin/factor", "/usr/bin/false", "/usr/bin/fmt", "/usr/bin/fold", "/usr/bin/groups", "/usr/bin/head", "/usr/bin/hostid", "/usr/bin/id", "/usr/bin/install", "/usr/bin/join", "/usr/bin/link", "/usr/bin/ln", "/usr/bin/logname", "/usr/bin/ls", "/usr/bin/md5sum", "/usr/bin/mkdir", "/usr/bin/mkfifo", "/usr/bin/mknod", "/usr/bin/mktemp", "/usr/bin/mv", "/usr/bin/nice", "/usr/bin/nl", "/usr/bin/nohup", "/usr/bin/nproc", "/usr/bin/numfmt", "/usr/bin/od", "/usr/bin/paste", "/usr/bin/pathchk", "/usr/bin/pinky", "/usr/bin/pr", "/usr/bin/printenv", "/usr/bin/printf", "/usr/bin/ptx", "/usr/bin/pwd", "/usr/bin/readlink", "/usr/bin/realpath", "/usr/bin/rm", "/usr/bin/rmdir", "/usr/bin/runcon", "/usr/bin/seq", "/usr/bin/sha1sum", "/usr/bin/sha224sum", "/usr/bin/sha256sum", "/usr/bin/sha384sum", "/usr/bin/sha512sum", "/usr/bin/shred", "/usr/bin/shuf", "/usr/bin/sleep", "/usr/bin/sort", "/usr/bin/split", "/usr/bin/stat", "/usr/bin/stdbuf", "/usr/bin/stty", "/usr/bin/sum", "/usr/bin/sync", "/usr/bin/tac", "/usr/bin/tail", "/usr/bin/tee", "/usr/bin/test", "/usr/bin/timeout", "/usr/bin/touch", "/usr/bin/tr", "/usr/bin/true", "/usr/bin/truncate", "/usr/bin/tsort", "/usr/bin/tty", "/usr/bin/uname", "/usr/bin/unexpand", "/usr/bin/uniq", "/usr/bin/unlink", "/usr/bin/users", "/usr/bin/vdir", "/usr/bin/wc", "/usr/bin/who", "/usr/bin/whoami", "/usr/bin/yes", "/usr/libexec/coreutils/libstdbuf.so", "/usr/sbin/chroot", "/usr/share/doc/coreutils/AUTHORS", "/usr/share/doc/coreutils/NEWS.gz", "/usr/share/doc/coreutils/README.Debian", "/usr/share/doc/coreutils/README.gz", "/usr/share/doc/coreutils/THANKS.gz", "/usr/share/doc/coreutils/TODO.gz", "/usr/share/doc/coreutils/changelog.Debian.gz", "/usr/share/doc/coreutils/changelog.gz", "/usr/share/doc/coreutils/copyright", "/usr/share/info/coreutils.info.gz", "/usr/share/lintian/overrides/coreutils", "/usr/share/locale/af/LC_MESSAGES/coreutils.mo", "/usr/share/locale/be/LC_MESSAGES/coreutils.mo", "/usr/share/locale/bg/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ca/LC_MESSAGES/coreutils.mo", "/usr/share/locale/cs/LC_MESSAGES/coreutils.mo", "/usr/share/locale/da/LC_MESSAGES/coreutils.mo", "/usr/share/locale/de/LC_MESSAGES/coreutils.mo", "/usr/share/locale/el/LC_MESSAGES/coreutils.mo", "/usr/share/locale/eo/LC_MESSAGES/coreutils.mo", "/usr/share/locale/es/LC_MESSAGES/coreutils.mo", "/usr/share/locale/et/LC_MESSAGES/coreutils.mo", "/usr/share/locale/eu/LC_MESSAGES/coreutils.mo", "/usr/share/locale/fi/LC_MESSAGES/coreutils.mo", "/usr/share/locale/fr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ga/LC_MESSAGES/coreutils.mo", "/usr/share/locale/gl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/hr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/hu/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ia/LC_MESSAGES/coreutils.mo", "/usr/share/locale/id/LC_MESSAGES/coreutils.mo", "/usr/share/locale/it/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ja/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ka/LC_MESSAGES/coreutils.mo", "/usr/share/locale/kk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ko/LC_MESSAGES/coreutils.mo", "/usr/share/locale/lg/LC_MESSAGES/coreutils.mo", "/usr/share/locale/lt/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ms/LC_MESSAGES/coreutils.mo", "/usr/share/locale/nb/LC_MESSAGES/coreutils.mo", "/usr/share/locale/nl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pt/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ro/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ru/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sv/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ta/LC_MESSAGES/coreutils.mo", "/usr/share/locale/tr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/uk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/vi/LC_MESSAGES/coreutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/coreutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/coreutils.mo", "/usr/share/man/man1/arch.1.gz", "/usr/share/man/man1/b2sum.1.gz", "/usr/share/man/man1/base32.1.gz", "/usr/share/man/man1/base64.1.gz", "/usr/share/man/man1/basename.1.gz", "/usr/share/man/man1/basenc.1.gz", "/usr/share/man/man1/cat.1.gz", "/usr/share/man/man1/chcon.1.gz", "/usr/share/man/man1/chgrp.1.gz", "/usr/share/man/man1/chmod.1.gz", "/usr/share/man/man1/chown.1.gz", "/usr/share/man/man1/cksum.1.gz", "/usr/share/man/man1/comm.1.gz", "/usr/share/man/man1/cp.1.gz", "/usr/share/man/man1/csplit.1.gz", "/usr/share/man/man1/cut.1.gz", "/usr/share/man/man1/date.1.gz", "/usr/share/man/man1/dd.1.gz", "/usr/share/man/man1/df.1.gz", "/usr/share/man/man1/dir.1.gz", "/usr/share/man/man1/dircolors.1.gz", "/usr/share/man/man1/dirname.1.gz", "/usr/share/man/man1/du.1.gz", "/usr/share/man/man1/echo.1.gz", "/usr/share/man/man1/env.1.gz", "/usr/share/man/man1/expand.1.gz", "/usr/share/man/man1/expr.1.gz", "/usr/share/man/man1/factor.1.gz", "/usr/share/man/man1/false.1.gz", "/usr/share/man/man1/fmt.1.gz", "/usr/share/man/man1/fold.1.gz", "/usr/share/man/man1/groups.1.gz", "/usr/share/man/man1/head.1.gz", "/usr/share/man/man1/hostid.1.gz", "/usr/share/man/man1/id.1.gz", "/usr/share/man/man1/install.1.gz", "/usr/share/man/man1/join.1.gz", "/usr/share/man/man1/link.1.gz", "/usr/share/man/man1/ln.1.gz", "/usr/share/man/man1/logname.1.gz", "/usr/share/man/man1/ls.1.gz", "/usr/share/man/man1/md5sum.1.gz", "/usr/share/man/man1/mkdir.1.gz", "/usr/share/man/man1/mkfifo.1.gz", "/usr/share/man/man1/mknod.1.gz", "/usr/share/man/man1/mktemp.1.gz", "/usr/share/man/man1/mv.1.gz", "/usr/share/man/man1/nice.1.gz", "/usr/share/man/man1/nl.1.gz", "/usr/share/man/man1/nohup.1.gz", "/usr/share/man/man1/nproc.1.gz", "/usr/share/man/man1/numfmt.1.gz", "/usr/share/man/man1/od.1.gz", "/usr/share/man/man1/paste.1.gz", "/usr/share/man/man1/pathchk.1.gz", "/usr/share/man/man1/pinky.1.gz", "/usr/share/man/man1/pr.1.gz", "/usr/share/man/man1/printenv.1.gz", "/usr/share/man/man1/printf.1.gz", "/usr/share/man/man1/ptx.1.gz", "/usr/share/man/man1/pwd.1.gz", "/usr/share/man/man1/readlink.1.gz", "/usr/share/man/man1/realpath.1.gz", "/usr/share/man/man1/rm.1.gz", "/usr/share/man/man1/rmdir.1.gz", "/usr/share/man/man1/runcon.1.gz", "/usr/share/man/man1/seq.1.gz", "/usr/share/man/man1/sha1sum.1.gz", "/usr/share/man/man1/sha224sum.1.gz", "/usr/share/man/man1/sha256sum.1.gz", "/usr/share/man/man1/sha384sum.1.gz", "/usr/share/man/man1/sha512sum.1.gz", "/usr/share/man/man1/shred.1.gz", "/usr/share/man/man1/shuf.1.gz", "/usr/share/man/man1/sleep.1.gz", "/usr/share/man/man1/sort.1.gz", "/usr/share/man/man1/split.1.gz", "/usr/share/man/man1/stat.1.gz", "/usr/share/man/man1/stdbuf.1.gz", "/usr/share/man/man1/stty.1.gz", "/usr/share/man/man1/sum.1.gz", "/usr/share/man/man1/sync.1.gz", "/usr/share/man/man1/tac.1.gz", "/usr/share/man/man1/tail.1.gz", "/usr/share/man/man1/tee.1.gz", "/usr/share/man/man1/test.1.gz", "/usr/share/man/man1/timeout.1.gz", "/usr/share/man/man1/touch.1.gz", "/usr/share/man/man1/tr.1.gz", "/usr/share/man/man1/true.1.gz", "/usr/share/man/man1/truncate.1.gz", "/usr/share/man/man1/tsort.1.gz", "/usr/share/man/man1/tty.1.gz", "/usr/share/man/man1/uname.1.gz", "/usr/share/man/man1/unexpand.1.gz", "/usr/share/man/man1/uniq.1.gz", "/usr/share/man/man1/unlink.1.gz", "/usr/share/man/man1/users.1.gz", "/usr/share/man/man1/vdir.1.gz", "/usr/share/man/man1/wc.1.gz", "/usr/share/man/man1/who.1.gz", "/usr/share/man/man1/whoami.1.gz", "/usr/share/man/man1/yes.1.gz", "/usr/share/man/man8/chroot.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "cpp@4:14.2.0-1", "Name": "cpp", "Identifier": { "PURL": "pkg:deb/debian/cpp@14.2.0-1?arch=amd64\u0026distro=debian-13.3\u0026epoch=4", "UID": "1a60e3f4f540d9c9" }, "Version": "14.2.0", "Release": "1", "Epoch": 4, "Arch": "amd64", "SrcName": "gcc-defaults", "SrcVersion": "1.220", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-14@14.2.0-19", "cpp-x86-64-linux-gnu@4:14.2.0-1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/share/lintian/overrides/cpp" ], "AnalyzedBy": "dpkg" }, { "ID": "cpp-14@14.2.0-19", "Name": "cpp-14", "Identifier": { "PURL": "pkg:deb/debian/cpp-14@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "5a54eaccdc1b626b" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-14-x86-64-linux-gnu@14.2.0-19", "gcc-14-base@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/share/lintian/overrides/cpp-14" ], "AnalyzedBy": "dpkg" }, { "ID": "cpp-14-x86-64-linux-gnu@14.2.0-19", "Name": "cpp-14-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/cpp-14-x86-64-linux-gnu@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "9e95dc95dea19059" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libgmp10@2:6.3.0+dfsg-3", "libisl23@0.27-1", "libmpc3@1.3.1-1+b3", "libmpfr6@4.2.2-1", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/bin/x86_64-linux-gnu-cpp-14", "/usr/libexec/gcc/x86_64-linux-gnu/14/cc1", "/usr/share/lintian/overrides/cpp-14-x86-64-linux-gnu" ], "AnalyzedBy": "dpkg" }, { "ID": "cpp-x86-64-linux-gnu@4:14.2.0-1", "Name": "cpp-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/cpp-x86-64-linux-gnu@14.2.0-1?arch=amd64\u0026distro=debian-13.3\u0026epoch=4", "UID": "3611f25f3c8c1270" }, "Version": "14.2.0", "Release": "1", "Epoch": 4, "Arch": "amd64", "SrcName": "gcc-defaults", "SrcVersion": "1.220", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-14-x86-64-linux-gnu@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/share/doc/cpp-x86-64-linux-gnu/changelog.gz", "/usr/share/doc/cpp-x86-64-linux-gnu/copyright", "/usr/share/lintian/overrides/cpp-x86-64-linux-gnu" ], "AnalyzedBy": "dpkg" }, { "ID": "dash@0.5.12-12", "Name": "dash", "Identifier": { "PURL": "pkg:deb/debian/dash@0.5.12-12?arch=amd64\u0026distro=debian-13.3", "UID": "4990b2098a2a3724" }, "Version": "0.5.12", "Release": "12", "Arch": "amd64", "SrcName": "dash", "SrcVersion": "0.5.12", "SrcRelease": "12", "Licenses": [ "BSD-3-Clause", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debianutils@5.23.2" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/dash", "/usr/share/debianutils/shells.d/dash", "/usr/share/doc/dash/README.Debian.diet", "/usr/share/doc/dash/README.source", "/usr/share/doc/dash/changelog.Debian.gz", "/usr/share/doc/dash/changelog.gz", "/usr/share/doc/dash/copyright", "/usr/share/lintian/overrides/dash", "/usr/share/man/man1/dash.1.gz", "/usr/share/menu/dash" ], "AnalyzedBy": "dpkg" }, { "ID": "debconf@1.5.91", "Name": "debconf", "Identifier": { "PURL": "pkg:deb/debian/debconf@1.5.91?arch=all\u0026distro=debian-13.3", "UID": "f7c8b7ba83ed5cfe" }, "Version": "1.5.91", "Arch": "all", "SrcName": "debconf", "SrcVersion": "1.5.91", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Debconf Developers \u003cdebconf-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/debconf", "/usr/bin/debconf-apt-progress", "/usr/bin/debconf-communicate", "/usr/bin/debconf-copydb", "/usr/bin/debconf-escape", "/usr/bin/debconf-set-selections", "/usr/bin/debconf-show", "/usr/sbin/dpkg-preconfigure", "/usr/sbin/dpkg-reconfigure", "/usr/share/bash-completion/completions/debconf", "/usr/share/debconf/confmodule", "/usr/share/debconf/confmodule.sh", "/usr/share/debconf/debconf.conf", "/usr/share/debconf/fix_db.pl", "/usr/share/debconf/frontend", "/usr/share/doc/debconf/README.Debian", "/usr/share/doc/debconf/changelog.gz", "/usr/share/doc/debconf/copyright", "/usr/share/lintian/overrides/debconf", "/usr/share/man/man1/debconf-apt-progress.1.gz", "/usr/share/man/man1/debconf-communicate.1.gz", "/usr/share/man/man1/debconf-copydb.1.gz", "/usr/share/man/man1/debconf-escape.1.gz", "/usr/share/man/man1/debconf-set-selections.1.gz", "/usr/share/man/man1/debconf-show.1.gz", "/usr/share/man/man1/debconf.1.gz", "/usr/share/man/man8/dpkg-preconfigure.8.gz", "/usr/share/man/man8/dpkg-reconfigure.8.gz", "/usr/share/perl5/Debconf/AutoSelect.pm", "/usr/share/perl5/Debconf/Base.pm", "/usr/share/perl5/Debconf/Client/ConfModule.pm", "/usr/share/perl5/Debconf/ConfModule.pm", "/usr/share/perl5/Debconf/Config.pm", "/usr/share/perl5/Debconf/Db.pm", "/usr/share/perl5/Debconf/DbDriver.pm", "/usr/share/perl5/Debconf/DbDriver/Backup.pm", "/usr/share/perl5/Debconf/DbDriver/Cache.pm", "/usr/share/perl5/Debconf/DbDriver/Copy.pm", "/usr/share/perl5/Debconf/DbDriver/Debug.pm", "/usr/share/perl5/Debconf/DbDriver/DirTree.pm", "/usr/share/perl5/Debconf/DbDriver/Directory.pm", "/usr/share/perl5/Debconf/DbDriver/File.pm", "/usr/share/perl5/Debconf/DbDriver/LDAP.pm", "/usr/share/perl5/Debconf/DbDriver/PackageDir.pm", "/usr/share/perl5/Debconf/DbDriver/Pipe.pm", "/usr/share/perl5/Debconf/DbDriver/Stack.pm", "/usr/share/perl5/Debconf/Element.pm", "/usr/share/perl5/Debconf/Element/Dialog/Boolean.pm", "/usr/share/perl5/Debconf/Element/Dialog/Error.pm", "/usr/share/perl5/Debconf/Element/Dialog/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Dialog/Note.pm", "/usr/share/perl5/Debconf/Element/Dialog/Password.pm", "/usr/share/perl5/Debconf/Element/Dialog/Progress.pm", "/usr/share/perl5/Debconf/Element/Dialog/Select.pm", "/usr/share/perl5/Debconf/Element/Dialog/String.pm", "/usr/share/perl5/Debconf/Element/Dialog/Text.pm", "/usr/share/perl5/Debconf/Element/Editor/Boolean.pm", "/usr/share/perl5/Debconf/Element/Editor/Error.pm", "/usr/share/perl5/Debconf/Element/Editor/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Editor/Note.pm", "/usr/share/perl5/Debconf/Element/Editor/Password.pm", "/usr/share/perl5/Debconf/Element/Editor/Progress.pm", "/usr/share/perl5/Debconf/Element/Editor/Select.pm", "/usr/share/perl5/Debconf/Element/Editor/String.pm", "/usr/share/perl5/Debconf/Element/Editor/Text.pm", "/usr/share/perl5/Debconf/Element/Gnome.pm", "/usr/share/perl5/Debconf/Element/Gnome/Boolean.pm", "/usr/share/perl5/Debconf/Element/Gnome/Error.pm", "/usr/share/perl5/Debconf/Element/Gnome/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Gnome/Note.pm", "/usr/share/perl5/Debconf/Element/Gnome/Password.pm", "/usr/share/perl5/Debconf/Element/Gnome/Progress.pm", "/usr/share/perl5/Debconf/Element/Gnome/Select.pm", "/usr/share/perl5/Debconf/Element/Gnome/String.pm", "/usr/share/perl5/Debconf/Element/Gnome/Text.pm", "/usr/share/perl5/Debconf/Element/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Noninteractive.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Boolean.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Error.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Note.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Password.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Progress.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Select.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/String.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Text.pm", "/usr/share/perl5/Debconf/Element/Select.pm", "/usr/share/perl5/Debconf/Element/Teletype/Boolean.pm", "/usr/share/perl5/Debconf/Element/Teletype/Error.pm", "/usr/share/perl5/Debconf/Element/Teletype/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Teletype/Note.pm", "/usr/share/perl5/Debconf/Element/Teletype/Password.pm", "/usr/share/perl5/Debconf/Element/Teletype/Progress.pm", "/usr/share/perl5/Debconf/Element/Teletype/Select.pm", "/usr/share/perl5/Debconf/Element/Teletype/String.pm", "/usr/share/perl5/Debconf/Element/Teletype/Text.pm", "/usr/share/perl5/Debconf/Element/Web/Boolean.pm", "/usr/share/perl5/Debconf/Element/Web/Error.pm", "/usr/share/perl5/Debconf/Element/Web/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Web/Note.pm", "/usr/share/perl5/Debconf/Element/Web/Password.pm", "/usr/share/perl5/Debconf/Element/Web/Progress.pm", "/usr/share/perl5/Debconf/Element/Web/Select.pm", "/usr/share/perl5/Debconf/Element/Web/String.pm", "/usr/share/perl5/Debconf/Element/Web/Text.pm", "/usr/share/perl5/Debconf/Encoding.pm", "/usr/share/perl5/Debconf/Format.pm", "/usr/share/perl5/Debconf/Format/822.pm", "/usr/share/perl5/Debconf/FrontEnd.pm", "/usr/share/perl5/Debconf/FrontEnd/Dialog.pm", "/usr/share/perl5/Debconf/FrontEnd/Editor.pm", "/usr/share/perl5/Debconf/FrontEnd/Gnome.pm", "/usr/share/perl5/Debconf/FrontEnd/Kde.pm", "/usr/share/perl5/Debconf/FrontEnd/Noninteractive.pm", "/usr/share/perl5/Debconf/FrontEnd/Passthrough.pm", "/usr/share/perl5/Debconf/FrontEnd/Readline.pm", "/usr/share/perl5/Debconf/FrontEnd/ScreenSize.pm", "/usr/share/perl5/Debconf/FrontEnd/Teletype.pm", "/usr/share/perl5/Debconf/FrontEnd/Text.pm", "/usr/share/perl5/Debconf/FrontEnd/Web.pm", "/usr/share/perl5/Debconf/Gettext.pm", "/usr/share/perl5/Debconf/Iterator.pm", "/usr/share/perl5/Debconf/Log.pm", "/usr/share/perl5/Debconf/Path.pm", "/usr/share/perl5/Debconf/Priority.pm", "/usr/share/perl5/Debconf/Question.pm", "/usr/share/perl5/Debconf/Template.pm", "/usr/share/perl5/Debconf/Template/Transient.pm", "/usr/share/perl5/Debconf/TmpFile.pm", "/usr/share/perl5/Debian/DebConf/Client/ConfModule.pm", "/usr/share/pixmaps/debian-logo.png" ], "AnalyzedBy": "dpkg" }, { "ID": "debian-archive-keyring@2025.1", "Name": "debian-archive-keyring", "Identifier": { "PURL": "pkg:deb/debian/debian-archive-keyring@2025.1?arch=all\u0026distro=debian-13.3", "UID": "a22d861380b1187c" }, "Version": "2025.1", "Arch": "all", "SrcName": "debian-archive-keyring", "SrcVersion": "2025.1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Debian Release Team \u003cpackages@release.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/share/doc/debian-archive-keyring/NEWS.Debian.gz", "/usr/share/doc/debian-archive-keyring/README", "/usr/share/doc/debian-archive-keyring/changelog.gz", "/usr/share/doc/debian-archive-keyring/copyright", "/usr/share/keyrings/debian-archive-bookworm-automatic.pgp", "/usr/share/keyrings/debian-archive-bookworm-security-automatic.pgp", "/usr/share/keyrings/debian-archive-bookworm-stable.pgp", "/usr/share/keyrings/debian-archive-bullseye-automatic.pgp", "/usr/share/keyrings/debian-archive-bullseye-security-automatic.pgp", "/usr/share/keyrings/debian-archive-bullseye-stable.pgp", "/usr/share/keyrings/debian-archive-keyring.pgp", "/usr/share/keyrings/debian-archive-removed-keys.pgp", "/usr/share/keyrings/debian-archive-trixie-automatic.pgp", "/usr/share/keyrings/debian-archive-trixie-security-automatic.pgp", "/usr/share/keyrings/debian-archive-trixie-stable.pgp" ], "AnalyzedBy": "dpkg" }, { "ID": "debianutils@5.23.2", "Name": "debianutils", "Identifier": { "PURL": "pkg:deb/debian/debianutils@5.23.2?arch=amd64\u0026distro=debian-13.3", "UID": "3c5d0b66afafddbb" }, "Version": "5.23.2", "Arch": "amd64", "SrcName": "debianutils", "SrcVersion": "5.23.2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "SMAIL-GPL" ], "Maintainer": "Ileana Dumitrescu \u003cileanadumitrescu95@gmail.com\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/ischroot", "/usr/bin/run-parts", "/usr/bin/savelog", "/usr/bin/tempfile", "/usr/bin/which.debianutils", "/usr/sbin/add-shell", "/usr/sbin/installkernel", "/usr/sbin/remove-shell", "/usr/sbin/update-shells", "/usr/share/debianutils/shells", "/usr/share/doc/debianutils/README.shells", "/usr/share/doc/debianutils/changelog.gz", "/usr/share/doc/debianutils/copyright", "/usr/share/man/de/man1/which.debianutils.1.gz", "/usr/share/man/de/man8/add-shell.8.gz", "/usr/share/man/de/man8/installkernel.8.gz", "/usr/share/man/de/man8/remove-shell.8.gz", "/usr/share/man/de/man8/run-parts.8.gz", "/usr/share/man/de/man8/savelog.8.gz", "/usr/share/man/es/man1/which.debianutils.1.gz", "/usr/share/man/es/man8/add-shell.8.gz", "/usr/share/man/es/man8/installkernel.8.gz", "/usr/share/man/es/man8/remove-shell.8.gz", "/usr/share/man/es/man8/run-parts.8.gz", "/usr/share/man/es/man8/savelog.8.gz", "/usr/share/man/fr/man1/which.debianutils.1.gz", "/usr/share/man/fr/man8/add-shell.8.gz", "/usr/share/man/fr/man8/installkernel.8.gz", "/usr/share/man/fr/man8/remove-shell.8.gz", "/usr/share/man/fr/man8/run-parts.8.gz", "/usr/share/man/fr/man8/savelog.8.gz", "/usr/share/man/it/man1/which.debianutils.1.gz", "/usr/share/man/it/man8/add-shell.8.gz", "/usr/share/man/it/man8/installkernel.8.gz", "/usr/share/man/it/man8/remove-shell.8.gz", "/usr/share/man/it/man8/run-parts.8.gz", "/usr/share/man/it/man8/savelog.8.gz", "/usr/share/man/ja/man1/which.debianutils.1.gz", "/usr/share/man/ja/man8/add-shell.8.gz", "/usr/share/man/ja/man8/installkernel.8.gz", "/usr/share/man/ja/man8/remove-shell.8.gz", "/usr/share/man/ja/man8/run-parts.8.gz", "/usr/share/man/ja/man8/savelog.8.gz", "/usr/share/man/man1/ischroot.1.gz", "/usr/share/man/man1/tempfile.1.gz", "/usr/share/man/man1/which.debianutils.1.gz", "/usr/share/man/man8/add-shell.8.gz", "/usr/share/man/man8/installkernel.8.gz", "/usr/share/man/man8/remove-shell.8.gz", "/usr/share/man/man8/run-parts.8.gz", "/usr/share/man/man8/savelog.8.gz", "/usr/share/man/man8/update-shells.8.gz", "/usr/share/man/pl/man1/which.debianutils.1.gz", "/usr/share/man/pl/man8/add-shell.8.gz", "/usr/share/man/pl/man8/installkernel.8.gz", "/usr/share/man/pl/man8/remove-shell.8.gz", "/usr/share/man/pl/man8/run-parts.8.gz", "/usr/share/man/pl/man8/savelog.8.gz", "/usr/share/man/pt/man1/which.debianutils.1.gz", "/usr/share/man/pt/man8/add-shell.8.gz", "/usr/share/man/pt/man8/installkernel.8.gz", "/usr/share/man/pt/man8/remove-shell.8.gz", "/usr/share/man/pt/man8/run-parts.8.gz", "/usr/share/man/pt/man8/savelog.8.gz", "/usr/share/man/sl/man1/which.debianutils.1.gz", "/usr/share/man/sl/man8/add-shell.8.gz", "/usr/share/man/sl/man8/installkernel.8.gz", "/usr/share/man/sl/man8/remove-shell.8.gz", "/usr/share/man/sl/man8/run-parts.8.gz", "/usr/share/man/sl/man8/savelog.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "diffutils@1:3.10-4", "Name": "diffutils", "Identifier": { "PURL": "pkg:deb/debian/diffutils@3.10-4?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "852f693a78aaa149" }, "Version": "3.10", "Release": "4", "Epoch": 1, "Arch": "amd64", "SrcName": "diffutils", "SrcVersion": "3.10", "SrcRelease": "4", "SrcEpoch": 1, "Licenses": [ "GPL-3.0-or-later", "FSFULLR", "LGPL-2.1-or-later", "GPL-3.0-with-autoconf-exception+", "GPL-3.0-only", "GPL-3+ with texinfo exception", "LGPL-2.0-or-later", "GPL-2.0-or-later", "X11", "FSFAP", "GFDL-1.3-no-invariants-only", "LGPL-3.0-or-later", "LGPL-3.0-only", "public-domain", "LGPL-2.0-only", "LGPL-2.1-only", "GPL-2.0-only", "GFDL-1.3-only" ], "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/cmp", "/usr/bin/diff", "/usr/bin/diff3", "/usr/bin/sdiff", "/usr/share/doc/diffutils/NEWS.gz", "/usr/share/doc/diffutils/changelog.Debian.gz", "/usr/share/doc/diffutils/changelog.gz", "/usr/share/doc/diffutils/copyright", "/usr/share/info/diffutils.info.gz", "/usr/share/locale/bg/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ca/LC_MESSAGES/diffutils.mo", "/usr/share/locale/cs/LC_MESSAGES/diffutils.mo", "/usr/share/locale/da/LC_MESSAGES/diffutils.mo", "/usr/share/locale/de/LC_MESSAGES/diffutils.mo", "/usr/share/locale/el/LC_MESSAGES/diffutils.mo", "/usr/share/locale/eo/LC_MESSAGES/diffutils.mo", "/usr/share/locale/es/LC_MESSAGES/diffutils.mo", "/usr/share/locale/fi/LC_MESSAGES/diffutils.mo", "/usr/share/locale/fr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ga/LC_MESSAGES/diffutils.mo", "/usr/share/locale/gl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/he/LC_MESSAGES/diffutils.mo", "/usr/share/locale/hr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/hu/LC_MESSAGES/diffutils.mo", "/usr/share/locale/id/LC_MESSAGES/diffutils.mo", "/usr/share/locale/it/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ja/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ka/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ko/LC_MESSAGES/diffutils.mo", "/usr/share/locale/lv/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ms/LC_MESSAGES/diffutils.mo", "/usr/share/locale/nb/LC_MESSAGES/diffutils.mo", "/usr/share/locale/nl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pt/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ro/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ru/LC_MESSAGES/diffutils.mo", "/usr/share/locale/sr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/sv/LC_MESSAGES/diffutils.mo", "/usr/share/locale/tr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/uk/LC_MESSAGES/diffutils.mo", "/usr/share/locale/vi/LC_MESSAGES/diffutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/diffutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo", "/usr/share/man/man1/cmp.1.gz", "/usr/share/man/man1/diff.1.gz", "/usr/share/man/man1/diff3.1.gz", "/usr/share/man/man1/sdiff.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "dpkg@1.22.21", "Name": "dpkg", "Identifier": { "PURL": "pkg:deb/debian/dpkg@1.22.21?arch=amd64\u0026distro=debian-13.3", "UID": "6552c6e7b1378011" }, "Version": "1.22.21", "Arch": "amd64", "SrcName": "dpkg", "SrcVersion": "1.22.21", "Licenses": [ "GPL-2.0-or-later", "public-domain-s-s-d", "GPL-2.0-only" ], "Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "tar@1.35+dfsg-3.1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/dpkg", "/usr/bin/dpkg-deb", "/usr/bin/dpkg-divert", "/usr/bin/dpkg-maintscript-helper", "/usr/bin/dpkg-query", "/usr/bin/dpkg-realpath", "/usr/bin/dpkg-split", "/usr/bin/dpkg-statoverride", "/usr/bin/dpkg-trigger", "/usr/bin/update-alternatives", "/usr/lib/systemd/system/dpkg-db-backup.service", "/usr/lib/systemd/system/dpkg-db-backup.timer", "/usr/libexec/dpkg/dpkg-db-backup", "/usr/libexec/dpkg/dpkg-db-keeper", "/usr/sbin/start-stop-daemon", "/usr/share/doc/dpkg/AUTHORS", "/usr/share/doc/dpkg/README.api", "/usr/share/doc/dpkg/README.bug-usertags.gz", "/usr/share/doc/dpkg/README.feature-removal-schedule.gz", "/usr/share/doc/dpkg/THANKS.gz", "/usr/share/doc/dpkg/changelog.gz", "/usr/share/doc/dpkg/copyright", "/usr/share/dpkg/abitable", "/usr/share/dpkg/cputable", "/usr/share/dpkg/ostable", "/usr/share/dpkg/sh/dpkg-error.sh", "/usr/share/dpkg/tupletable", "/usr/share/lintian/overrides/dpkg", "/usr/share/lintian/profiles/dpkg/main.profile", "/usr/share/locale/ast/LC_MESSAGES/dpkg.mo", "/usr/share/locale/bs/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ca/LC_MESSAGES/dpkg.mo", "/usr/share/locale/cs/LC_MESSAGES/dpkg.mo", "/usr/share/locale/da/LC_MESSAGES/dpkg.mo", "/usr/share/locale/de/LC_MESSAGES/dpkg.mo", "/usr/share/locale/dz/LC_MESSAGES/dpkg.mo", "/usr/share/locale/el/LC_MESSAGES/dpkg.mo", "/usr/share/locale/eo/LC_MESSAGES/dpkg.mo", "/usr/share/locale/es/LC_MESSAGES/dpkg.mo", "/usr/share/locale/et/LC_MESSAGES/dpkg.mo", "/usr/share/locale/eu/LC_MESSAGES/dpkg.mo", "/usr/share/locale/fr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/gl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/hu/LC_MESSAGES/dpkg.mo", "/usr/share/locale/id/LC_MESSAGES/dpkg.mo", "/usr/share/locale/it/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ja/LC_MESSAGES/dpkg.mo", "/usr/share/locale/km/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ko/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ku/LC_MESSAGES/dpkg.mo", "/usr/share/locale/lt/LC_MESSAGES/dpkg.mo", "/usr/share/locale/mr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nb/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ne/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nn/LC_MESSAGES/dpkg.mo", "/usr/share/locale/oc/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pa/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pt/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ro/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ru/LC_MESSAGES/dpkg.mo", "/usr/share/locale/sk/LC_MESSAGES/dpkg.mo", "/usr/share/locale/sv/LC_MESSAGES/dpkg.mo", "/usr/share/locale/th/LC_MESSAGES/dpkg.mo", "/usr/share/locale/tl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/tr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/vi/LC_MESSAGES/dpkg.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/dpkg.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/dpkg.mo", "/usr/share/man/de/man1/dpkg-deb.1.gz", "/usr/share/man/de/man1/dpkg-divert.1.gz", "/usr/share/man/de/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/de/man1/dpkg-query.1.gz", "/usr/share/man/de/man1/dpkg-realpath.1.gz", "/usr/share/man/de/man1/dpkg-split.1.gz", "/usr/share/man/de/man1/dpkg-statoverride.1.gz", "/usr/share/man/de/man1/dpkg-trigger.1.gz", "/usr/share/man/de/man1/dpkg.1.gz", "/usr/share/man/de/man1/update-alternatives.1.gz", "/usr/share/man/de/man5/dpkg.cfg.5.gz", "/usr/share/man/de/man8/start-stop-daemon.8.gz", "/usr/share/man/es/man5/dpkg.cfg.5.gz", "/usr/share/man/fr/man1/dpkg-divert.1.gz", "/usr/share/man/fr/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/fr/man1/dpkg-query.1.gz", "/usr/share/man/fr/man1/dpkg-realpath.1.gz", "/usr/share/man/fr/man1/dpkg-split.1.gz", "/usr/share/man/fr/man1/dpkg-trigger.1.gz", "/usr/share/man/fr/man1/update-alternatives.1.gz", "/usr/share/man/fr/man5/dpkg.cfg.5.gz", "/usr/share/man/fr/man8/start-stop-daemon.8.gz", "/usr/share/man/it/man5/dpkg.cfg.5.gz", "/usr/share/man/ja/man5/dpkg.cfg.5.gz", "/usr/share/man/man1/dpkg-deb.1.gz", "/usr/share/man/man1/dpkg-divert.1.gz", "/usr/share/man/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/man1/dpkg-query.1.gz", "/usr/share/man/man1/dpkg-realpath.1.gz", "/usr/share/man/man1/dpkg-split.1.gz", "/usr/share/man/man1/dpkg-statoverride.1.gz", "/usr/share/man/man1/dpkg-trigger.1.gz", "/usr/share/man/man1/dpkg.1.gz", "/usr/share/man/man1/update-alternatives.1.gz", "/usr/share/man/man5/dpkg.cfg.5.gz", "/usr/share/man/man8/start-stop-daemon.8.gz", "/usr/share/man/nl/man1/dpkg-deb.1.gz", "/usr/share/man/nl/man1/dpkg-divert.1.gz", "/usr/share/man/nl/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/nl/man1/dpkg-query.1.gz", "/usr/share/man/nl/man1/dpkg-realpath.1.gz", "/usr/share/man/nl/man1/dpkg-split.1.gz", "/usr/share/man/nl/man1/dpkg-statoverride.1.gz", "/usr/share/man/nl/man1/dpkg-trigger.1.gz", "/usr/share/man/nl/man1/dpkg.1.gz", "/usr/share/man/nl/man1/update-alternatives.1.gz", "/usr/share/man/nl/man5/dpkg.cfg.5.gz", "/usr/share/man/nl/man8/start-stop-daemon.8.gz", "/usr/share/man/pl/man5/dpkg.cfg.5.gz", "/usr/share/man/pt/man1/dpkg-deb.1.gz", "/usr/share/man/pt/man1/dpkg-divert.1.gz", "/usr/share/man/pt/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/pt/man1/dpkg-query.1.gz", "/usr/share/man/pt/man1/dpkg-realpath.1.gz", "/usr/share/man/pt/man1/dpkg-split.1.gz", "/usr/share/man/pt/man1/dpkg-statoverride.1.gz", "/usr/share/man/pt/man1/dpkg-trigger.1.gz", "/usr/share/man/pt/man1/dpkg.1.gz", "/usr/share/man/pt/man1/update-alternatives.1.gz", "/usr/share/man/pt/man5/dpkg.cfg.5.gz", "/usr/share/man/pt/man8/start-stop-daemon.8.gz", "/usr/share/man/sv/man1/dpkg-deb.1.gz", "/usr/share/man/sv/man1/dpkg-divert.1.gz", "/usr/share/man/sv/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/sv/man1/dpkg-query.1.gz", "/usr/share/man/sv/man1/dpkg-realpath.1.gz", "/usr/share/man/sv/man1/dpkg-split.1.gz", "/usr/share/man/sv/man1/dpkg-statoverride.1.gz", "/usr/share/man/sv/man1/dpkg-trigger.1.gz", "/usr/share/man/sv/man1/dpkg.1.gz", "/usr/share/man/sv/man1/update-alternatives.1.gz", "/usr/share/man/sv/man5/dpkg.cfg.5.gz", "/usr/share/man/sv/man8/start-stop-daemon.8.gz", "/usr/share/polkit-1/actions/org.dpkg.pkexec.update-alternatives.policy" ], "AnalyzedBy": "dpkg" }, { "ID": "findutils@4.10.0-3", "Name": "findutils", "Identifier": { "PURL": "pkg:deb/debian/findutils@4.10.0-3?arch=amd64\u0026distro=debian-13.3", "UID": "12e741692291b42a" }, "Version": "4.10.0", "Release": "3", "Arch": "amd64", "SrcName": "findutils", "SrcVersion": "4.10.0", "SrcRelease": "3", "Licenses": [ "GFDL-1.3-no-invariants-or-later", "GPL-3.0-or-later", "FSFAP", "GPL-2+ with Autoconf-data exception", "GPL-3+ with Autoconf-data exception", "FSFULLR", "GPL-2.0-or-later", "X11", "public-domain", "LGPL-2.1-or-later", "GPL with automake exception", "LGPL-2.0-or-later", "LGPL-3.0-or-later", "BSD-3-Clause", "GPL-3+ with Bison-2.2 exception", "LGPL-3.0-only", "ISC", "GFDL-1.3-only", "GPL-2.0-only", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Andreas Metzler \u003cametzler@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/find", "/usr/bin/xargs", "/usr/share/doc-base/findutils.findutils", "/usr/share/doc/findutils/NEWS.gz", "/usr/share/doc/findutils/README.gz", "/usr/share/doc/findutils/TODO", "/usr/share/doc/findutils/changelog.Debian.gz", "/usr/share/doc/findutils/changelog.gz", "/usr/share/doc/findutils/copyright", "/usr/share/info/find-maint.info.gz", "/usr/share/info/find.info.gz", "/usr/share/locale/be/LC_MESSAGES/findutils.mo", "/usr/share/locale/bg/LC_MESSAGES/findutils.mo", "/usr/share/locale/ca/LC_MESSAGES/findutils.mo", "/usr/share/locale/cs/LC_MESSAGES/findutils.mo", "/usr/share/locale/da/LC_MESSAGES/findutils.mo", "/usr/share/locale/de/LC_MESSAGES/findutils.mo", "/usr/share/locale/el/LC_MESSAGES/findutils.mo", "/usr/share/locale/eo/LC_MESSAGES/findutils.mo", "/usr/share/locale/es/LC_MESSAGES/findutils.mo", "/usr/share/locale/et/LC_MESSAGES/findutils.mo", "/usr/share/locale/fi/LC_MESSAGES/findutils.mo", "/usr/share/locale/fr/LC_MESSAGES/findutils.mo", "/usr/share/locale/ga/LC_MESSAGES/findutils.mo", "/usr/share/locale/gl/LC_MESSAGES/findutils.mo", "/usr/share/locale/hr/LC_MESSAGES/findutils.mo", "/usr/share/locale/hu/LC_MESSAGES/findutils.mo", "/usr/share/locale/id/LC_MESSAGES/findutils.mo", "/usr/share/locale/it/LC_MESSAGES/findutils.mo", "/usr/share/locale/ja/LC_MESSAGES/findutils.mo", "/usr/share/locale/ka/LC_MESSAGES/findutils.mo", "/usr/share/locale/ko/LC_MESSAGES/findutils.mo", "/usr/share/locale/lg/LC_MESSAGES/findutils.mo", "/usr/share/locale/lt/LC_MESSAGES/findutils.mo", "/usr/share/locale/ms/LC_MESSAGES/findutils.mo", "/usr/share/locale/nb/LC_MESSAGES/findutils.mo", "/usr/share/locale/nl/LC_MESSAGES/findutils.mo", "/usr/share/locale/pl/LC_MESSAGES/findutils.mo", "/usr/share/locale/pt/LC_MESSAGES/findutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/findutils.mo", "/usr/share/locale/ro/LC_MESSAGES/findutils.mo", "/usr/share/locale/ru/LC_MESSAGES/findutils.mo", "/usr/share/locale/sk/LC_MESSAGES/findutils.mo", "/usr/share/locale/sl/LC_MESSAGES/findutils.mo", "/usr/share/locale/sr/LC_MESSAGES/findutils.mo", "/usr/share/locale/sv/LC_MESSAGES/findutils.mo", "/usr/share/locale/tr/LC_MESSAGES/findutils.mo", "/usr/share/locale/uk/LC_MESSAGES/findutils.mo", "/usr/share/locale/vi/LC_MESSAGES/findutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/findutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/findutils.mo", "/usr/share/man/man1/find.1.gz", "/usr/share/man/man1/xargs.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc@4:14.2.0-1", "Name": "gcc", "Identifier": { "PURL": "pkg:deb/debian/gcc@14.2.0-1?arch=amd64\u0026distro=debian-13.3\u0026epoch=4", "UID": "276908462bcefa78" }, "Version": "14.2.0", "Release": "1", "Epoch": 4, "Arch": "amd64", "SrcName": "gcc-defaults", "SrcVersion": "1.220", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-x86-64-linux-gnu@4:14.2.0-1", "cpp@4:14.2.0-1", "gcc-14@14.2.0-19", "gcc-x86-64-linux-gnu@4:14.2.0-1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/bin/c89-gcc", "/usr/bin/c99-gcc", "/usr/share/lintian/overrides/gcc", "/usr/share/man/man1/c89-gcc.1.gz", "/usr/share/man/man1/c99-gcc.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-14@14.2.0-19", "Name": "gcc-14", "Identifier": { "PURL": "pkg:deb/debian/gcc-14@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "eb4e2f2b4eca9991" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils@2.44-3", "cpp-14@14.2.0-19", "gcc-14-base@14.2.0-19", "gcc-14-x86-64-linux-gnu@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/share/doc/gcc-14-base/NEWS.gz", "/usr/share/doc/gcc-14-base/NEWS.html", "/usr/share/doc/gcc-14-base/README.Bugs", "/usr/share/doc/gcc-14-base/README.ssp", "/usr/share/doc/gcc-14-base/changelog.gz", "/usr/share/doc/gcc-14-base/gcc/changelog.gz", "/usr/share/doc/gcc-14-base/gomp/changelog.gz", "/usr/share/doc/gcc-14-base/itm/changelog.gz", "/usr/share/doc/gcc-14-base/quadmath/changelog.gz", "/usr/share/doc/gcc-14-base/sanitizer/changelog.gz", "/usr/share/lintian/overrides/gcc-14" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-14-base@14.2.0-19", "Name": "gcc-14-base", "Identifier": { "PURL": "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "371c061d08215a1b" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Licenses": [ "GPL-2.0-or-later", "GPL-3.0-only", "GFDL-1.2-only", "Artistic-2.0", "LGPL-2.0-or-later" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/share/doc/gcc-14-base/README.Debian.amd64.gz", "/usr/share/doc/gcc-14-base/TODO.Debian", "/usr/share/doc/gcc-14-base/changelog.Debian.gz", "/usr/share/doc/gcc-14-base/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-14-x86-64-linux-gnu@14.2.0-19", "Name": "gcc-14-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/gcc-14-x86-64-linux-gnu@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "309e64daa0dc4e99" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils-x86-64-linux-gnu@2.44-3", "cpp-14-x86-64-linux-gnu@14.2.0-19", "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libcc1-0@14.2.0-19", "libgcc-14-dev@14.2.0-19", "libgcc-s1@14.2.0-19", "libgmp10@2:6.3.0+dfsg-3", "libisl23@0.27-1", "libmpc3@1.3.1-1+b3", "libmpfr6@4.2.2-1", "libstdc++6@14.2.0-19", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/bin/x86_64-linux-gnu-gcc-14", "/usr/bin/x86_64-linux-gnu-gcc-ar-14", "/usr/bin/x86_64-linux-gnu-gcc-nm-14", "/usr/bin/x86_64-linux-gnu-gcc-ranlib-14", "/usr/bin/x86_64-linux-gnu-gcov-14", "/usr/bin/x86_64-linux-gnu-gcov-dump-14", "/usr/bin/x86_64-linux-gnu-gcov-tool-14", "/usr/bin/x86_64-linux-gnu-lto-dump-14", "/usr/lib/gcc/x86_64-linux-gnu/14/libgomp.spec", "/usr/lib/gcc/x86_64-linux-gnu/14/libhwasan_preinit.o", "/usr/lib/gcc/x86_64-linux-gnu/14/libitm.spec", "/usr/lib/gcc/x86_64-linux-gnu/14/libsanitizer.spec", "/usr/lib/gcc/x86_64-linux-gnu/14/plugin/libcc1plugin.so.0.0.0", "/usr/lib/gcc/x86_64-linux-gnu/14/plugin/libcp1plugin.so.0.0.0", "/usr/libexec/gcc/x86_64-linux-gnu/14/collect2", "/usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so", "/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper", "/usr/libexec/gcc/x86_64-linux-gnu/14/lto1", "/usr/share/lintian/overrides/gcc-14-x86-64-linux-gnu", "/usr/share/man/man1/x86_64-linux-gnu-gcc-ar-14.1.gz", "/usr/share/man/man1/x86_64-linux-gnu-gcc-nm-14.1.gz", "/usr/share/man/man1/x86_64-linux-gnu-gcc-ranlib-14.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-x86-64-linux-gnu@4:14.2.0-1", "Name": "gcc-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/gcc-x86-64-linux-gnu@14.2.0-1?arch=amd64\u0026distro=debian-13.3\u0026epoch=4", "UID": "3c841a7524931080" }, "Version": "14.2.0", "Release": "1", "Epoch": 4, "Arch": "amd64", "SrcName": "gcc-defaults", "SrcVersion": "1.220", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-x86-64-linux-gnu@4:14.2.0-1", "gcc-14-x86-64-linux-gnu@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/share/lintian/overrides/gcc-x86-64-linux-gnu" ], "AnalyzedBy": "dpkg" }, { "ID": "grep@3.11-4", "Name": "grep", "Identifier": { "PURL": "pkg:deb/debian/grep@3.11-4?arch=amd64\u0026distro=debian-13.3", "UID": "6ce8b4eed9c0d137" }, "Version": "3.11", "Release": "4", "Arch": "amd64", "SrcName": "grep", "SrcVersion": "3.11", "SrcRelease": "4", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/egrep", "/usr/bin/fgrep", "/usr/bin/grep", "/usr/bin/rgrep", "/usr/share/doc/grep/AUTHORS", "/usr/share/doc/grep/NEWS.Debian.gz", "/usr/share/doc/grep/NEWS.gz", "/usr/share/doc/grep/README", "/usr/share/doc/grep/THANKS.gz", "/usr/share/doc/grep/TODO.gz", "/usr/share/doc/grep/changelog.Debian.gz", "/usr/share/doc/grep/changelog.gz", "/usr/share/doc/grep/copyright", "/usr/share/info/grep.info.gz", "/usr/share/locale/af/LC_MESSAGES/grep.mo", "/usr/share/locale/be/LC_MESSAGES/grep.mo", "/usr/share/locale/bg/LC_MESSAGES/grep.mo", "/usr/share/locale/ca/LC_MESSAGES/grep.mo", "/usr/share/locale/cs/LC_MESSAGES/grep.mo", "/usr/share/locale/da/LC_MESSAGES/grep.mo", "/usr/share/locale/de/LC_MESSAGES/grep.mo", "/usr/share/locale/el/LC_MESSAGES/grep.mo", "/usr/share/locale/eo/LC_MESSAGES/grep.mo", "/usr/share/locale/es/LC_MESSAGES/grep.mo", "/usr/share/locale/et/LC_MESSAGES/grep.mo", "/usr/share/locale/eu/LC_MESSAGES/grep.mo", "/usr/share/locale/fi/LC_MESSAGES/grep.mo", "/usr/share/locale/fr/LC_MESSAGES/grep.mo", "/usr/share/locale/ga/LC_MESSAGES/grep.mo", "/usr/share/locale/gl/LC_MESSAGES/grep.mo", "/usr/share/locale/he/LC_MESSAGES/grep.mo", "/usr/share/locale/hr/LC_MESSAGES/grep.mo", "/usr/share/locale/hu/LC_MESSAGES/grep.mo", "/usr/share/locale/id/LC_MESSAGES/grep.mo", "/usr/share/locale/it/LC_MESSAGES/grep.mo", "/usr/share/locale/ja/LC_MESSAGES/grep.mo", "/usr/share/locale/ka/LC_MESSAGES/grep.mo", "/usr/share/locale/ko/LC_MESSAGES/grep.mo", "/usr/share/locale/ky/LC_MESSAGES/grep.mo", "/usr/share/locale/lt/LC_MESSAGES/grep.mo", "/usr/share/locale/nb/LC_MESSAGES/grep.mo", "/usr/share/locale/nl/LC_MESSAGES/grep.mo", "/usr/share/locale/pa/LC_MESSAGES/grep.mo", "/usr/share/locale/pl/LC_MESSAGES/grep.mo", "/usr/share/locale/pt/LC_MESSAGES/grep.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/grep.mo", "/usr/share/locale/ro/LC_MESSAGES/grep.mo", "/usr/share/locale/ru/LC_MESSAGES/grep.mo", "/usr/share/locale/sk/LC_MESSAGES/grep.mo", "/usr/share/locale/sl/LC_MESSAGES/grep.mo", "/usr/share/locale/sr/LC_MESSAGES/grep.mo", "/usr/share/locale/sv/LC_MESSAGES/grep.mo", "/usr/share/locale/ta/LC_MESSAGES/grep.mo", "/usr/share/locale/th/LC_MESSAGES/grep.mo", "/usr/share/locale/tr/LC_MESSAGES/grep.mo", "/usr/share/locale/uk/LC_MESSAGES/grep.mo", "/usr/share/locale/vi/LC_MESSAGES/grep.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/grep.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo", "/usr/share/man/man1/grep.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gzip@1.13-1", "Name": "gzip", "Identifier": { "PURL": "pkg:deb/debian/gzip@1.13-1?arch=amd64\u0026distro=debian-13.3", "UID": "954545ce99bc687e" }, "Version": "1.13", "Release": "1", "Arch": "amd64", "SrcName": "gzip", "SrcVersion": "1.13", "SrcRelease": "1", "Licenses": [ "GPL-3.0-or-later", "GFDL-1.3+-no-invariant", "FSF-manpages", "GPL-3.0-only", "GFDL-3" ], "Maintainer": "Milan Kupcevic \u003cmilan@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/gunzip", "/usr/bin/gzexe", "/usr/bin/gzip", "/usr/bin/zcat", "/usr/bin/zcmp", "/usr/bin/zdiff", "/usr/bin/zegrep", "/usr/bin/zfgrep", "/usr/bin/zforce", "/usr/bin/zgrep", "/usr/bin/zless", "/usr/bin/zmore", "/usr/bin/znew", "/usr/share/doc/gzip/NEWS.gz", "/usr/share/doc/gzip/README.gz", "/usr/share/doc/gzip/TODO", "/usr/share/doc/gzip/changelog.Debian.gz", "/usr/share/doc/gzip/changelog.gz", "/usr/share/doc/gzip/copyright", "/usr/share/info/gzip.info.gz", "/usr/share/man/man1/gzexe.1.gz", "/usr/share/man/man1/gzip.1.gz", "/usr/share/man/man1/zdiff.1.gz", "/usr/share/man/man1/zforce.1.gz", "/usr/share/man/man1/zgrep.1.gz", "/usr/share/man/man1/zless.1.gz", "/usr/share/man/man1/zmore.1.gz", "/usr/share/man/man1/znew.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "hostname@3.25", "Name": "hostname", "Identifier": { "PURL": "pkg:deb/debian/hostname@3.25?arch=amd64\u0026distro=debian-13.3", "UID": "641772722328aedf" }, "Version": "3.25", "Arch": "amd64", "SrcName": "hostname", "SrcVersion": "3.25", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Michael Meskes \u003cmeskes@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/hostname", "/usr/share/doc/hostname/changelog.gz", "/usr/share/doc/hostname/copyright", "/usr/share/man/man1/hostname.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "init-system-helpers@1.69~deb13u1", "Name": "init-system-helpers", "Identifier": { "PURL": "pkg:deb/debian/init-system-helpers@1.69~deb13u1?arch=all\u0026distro=debian-13.3", "UID": "cb52819ec2f1a236" }, "Version": "1.69~deb13u1", "Arch": "all", "SrcName": "init-system-helpers", "SrcVersion": "1.69~deb13u1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/deb-systemd-helper", "/usr/bin/deb-systemd-invoke", "/usr/sbin/invoke-rc.d", "/usr/sbin/service", "/usr/sbin/update-rc.d", "/usr/share/bug/init-system-helpers/control", "/usr/share/doc/init-system-helpers/README.invoke-rc.d.gz", "/usr/share/doc/init-system-helpers/README.policy-rc.d.gz", "/usr/share/doc/init-system-helpers/changelog.gz", "/usr/share/doc/init-system-helpers/copyright", "/usr/share/lintian/overrides/init-system-helpers", "/usr/share/man/man1/deb-systemd-helper.1p.gz", "/usr/share/man/man1/deb-systemd-invoke.1p.gz", "/usr/share/man/man8/invoke-rc.d.8.gz", "/usr/share/man/man8/service.8.gz", "/usr/share/man/man8/update-rc.d.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libacl1@2.3.2-2+b1", "Name": "libacl1", "Identifier": { "PURL": "pkg:deb/debian/libacl1@2.3.2-2%2Bb1?arch=amd64\u0026distro=debian-13.3", "UID": "c9360fbd2d576700" }, "Version": "2.3.2", "Release": "2+b1", "Arch": "amd64", "SrcName": "acl", "SrcVersion": "2.3.2", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.1-only" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libacl.so.1.1.2302", "/usr/share/doc/libacl1/changelog.Debian.amd64.gz", "/usr/share/doc/libacl1/changelog.Debian.gz", "/usr/share/doc/libacl1/changelog.gz", "/usr/share/doc/libacl1/copyright", "/usr/share/lintian/overrides/libacl1" ], "AnalyzedBy": "dpkg" }, { "ID": "libapt-pkg7.0@3.0.3", "Name": "libapt-pkg7.0", "Identifier": { "PURL": "pkg:deb/debian/libapt-pkg7.0@3.0.3?arch=amd64\u0026distro=debian-13.3", "UID": "6f787ee147915791" }, "Version": "3.0.3", "Arch": "amd64", "SrcName": "apt", "SrcVersion": "3.0.3", "Licenses": [ "GPL-2.0-or-later", "curl", "BSD-3-Clause", "MIT", "GPL-2.0-only" ], "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19", "liblz4-1@1.10.0-4", "liblzma5@5.8.1-1", "libssl3t64@3.5.4-1~deb13u2", "libstdc++6@14.2.0-19", "libsystemd0@257.9-1~deb13u1", "libudev1@257.9-1~deb13u1", "libxxhash0@0.8.3-2", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libapt-pkg.so.7.0.0", "/usr/share/doc/libapt-pkg7.0/NEWS.Debian.gz", "/usr/share/doc/libapt-pkg7.0/changelog.gz", "/usr/share/doc/libapt-pkg7.0/copyright", "/usr/share/locale/ar/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ast/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/bg/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/bs/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ca/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/cs/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/cy/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/da/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/de/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/dz/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/el/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/es/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/eu/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/fi/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/fr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/gl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/hu/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/it/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ja/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/km/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ko/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ku/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/lt/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/mr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nb/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ne/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nn/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pt/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ro/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ru/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sk/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sv/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/th/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/tl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/tr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/uk/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/vi/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/libapt-pkg7.0.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libasan8@14.2.0-19", "Name": "libasan8", "Identifier": { "PURL": "pkg:deb/debian/libasan8@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "52f3f932a0180ccd" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libasan.so.8.0.0", "/usr/share/lintian/overrides/libasan8" ], "AnalyzedBy": "dpkg" }, { "ID": "libatomic1@14.2.0-19", "Name": "libatomic1", "Identifier": { "PURL": "pkg:deb/debian/libatomic1@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "1988e2531409d1d3" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libatomic.so.1.2.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libattr1@1:2.5.2-3", "Name": "libattr1", "Identifier": { "PURL": "pkg:deb/debian/libattr1@2.5.2-3?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "ab76a642d162ff13" }, "Version": "2.5.2", "Release": "3", "Epoch": 1, "Arch": "amd64", "SrcName": "attr", "SrcVersion": "2.5.2", "SrcRelease": "3", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.1-only" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libattr.so.1.1.2502", "/usr/share/doc/libattr1/changelog.Debian.gz", "/usr/share/doc/libattr1/changelog.gz", "/usr/share/doc/libattr1/copyright", "/usr/share/lintian/overrides/libattr1" ], "AnalyzedBy": "dpkg" }, { "ID": "libaudit-common@1:4.0.2-2", "Name": "libaudit-common", "Identifier": { "PURL": "pkg:deb/debian/libaudit-common@4.0.2-2?arch=all\u0026distro=debian-13.3\u0026epoch=1", "UID": "d20cd9a11d8e018d" }, "Version": "4.0.2", "Release": "2", "Epoch": 1, "Arch": "all", "SrcName": "audit", "SrcVersion": "4.0.2", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only", "GPL-1.0-only" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/share/doc/libaudit-common/changelog.Debian.gz", "/usr/share/doc/libaudit-common/changelog.gz", "/usr/share/doc/libaudit-common/copyright", "/usr/share/man/man5/libaudit.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libaudit1@1:4.0.2-2+b2", "Name": "libaudit1", "Identifier": { "PURL": "pkg:deb/debian/libaudit1@4.0.2-2%2Bb2?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "3a7e35326c302ed0" }, "Version": "4.0.2", "Release": "2+b2", "Epoch": 1, "Arch": "amd64", "SrcName": "audit", "SrcVersion": "4.0.2", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only", "GPL-1.0-only" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit-common@1:4.0.2-2", "libc6@2.41-12+deb13u1", "libcap-ng0@0.8.5-4+b1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libaudit.so.1.0.0", "/usr/share/doc/libaudit1/changelog.Debian.amd64.gz", "/usr/share/doc/libaudit1/changelog.Debian.gz", "/usr/share/doc/libaudit1/changelog.gz", "/usr/share/doc/libaudit1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libbinutils@2.44-3", "Name": "libbinutils", "Identifier": { "PURL": "pkg:deb/debian/libbinutils@2.44-3?arch=amd64\u0026distro=debian-13.3", "UID": "2628a990894ff409" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils-common@2.44-3", "libc6@2.41-12+deb13u1", "libsframe1@2.44-3", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbfd-2.44-system.so", "/usr/lib/x86_64-linux-gnu/libopcodes-2.44-system.so", "/usr/share/lintian/overrides/libbinutils" ], "AnalyzedBy": "dpkg" }, { "ID": "libblkid1@2.41-5", "Name": "libblkid1", "Identifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libblkid.so.1.1.0", "/usr/share/doc/libblkid1/NEWS.Debian.gz", "/usr/share/doc/libblkid1/changelog.Debian.gz", "/usr/share/doc/libblkid1/changelog.gz", "/usr/share/doc/libblkid1/copyright", "/usr/share/lintian/overrides/libblkid1" ], "AnalyzedBy": "dpkg" }, { "ID": "libbsd0@0.12.2-2", "Name": "libbsd0", "Identifier": { "PURL": "pkg:deb/debian/libbsd0@0.12.2-2?arch=amd64\u0026distro=debian-13.3", "UID": "e76377226585021f" }, "Version": "0.12.2", "Release": "2", "Arch": "amd64", "SrcName": "libbsd", "SrcVersion": "0.12.2", "SrcRelease": "2", "Licenses": [ "BSD-3-Clause", "BSD-3-clause-Regents", "BSD-2-Clause-NetBSD", "BSD-3-clause-author", "BSD-3-clause-John-Birrell", "BSD-5-clause-Peter-Wemm", "BSD-2-Clause", "BSD-2-clause-verbatim", "BSD-2-clause-author", "ISC", "ISC-Original", "MIT", "public-domain", "Beerware" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libmd0@1.1.0-2+b1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbsd.so.0.12.2", "/usr/share/doc/libbsd0/changelog.Debian.gz", "/usr/share/doc/libbsd0/changelog.gz", "/usr/share/doc/libbsd0/copyright", "/usr/share/lintian/overrides/libbsd0" ], "AnalyzedBy": "dpkg" }, { "ID": "libbz2-1.0@1.0.8-6", "Name": "libbz2-1.0", "Identifier": { "PURL": "pkg:deb/debian/libbz2-1.0@1.0.8-6?arch=amd64\u0026distro=debian-13.3", "UID": "a488146dcc4389f9" }, "Version": "1.0.8", "Release": "6", "Arch": "amd64", "SrcName": "bzip2", "SrcVersion": "1.0.8", "SrcRelease": "6", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4", "/usr/share/doc/libbz2-1.0/changelog.Debian.gz", "/usr/share/doc/libbz2-1.0/changelog.gz", "/usr/share/doc/libbz2-1.0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libc-bin@2.41-12+deb13u1", "Name": "libc-bin", "Identifier": { "PURL": "pkg:deb/debian/libc-bin@2.41-12%2Bdeb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "11d3a07996fba7b" }, "Version": "2.41", "Release": "12+deb13u1", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.41", "SrcRelease": "12+deb13u1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.1+-with-link-exception", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2+-with-link-exception", "GPL-2.0-only", "GPL-3.0-or-later", "FSFAP", "Carnegie", "Inner-Net", "MIT-like-Lord", "BSD-like-Spencer", "PCRE", "BSD-3-clause-Carnegie", "Unicode-DFS-2016", "BSL-1.0", "SunPro", "CORE-MATH", "BSD-3-clause-Berkeley", "BSD-3-clause-WIDE", "BSD-2-Clause", "BSD-3-clause-Oracle", "DEC", "IBM", "ISC", "Univ-Coimbra", "public-domain", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/getconf", "/usr/bin/getent", "/usr/bin/iconv", "/usr/bin/ldd", "/usr/bin/locale", "/usr/bin/localedef", "/usr/bin/pldd", "/usr/bin/tzselect", "/usr/bin/zdump", "/usr/lib/locale/C.utf8/LC_ADDRESS", "/usr/lib/locale/C.utf8/LC_COLLATE", "/usr/lib/locale/C.utf8/LC_CTYPE", "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", "/usr/lib/locale/C.utf8/LC_MEASUREMENT", "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", "/usr/lib/locale/C.utf8/LC_MONETARY", "/usr/lib/locale/C.utf8/LC_NAME", "/usr/lib/locale/C.utf8/LC_NUMERIC", "/usr/lib/locale/C.utf8/LC_PAPER", "/usr/lib/locale/C.utf8/LC_TELEPHONE", "/usr/lib/locale/C.utf8/LC_TIME", "/usr/sbin/iconvconfig", "/usr/sbin/ldconfig", "/usr/sbin/zic", "/usr/share/doc/libc-bin/changelog.Debian.gz", "/usr/share/doc/libc-bin/changelog.gz", "/usr/share/doc/libc-bin/copyright", "/usr/share/libc-bin/nsswitch.conf", "/usr/share/lintian/overrides/libc-bin", "/usr/share/man/man1/getconf.1.gz", "/usr/share/man/man1/tzselect.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libc6@2.41-12+deb13u1", "Name": "libc6", "Identifier": { "PURL": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "d36f8af6ca6f7af1" }, "Version": "2.41", "Release": "12+deb13u1", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.41", "SrcRelease": "12+deb13u1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.1+-with-link-exception", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2+-with-link-exception", "GPL-2.0-only", "GPL-3.0-or-later", "FSFAP", "Carnegie", "Inner-Net", "MIT-like-Lord", "BSD-like-Spencer", "PCRE", "BSD-3-clause-Carnegie", "Unicode-DFS-2016", "BSL-1.0", "SunPro", "CORE-MATH", "BSD-3-clause-Berkeley", "BSD-3-clause-WIDE", "BSD-2-Clause", "BSD-3-clause-Oracle", "DEC", "IBM", "ISC", "Univ-Coimbra", "public-domain", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/gconv/ANSI_X3.110.so", "/usr/lib/x86_64-linux-gnu/gconv/ARMSCII-8.so", "/usr/lib/x86_64-linux-gnu/gconv/ASMO_449.so", "/usr/lib/x86_64-linux-gnu/gconv/BIG5.so", "/usr/lib/x86_64-linux-gnu/gconv/BIG5HKSCS.so", "/usr/lib/x86_64-linux-gnu/gconv/BRF.so", "/usr/lib/x86_64-linux-gnu/gconv/CP10007.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1125.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1250.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1251.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1252.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1253.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1254.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1255.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1256.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1257.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1258.so", "/usr/lib/x86_64-linux-gnu/gconv/CP737.so", "/usr/lib/x86_64-linux-gnu/gconv/CP770.so", "/usr/lib/x86_64-linux-gnu/gconv/CP771.so", "/usr/lib/x86_64-linux-gnu/gconv/CP772.so", "/usr/lib/x86_64-linux-gnu/gconv/CP773.so", "/usr/lib/x86_64-linux-gnu/gconv/CP774.so", "/usr/lib/x86_64-linux-gnu/gconv/CP775.so", "/usr/lib/x86_64-linux-gnu/gconv/CP932.so", "/usr/lib/x86_64-linux-gnu/gconv/CSN_369103.so", "/usr/lib/x86_64-linux-gnu/gconv/CWI.so", "/usr/lib/x86_64-linux-gnu/gconv/DEC-MCS.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-CA-FR.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-S.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FR.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IS-FRISS.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IT.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-PT.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-UK.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-US.so", "/usr/lib/x86_64-linux-gnu/gconv/ECMA-CYRILLIC.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-CN.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP-MS.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-KR.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-TW.so", "/usr/lib/x86_64-linux-gnu/gconv/GB18030.so", "/usr/lib/x86_64-linux-gnu/gconv/GBBIG5.so", "/usr/lib/x86_64-linux-gnu/gconv/GBGBK.so", "/usr/lib/x86_64-linux-gnu/gconv/GBK.so", "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-ACADEMY.so", "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-PS.so", "/usr/lib/x86_64-linux-gnu/gconv/GOST_19768-74.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK-CCITT.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK7-OLD.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK7.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-GREEK8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN9.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-THAI8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-TURKISH8.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM037.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM038.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1004.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1008.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1008_420.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1025.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1026.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1046.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1047.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1097.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1112.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1122.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1123.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1124.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1129.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1130.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1132.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1133.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1137.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1140.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1141.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1142.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1143.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1144.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1145.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1146.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1147.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1148.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1149.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1153.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1154.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1155.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1156.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1157.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1158.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1160.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1161.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1162.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1163.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1164.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1166.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1167.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM12712.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1364.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1371.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1388.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1390.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1399.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM16804.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM256.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM273.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM274.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM275.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM277.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM278.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM280.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM281.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM284.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM285.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM290.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM297.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM420.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM423.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM424.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM437.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4517.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4899.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4909.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4971.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM500.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM5347.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM803.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM850.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM851.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM852.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM855.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM856.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM857.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM858.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM860.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM861.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM862.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM863.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM864.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM865.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM866.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM866NAV.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM868.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM869.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM870.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM871.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM874.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM875.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM880.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM891.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM901.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM902.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM903.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9030.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM904.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM905.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9066.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM918.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM921.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM922.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM930.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM932.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM933.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM935.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM937.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM939.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM943.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9448.so", "/usr/lib/x86_64-linux-gnu/gconv/IEC_P27-1.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS-8.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS-CYRILLIC.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS.so", "/usr/lib/x86_64-linux-gnu/gconv/ISIRI-3342.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN-EXT.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP-3.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-KR.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-197.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-209.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO646.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-1.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-10.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-11.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-13.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-14.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-15.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-16.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-2.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-3.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-4.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-5.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-6.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-7.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-8.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9E.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_10367-BOX.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_11548-1.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_2033.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427-EXT.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5428.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937-2.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937.so", "/usr/lib/x86_64-linux-gnu/gconv/JOHAB.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI-8.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-R.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-RU.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-T.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-U.so", "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK-1.so", "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-CENTRALEUROPE.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-IS.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-SAMI.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-UK.so", "/usr/lib/x86_64-linux-gnu/gconv/MACINTOSH.so", "/usr/lib/x86_64-linux-gnu/gconv/MIK.so", "/usr/lib/x86_64-linux-gnu/gconv/NATS-DANO.so", "/usr/lib/x86_64-linux-gnu/gconv/NATS-SEFI.so", "/usr/lib/x86_64-linux-gnu/gconv/PT154.so", "/usr/lib/x86_64-linux-gnu/gconv/RK1048.so", "/usr/lib/x86_64-linux-gnu/gconv/SAMI-WS2.so", "/usr/lib/x86_64-linux-gnu/gconv/SHIFT_JISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/SJIS.so", "/usr/lib/x86_64-linux-gnu/gconv/T.61.so", "/usr/lib/x86_64-linux-gnu/gconv/TCVN5712-1.so", "/usr/lib/x86_64-linux-gnu/gconv/TIS-620.so", "/usr/lib/x86_64-linux-gnu/gconv/TSCII.so", "/usr/lib/x86_64-linux-gnu/gconv/UHC.so", "/usr/lib/x86_64-linux-gnu/gconv/UNICODE.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-16.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-32.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-7.so", "/usr/lib/x86_64-linux-gnu/gconv/VISCII.so", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf", "/usr/lib/x86_64-linux-gnu/gconv/libCNS.so", "/usr/lib/x86_64-linux-gnu/gconv/libGB.so", "/usr/lib/x86_64-linux-gnu/gconv/libISOIR165.so", "/usr/lib/x86_64-linux-gnu/gconv/libJIS.so", "/usr/lib/x86_64-linux-gnu/gconv/libJISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/libKSC.so", "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", "/usr/lib/x86_64-linux-gnu/libBrokenLocale.so.1", "/usr/lib/x86_64-linux-gnu/libanl.so.1", "/usr/lib/x86_64-linux-gnu/libc.so.6", "/usr/lib/x86_64-linux-gnu/libc_malloc_debug.so.0", "/usr/lib/x86_64-linux-gnu/libdl.so.2", "/usr/lib/x86_64-linux-gnu/libm.so.6", "/usr/lib/x86_64-linux-gnu/libmemusage.so", "/usr/lib/x86_64-linux-gnu/libmvec.so.1", "/usr/lib/x86_64-linux-gnu/libnsl.so.1", "/usr/lib/x86_64-linux-gnu/libnss_compat.so.2", "/usr/lib/x86_64-linux-gnu/libnss_dns.so.2", "/usr/lib/x86_64-linux-gnu/libnss_files.so.2", "/usr/lib/x86_64-linux-gnu/libnss_hesiod.so.2", "/usr/lib/x86_64-linux-gnu/libpcprofile.so", "/usr/lib/x86_64-linux-gnu/libpthread.so.0", "/usr/lib/x86_64-linux-gnu/libresolv.so.2", "/usr/lib/x86_64-linux-gnu/librt.so.1", "/usr/lib/x86_64-linux-gnu/libthread_db.so.1", "/usr/lib/x86_64-linux-gnu/libutil.so.1", "/usr/share/doc/libc6/NEWS.Debian.gz", "/usr/share/doc/libc6/NEWS.gz", "/usr/share/doc/libc6/README.Debian.gz", "/usr/share/doc/libc6/README.hesiod.gz", "/usr/share/doc/libc6/changelog.Debian.gz", "/usr/share/doc/libc6/changelog.gz", "/usr/share/doc/libc6/copyright", "/usr/share/lintian/overrides/libc6" ], "AnalyzedBy": "dpkg" }, { "ID": "libcap-ng0@0.8.5-4+b1", "Name": "libcap-ng0", "Identifier": { "PURL": "pkg:deb/debian/libcap-ng0@0.8.5-4%2Bb1?arch=amd64\u0026distro=debian-13.3", "UID": "e36f25b23c3c1077" }, "Version": "0.8.5", "Release": "4+b1", "Arch": "amd64", "SrcName": "libcap-ng", "SrcVersion": "0.8.5", "SrcRelease": "4", "Licenses": [ "LGPL-2.1-or-later", "GPL-2.0-or-later", "GPL-3.0-only", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Håvard F. Aasen \u003chavard.f.aasen@pfft.no\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcap-ng.so.0.0.0", "/usr/lib/x86_64-linux-gnu/libdrop_ambient.so.0.0.0", "/usr/share/doc/libcap-ng0/changelog.Debian.amd64.gz", "/usr/share/doc/libcap-ng0/changelog.Debian.gz", "/usr/share/doc/libcap-ng0/changelog.gz", "/usr/share/doc/libcap-ng0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcap2@1:2.75-10+b3", "Name": "libcap2", "Identifier": { "PURL": "pkg:deb/debian/libcap2@2.75-10%2Bb3?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "9ad8c6c25f12840a" }, "Version": "2.75", "Release": "10+b3", "Epoch": 1, "Arch": "amd64", "SrcName": "libcap2", "SrcVersion": "2.75", "SrcRelease": "10", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "GPL-2.0-or-later" ], "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcap.so.2.75", "/usr/lib/x86_64-linux-gnu/libpsx.so.2.75", "/usr/share/doc/libcap2/changelog.Debian.amd64.gz", "/usr/share/doc/libcap2/changelog.Debian.gz", "/usr/share/doc/libcap2/changelog.gz", "/usr/share/doc/libcap2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcc1-0@14.2.0-19", "Name": "libcc1-0", "Identifier": { "PURL": "pkg:deb/debian/libcc1-0@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "2cf164a93b70806" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcc1.so.0.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libcrypt1@1:4.4.38-1", "Name": "libcrypt1", "Identifier": { "PURL": "pkg:deb/debian/libcrypt1@4.4.38-1?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "87ecfec0af1a0789" }, "Version": "4.4.38", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "libxcrypt", "SrcVersion": "4.4.38", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcrypt.so.1.1.0", "/usr/share/doc/libcrypt1/changelog.Debian.gz", "/usr/share/doc/libcrypt1/changelog.gz", "/usr/share/doc/libcrypt1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libctf-nobfd0@2.44-3", "Name": "libctf-nobfd0", "Identifier": { "PURL": "pkg:deb/debian/libctf-nobfd0@2.44-3?arch=amd64\u0026distro=debian-13.3", "UID": "1004a8ac7c88ab08" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libctf-nobfd.so.0.0.0", "/usr/share/doc/libctf-nobfd0/changelog.Debian.gz", "/usr/share/doc/libctf-nobfd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libctf0@2.44-3", "Name": "libctf0", "Identifier": { "PURL": "pkg:deb/debian/libctf0@2.44-3?arch=amd64\u0026distro=debian-13.3", "UID": "f058b132782c50b1" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbinutils@2.44-3", "libc6@2.41-12+deb13u1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libdb5.3t64@5.3.28+dfsg2-9", "Name": "libdb5.3t64", "Identifier": { "PURL": "pkg:deb/debian/libdb5.3t64@5.3.28%2Bdfsg2-9?arch=amd64\u0026distro=debian-13.3", "UID": "3279ae92b16d7308" }, "Version": "5.3.28+dfsg2", "Release": "9", "Arch": "amd64", "SrcName": "db5.3", "SrcVersion": "5.3.28+dfsg2", "SrcRelease": "9", "Licenses": [ "Sleepycat", "BSD-3-Clause", "MS-PL", "GPL-2.0-or-later", "Artistic-2.0", "X11", "MIT-old", "TCL-like", "BSD-3-clause-fjord", "GPL-3.0-only", "Zlib" ], "Maintainer": "Debian QA Group \u003cpackages@qa.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdb-5.3.so", "/usr/share/doc/libdb5.3t64/build_signature_amd64.txt", "/usr/share/doc/libdb5.3t64/changelog.Debian.gz", "/usr/share/doc/libdb5.3t64/copyright", "/usr/share/lintian/overrides/libdb5.3t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libdebconfclient0@0.280", "Name": "libdebconfclient0", "Identifier": { "PURL": "pkg:deb/debian/libdebconfclient0@0.280?arch=amd64\u0026distro=debian-13.3", "UID": "a0600a26b2d7aaf7" }, "Version": "0.280", "Arch": "amd64", "SrcName": "cdebconf", "SrcVersion": "0.280", "Licenses": [ "BSD-2-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Install System Team \u003cdebian-boot@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdebconfclient.so.0.0.0", "/usr/share/doc/libdebconfclient0/changelog.gz", "/usr/share/doc/libdebconfclient0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libffi8@3.4.8-2", "Name": "libffi8", "Identifier": { "PURL": "pkg:deb/debian/libffi8@3.4.8-2?arch=amd64\u0026distro=debian-13.3", "UID": "3b05461b62327942" }, "Version": "3.4.8", "Release": "2", "Arch": "amd64", "SrcName": "libffi", "SrcVersion": "3.4.8", "SrcRelease": "2", "Licenses": [ "MIT", "X11", "GPL-2.0-or-later", "GPL-3.0-or-later", "MPL-1.1", "LGPL-2.1-or-later", "public-domain" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libffi.so.8.1.4", "/usr/share/doc/libffi8/changelog.Debian.gz", "/usr/share/doc/libffi8/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgcc-14-dev@14.2.0-19", "Name": "libgcc-14-dev", "Identifier": { "PURL": "pkg:deb/debian/libgcc-14-dev@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "a1a5b7b8d531d5c2" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libasan8@14.2.0-19", "libatomic1@14.2.0-19", "libgcc-s1@14.2.0-19", "libgomp1@14.2.0-19", "libhwasan0@14.2.0-19", "libitm1@14.2.0-19", "liblsan0@14.2.0-19", "libquadmath0@14.2.0-19", "libtsan2@14.2.0-19", "libubsan1@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/gcc/x86_64-linux-gnu/14/crtbegin.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtbeginT.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtend.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtfastmath.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadbegin.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadend.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadtable.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadtableS.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec32.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec64.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec80.o", "/usr/lib/gcc/x86_64-linux-gnu/14/include/acc_prof.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/adxintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/ammintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxbf16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxcomplexintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxfp16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxint8intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxtileintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx2intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx5124fmapsintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx5124vnniwintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bf16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bf16vlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bitalgintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bitalgvlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bwintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512cdintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512dqintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512erintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fp16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fp16vlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512ifmaintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512ifmavlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512pfintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmi2intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmi2vlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmiintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmivlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vlbwintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vldqintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vnniintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vnnivlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vp2intersectintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vp2intersectvlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vpopcntdqintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vpopcntdqvlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxifmaintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxneconvertintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniint16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniint8intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/backtrace-supported.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/backtrace.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmi2intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmiintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cet.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cetintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cldemoteintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/clflushoptintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/clwbintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/clzerointrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cmpccxaddintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cpuid.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cross-stdarg.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/emmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/enqcmdintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/f16cintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/float.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/fma4intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/fmaintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/fxsrintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/gcov.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/gfniintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/hresetintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/ia32intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/immintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/iso646.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/keylockerintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/limits.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/lwpintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/lzcntintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mm3dnow.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mm_malloc.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/movdirintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mwaitintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mwaitxintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/nmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/omp.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/openacc.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/pconfigintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/pkuintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/pmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/popcntintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/prfchiintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/prfchwintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/quadmath.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/quadmath_weak.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/raointintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/rdseedintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/rtmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/asan_interface.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/common_interface_defs.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/hwasan_interface.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/lsan_interface.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/tsan_interface.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/serializeintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sgxintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sha512intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/shaintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sm3intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sm4intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/smmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdalign.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdarg.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdatomic.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdbool.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdckdint.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stddef.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdfix.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdint-gcc.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdint.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdnoreturn.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/syslimits.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/tbmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/tmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/tsxldtrkintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/uintrintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/unwind.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/usermsrintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/vaesintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/varargs.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/vpclmulqdqintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/waitpkgintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/wbnoinvdintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/wmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/x86gprintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/x86intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xopintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsavecintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsaveintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsaveoptintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsavesintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xtestintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/libasan.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libasan_preinit.o", "/usr/lib/gcc/x86_64-linux-gnu/14/libatomic.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libbacktrace.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc_eh.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc_s.so", "/usr/lib/gcc/x86_64-linux-gnu/14/libgcov.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libgomp.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libhwasan.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libitm.a", "/usr/lib/gcc/x86_64-linux-gnu/14/liblsan.a", "/usr/lib/gcc/x86_64-linux-gnu/14/liblsan_preinit.o", "/usr/lib/gcc/x86_64-linux-gnu/14/libquadmath.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libssp_nonshared.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libtsan.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libtsan_preinit.o", "/usr/lib/gcc/x86_64-linux-gnu/14/libubsan.a" ], "AnalyzedBy": "dpkg" }, { "ID": "libgcc-s1@14.2.0-19", "Name": "libgcc-s1", "Identifier": { "PURL": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "1b654b3c4cd948ea" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgcc_s.so.1", "/usr/share/lintian/overrides/libgcc-s1" ], "AnalyzedBy": "dpkg" }, { "ID": "libgdbm6t64@1.24-2", "Name": "libgdbm6t64", "Identifier": { "PURL": "pkg:deb/debian/libgdbm6t64@1.24-2?arch=amd64\u0026distro=debian-13.3", "UID": "bba42f340e96a304" }, "Version": "1.24", "Release": "2", "Arch": "amd64", "SrcName": "gdbm", "SrcVersion": "1.24", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "GPL-2.0-or-later", "GFDL-1.3-no-invariants-or-later", "GPL-3.0-only", "GPL-2.0-only" ], "Maintainer": "Nicolas Mora \u003cbabelouest@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgdbm.so.6.0.0", "/usr/share/doc/libgdbm6t64/changelog.Debian.gz", "/usr/share/doc/libgdbm6t64/changelog.gz", "/usr/share/doc/libgdbm6t64/copyright", "/usr/share/lintian/overrides/libgdbm6t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libgmp10@2:6.3.0+dfsg-3", "Name": "libgmp10", "Identifier": { "PURL": "pkg:deb/debian/libgmp10@6.3.0%2Bdfsg-3?arch=amd64\u0026distro=debian-13.3\u0026epoch=2", "UID": "22a0c66a59a94ccb" }, "Version": "6.3.0+dfsg", "Release": "3", "Epoch": 2, "Arch": "amd64", "SrcName": "gmp", "SrcVersion": "6.3.0+dfsg", "SrcRelease": "3", "SrcEpoch": 2, "Licenses": [ "GPL-2.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-or-later", "GPL-3+ with Bison exception", "GPL-2.0-only", "GPL-3.0-only", "LGPL-3.0-only" ], "Maintainer": "Debian Science Maintainers \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgmp.so.10.5.0", "/usr/share/doc/libgmp10/README.Debian", "/usr/share/doc/libgmp10/changelog.Debian.gz", "/usr/share/doc/libgmp10/changelog.gz", "/usr/share/doc/libgmp10/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgomp1@14.2.0-19", "Name": "libgomp1", "Identifier": { "PURL": "pkg:deb/debian/libgomp1@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "9b164f85b3002980" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libgprofng0@2.44-3", "Name": "libgprofng0", "Identifier": { "PURL": "pkg:deb/debian/libgprofng0@2.44-3?arch=amd64\u0026distro=debian-13.3", "UID": "5465d0f397b6bffd" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbinutils@2.44-3", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/gprofng/libgp-collector.so", "/usr/lib/x86_64-linux-gnu/gprofng/libgp-collectorAPI.so", "/usr/lib/x86_64-linux-gnu/gprofng/libgp-heap.so", "/usr/lib/x86_64-linux-gnu/gprofng/libgp-iotrace.so", "/usr/lib/x86_64-linux-gnu/gprofng/libgp-sync.so", "/usr/lib/x86_64-linux-gnu/libgprofng.so.0.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libhogweed6t64@3.10.1-1", "Name": "libhogweed6t64", "Identifier": { "PURL": "pkg:deb/debian/libhogweed6t64@3.10.1-1?arch=amd64\u0026distro=debian-13.3", "UID": "a4e4397af8c0e3dc" }, "Version": "3.10.1", "Release": "1", "Arch": "amd64", "SrcName": "nettle", "SrcVersion": "3.10.1", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-or-later", "GPL-2.0-or-later", "LGPL-2.0-or-later", "LGPL-2.0-only", "MIT", "GPL-3.0-with-autoconf-exception+", "public-domain", "GPL-2.0-only", "GAP" ], "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libgmp10@2:6.3.0+dfsg-3", "libnettle8t64@3.10.1-1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhogweed.so.6.10", "/usr/share/doc/libhogweed6t64/changelog.Debian.gz", "/usr/share/doc/libhogweed6t64/changelog.gz", "/usr/share/doc/libhogweed6t64/copyright", "/usr/share/lintian/overrides/libhogweed6t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libhwasan0@14.2.0-19", "Name": "libhwasan0", "Identifier": { "PURL": "pkg:deb/debian/libhwasan0@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "7c7ebc1493ed3e61" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhwasan.so.0.0.0", "/usr/share/lintian/overrides/libhwasan0" ], "AnalyzedBy": "dpkg" }, { "ID": "libisl23@0.27-1", "Name": "libisl23", "Identifier": { "PURL": "pkg:deb/debian/libisl23@0.27-1?arch=amd64\u0026distro=debian-13.3", "UID": "9bd65d5d193e6f39" }, "Version": "0.27", "Release": "1", "Arch": "amd64", "SrcName": "isl", "SrcVersion": "0.27", "SrcRelease": "1", "Licenses": [ "MIT", "BSD-2-Clause", "LGPL-2.1-or-later", "LGPL-2.0-only" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libgmp10@2:6.3.0+dfsg-3" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libisl.so.23.4.0", "/usr/share/doc/libisl23/changelog.Debian.gz", "/usr/share/doc/libisl23/changelog.gz", "/usr/share/doc/libisl23/copyright", "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libisl.so.23.4.0-gdb.py" ], "AnalyzedBy": "dpkg" }, { "ID": "libitm1@14.2.0-19", "Name": "libitm1", "Identifier": { "PURL": "pkg:deb/debian/libitm1@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "c3243e6a4ea21573" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libitm.so.1.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libjansson4@2.14-2+b3", "Name": "libjansson4", "Identifier": { "PURL": "pkg:deb/debian/libjansson4@2.14-2%2Bb3?arch=amd64\u0026distro=debian-13.3", "UID": "ae465f55277084f4" }, "Version": "2.14", "Release": "2+b3", "Arch": "amd64", "SrcName": "jansson", "SrcVersion": "2.14", "SrcRelease": "2", "Licenses": [ "MIT" ], "Maintainer": "Alessandro Ghedini \u003cghedo@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libjansson.so.4.14.0", "/usr/share/doc/libjansson4/README.rst", "/usr/share/doc/libjansson4/changelog.Debian.amd64.gz", "/usr/share/doc/libjansson4/changelog.Debian.gz", "/usr/share/doc/libjansson4/changelog.gz", "/usr/share/doc/libjansson4/copyright", "/usr/share/doc/libjansson4/examples/json_process.c" ], "AnalyzedBy": "dpkg" }, { "ID": "liblastlog2-2@2.41-5", "Name": "liblastlog2-2", "Identifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libsqlite3-0@3.46.1-7" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblastlog2.so.2.0.0", "/usr/share/doc/liblastlog2-2/NEWS.Debian.gz", "/usr/share/doc/liblastlog2-2/changelog.Debian.gz", "/usr/share/doc/liblastlog2-2/changelog.gz", "/usr/share/doc/liblastlog2-2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblsan0@14.2.0-19", "Name": "liblsan0", "Identifier": { "PURL": "pkg:deb/debian/liblsan0@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "56c659767f0e18f4" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblsan.so.0.0.0", "/usr/share/lintian/overrides/liblsan0" ], "AnalyzedBy": "dpkg" }, { "ID": "liblz4-1@1.10.0-4", "Name": "liblz4-1", "Identifier": { "PURL": "pkg:deb/debian/liblz4-1@1.10.0-4?arch=amd64\u0026distro=debian-13.3", "UID": "ac1c9357e348c0e9" }, "Version": "1.10.0", "Release": "4", "Arch": "amd64", "SrcName": "lz4", "SrcVersion": "1.10.0", "SrcRelease": "4", "Licenses": [ "GPL-2.0-or-later", "BSD-2-Clause", "GPL-2.0-only" ], "Maintainer": "Nobuhiro Iwamatsu \u003ciwamatsu@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libxxhash0@0.8.3-2" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblz4.so.1.10.0", "/usr/share/doc/liblz4-1/changelog.Debian.gz", "/usr/share/doc/liblz4-1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblzma5@5.8.1-1", "Name": "liblzma5", "Identifier": { "PURL": "pkg:deb/debian/liblzma5@5.8.1-1?arch=amd64\u0026distro=debian-13.3", "UID": "88851f04534132d2" }, "Version": "5.8.1", "Release": "1", "Arch": "amd64", "SrcName": "xz-utils", "SrcVersion": "5.8.1", "SrcRelease": "1", "Licenses": [ "0BSD", "GPL-2.0-or-later", "LGPL-2.1-or-later", "FSFULLR", "GPL-3.0-or-later-WITH-Autoconf-exception-macro", "none", "PD", "permissive-nowarranty", "FSFUL", "noderivs", "PD-debian", "LGPL-2.1-only", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Sebastian Andrzej Siewior \u003csebastian@breakpoint.cc\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblzma.so.5.8.1", "/usr/share/doc/liblzma5/AUTHORS", "/usr/share/doc/liblzma5/NEWS.gz", "/usr/share/doc/liblzma5/THANKS.gz", "/usr/share/doc/liblzma5/changelog.Debian.gz", "/usr/share/doc/liblzma5/changelog.gz", "/usr/share/doc/liblzma5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmd0@1.1.0-2+b1", "Name": "libmd0", "Identifier": { "PURL": "pkg:deb/debian/libmd0@1.1.0-2%2Bb1?arch=amd64\u0026distro=debian-13.3", "UID": "17c486b1b4ef2bdf" }, "Version": "1.1.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libmd", "SrcVersion": "1.1.0", "SrcRelease": "2", "Licenses": [ "BSD-3-Clause", "BSD-3-clause-Aaron-D-Gifford", "BSD-2-Clause", "BSD-2-Clause-NetBSD", "ISC", "Beerware", "public-domain-md4", "public-domain-md5", "public-domain-sha1" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmd.so.0.1.0", "/usr/share/doc/libmd0/changelog.Debian.amd64.gz", "/usr/share/doc/libmd0/changelog.Debian.gz", "/usr/share/doc/libmd0/changelog.gz", "/usr/share/doc/libmd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmount1@2.41-5", "Name": "libmount1", "Identifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libblkid1@2.41-5", "libc6@2.41-12+deb13u1", "libselinux1@3.8.1-1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmount.so.1.1.0", "/usr/share/doc/libmount1/NEWS.Debian.gz", "/usr/share/doc/libmount1/changelog.Debian.gz", "/usr/share/doc/libmount1/changelog.gz", "/usr/share/doc/libmount1/copyright", "/usr/share/lintian/overrides/libmount1" ], "AnalyzedBy": "dpkg" }, { "ID": "libmpc3@1.3.1-1+b3", "Name": "libmpc3", "Identifier": { "PURL": "pkg:deb/debian/libmpc3@1.3.1-1%2Bb3?arch=amd64\u0026distro=debian-13.3", "UID": "5a723bd3efc9204d" }, "Version": "1.3.1", "Release": "1+b3", "Arch": "amd64", "SrcName": "mpclib3", "SrcVersion": "1.3.1", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-only" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libgmp10@2:6.3.0+dfsg-3", "libmpfr6@4.2.2-1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmpc.so.3.3.1", "/usr/share/doc/libmpc3/changelog.Debian.amd64.gz", "/usr/share/doc/libmpc3/changelog.Debian.gz", "/usr/share/doc/libmpc3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmpfr6@4.2.2-1", "Name": "libmpfr6", "Identifier": { "PURL": "pkg:deb/debian/libmpfr6@4.2.2-1?arch=amd64\u0026distro=debian-13.3", "UID": "66c8fb75c356daa8" }, "Version": "4.2.2", "Release": "1", "Arch": "amd64", "SrcName": "mpfr4", "SrcVersion": "4.2.2", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-only" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libgmp10@2:6.3.0+dfsg-3" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmpfr.so.6.2.2", "/usr/share/doc/libmpfr6/AUTHORS", "/usr/share/doc/libmpfr6/BUGS", "/usr/share/doc/libmpfr6/NEWS.gz", "/usr/share/doc/libmpfr6/README", "/usr/share/doc/libmpfr6/TODO.gz", "/usr/share/doc/libmpfr6/changelog.Debian.gz", "/usr/share/doc/libmpfr6/changelog.gz", "/usr/share/doc/libmpfr6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libncursesw6@6.5+20250216-2", "Name": "libncursesw6", "Identifier": { "PURL": "pkg:deb/debian/libncursesw6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.3", "UID": "429b80d073ec0af8" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libtinfo6@6.5+20250216-2" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libformw.so.6.5", "/usr/lib/x86_64-linux-gnu/libmenuw.so.6.5", "/usr/lib/x86_64-linux-gnu/libncursesw.so.6.5", "/usr/lib/x86_64-linux-gnu/libpanelw.so.6.5" ], "AnalyzedBy": "dpkg" }, { "ID": "libnettle8t64@3.10.1-1", "Name": "libnettle8t64", "Identifier": { "PURL": "pkg:deb/debian/libnettle8t64@3.10.1-1?arch=amd64\u0026distro=debian-13.3", "UID": "fc38ceac2a1b6ddf" }, "Version": "3.10.1", "Release": "1", "Arch": "amd64", "SrcName": "nettle", "SrcVersion": "3.10.1", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-or-later", "GPL-2.0-or-later", "LGPL-2.0-or-later", "LGPL-2.0-only", "MIT", "GPL-3.0-with-autoconf-exception+", "public-domain", "GPL-2.0-only", "GAP" ], "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libnettle.so.8.10", "/usr/share/doc/libnettle8t64/NEWS.gz", "/usr/share/doc/libnettle8t64/README", "/usr/share/doc/libnettle8t64/changelog.Debian.gz", "/usr/share/doc/libnettle8t64/changelog.gz", "/usr/share/doc/libnettle8t64/copyright", "/usr/share/lintian/overrides/libnettle8t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-modules@1.7.0-5", "Name": "libpam-modules", "Identifier": { "PURL": "pkg:deb/debian/libpam-modules@1.7.0-5?arch=amd64\u0026distro=debian-13.3", "UID": "274a704398461ef0" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/security/pam_access.so", "/usr/lib/x86_64-linux-gnu/security/pam_canonicalize_user.so", "/usr/lib/x86_64-linux-gnu/security/pam_debug.so", "/usr/lib/x86_64-linux-gnu/security/pam_deny.so", "/usr/lib/x86_64-linux-gnu/security/pam_echo.so", "/usr/lib/x86_64-linux-gnu/security/pam_env.so", "/usr/lib/x86_64-linux-gnu/security/pam_exec.so", "/usr/lib/x86_64-linux-gnu/security/pam_faildelay.so", "/usr/lib/x86_64-linux-gnu/security/pam_faillock.so", "/usr/lib/x86_64-linux-gnu/security/pam_filter.so", "/usr/lib/x86_64-linux-gnu/security/pam_ftp.so", "/usr/lib/x86_64-linux-gnu/security/pam_group.so", "/usr/lib/x86_64-linux-gnu/security/pam_issue.so", "/usr/lib/x86_64-linux-gnu/security/pam_keyinit.so", "/usr/lib/x86_64-linux-gnu/security/pam_limits.so", "/usr/lib/x86_64-linux-gnu/security/pam_listfile.so", "/usr/lib/x86_64-linux-gnu/security/pam_localuser.so", "/usr/lib/x86_64-linux-gnu/security/pam_loginuid.so", "/usr/lib/x86_64-linux-gnu/security/pam_mail.so", "/usr/lib/x86_64-linux-gnu/security/pam_mkhomedir.so", "/usr/lib/x86_64-linux-gnu/security/pam_motd.so", "/usr/lib/x86_64-linux-gnu/security/pam_namespace.so", "/usr/lib/x86_64-linux-gnu/security/pam_nologin.so", "/usr/lib/x86_64-linux-gnu/security/pam_permit.so", "/usr/lib/x86_64-linux-gnu/security/pam_pwhistory.so", "/usr/lib/x86_64-linux-gnu/security/pam_rhosts.so", "/usr/lib/x86_64-linux-gnu/security/pam_rootok.so", "/usr/lib/x86_64-linux-gnu/security/pam_securetty.so", "/usr/lib/x86_64-linux-gnu/security/pam_selinux.so", "/usr/lib/x86_64-linux-gnu/security/pam_sepermit.so", "/usr/lib/x86_64-linux-gnu/security/pam_setquota.so", "/usr/lib/x86_64-linux-gnu/security/pam_shells.so", "/usr/lib/x86_64-linux-gnu/security/pam_stress.so", "/usr/lib/x86_64-linux-gnu/security/pam_succeed_if.so", "/usr/lib/x86_64-linux-gnu/security/pam_time.so", "/usr/lib/x86_64-linux-gnu/security/pam_timestamp.so", "/usr/lib/x86_64-linux-gnu/security/pam_tty_audit.so", "/usr/lib/x86_64-linux-gnu/security/pam_umask.so", "/usr/lib/x86_64-linux-gnu/security/pam_unix.so", "/usr/lib/x86_64-linux-gnu/security/pam_userdb.so", "/usr/lib/x86_64-linux-gnu/security/pam_usertype.so", "/usr/lib/x86_64-linux-gnu/security/pam_warn.so", "/usr/lib/x86_64-linux-gnu/security/pam_wheel.so", "/usr/lib/x86_64-linux-gnu/security/pam_xauth.so", "/usr/share/doc/libpam-modules/NEWS.Debian.gz", "/usr/share/doc/libpam-modules/changelog.Debian.gz", "/usr/share/doc/libpam-modules/changelog.gz", "/usr/share/doc/libpam-modules/copyright", "/usr/share/doc/libpam-modules/examples/upperLOWER.c", "/usr/share/lintian/overrides/libpam-modules", "/usr/share/pam-configs/mkhomedir" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-modules-bin@1.7.0-5", "Name": "libpam-modules-bin", "Identifier": { "PURL": "pkg:deb/debian/libpam-modules-bin@1.7.0-5?arch=amd64\u0026distro=debian-13.3", "UID": "65b75d6eb10f5918" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+b2", "libc6@2.41-12+deb13u1", "libcrypt1@1:4.4.38-1", "libpam0g@1.7.0-5", "libselinux1@3.8.1-1", "libsystemd0@257.9-1~deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/systemd/system/pam_namespace.service", "/usr/sbin/faillock", "/usr/sbin/mkhomedir_helper", "/usr/sbin/pam_namespace_helper", "/usr/sbin/pam_timestamp_check", "/usr/sbin/pwhistory_helper", "/usr/sbin/unix_chkpwd", "/usr/sbin/unix_update", "/usr/share/doc/libpam-modules-bin/changelog.Debian.gz", "/usr/share/doc/libpam-modules-bin/changelog.gz", "/usr/share/doc/libpam-modules-bin/copyright", "/usr/share/lintian/overrides/libpam-modules-bin" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-runtime@1.7.0-5", "Name": "libpam-runtime", "Identifier": { "PURL": "pkg:deb/debian/libpam-runtime@1.7.0-5?arch=all\u0026distro=debian-13.3", "UID": "1d4f3eaf1c0f9548" }, "Version": "1.7.0", "Release": "5", "Arch": "all", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "libpam-modules@1.7.0-5" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/sbin/pam-auth-update", "/usr/sbin/pam_getenv", "/usr/share/doc/libpam-runtime/changelog.Debian.gz", "/usr/share/doc/libpam-runtime/changelog.gz", "/usr/share/doc/libpam-runtime/copyright", "/usr/share/lintian/overrides/libpam-runtime", "/usr/share/locale/af/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/am/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ar/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/as/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/az/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/be/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bg/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bn_IN/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bs/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ca/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/cs/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/cy/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/da/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/de/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/de_CH/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/el/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/eo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/es/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/et/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/eu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fa/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ga/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/gl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/gu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/he/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ia/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/id/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/is/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/it/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ja/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ka/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/km/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ko/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kw_GB/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ky/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/lt/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/lv/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ml/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ms/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/my/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ne/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/or/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pa/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pt/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ro/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ru/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/si/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sq/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sv/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ta/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/te/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tg/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/th/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/uk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/vi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/yo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_HK/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/man/man5/access.conf.5.gz", "/usr/share/man/man5/faillock.conf.5.gz", "/usr/share/man/man5/group.conf.5.gz", "/usr/share/man/man5/limits.conf.5.gz", "/usr/share/man/man5/namespace.conf.5.gz", "/usr/share/man/man5/pam.conf.5.gz", "/usr/share/man/man5/pam_env.conf.5.gz", "/usr/share/man/man5/pwhistory.conf.5.gz", "/usr/share/man/man5/sepermit.conf.5.gz", "/usr/share/man/man5/time.conf.5.gz", "/usr/share/man/man7/PAM.7.gz", "/usr/share/man/man8/faillock.8.gz", "/usr/share/man/man8/mkhomedir_helper.8.gz", "/usr/share/man/man8/pam-auth-update.8.gz", "/usr/share/man/man8/pam_access.8.gz", "/usr/share/man/man8/pam_canonicalize_user.8.gz", "/usr/share/man/man8/pam_debug.8.gz", "/usr/share/man/man8/pam_deny.8.gz", "/usr/share/man/man8/pam_echo.8.gz", "/usr/share/man/man8/pam_env.8.gz", "/usr/share/man/man8/pam_exec.8.gz", "/usr/share/man/man8/pam_faildelay.8.gz", "/usr/share/man/man8/pam_faillock.8.gz", "/usr/share/man/man8/pam_filter.8.gz", "/usr/share/man/man8/pam_ftp.8.gz", "/usr/share/man/man8/pam_getenv.8.gz", "/usr/share/man/man8/pam_group.8.gz", "/usr/share/man/man8/pam_issue.8.gz", "/usr/share/man/man8/pam_keyinit.8.gz", "/usr/share/man/man8/pam_limits.8.gz", "/usr/share/man/man8/pam_listfile.8.gz", "/usr/share/man/man8/pam_localuser.8.gz", "/usr/share/man/man8/pam_loginuid.8.gz", "/usr/share/man/man8/pam_mail.8.gz", "/usr/share/man/man8/pam_mkhomedir.8.gz", "/usr/share/man/man8/pam_motd.8.gz", "/usr/share/man/man8/pam_namespace.8.gz", "/usr/share/man/man8/pam_namespace_helper.8.gz", "/usr/share/man/man8/pam_nologin.8.gz", "/usr/share/man/man8/pam_permit.8.gz", "/usr/share/man/man8/pam_pwhistory.8.gz", "/usr/share/man/man8/pam_rhosts.8.gz", "/usr/share/man/man8/pam_rootok.8.gz", "/usr/share/man/man8/pam_securetty.8.gz", "/usr/share/man/man8/pam_selinux.8.gz", "/usr/share/man/man8/pam_sepermit.8.gz", "/usr/share/man/man8/pam_setquota.8.gz", "/usr/share/man/man8/pam_shells.8.gz", "/usr/share/man/man8/pam_stress.8.gz", "/usr/share/man/man8/pam_succeed_if.8.gz", "/usr/share/man/man8/pam_time.8.gz", "/usr/share/man/man8/pam_timestamp.8.gz", "/usr/share/man/man8/pam_timestamp_check.8.gz", "/usr/share/man/man8/pam_tty_audit.8.gz", "/usr/share/man/man8/pam_umask.8.gz", "/usr/share/man/man8/pam_unix.8.gz", "/usr/share/man/man8/pam_userdb.8.gz", "/usr/share/man/man8/pam_usertype.8.gz", "/usr/share/man/man8/pam_warn.8.gz", "/usr/share/man/man8/pam_wheel.8.gz", "/usr/share/man/man8/pam_xauth.8.gz", "/usr/share/man/man8/pwhistory_helper.8.gz", "/usr/share/man/man8/unix_chkpwd.8.gz", "/usr/share/man/man8/unix_update.8.gz", "/usr/share/pam-configs/unix", "/usr/share/pam/common-account", "/usr/share/pam/common-account.md5sums", "/usr/share/pam/common-auth", "/usr/share/pam/common-auth.md5sums", "/usr/share/pam/common-password", "/usr/share/pam/common-password.md5sums", "/usr/share/pam/common-session", "/usr/share/pam/common-session-noninteractive", "/usr/share/pam/common-session-noninteractive.md5sums", "/usr/share/pam/common-session.md5sums" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam0g@1.7.0-5", "Name": "libpam0g", "Identifier": { "PURL": "pkg:deb/debian/libpam0g@1.7.0-5?arch=amd64\u0026distro=debian-13.3", "UID": "c1f384d055aa9076" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "libaudit1@1:4.0.2-2+b2", "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpam.so.0.85.1", "/usr/lib/x86_64-linux-gnu/libpam_misc.so.0.82.1", "/usr/lib/x86_64-linux-gnu/libpamc.so.0.82.1", "/usr/share/doc/libpam0g/Debian-PAM-MiniPolicy.gz", "/usr/share/doc/libpam0g/README", "/usr/share/doc/libpam0g/README.Debian", "/usr/share/doc/libpam0g/TODO.Debian", "/usr/share/doc/libpam0g/changelog.Debian.gz", "/usr/share/doc/libpam0g/changelog.gz", "/usr/share/doc/libpam0g/copyright", "/usr/share/lintian/overrides/libpam0g" ], "AnalyzedBy": "dpkg" }, { "ID": "libpcre2-8-0@10.46-1~deb13u1", "Name": "libpcre2-8-0", "Identifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "29a0698480de124a" }, "Version": "10.46", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "pcre2", "SrcVersion": "10.46", "SrcRelease": "1~deb13u1", "Licenses": [ "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception", "BSD-3-Clause", "X11", "BSD-2-Clause", "public-domain" ], "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.14.0", "/usr/share/doc/libpcre2-8-0/README.Debian", "/usr/share/doc/libpcre2-8-0/changelog.Debian.gz", "/usr/share/doc/libpcre2-8-0/changelog.gz", "/usr/share/doc/libpcre2-8-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libquadmath0@14.2.0-19", "Name": "libquadmath0", "Identifier": { "PURL": "pkg:deb/debian/libquadmath0@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "808a310e7714dc23" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libquadmath.so.0.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libreadline8t64@8.2-6", "Name": "libreadline8t64", "Identifier": { "PURL": "pkg:deb/debian/libreadline8t64@8.2-6?arch=amd64\u0026distro=debian-13.3", "UID": "7d4688fb0675c9df" }, "Version": "8.2", "Release": "6", "Arch": "amd64", "SrcName": "readline", "SrcVersion": "8.2", "SrcRelease": "6", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-or-later", "ISC-no-attribution" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libtinfo6@6.5+20250216-2", "readline-common@8.2-6" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhistory.so.8.2", "/usr/lib/x86_64-linux-gnu/libreadline.so.8.2", "/usr/share/doc/libreadline8t64/README.Debian", "/usr/share/doc/libreadline8t64/USAGE", "/usr/share/doc/libreadline8t64/changelog.Debian.gz", "/usr/share/doc/libreadline8t64/changelog.gz", "/usr/share/doc/libreadline8t64/copyright", "/usr/share/doc/libreadline8t64/examples/Inputrc", "/usr/share/doc/libreadline8t64/inputrc.arrows" ], "AnalyzedBy": "dpkg" }, { "ID": "libseccomp2@2.6.0-2", "Name": "libseccomp2", "Identifier": { "PURL": "pkg:deb/debian/libseccomp2@2.6.0-2?arch=amd64\u0026distro=debian-13.3", "UID": "4f78543918e8635d" }, "Version": "2.6.0", "Release": "2", "Arch": "amd64", "SrcName": "libseccomp", "SrcVersion": "2.6.0", "SrcRelease": "2", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Kees Cook \u003ckees@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libseccomp.so.2.6.0", "/usr/share/doc/libseccomp2/changelog.Debian.gz", "/usr/share/doc/libseccomp2/changelog.gz", "/usr/share/doc/libseccomp2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libselinux1@3.8.1-1", "Name": "libselinux1", "Identifier": { "PURL": "pkg:deb/debian/libselinux1@3.8.1-1?arch=amd64\u0026distro=debian-13.3", "UID": "d5151e043159b1c8" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libselinux", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "public-domain", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libpcre2-8-0@10.46-1~deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/tmpfiles.d/libselinux1.conf", "/usr/lib/x86_64-linux-gnu/libselinux.so.1", "/usr/share/doc/libselinux1/changelog.Debian.gz", "/usr/share/doc/libselinux1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsemanage-common@3.8.1-1", "Name": "libsemanage-common", "Identifier": { "PURL": "pkg:deb/debian/libsemanage-common@3.8.1-1?arch=all\u0026distro=debian-13.3", "UID": "ecc6b54d8bc6318c" }, "Version": "3.8.1", "Release": "1", "Arch": "all", "SrcName": "libsemanage", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/share/doc/libsemanage-common/changelog.Debian.gz", "/usr/share/doc/libsemanage-common/copyright", "/usr/share/man/man5/semanage.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libsemanage2@3.8.1-1", "Name": "libsemanage2", "Identifier": { "PURL": "pkg:deb/debian/libsemanage2@3.8.1-1?arch=amd64\u0026distro=debian-13.3", "UID": "6e3eddd1fff7155" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libsemanage", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+b2", "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u1", "libselinux1@3.8.1-1", "libsemanage-common@3.8.1-1", "libsepol2@3.8.1-1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsemanage.so.2", "/usr/share/doc/libsemanage2/changelog.Debian.gz", "/usr/share/doc/libsemanage2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsepol2@3.8.1-1", "Name": "libsepol2", "Identifier": { "PURL": "pkg:deb/debian/libsepol2@3.8.1-1?arch=amd64\u0026distro=debian-13.3", "UID": "46e7637c3204f29f" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libsepol", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "Zlib", "GPL-2.0-only", "GPL-2.0-or-later" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsepol.so.2", "/usr/share/doc/libsepol2/changelog.Debian.gz", "/usr/share/doc/libsepol2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsframe1@2.44-3", "Name": "libsframe1", "Identifier": { "PURL": "pkg:deb/debian/libsframe1@2.44-3?arch=amd64\u0026distro=debian-13.3", "UID": "32a8d1b35893086f" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsframe.so.1.0.0", "/usr/share/doc/libsframe1/changelog.Debian.gz", "/usr/share/doc/libsframe1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsmartcols1@2.41-5", "Name": "libsmartcols1", "Identifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsmartcols.so.1.1.0", "/usr/share/doc/libsmartcols1/NEWS.Debian.gz", "/usr/share/doc/libsmartcols1/changelog.Debian.gz", "/usr/share/doc/libsmartcols1/changelog.gz", "/usr/share/doc/libsmartcols1/copyright", "/usr/share/lintian/overrides/libsmartcols1" ], "AnalyzedBy": "dpkg" }, { "ID": "libsqlite3-0@3.46.1-7", "Name": "libsqlite3-0", "Identifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7?arch=amd64\u0026distro=debian-13.3", "UID": "15db68ea57a4323f" }, "Version": "3.46.1", "Release": "7", "Arch": "amd64", "SrcName": "sqlite3", "SrcVersion": "3.46.1", "SrcRelease": "7", "Licenses": [ "public-domain", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6", "/usr/share/doc/libsqlite3-0/README.Debian", "/usr/share/doc/libsqlite3-0/changelog.Debian.gz", "/usr/share/doc/libsqlite3-0/changelog.gz", "/usr/share/doc/libsqlite3-0/changelog.html.gz", "/usr/share/doc/libsqlite3-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libssl3t64@3.5.4-1~deb13u2", "Name": "libssl3t64", "Identifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "Version": "3.5.4", "Release": "1~deb13u2", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.4", "SrcRelease": "1~deb13u2", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libzstd1@1.5.7+dfsg-1", "openssl-provider-legacy@3.5.4-1~deb13u2", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/engines-3/afalg.so", "/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so", "/usr/lib/x86_64-linux-gnu/engines-3/padlock.so", "/usr/lib/x86_64-linux-gnu/libcrypto.so.3", "/usr/lib/x86_64-linux-gnu/libssl.so.3", "/usr/share/doc/libssl3t64/NEWS.Debian.gz", "/usr/share/doc/libssl3t64/changelog.Debian.gz", "/usr/share/doc/libssl3t64/changelog.gz", "/usr/share/doc/libssl3t64/copyright", "/usr/share/lintian/overrides/libssl3t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libstdc++6@14.2.0-19", "Name": "libstdc++6", "Identifier": { "PURL": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "941e36194f3f8898" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33", "/usr/share/gcc/python/libstdcxx/__init__.py", "/usr/share/gcc/python/libstdcxx/v6/__init__.py", "/usr/share/gcc/python/libstdcxx/v6/printers.py", "/usr/share/gcc/python/libstdcxx/v6/xmethods.py", "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33-gdb.py" ], "AnalyzedBy": "dpkg" }, { "ID": "libsystemd0@257.9-1~deb13u1", "Name": "libsystemd0", "Identifier": { "PURL": "pkg:deb/debian/libsystemd0@257.9-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "2ed722ae15cf04f0" }, "Version": "257.9", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "systemd", "SrcVersion": "257.9", "SrcRelease": "1~deb13u1", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "GPL-2 with Linux-syscall-note exception", "MIT", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libcap2@1:2.75-10+b3" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsystemd.so.0.40.0", "/usr/share/doc/libsystemd0/NEWS.Debian.gz", "/usr/share/doc/libsystemd0/changelog.Debian.gz", "/usr/share/doc/libsystemd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtinfo6@6.5+20250216-2", "Name": "libtinfo6", "Identifier": { "PURL": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.3", "UID": "e60cb0d4ec90b4c4" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtic.so.6.5", "/usr/lib/x86_64-linux-gnu/libtinfo.so.6.5", "/usr/share/doc/libtinfo6/changelog.Debian.gz", "/usr/share/doc/libtinfo6/changelog.gz", "/usr/share/doc/libtinfo6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtsan2@14.2.0-19", "Name": "libtsan2", "Identifier": { "PURL": "pkg:deb/debian/libtsan2@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "a08d9af1a1d5a6e1" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtsan.so.2.0.0", "/usr/share/lintian/overrides/libtsan2" ], "AnalyzedBy": "dpkg" }, { "ID": "libubsan1@14.2.0-19", "Name": "libubsan1", "Identifier": { "PURL": "pkg:deb/debian/libubsan1@14.2.0-19?arch=amd64\u0026distro=debian-13.3", "UID": "e19ed8deb21e5ab6" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:5dab5920cd0a8fb35c1b41bf0326f1a7b1918152fbeaf49315798ce6d03ef178" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libubsan.so.1.0.0", "/usr/share/lintian/overrides/libubsan1" ], "AnalyzedBy": "dpkg" }, { "ID": "libudev1@257.9-1~deb13u1", "Name": "libudev1", "Identifier": { "PURL": "pkg:deb/debian/libudev1@257.9-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "b88983beb6fa1653" }, "Version": "257.9", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "systemd", "SrcVersion": "257.9", "SrcRelease": "1~deb13u1", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "GPL-2 with Linux-syscall-note exception", "MIT", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libcap2@1:2.75-10+b3" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libudev.so.1.7.10", "/usr/share/doc/libudev1/NEWS.Debian.gz", "/usr/share/doc/libudev1/changelog.Debian.gz", "/usr/share/doc/libudev1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libuuid1@2.41-5", "Name": "libuuid1", "Identifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libuuid.so.1.3.0", "/usr/share/doc/libuuid1/NEWS.Debian.gz", "/usr/share/doc/libuuid1/changelog.Debian.gz", "/usr/share/doc/libuuid1/changelog.gz", "/usr/share/doc/libuuid1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxxhash0@0.8.3-2", "Name": "libxxhash0", "Identifier": { "PURL": "pkg:deb/debian/libxxhash0@0.8.3-2?arch=amd64\u0026distro=debian-13.3", "UID": "2cadc5a5acc37585" }, "Version": "0.8.3", "Release": "2", "Arch": "amd64", "SrcName": "xxhash", "SrcVersion": "0.8.3", "SrcRelease": "2", "Licenses": [ "BSD-2-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Josue Ortega \u003cjosue@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxxhash.so.0.8.3", "/usr/share/doc/libxxhash0/changelog.Debian.gz", "/usr/share/doc/libxxhash0/changelog.gz", "/usr/share/doc/libxxhash0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libzstd1@1.5.7+dfsg-1", "Name": "libzstd1", "Identifier": { "PURL": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64\u0026distro=debian-13.3", "UID": "67b8b12703cfcf83" }, "Version": "1.5.7+dfsg", "Release": "1", "Arch": "amd64", "SrcName": "libzstd", "SrcVersion": "1.5.7+dfsg", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "Zlib", "MIT" ], "Maintainer": "RPM packaging team \u003cteam+pkg-rpm@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libzstd.so.1.5.7", "/usr/share/doc/libzstd1/changelog.Debian.gz", "/usr/share/doc/libzstd1/changelog.gz", "/usr/share/doc/libzstd1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "login@1:4.16.0-2+really2.41-5", "Name": "login", "Identifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "Version": "4.16.0-2+really2.41", "Release": "5", "Epoch": 1, "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+b2", "libc6@2.41-12+deb13u1", "libcrypt1@1:4.4.38-1", "libpam-modules@1.7.0-5", "libpam-runtime@1.7.0-5", "libpam0g@1.7.0-5" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/login", "/usr/bin/newgrp", "/usr/sbin/nologin", "/usr/share/bash-completion/completions/newgrp", "/usr/share/doc/login/NEWS.Debian.gz", "/usr/share/doc/login/changelog.Debian.gz", "/usr/share/doc/login/changelog.gz", "/usr/share/doc/login/copyright", "/usr/share/lintian/overrides/login", "/usr/share/man/de/man1/login.1.gz", "/usr/share/man/de/man8/nologin.8.gz", "/usr/share/man/fr/man1/login.1.gz", "/usr/share/man/man1/login.1.gz", "/usr/share/man/man1/newgrp.1.gz", "/usr/share/man/man8/nologin.8.gz", "/usr/share/man/pl/man1/login.1.gz", "/usr/share/man/pl/man1/newgrp.1.gz", "/usr/share/man/pl/man8/nologin.8.gz", "/usr/share/man/ro/man1/login.1.gz", "/usr/share/man/ro/man1/newgrp.1.gz", "/usr/share/man/ro/man8/nologin.8.gz", "/usr/share/man/sr/man1/login.1.gz", "/usr/share/man/sr/man8/nologin.8.gz", "/usr/share/man/uk/man1/login.1.gz", "/usr/share/man/uk/man1/newgrp.1.gz", "/usr/share/man/uk/man8/nologin.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "login.defs@1:4.17.4-2", "Name": "login.defs", "Identifier": { "PURL": "pkg:deb/debian/login.defs@4.17.4-2?arch=all\u0026distro=debian-13.3\u0026epoch=1", "UID": "b6a337588c67d5a3" }, "Version": "4.17.4", "Release": "2", "Epoch": 1, "Arch": "all", "SrcName": "shadow", "SrcVersion": "4.17.4", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-1.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/share/doc/login.defs/NEWS.Debian.gz", "/usr/share/doc/login.defs/changelog.Debian.gz", "/usr/share/doc/login.defs/changelog.gz", "/usr/share/doc/login.defs/copyright", "/usr/share/man/de/man5/login.defs.5.gz", "/usr/share/man/fr/man5/login.defs.5.gz", "/usr/share/man/it/man5/login.defs.5.gz", "/usr/share/man/ja/man5/login.defs.5.gz", "/usr/share/man/man5/login.defs.5.gz", "/usr/share/man/ru/man5/login.defs.5.gz", "/usr/share/man/uk/man5/login.defs.5.gz", "/usr/share/man/zh_CN/man5/login.defs.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "mawk@1.3.4.20250131-1", "Name": "mawk", "Identifier": { "PURL": "pkg:deb/debian/mawk@1.3.4.20250131-1?arch=amd64\u0026distro=debian-13.3", "UID": "34758ee5380bd9cd" }, "Version": "1.3.4.20250131", "Release": "1", "Arch": "amd64", "SrcName": "mawk", "SrcVersion": "1.3.4.20250131", "SrcRelease": "1", "Licenses": [ "GPL-2.0-only", "X11", "CC-BY-3.0" ], "Maintainer": "Boyuan Yang \u003cbyang@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/mawk", "/usr/share/doc/mawk/ACKNOWLEDGMENT", "/usr/share/doc/mawk/README", "/usr/share/doc/mawk/changelog.Debian.gz", "/usr/share/doc/mawk/changelog.gz", "/usr/share/doc/mawk/copyright", "/usr/share/doc/mawk/examples/ct_length.awk", "/usr/share/doc/mawk/examples/decl.awk", "/usr/share/doc/mawk/examples/deps.awk", "/usr/share/doc/mawk/examples/eatc.awk", "/usr/share/doc/mawk/examples/gdecl.awk", "/usr/share/doc/mawk/examples/hcal", "/usr/share/doc/mawk/examples/hical", "/usr/share/doc/mawk/examples/nocomment.awk", "/usr/share/doc/mawk/examples/primes.awk", "/usr/share/doc/mawk/examples/qsort.awk", "/usr/share/man/man1/mawk.1.gz", "/usr/share/man/man7/mawk-arrays.7.gz", "/usr/share/man/man7/mawk-code.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "mount@2.41-5", "Name": "mount", "Identifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/mount", "/usr/bin/umount", "/usr/sbin/losetup", "/usr/sbin/swapoff", "/usr/sbin/swapon", "/usr/share/bash-completion/completions/losetup", "/usr/share/bash-completion/completions/mount", "/usr/share/bash-completion/completions/swapoff", "/usr/share/bash-completion/completions/swapon", "/usr/share/bash-completion/completions/umount", "/usr/share/doc/mount/NEWS.Debian.gz", "/usr/share/doc/mount/changelog.Debian.gz", "/usr/share/doc/mount/changelog.gz", "/usr/share/doc/mount/copyright", "/usr/share/doc/mount/examples/filesystems", "/usr/share/doc/mount/examples/fstab", "/usr/share/doc/mount/examples/mount.fstab", "/usr/share/doc/mount/mount.txt", "/usr/share/lintian/overrides/mount", "/usr/share/man/man5/fstab.5.gz", "/usr/share/man/man8/losetup.8.gz", "/usr/share/man/man8/mount.8.gz", "/usr/share/man/man8/swapon.8.gz", "/usr/share/man/man8/umount.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "ncurses-base@6.5+20250216-2", "Name": "ncurses-base", "Identifier": { "PURL": "pkg:deb/debian/ncurses-base@6.5%2B20250216-2?arch=all\u0026distro=debian-13.3", "UID": "767a0231348a5cb5" }, "Version": "6.5+20250216", "Release": "2", "Arch": "all", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/share/doc/ncurses-base/FAQ", "/usr/share/doc/ncurses-base/TODO.Debian", "/usr/share/doc/ncurses-base/changelog.Debian.gz", "/usr/share/doc/ncurses-base/changelog.gz", "/usr/share/doc/ncurses-base/copyright", "/usr/share/lintian/overrides/ncurses-base", "/usr/share/tabset/std", "/usr/share/tabset/stdcrt", "/usr/share/tabset/vt100", "/usr/share/tabset/vt300", "/usr/share/terminfo/E/Eterm", "/usr/share/terminfo/a/ansi", "/usr/share/terminfo/c/cons25", "/usr/share/terminfo/c/cygwin", "/usr/share/terminfo/d/dumb", "/usr/share/terminfo/h/hurd", "/usr/share/terminfo/l/linux", "/usr/share/terminfo/m/mach", "/usr/share/terminfo/m/mach-bold", "/usr/share/terminfo/m/mach-color", "/usr/share/terminfo/m/mach-gnu", "/usr/share/terminfo/m/mach-gnu-color", "/usr/share/terminfo/p/pcansi", "/usr/share/terminfo/r/rxvt", "/usr/share/terminfo/r/rxvt-basic", "/usr/share/terminfo/r/rxvt-unicode", "/usr/share/terminfo/r/rxvt-unicode-256color", "/usr/share/terminfo/s/screen", "/usr/share/terminfo/s/screen-256color", "/usr/share/terminfo/s/screen-256color-bce", "/usr/share/terminfo/s/screen-bce", "/usr/share/terminfo/s/screen-s", "/usr/share/terminfo/s/screen-w", "/usr/share/terminfo/s/screen.xterm-256color", "/usr/share/terminfo/s/sun", "/usr/share/terminfo/t/tmux", "/usr/share/terminfo/t/tmux-256color", "/usr/share/terminfo/v/vt100", "/usr/share/terminfo/v/vt102", "/usr/share/terminfo/v/vt220", "/usr/share/terminfo/v/vt52", "/usr/share/terminfo/w/wsvt25", "/usr/share/terminfo/w/wsvt25m", "/usr/share/terminfo/x/xterm", "/usr/share/terminfo/x/xterm-256color", "/usr/share/terminfo/x/xterm-color", "/usr/share/terminfo/x/xterm-mono", "/usr/share/terminfo/x/xterm-r5", "/usr/share/terminfo/x/xterm-r6", "/usr/share/terminfo/x/xterm-vt220", "/usr/share/terminfo/x/xterm-xfree86" ], "AnalyzedBy": "dpkg" }, { "ID": "ncurses-bin@6.5+20250216-2", "Name": "ncurses-bin", "Identifier": { "PURL": "pkg:deb/debian/ncurses-bin@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.3", "UID": "5b541563cf6587e5" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/clear", "/usr/bin/infocmp", "/usr/bin/tabs", "/usr/bin/tic", "/usr/bin/toe", "/usr/bin/tput", "/usr/bin/tset", "/usr/share/doc/ncurses-bin/changelog.Debian.gz", "/usr/share/doc/ncurses-bin/changelog.gz", "/usr/share/doc/ncurses-bin/copyright", "/usr/share/man/man1/captoinfo.1.gz", "/usr/share/man/man1/clear.1.gz", "/usr/share/man/man1/infocmp.1.gz", "/usr/share/man/man1/infotocap.1.gz", "/usr/share/man/man1/tabs.1.gz", "/usr/share/man/man1/tic.1.gz", "/usr/share/man/man1/toe.1.gz", "/usr/share/man/man1/tput.1.gz", "/usr/share/man/man1/tset.1.gz", "/usr/share/man/man5/scr_dump.5.gz", "/usr/share/man/man5/term.5.gz", "/usr/share/man/man5/terminfo.5.gz", "/usr/share/man/man5/user_caps.5.gz", "/usr/share/man/man7/term.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "netbase@6.5", "Name": "netbase", "Identifier": { "PURL": "pkg:deb/debian/netbase@6.5?arch=all\u0026distro=debian-13.3", "UID": "9929ff265179fc61" }, "Version": "6.5", "Arch": "all", "SrcName": "netbase", "SrcVersion": "6.5", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "InstalledFiles": [ "/usr/share/doc/netbase/changelog.gz", "/usr/share/doc/netbase/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "openssl@3.5.4-1~deb13u2", "Name": "openssl", "Identifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "Version": "3.5.4", "Release": "1~deb13u2", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.4", "SrcRelease": "1~deb13u2", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libssl3t64@3.5.4-1~deb13u2" ], "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "InstalledFiles": [ "/usr/bin/c_rehash", "/usr/bin/openssl", "/usr/lib/ssl/misc/CA.pl", "/usr/lib/ssl/misc/tsget.pl", "/usr/share/doc/openssl/HOWTO/certificates.txt.gz", "/usr/share/doc/openssl/HOWTO/documenting-functions-and-macros.md.gz", "/usr/share/doc/openssl/HOWTO/keys.txt.gz", "/usr/share/doc/openssl/NEWS.md.gz", "/usr/share/doc/openssl/README-ENGINES.md.gz", "/usr/share/doc/openssl/README-PROVIDERS.md.gz", "/usr/share/doc/openssl/README-QUIC.md.gz", "/usr/share/doc/openssl/README.Debian", "/usr/share/doc/openssl/README.md.gz", "/usr/share/doc/openssl/changelog.Debian.gz", "/usr/share/doc/openssl/changelog.gz", "/usr/share/doc/openssl/copyright", "/usr/share/doc/openssl/fingerprints.txt", "/usr/share/lintian/overrides/openssl", "/usr/share/man/man1/CA.pl.1ssl.gz", "/usr/share/man/man1/openssl-asn1parse.1ssl.gz", "/usr/share/man/man1/openssl-ca.1ssl.gz", "/usr/share/man/man1/openssl-ciphers.1ssl.gz", "/usr/share/man/man1/openssl-cmds.1ssl.gz", "/usr/share/man/man1/openssl-cmp.1ssl.gz", "/usr/share/man/man1/openssl-cms.1ssl.gz", "/usr/share/man/man1/openssl-crl.1ssl.gz", "/usr/share/man/man1/openssl-crl2pkcs7.1ssl.gz", "/usr/share/man/man1/openssl-dgst.1ssl.gz", "/usr/share/man/man1/openssl-dhparam.1ssl.gz", "/usr/share/man/man1/openssl-dsa.1ssl.gz", "/usr/share/man/man1/openssl-dsaparam.1ssl.gz", "/usr/share/man/man1/openssl-ec.1ssl.gz", "/usr/share/man/man1/openssl-ecparam.1ssl.gz", "/usr/share/man/man1/openssl-enc.1ssl.gz", "/usr/share/man/man1/openssl-engine.1ssl.gz", "/usr/share/man/man1/openssl-errstr.1ssl.gz", "/usr/share/man/man1/openssl-fipsinstall.1ssl.gz", "/usr/share/man/man1/openssl-format-options.1ssl.gz", "/usr/share/man/man1/openssl-gendsa.1ssl.gz", "/usr/share/man/man1/openssl-genpkey.1ssl.gz", "/usr/share/man/man1/openssl-genrsa.1ssl.gz", "/usr/share/man/man1/openssl-info.1ssl.gz", "/usr/share/man/man1/openssl-kdf.1ssl.gz", "/usr/share/man/man1/openssl-list.1ssl.gz", "/usr/share/man/man1/openssl-mac.1ssl.gz", "/usr/share/man/man1/openssl-namedisplay-options.1ssl.gz", "/usr/share/man/man1/openssl-nseq.1ssl.gz", "/usr/share/man/man1/openssl-ocsp.1ssl.gz", "/usr/share/man/man1/openssl-passphrase-options.1ssl.gz", "/usr/share/man/man1/openssl-passwd.1ssl.gz", "/usr/share/man/man1/openssl-pkcs12.1ssl.gz", "/usr/share/man/man1/openssl-pkcs7.1ssl.gz", "/usr/share/man/man1/openssl-pkcs8.1ssl.gz", "/usr/share/man/man1/openssl-pkey.1ssl.gz", "/usr/share/man/man1/openssl-pkeyparam.1ssl.gz", "/usr/share/man/man1/openssl-pkeyutl.1ssl.gz", "/usr/share/man/man1/openssl-prime.1ssl.gz", "/usr/share/man/man1/openssl-rand.1ssl.gz", "/usr/share/man/man1/openssl-rehash.1ssl.gz", "/usr/share/man/man1/openssl-req.1ssl.gz", "/usr/share/man/man1/openssl-rsa.1ssl.gz", "/usr/share/man/man1/openssl-rsautl.1ssl.gz", "/usr/share/man/man1/openssl-s_client.1ssl.gz", "/usr/share/man/man1/openssl-s_server.1ssl.gz", "/usr/share/man/man1/openssl-s_time.1ssl.gz", "/usr/share/man/man1/openssl-sess_id.1ssl.gz", "/usr/share/man/man1/openssl-skeyutl.1ssl.gz", "/usr/share/man/man1/openssl-smime.1ssl.gz", "/usr/share/man/man1/openssl-speed.1ssl.gz", "/usr/share/man/man1/openssl-spkac.1ssl.gz", "/usr/share/man/man1/openssl-srp.1ssl.gz", "/usr/share/man/man1/openssl-storeutl.1ssl.gz", "/usr/share/man/man1/openssl-ts.1ssl.gz", "/usr/share/man/man1/openssl-verification-options.1ssl.gz", "/usr/share/man/man1/openssl-verify.1ssl.gz", "/usr/share/man/man1/openssl-version.1ssl.gz", "/usr/share/man/man1/openssl-x509.1ssl.gz", "/usr/share/man/man1/openssl.1ssl.gz", "/usr/share/man/man1/tsget.1ssl.gz", "/usr/share/man/man5/config.5ssl.gz", "/usr/share/man/man5/fips_config.5ssl.gz", "/usr/share/man/man5/x509v3_config.5ssl.gz", "/usr/share/man/man7/EVP_ASYM_CIPHER-RSA.7ssl.gz", "/usr/share/man/man7/EVP_ASYM_CIPHER-SM2.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-AES.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-ARIA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-BLOWFISH.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CAMELLIA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CAST.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CHACHA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-DES.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-IDEA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-NULL.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC2.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC4.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC5.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-SEED.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-SM4.7ssl.gz", "/usr/share/man/man7/EVP_KDF-ARGON2.7ssl.gz", "/usr/share/man/man7/EVP_KDF-HKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-HMAC-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_KDF-KB.7ssl.gz", "/usr/share/man/man7/EVP_KDF-KRB5KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PBKDF1.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PBKDF2.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PKCS12KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PVKKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SCRYPT.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SS.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SSHKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-TLS13_KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-TLS1_PRF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X942-ASN1.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X942-CONCAT.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X963.7ssl.gz", "/usr/share/man/man7/EVP_KEM-EC.7ssl.gz", "/usr/share/man/man7/EVP_KEM-ML-KEM.7ssl.gz", "/usr/share/man/man7/EVP_KEM-RSA.7ssl.gz", "/usr/share/man/man7/EVP_KEM-X25519.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-DH.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-ECDH.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-X25519.7ssl.gz", "/usr/share/man/man7/EVP_MAC-BLAKE2.7ssl.gz", "/usr/share/man/man7/EVP_MAC-CMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-GMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-KMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-Poly1305.7ssl.gz", "/usr/share/man/man7/EVP_MAC-Siphash.7ssl.gz", "/usr/share/man/man7/EVP_MD-BLAKE2.7ssl.gz", "/usr/share/man/man7/EVP_MD-KECCAK.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD2.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD4.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD5-SHA1.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD5.7ssl.gz", "/usr/share/man/man7/EVP_MD-MDC2.7ssl.gz", "/usr/share/man/man7/EVP_MD-NULL.7ssl.gz", "/usr/share/man/man7/EVP_MD-RIPEMD160.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA1.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA2.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA3.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHAKE.7ssl.gz", "/usr/share/man/man7/EVP_MD-SM3.7ssl.gz", "/usr/share/man/man7/EVP_MD-WHIRLPOOL.7ssl.gz", "/usr/share/man/man7/EVP_MD-common.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-DH.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-EC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-FFC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-ML-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-ML-KEM.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-RSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-SLH-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-SM2.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-X25519.7ssl.gz", "/usr/share/man/man7/EVP_RAND-CRNG-TEST.7ssl.gz", "/usr/share/man/man7/EVP_RAND-CTR-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-HASH-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-HMAC-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-JITTER.7ssl.gz", "/usr/share/man/man7/EVP_RAND-SEED-SRC.7ssl.gz", "/usr/share/man/man7/EVP_RAND-TEST-RAND.7ssl.gz", "/usr/share/man/man7/EVP_RAND.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-DSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ECDSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ED25519.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ML-DSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-RSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-SLH-DSA.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-FIPS.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-base.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-default.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-legacy.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-null.7ssl.gz", "/usr/share/man/man7/OSSL_STORE-winstore.7ssl.gz", "/usr/share/man/man7/RAND.7ssl.gz", "/usr/share/man/man7/RSA-PSS.7ssl.gz", "/usr/share/man/man7/X25519.7ssl.gz", "/usr/share/man/man7/bio.7ssl.gz", "/usr/share/man/man7/ct.7ssl.gz", "/usr/share/man/man7/des_modes.7ssl.gz", "/usr/share/man/man7/evp.7ssl.gz", "/usr/share/man/man7/fips_module.7ssl.gz", "/usr/share/man/man7/life_cycle-cipher.7ssl.gz", "/usr/share/man/man7/life_cycle-digest.7ssl.gz", "/usr/share/man/man7/life_cycle-kdf.7ssl.gz", "/usr/share/man/man7/life_cycle-mac.7ssl.gz", "/usr/share/man/man7/life_cycle-pkey.7ssl.gz", "/usr/share/man/man7/life_cycle-rand.7ssl.gz", "/usr/share/man/man7/openssl-core.h.7ssl.gz", "/usr/share/man/man7/openssl-core_dispatch.h.7ssl.gz", "/usr/share/man/man7/openssl-core_names.h.7ssl.gz", "/usr/share/man/man7/openssl-env.7ssl.gz", "/usr/share/man/man7/openssl-glossary.7ssl.gz", "/usr/share/man/man7/openssl-qlog.7ssl.gz", "/usr/share/man/man7/openssl-quic-concurrency.7ssl.gz", "/usr/share/man/man7/openssl-quic.7ssl.gz", "/usr/share/man/man7/openssl-threads.7ssl.gz", "/usr/share/man/man7/openssl_user_macros.7ssl.gz", "/usr/share/man/man7/ossl-guide-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libcrypto-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libraries-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libssl-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-migration.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-client-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-client-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-multi-stream.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-server-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-server-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-client-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-client-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-server-block.7ssl.gz", "/usr/share/man/man7/ossl_store-file.7ssl.gz", "/usr/share/man/man7/ossl_store.7ssl.gz", "/usr/share/man/man7/passphrase-encoding.7ssl.gz", "/usr/share/man/man7/property.7ssl.gz", "/usr/share/man/man7/provider-asym_cipher.7ssl.gz", "/usr/share/man/man7/provider-base.7ssl.gz", "/usr/share/man/man7/provider-cipher.7ssl.gz", "/usr/share/man/man7/provider-decoder.7ssl.gz", "/usr/share/man/man7/provider-digest.7ssl.gz", "/usr/share/man/man7/provider-encoder.7ssl.gz", "/usr/share/man/man7/provider-kdf.7ssl.gz", "/usr/share/man/man7/provider-kem.7ssl.gz", "/usr/share/man/man7/provider-keyexch.7ssl.gz", "/usr/share/man/man7/provider-keymgmt.7ssl.gz", "/usr/share/man/man7/provider-mac.7ssl.gz", "/usr/share/man/man7/provider-object.7ssl.gz", "/usr/share/man/man7/provider-rand.7ssl.gz", "/usr/share/man/man7/provider-signature.7ssl.gz", "/usr/share/man/man7/provider-skeymgmt.7ssl.gz", "/usr/share/man/man7/provider-storemgmt.7ssl.gz", "/usr/share/man/man7/provider.7ssl.gz", "/usr/share/man/man7/proxy-certificates.7ssl.gz", "/usr/share/man/man7/x509.7ssl.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "openssl-provider-legacy@3.5.4-1~deb13u2", "Name": "openssl-provider-legacy", "Identifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "Version": "3.5.4", "Release": "1~deb13u2", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.4", "SrcRelease": "1~deb13u2", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libssl3t64@3.5.4-1~deb13u2" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so", "/usr/share/doc/openssl-provider-legacy/changelog.Debian.gz", "/usr/share/doc/openssl-provider-legacy/changelog.gz", "/usr/share/doc/openssl-provider-legacy/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "passwd@1:4.17.4-2", "Name": "passwd", "Identifier": { "PURL": "pkg:deb/debian/passwd@4.17.4-2?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "20140a55896e3415" }, "Version": "4.17.4", "Release": "2", "Epoch": 1, "Arch": "amd64", "SrcName": "shadow", "SrcVersion": "4.17.4", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-1.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "base-passwd@3.6.7", "libacl1@2.3.2-2+b1", "libattr1@1:2.5.2-3", "libaudit1@1:4.0.2-2+b2", "libbsd0@0.12.2-2", "libc6@2.41-12+deb13u1", "libcrypt1@1:4.4.38-1", "libpam-modules@1.7.0-5", "libpam0g@1.7.0-5", "libselinux1@3.8.1-1", "libsemanage2@3.8.1-1", "login.defs@1:4.17.4-2" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/chage", "/usr/bin/chfn", "/usr/bin/chsh", "/usr/bin/expiry", "/usr/bin/gpasswd", "/usr/bin/passwd", "/usr/lib/tmpfiles.d/passwd.conf", "/usr/sbin/chgpasswd", "/usr/sbin/chpasswd", "/usr/sbin/groupadd", "/usr/sbin/groupdel", "/usr/sbin/groupmod", "/usr/sbin/grpck", "/usr/sbin/grpconv", "/usr/sbin/grpunconv", "/usr/sbin/newusers", "/usr/sbin/pwck", "/usr/sbin/pwconv", "/usr/sbin/pwunconv", "/usr/sbin/shadowconfig", "/usr/sbin/useradd", "/usr/sbin/userdel", "/usr/sbin/usermod", "/usr/sbin/vipw", "/usr/share/doc/passwd/NEWS.Debian.gz", "/usr/share/doc/passwd/README.Debian", "/usr/share/doc/passwd/TODO.Debian", "/usr/share/doc/passwd/changelog.Debian.gz", "/usr/share/doc/passwd/changelog.gz", "/usr/share/doc/passwd/copyright", "/usr/share/doc/passwd/examples/passwd.expire.cron", "/usr/share/lintian/overrides/passwd", "/usr/share/locale/bs/LC_MESSAGES/shadow.mo", "/usr/share/locale/ca/LC_MESSAGES/shadow.mo", "/usr/share/locale/cs/LC_MESSAGES/shadow.mo", "/usr/share/locale/da/LC_MESSAGES/shadow.mo", "/usr/share/locale/de/LC_MESSAGES/shadow.mo", "/usr/share/locale/dz/LC_MESSAGES/shadow.mo", "/usr/share/locale/el/LC_MESSAGES/shadow.mo", "/usr/share/locale/es/LC_MESSAGES/shadow.mo", "/usr/share/locale/eu/LC_MESSAGES/shadow.mo", "/usr/share/locale/fi/LC_MESSAGES/shadow.mo", "/usr/share/locale/fr/LC_MESSAGES/shadow.mo", "/usr/share/locale/gl/LC_MESSAGES/shadow.mo", "/usr/share/locale/he/LC_MESSAGES/shadow.mo", "/usr/share/locale/hu/LC_MESSAGES/shadow.mo", "/usr/share/locale/id/LC_MESSAGES/shadow.mo", "/usr/share/locale/it/LC_MESSAGES/shadow.mo", "/usr/share/locale/ja/LC_MESSAGES/shadow.mo", "/usr/share/locale/ka/LC_MESSAGES/shadow.mo", "/usr/share/locale/kk/LC_MESSAGES/shadow.mo", "/usr/share/locale/km/LC_MESSAGES/shadow.mo", "/usr/share/locale/ko/LC_MESSAGES/shadow.mo", "/usr/share/locale/nb/LC_MESSAGES/shadow.mo", "/usr/share/locale/ne/LC_MESSAGES/shadow.mo", "/usr/share/locale/nl/LC_MESSAGES/shadow.mo", "/usr/share/locale/nn/LC_MESSAGES/shadow.mo", "/usr/share/locale/pl/LC_MESSAGES/shadow.mo", "/usr/share/locale/pt/LC_MESSAGES/shadow.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/shadow.mo", "/usr/share/locale/ro/LC_MESSAGES/shadow.mo", "/usr/share/locale/ru/LC_MESSAGES/shadow.mo", "/usr/share/locale/sk/LC_MESSAGES/shadow.mo", "/usr/share/locale/sq/LC_MESSAGES/shadow.mo", "/usr/share/locale/sv/LC_MESSAGES/shadow.mo", "/usr/share/locale/tl/LC_MESSAGES/shadow.mo", "/usr/share/locale/tr/LC_MESSAGES/shadow.mo", "/usr/share/locale/uk/LC_MESSAGES/shadow.mo", "/usr/share/locale/vi/LC_MESSAGES/shadow.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/shadow.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/shadow.mo", "/usr/share/man/cs/man1/expiry.1.gz", "/usr/share/man/cs/man1/gpasswd.1.gz", "/usr/share/man/cs/man5/gshadow.5.gz", "/usr/share/man/cs/man5/passwd.5.gz", "/usr/share/man/cs/man5/shadow.5.gz", "/usr/share/man/cs/man8/groupadd.8.gz", "/usr/share/man/cs/man8/groupdel.8.gz", "/usr/share/man/cs/man8/groupmod.8.gz", "/usr/share/man/cs/man8/grpck.8.gz", "/usr/share/man/cs/man8/vipw.8.gz", "/usr/share/man/da/man1/chfn.1.gz", "/usr/share/man/da/man5/gshadow.5.gz", "/usr/share/man/da/man8/groupdel.8.gz", "/usr/share/man/da/man8/vipw.8.gz", "/usr/share/man/de/man1/chage.1.gz", "/usr/share/man/de/man1/chfn.1.gz", "/usr/share/man/de/man1/chsh.1.gz", "/usr/share/man/de/man1/expiry.1.gz", "/usr/share/man/de/man1/gpasswd.1.gz", "/usr/share/man/de/man1/passwd.1.gz", "/usr/share/man/de/man5/gshadow.5.gz", "/usr/share/man/de/man5/passwd.5.gz", "/usr/share/man/de/man5/shadow.5.gz", "/usr/share/man/de/man8/chgpasswd.8.gz", "/usr/share/man/de/man8/chpasswd.8.gz", "/usr/share/man/de/man8/groupadd.8.gz", "/usr/share/man/de/man8/groupdel.8.gz", "/usr/share/man/de/man8/groupmod.8.gz", "/usr/share/man/de/man8/grpck.8.gz", "/usr/share/man/de/man8/newusers.8.gz", "/usr/share/man/de/man8/pwck.8.gz", "/usr/share/man/de/man8/pwconv.8.gz", "/usr/share/man/de/man8/useradd.8.gz", "/usr/share/man/de/man8/userdel.8.gz", "/usr/share/man/de/man8/usermod.8.gz", "/usr/share/man/de/man8/vipw.8.gz", "/usr/share/man/fi/man1/chfn.1.gz", "/usr/share/man/fi/man1/chsh.1.gz", "/usr/share/man/fr/man1/chage.1.gz", "/usr/share/man/fr/man1/chfn.1.gz", "/usr/share/man/fr/man1/chsh.1.gz", "/usr/share/man/fr/man1/expiry.1.gz", "/usr/share/man/fr/man1/gpasswd.1.gz", "/usr/share/man/fr/man1/passwd.1.gz", "/usr/share/man/fr/man5/gshadow.5.gz", "/usr/share/man/fr/man5/passwd.5.gz", "/usr/share/man/fr/man5/shadow.5.gz", "/usr/share/man/fr/man5/subgid.5.gz", "/usr/share/man/fr/man5/subuid.5.gz", "/usr/share/man/fr/man8/chgpasswd.8.gz", "/usr/share/man/fr/man8/chpasswd.8.gz", "/usr/share/man/fr/man8/groupadd.8.gz", "/usr/share/man/fr/man8/groupdel.8.gz", "/usr/share/man/fr/man8/groupmod.8.gz", "/usr/share/man/fr/man8/grpck.8.gz", "/usr/share/man/fr/man8/newusers.8.gz", "/usr/share/man/fr/man8/pwck.8.gz", "/usr/share/man/fr/man8/pwconv.8.gz", "/usr/share/man/fr/man8/useradd.8.gz", "/usr/share/man/fr/man8/userdel.8.gz", "/usr/share/man/fr/man8/usermod.8.gz", "/usr/share/man/fr/man8/vipw.8.gz", "/usr/share/man/hu/man1/chsh.1.gz", "/usr/share/man/hu/man1/gpasswd.1.gz", "/usr/share/man/hu/man1/passwd.1.gz", "/usr/share/man/hu/man5/passwd.5.gz", "/usr/share/man/id/man1/chsh.1.gz", "/usr/share/man/id/man8/useradd.8.gz", "/usr/share/man/it/man1/chage.1.gz", "/usr/share/man/it/man1/chfn.1.gz", "/usr/share/man/it/man1/chsh.1.gz", "/usr/share/man/it/man1/expiry.1.gz", "/usr/share/man/it/man1/gpasswd.1.gz", "/usr/share/man/it/man1/passwd.1.gz", "/usr/share/man/it/man5/gshadow.5.gz", "/usr/share/man/it/man5/passwd.5.gz", "/usr/share/man/it/man5/shadow.5.gz", "/usr/share/man/it/man8/chgpasswd.8.gz", "/usr/share/man/it/man8/chpasswd.8.gz", "/usr/share/man/it/man8/groupadd.8.gz", "/usr/share/man/it/man8/groupdel.8.gz", "/usr/share/man/it/man8/groupmod.8.gz", "/usr/share/man/it/man8/grpck.8.gz", "/usr/share/man/it/man8/newusers.8.gz", "/usr/share/man/it/man8/pwck.8.gz", "/usr/share/man/it/man8/pwconv.8.gz", "/usr/share/man/it/man8/useradd.8.gz", "/usr/share/man/it/man8/userdel.8.gz", "/usr/share/man/it/man8/usermod.8.gz", "/usr/share/man/it/man8/vipw.8.gz", "/usr/share/man/ja/man1/chage.1.gz", "/usr/share/man/ja/man1/chfn.1.gz", "/usr/share/man/ja/man1/chsh.1.gz", "/usr/share/man/ja/man1/expiry.1.gz", "/usr/share/man/ja/man1/gpasswd.1.gz", "/usr/share/man/ja/man1/passwd.1.gz", "/usr/share/man/ja/man5/passwd.5.gz", "/usr/share/man/ja/man5/shadow.5.gz", "/usr/share/man/ja/man8/chpasswd.8.gz", "/usr/share/man/ja/man8/groupadd.8.gz", "/usr/share/man/ja/man8/groupdel.8.gz", "/usr/share/man/ja/man8/groupmod.8.gz", "/usr/share/man/ja/man8/grpck.8.gz", "/usr/share/man/ja/man8/newusers.8.gz", "/usr/share/man/ja/man8/pwck.8.gz", "/usr/share/man/ja/man8/pwconv.8.gz", "/usr/share/man/ja/man8/useradd.8.gz", "/usr/share/man/ja/man8/userdel.8.gz", "/usr/share/man/ja/man8/usermod.8.gz", "/usr/share/man/ja/man8/vipw.8.gz", "/usr/share/man/ko/man1/chfn.1.gz", "/usr/share/man/ko/man1/chsh.1.gz", "/usr/share/man/ko/man5/passwd.5.gz", "/usr/share/man/ko/man8/vipw.8.gz", "/usr/share/man/man1/chage.1.gz", "/usr/share/man/man1/chfn.1.gz", "/usr/share/man/man1/chsh.1.gz", "/usr/share/man/man1/expiry.1.gz", "/usr/share/man/man1/gpasswd.1.gz", "/usr/share/man/man1/passwd.1.gz", "/usr/share/man/man5/gshadow.5.gz", "/usr/share/man/man5/passwd.5.gz", "/usr/share/man/man5/shadow.5.gz", "/usr/share/man/man5/subgid.5.gz", "/usr/share/man/man5/subuid.5.gz", "/usr/share/man/man8/chgpasswd.8.gz", "/usr/share/man/man8/chpasswd.8.gz", "/usr/share/man/man8/groupadd.8.gz", "/usr/share/man/man8/groupdel.8.gz", "/usr/share/man/man8/groupmod.8.gz", "/usr/share/man/man8/grpck.8.gz", "/usr/share/man/man8/newusers.8.gz", "/usr/share/man/man8/pwck.8.gz", "/usr/share/man/man8/pwconv.8.gz", "/usr/share/man/man8/shadowconfig.8.gz", "/usr/share/man/man8/useradd.8.gz", "/usr/share/man/man8/userdel.8.gz", "/usr/share/man/man8/usermod.8.gz", "/usr/share/man/man8/vipw.8.gz", "/usr/share/man/pl/man1/chage.1.gz", "/usr/share/man/pl/man1/chsh.1.gz", "/usr/share/man/pl/man1/expiry.1.gz", "/usr/share/man/pl/man8/groupadd.8.gz", "/usr/share/man/pl/man8/groupdel.8.gz", "/usr/share/man/pl/man8/groupmod.8.gz", "/usr/share/man/pl/man8/grpck.8.gz", "/usr/share/man/pl/man8/userdel.8.gz", "/usr/share/man/pl/man8/usermod.8.gz", "/usr/share/man/pl/man8/vipw.8.gz", "/usr/share/man/pt_BR/man1/gpasswd.1.gz", "/usr/share/man/pt_BR/man5/passwd.5.gz", "/usr/share/man/pt_BR/man5/shadow.5.gz", "/usr/share/man/pt_BR/man8/groupadd.8.gz", "/usr/share/man/pt_BR/man8/groupdel.8.gz", "/usr/share/man/pt_BR/man8/groupmod.8.gz", "/usr/share/man/ru/man1/chage.1.gz", "/usr/share/man/ru/man1/chfn.1.gz", "/usr/share/man/ru/man1/chsh.1.gz", "/usr/share/man/ru/man1/expiry.1.gz", "/usr/share/man/ru/man1/gpasswd.1.gz", "/usr/share/man/ru/man1/passwd.1.gz", "/usr/share/man/ru/man5/gshadow.5.gz", "/usr/share/man/ru/man5/passwd.5.gz", "/usr/share/man/ru/man5/shadow.5.gz", "/usr/share/man/ru/man8/chgpasswd.8.gz", "/usr/share/man/ru/man8/chpasswd.8.gz", "/usr/share/man/ru/man8/groupadd.8.gz", "/usr/share/man/ru/man8/groupdel.8.gz", "/usr/share/man/ru/man8/groupmod.8.gz", "/usr/share/man/ru/man8/grpck.8.gz", "/usr/share/man/ru/man8/newusers.8.gz", "/usr/share/man/ru/man8/pwck.8.gz", "/usr/share/man/ru/man8/pwconv.8.gz", "/usr/share/man/ru/man8/useradd.8.gz", "/usr/share/man/ru/man8/userdel.8.gz", "/usr/share/man/ru/man8/usermod.8.gz", "/usr/share/man/ru/man8/vipw.8.gz", "/usr/share/man/sv/man1/chage.1.gz", "/usr/share/man/sv/man1/chsh.1.gz", "/usr/share/man/sv/man1/expiry.1.gz", "/usr/share/man/sv/man1/passwd.1.gz", "/usr/share/man/sv/man5/gshadow.5.gz", "/usr/share/man/sv/man5/passwd.5.gz", "/usr/share/man/sv/man8/groupadd.8.gz", "/usr/share/man/sv/man8/groupdel.8.gz", "/usr/share/man/sv/man8/groupmod.8.gz", "/usr/share/man/sv/man8/grpck.8.gz", "/usr/share/man/sv/man8/pwck.8.gz", "/usr/share/man/sv/man8/userdel.8.gz", "/usr/share/man/sv/man8/vipw.8.gz", "/usr/share/man/tr/man1/chage.1.gz", "/usr/share/man/tr/man1/chfn.1.gz", "/usr/share/man/tr/man1/passwd.1.gz", "/usr/share/man/tr/man5/passwd.5.gz", "/usr/share/man/tr/man5/shadow.5.gz", "/usr/share/man/tr/man8/groupadd.8.gz", "/usr/share/man/tr/man8/groupdel.8.gz", "/usr/share/man/tr/man8/groupmod.8.gz", "/usr/share/man/tr/man8/useradd.8.gz", "/usr/share/man/tr/man8/userdel.8.gz", "/usr/share/man/tr/man8/usermod.8.gz", "/usr/share/man/uk/man1/chage.1.gz", "/usr/share/man/uk/man1/chfn.1.gz", "/usr/share/man/uk/man1/chsh.1.gz", "/usr/share/man/uk/man1/expiry.1.gz", "/usr/share/man/uk/man1/gpasswd.1.gz", "/usr/share/man/uk/man1/passwd.1.gz", "/usr/share/man/uk/man5/gshadow.5.gz", "/usr/share/man/uk/man5/passwd.5.gz", "/usr/share/man/uk/man5/shadow.5.gz", "/usr/share/man/uk/man8/chgpasswd.8.gz", "/usr/share/man/uk/man8/chpasswd.8.gz", "/usr/share/man/uk/man8/groupadd.8.gz", "/usr/share/man/uk/man8/groupdel.8.gz", "/usr/share/man/uk/man8/groupmod.8.gz", "/usr/share/man/uk/man8/grpck.8.gz", "/usr/share/man/uk/man8/newusers.8.gz", "/usr/share/man/uk/man8/pwck.8.gz", "/usr/share/man/uk/man8/pwconv.8.gz", "/usr/share/man/uk/man8/useradd.8.gz", "/usr/share/man/uk/man8/userdel.8.gz", "/usr/share/man/uk/man8/usermod.8.gz", "/usr/share/man/uk/man8/vipw.8.gz", "/usr/share/man/zh_CN/man1/chage.1.gz", "/usr/share/man/zh_CN/man1/chfn.1.gz", "/usr/share/man/zh_CN/man1/chsh.1.gz", "/usr/share/man/zh_CN/man1/expiry.1.gz", "/usr/share/man/zh_CN/man1/gpasswd.1.gz", "/usr/share/man/zh_CN/man1/passwd.1.gz", "/usr/share/man/zh_CN/man5/gshadow.5.gz", "/usr/share/man/zh_CN/man5/passwd.5.gz", "/usr/share/man/zh_CN/man5/shadow.5.gz", "/usr/share/man/zh_CN/man8/chgpasswd.8.gz", "/usr/share/man/zh_CN/man8/chpasswd.8.gz", "/usr/share/man/zh_CN/man8/groupadd.8.gz", "/usr/share/man/zh_CN/man8/groupdel.8.gz", "/usr/share/man/zh_CN/man8/groupmod.8.gz", "/usr/share/man/zh_CN/man8/grpck.8.gz", "/usr/share/man/zh_CN/man8/newusers.8.gz", "/usr/share/man/zh_CN/man8/pwck.8.gz", "/usr/share/man/zh_CN/man8/pwconv.8.gz", "/usr/share/man/zh_CN/man8/useradd.8.gz", "/usr/share/man/zh_CN/man8/userdel.8.gz", "/usr/share/man/zh_CN/man8/usermod.8.gz", "/usr/share/man/zh_CN/man8/vipw.8.gz", "/usr/share/man/zh_TW/man1/chfn.1.gz", "/usr/share/man/zh_TW/man1/chsh.1.gz", "/usr/share/man/zh_TW/man5/passwd.5.gz", "/usr/share/man/zh_TW/man8/chpasswd.8.gz", "/usr/share/man/zh_TW/man8/groupadd.8.gz", "/usr/share/man/zh_TW/man8/groupdel.8.gz", "/usr/share/man/zh_TW/man8/groupmod.8.gz", "/usr/share/man/zh_TW/man8/useradd.8.gz", "/usr/share/man/zh_TW/man8/userdel.8.gz", "/usr/share/man/zh_TW/man8/usermod.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "perl-base@5.40.1-6", "Name": "perl-base", "Identifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "Version": "5.40.1", "Release": "6", "Arch": "amd64", "SrcName": "perl", "SrcVersion": "5.40.1", "SrcRelease": "6", "Licenses": [ "GPL-1.0-or-later", "Artistic-2.0", "MIT", "REGCOMP", "GPL-2.0-with-bison-exception+", "Unicode", "BZIP", "Zlib", "GPL-2.0-or-later", "FSFAP", "BSD-3-clause-with-weird-numbering", "CC0-1.0", "TEXT-TABS", "BSD-4-clause-POWERDOG", "BSD-3-clause-GENERIC", "BSD-3-Clause", "SDBM-PUBLIC-DOMAIN", "DONT-CHANGE-THE-GPL", "Artistic-dist", "LGPL-2.1-only", "GPL-1.0-only", "GPL-2.0-only", "Artistic-2" ], "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/perl", "/usr/bin/perl5.40.1", "/usr/lib/x86_64-linux-gnu/perl-base/AutoLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Carp.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Carp/Heavy.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Config.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Config_git.pl", "/usr/lib/x86_64-linux-gnu/perl-base/Config_heavy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/Cwd.pm", "/usr/lib/x86_64-linux-gnu/perl-base/DynaLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Errno.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Exporter.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Exporter/Heavy.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Fcntl.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Basename.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Glob.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Path.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Temp.pm", "/usr/lib/x86_64-linux-gnu/perl-base/FileHandle.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long/Parser.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Hash/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/File.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Handle.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Pipe.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Seekable.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Select.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/INET.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/IP.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/UNIX.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open2.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open3.pm", "/usr/lib/x86_64-linux-gnu/perl-base/List/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/POSIX.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Scalar/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/SelectSaver.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Symbol.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/ParseWords.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/Tabs.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/Wrap.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Tie/Hash.pm", "/usr/lib/x86_64-linux-gnu/perl-base/XSLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/attributes.pm", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Cwd/Cwd.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Fcntl/Fcntl.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/File/Glob/Glob.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Hash/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/IO/IO.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/List/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/POSIX/POSIX.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Socket/Socket.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/attributes/attributes.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/re/re.so", "/usr/lib/x86_64-linux-gnu/perl-base/base.pm", "/usr/lib/x86_64-linux-gnu/perl-base/builtin.pm", "/usr/lib/x86_64-linux-gnu/perl-base/bytes.pm", "/usr/lib/x86_64-linux-gnu/perl-base/constant.pm", "/usr/lib/x86_64-linux-gnu/perl-base/feature.pm", "/usr/lib/x86_64-linux-gnu/perl-base/fields.pm", "/usr/lib/x86_64-linux-gnu/perl-base/integer.pm", "/usr/lib/x86_64-linux-gnu/perl-base/lib.pm", "/usr/lib/x86_64-linux-gnu/perl-base/locale.pm", "/usr/lib/x86_64-linux-gnu/perl-base/overload.pm", "/usr/lib/x86_64-linux-gnu/perl-base/overloading.pm", "/usr/lib/x86_64-linux-gnu/perl-base/parent.pm", "/usr/lib/x86_64-linux-gnu/perl-base/re.pm", "/usr/lib/x86_64-linux-gnu/perl-base/strict.pm", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Age.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bmg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Cf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Ea.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/EqUIdeo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/GCB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Gc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Hst.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identif2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identifi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InPC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InSC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Isc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFCQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFDQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCCF.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKDQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Na1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NameAlia.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nv.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/PerlDeci.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/SB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Sc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Scx.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Tc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Uc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Vo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/WB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlLB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlSCX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V100.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V11.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V110.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V120.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V130.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V140.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V150.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V20.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V30.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V31.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V32.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V40.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V41.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V50.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V51.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V52.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V60.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V61.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V70.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V80.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V90.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Alpha/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/B.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/BN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/CS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/EN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ES.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ET.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/NSM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ON.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/WS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Blk/NB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/O.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CE/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CI/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCF/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWKCF/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWL/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWT/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWU/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Cased/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/A.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/ATAR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/B.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/BR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/DB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NK.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/OV.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/VR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CompEx/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/DI/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dash/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dep/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dia/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Com.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Enc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Fin.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Font.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Init.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Iso.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Med.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nar.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/NonCanon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sqr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sub.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sup.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Vert.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EBase/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EComp/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EPres/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/A.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/H.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/Na.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/W.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Emoji/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ext/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/ExtPict/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/CN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LV.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LVT.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/PP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/SM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/LC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ll.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/M.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Me.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/No.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/P.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pe.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Po.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ps.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/S.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sk.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/So.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Z.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Zs.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrBase/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrExt/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hex/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hst/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hyphen/T.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Allowed.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Restrict.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/DefaultI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Exclusio.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Inclusio.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/LimitedU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotChara.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotNFKC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotXID.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Obsolete.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Recommen.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Technica.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Uncommon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ideo/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/10_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/11_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/13_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/14_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/15_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/7_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/8_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/9_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Bottom.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/BottomAn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Left.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/LeftAndR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Overstru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Right.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Top.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndBo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndL2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndLe.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndRi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/VisualOr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Avagraha.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Bindu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Cantilla.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona5.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona7.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona9.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consonan.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Geminati.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Invisibl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Nukta.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Number.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Other.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/PureKill.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Syllable.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/ToneMark.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Virama.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Visarga.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Vowel.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelDep.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelInd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Ain.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Alef.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Beh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Dal.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/FarsiYeh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Feh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Gaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Hah.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/HanifiRo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Kaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Lam.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/NoJoinin.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Noon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Qaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Reh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Sad.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Seen.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Tah.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Waw.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Yeh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/D.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/T.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/U.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CJ.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/GL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/ID.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/OP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/QU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/SA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lower/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Math/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/M.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Di.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/None.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Nu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/11.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/12.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/13.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/14.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/15.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/17.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/18.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/19.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/200.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/300.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/400.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/500.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/600.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/700.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/800.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/900.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PCM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PatSyn/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Alnum.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Assigned.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Blank.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Graph.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PerlWord.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PosixPun.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Print.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/SpacePer.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Title.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Word.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/XPosixPu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlAny.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCh2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCha.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlFol.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIsI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlNch.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPat.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPr2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPro.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlQuo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/QMark/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/AT.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/CL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/FO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LE.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/SC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/ST.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/Sp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/UP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SD/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/STerm/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Arab.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Beng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cprt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cyrl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Deva.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Dupl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Geor.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Glag.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gonm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gran.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Grek.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gujr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Guru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Han.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hira.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Kana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Knda.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Latn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Limb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Linb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mlym.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mult.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Orya.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Sinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Syrc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Taml.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Telu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zyyy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Adlm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Arab.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Armn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Beng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bhks.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bopo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cakm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cham.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Copt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cprt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cyrl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Deva.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Diak.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Dupl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Ethi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Geor.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Glag.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gonm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gran.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Grek.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gujr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Guru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Han.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hebr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hira.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmnp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khar.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khmr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khoj.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Knda.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kthi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lao.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Latn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Limb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lina.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Linb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mlym.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mult.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mymr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nand.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nko.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Orya.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Phlp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Rohg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Shrd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sind.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Syrc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tagb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Takr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Talu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Taml.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Telu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Thaa.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tibt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tirh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Vith.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Xsux.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yezi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zyyy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zzzz.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Term/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/UIdeo/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Upper/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/VS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/U.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/Extend.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/FO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/HL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/KA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/LE.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/ML.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/WSegSpac.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/utf8.pm", "/usr/lib/x86_64-linux-gnu/perl-base/vars.pm", "/usr/lib/x86_64-linux-gnu/perl-base/warnings.pm", "/usr/lib/x86_64-linux-gnu/perl-base/warnings/register.pm", "/usr/share/doc/perl-base/changelog.Debian.gz", "/usr/share/doc/perl-base/changelog.gz", "/usr/share/doc/perl-base/copyright", "/usr/share/doc/perl/AUTHORS.gz", "/usr/share/doc/perl/Documentation", "/usr/share/lintian/overrides/perl-base", "/usr/share/man/man1/perl.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "readline-common@8.2-6", "Name": "readline-common", "Identifier": { "PURL": "pkg:deb/debian/readline-common@8.2-6?arch=all\u0026distro=debian-13.3", "UID": "c4beab42d2a9a634" }, "Version": "8.2", "Release": "6", "Arch": "all", "SrcName": "readline", "SrcVersion": "8.2", "SrcRelease": "6", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-or-later", "ISC-no-attribution" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "InstalledFiles": [ "/usr/share/doc/readline-common/changelog.Debian.gz", "/usr/share/doc/readline-common/changelog.gz", "/usr/share/doc/readline-common/copyright", "/usr/share/doc/readline-common/inputrc.arrows", "/usr/share/info/rluserman.info.gz", "/usr/share/lintian/overrides/readline-common", "/usr/share/man/man3/history.3readline.gz", "/usr/share/man/man3/readline.3readline.gz", "/usr/share/readline/inputrc" ], "AnalyzedBy": "dpkg" }, { "ID": "sed@4.9-2", "Name": "sed", "Identifier": { "PURL": "pkg:deb/debian/sed@4.9-2?arch=amd64\u0026distro=debian-13.3", "UID": "d383a5208f5e9f7d" }, "Version": "4.9", "Release": "2", "Arch": "amd64", "SrcName": "sed", "SrcVersion": "4.9", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "X11", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-only", "ISC", "BSD-4-Clause-UC", "BSL-1", "pcre" ], "Maintainer": "Clint Adams \u003cclint@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/sed", "/usr/share/doc/sed/AUTHORS", "/usr/share/doc/sed/BUGS.gz", "/usr/share/doc/sed/NEWS.gz", "/usr/share/doc/sed/README", "/usr/share/doc/sed/THANKS.gz", "/usr/share/doc/sed/changelog.Debian.gz", "/usr/share/doc/sed/changelog.gz", "/usr/share/doc/sed/copyright", "/usr/share/doc/sed/examples/dc.sed", "/usr/share/doc/sed/sedfaq.txt.gz", "/usr/share/info/sed.info.gz", "/usr/share/locale/af/LC_MESSAGES/sed.mo", "/usr/share/locale/ast/LC_MESSAGES/sed.mo", "/usr/share/locale/bg/LC_MESSAGES/sed.mo", "/usr/share/locale/ca/LC_MESSAGES/sed.mo", "/usr/share/locale/cs/LC_MESSAGES/sed.mo", "/usr/share/locale/da/LC_MESSAGES/sed.mo", "/usr/share/locale/de/LC_MESSAGES/sed.mo", "/usr/share/locale/el/LC_MESSAGES/sed.mo", "/usr/share/locale/eo/LC_MESSAGES/sed.mo", "/usr/share/locale/es/LC_MESSAGES/sed.mo", "/usr/share/locale/et/LC_MESSAGES/sed.mo", "/usr/share/locale/eu/LC_MESSAGES/sed.mo", "/usr/share/locale/fi/LC_MESSAGES/sed.mo", "/usr/share/locale/fr/LC_MESSAGES/sed.mo", "/usr/share/locale/ga/LC_MESSAGES/sed.mo", "/usr/share/locale/gl/LC_MESSAGES/sed.mo", "/usr/share/locale/he/LC_MESSAGES/sed.mo", "/usr/share/locale/hr/LC_MESSAGES/sed.mo", "/usr/share/locale/hu/LC_MESSAGES/sed.mo", "/usr/share/locale/id/LC_MESSAGES/sed.mo", "/usr/share/locale/it/LC_MESSAGES/sed.mo", "/usr/share/locale/ja/LC_MESSAGES/sed.mo", "/usr/share/locale/ka/LC_MESSAGES/sed.mo", "/usr/share/locale/ko/LC_MESSAGES/sed.mo", "/usr/share/locale/nb/LC_MESSAGES/sed.mo", "/usr/share/locale/nl/LC_MESSAGES/sed.mo", "/usr/share/locale/pl/LC_MESSAGES/sed.mo", "/usr/share/locale/pt/LC_MESSAGES/sed.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/sed.mo", "/usr/share/locale/ro/LC_MESSAGES/sed.mo", "/usr/share/locale/ru/LC_MESSAGES/sed.mo", "/usr/share/locale/sk/LC_MESSAGES/sed.mo", "/usr/share/locale/sl/LC_MESSAGES/sed.mo", "/usr/share/locale/sr/LC_MESSAGES/sed.mo", "/usr/share/locale/sv/LC_MESSAGES/sed.mo", "/usr/share/locale/tr/LC_MESSAGES/sed.mo", "/usr/share/locale/uk/LC_MESSAGES/sed.mo", "/usr/share/locale/vi/LC_MESSAGES/sed.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/sed.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo", "/usr/share/man/man1/sed.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "sqv@1.3.0-3+b2", "Name": "sqv", "Identifier": { "PURL": "pkg:deb/debian/sqv@1.3.0-3%2Bb2?arch=amd64\u0026distro=debian-13.3", "UID": "35b6c966383a5599" }, "Version": "1.3.0", "Release": "3+b2", "Arch": "amd64", "SrcName": "rust-sequoia-sqv", "SrcVersion": "1.3.0", "SrcRelease": "3", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.0-only" ], "Maintainer": "Debian Rust Maintainers \u003cpkg-rust-maintainers@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1", "libgcc-s1@14.2.0-19", "libgmp10@2:6.3.0+dfsg-3", "libhogweed6t64@3.10.1-1", "libnettle8t64@3.10.1-1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/sqv", "/usr/share/bash-completion/completions/sqv.bash", "/usr/share/doc/sqv/NEWS.gz", "/usr/share/doc/sqv/changelog.Debian.amd64.gz", "/usr/share/doc/sqv/changelog.Debian.gz", "/usr/share/doc/sqv/copyright", "/usr/share/fish/completions/sqv.fish", "/usr/share/man/man1/sqv.1.gz", "/usr/share/zsh/vendor-completions/_sqv" ], "AnalyzedBy": "dpkg" }, { "ID": "sysvinit-utils@3.14-4", "Name": "sysvinit-utils", "Identifier": { "PURL": "pkg:deb/debian/sysvinit-utils@3.14-4?arch=amd64\u0026distro=debian-13.3", "UID": "5d77c994e47b6e68" }, "Version": "3.14", "Release": "4", "Arch": "amd64", "SrcName": "sysvinit", "SrcVersion": "3.14", "SrcRelease": "4", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-only", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian sysvinit maintainers \u003cdebian-init-diversity@chiark.greenend.org.uk\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/init/init-d-script", "/usr/lib/init/vars.sh", "/usr/lib/lsb/init-functions", "/usr/lib/lsb/init-functions.d/00-verbose", "/usr/sbin/fstab-decode", "/usr/sbin/killall5", "/usr/share/doc/sysvinit-utils/changelog.Debian.gz", "/usr/share/doc/sysvinit-utils/copyright", "/usr/share/man/man5/init-d-script.5.gz", "/usr/share/man/man8/fstab-decode.8.gz", "/usr/share/man/man8/killall5.8.gz", "/usr/share/man/man8/pidof.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "tar@1.35+dfsg-3.1", "Name": "tar", "Identifier": { "PURL": "pkg:deb/debian/tar@1.35%2Bdfsg-3.1?arch=amd64\u0026distro=debian-13.3", "UID": "4f69996c49afbaca" }, "Version": "1.35+dfsg", "Release": "3.1", "Arch": "amd64", "SrcName": "tar", "SrcVersion": "1.35+dfsg", "SrcRelease": "3.1", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-3+ with Bison exception", "LGPL-2.1-or-later", "LGPL-2.1-only", "LGPL-3.0-or-later", "LGPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Janos Lenart \u003cocsi@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/tar", "/usr/lib/mime/packages/tar", "/usr/sbin/rmt-tar", "/usr/sbin/tarcat", "/usr/share/doc/tar/AUTHORS", "/usr/share/doc/tar/NEWS.gz", "/usr/share/doc/tar/README.Debian", "/usr/share/doc/tar/THANKS.gz", "/usr/share/doc/tar/changelog.1.gz", "/usr/share/doc/tar/changelog.Debian.gz", "/usr/share/doc/tar/changelog.gz", "/usr/share/doc/tar/copyright", "/usr/share/locale/bg/LC_MESSAGES/tar.mo", "/usr/share/locale/ca/LC_MESSAGES/tar.mo", "/usr/share/locale/cs/LC_MESSAGES/tar.mo", "/usr/share/locale/da/LC_MESSAGES/tar.mo", "/usr/share/locale/de/LC_MESSAGES/tar.mo", "/usr/share/locale/el/LC_MESSAGES/tar.mo", "/usr/share/locale/eo/LC_MESSAGES/tar.mo", "/usr/share/locale/es/LC_MESSAGES/tar.mo", "/usr/share/locale/et/LC_MESSAGES/tar.mo", "/usr/share/locale/eu/LC_MESSAGES/tar.mo", "/usr/share/locale/fi/LC_MESSAGES/tar.mo", "/usr/share/locale/fr/LC_MESSAGES/tar.mo", "/usr/share/locale/ga/LC_MESSAGES/tar.mo", "/usr/share/locale/gl/LC_MESSAGES/tar.mo", "/usr/share/locale/hr/LC_MESSAGES/tar.mo", "/usr/share/locale/hu/LC_MESSAGES/tar.mo", "/usr/share/locale/id/LC_MESSAGES/tar.mo", "/usr/share/locale/it/LC_MESSAGES/tar.mo", "/usr/share/locale/ja/LC_MESSAGES/tar.mo", "/usr/share/locale/ka/LC_MESSAGES/tar.mo", "/usr/share/locale/ko/LC_MESSAGES/tar.mo", "/usr/share/locale/ky/LC_MESSAGES/tar.mo", "/usr/share/locale/ms/LC_MESSAGES/tar.mo", "/usr/share/locale/nb/LC_MESSAGES/tar.mo", "/usr/share/locale/nl/LC_MESSAGES/tar.mo", "/usr/share/locale/pl/LC_MESSAGES/tar.mo", "/usr/share/locale/pt/LC_MESSAGES/tar.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/tar.mo", "/usr/share/locale/ro/LC_MESSAGES/tar.mo", "/usr/share/locale/ru/LC_MESSAGES/tar.mo", "/usr/share/locale/sk/LC_MESSAGES/tar.mo", "/usr/share/locale/sl/LC_MESSAGES/tar.mo", "/usr/share/locale/sr/LC_MESSAGES/tar.mo", "/usr/share/locale/sv/LC_MESSAGES/tar.mo", "/usr/share/locale/tr/LC_MESSAGES/tar.mo", "/usr/share/locale/uk/LC_MESSAGES/tar.mo", "/usr/share/locale/vi/LC_MESSAGES/tar.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/tar.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/tar.mo", "/usr/share/man/man1/tar.1.gz", "/usr/share/man/man1/tarcat.1.gz", "/usr/share/man/man8/rmt-tar.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "tzdata@2025b-4+deb13u1", "Name": "tzdata", "Identifier": { "PURL": "pkg:deb/debian/tzdata@2025b-4%2Bdeb13u1?arch=all\u0026distro=debian-13.3", "UID": "7331305c81b4897a" }, "Version": "2025b", "Release": "4+deb13u1", "Arch": "all", "SrcName": "tzdata", "SrcVersion": "2025b", "SrcRelease": "4+deb13u1", "Licenses": [ "public-domain" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/share/doc/tzdata/NEWS.Debian.gz", "/usr/share/doc/tzdata/README.Debian", "/usr/share/doc/tzdata/changelog.Debian.gz", "/usr/share/doc/tzdata/changelog.gz", "/usr/share/doc/tzdata/copyright", "/usr/share/lintian/overrides/tzdata", "/usr/share/zoneinfo/Africa/Abidjan", "/usr/share/zoneinfo/Africa/Accra", "/usr/share/zoneinfo/Africa/Addis_Ababa", "/usr/share/zoneinfo/Africa/Algiers", "/usr/share/zoneinfo/Africa/Asmara", "/usr/share/zoneinfo/Africa/Bamako", "/usr/share/zoneinfo/Africa/Bangui", "/usr/share/zoneinfo/Africa/Banjul", "/usr/share/zoneinfo/Africa/Bissau", "/usr/share/zoneinfo/Africa/Blantyre", "/usr/share/zoneinfo/Africa/Brazzaville", "/usr/share/zoneinfo/Africa/Bujumbura", "/usr/share/zoneinfo/Africa/Cairo", "/usr/share/zoneinfo/Africa/Casablanca", "/usr/share/zoneinfo/Africa/Ceuta", "/usr/share/zoneinfo/Africa/Conakry", "/usr/share/zoneinfo/Africa/Dakar", "/usr/share/zoneinfo/Africa/Dar_es_Salaam", "/usr/share/zoneinfo/Africa/Djibouti", "/usr/share/zoneinfo/Africa/Douala", "/usr/share/zoneinfo/Africa/El_Aaiun", "/usr/share/zoneinfo/Africa/Freetown", "/usr/share/zoneinfo/Africa/Gaborone", "/usr/share/zoneinfo/Africa/Harare", "/usr/share/zoneinfo/Africa/Johannesburg", "/usr/share/zoneinfo/Africa/Juba", "/usr/share/zoneinfo/Africa/Kampala", "/usr/share/zoneinfo/Africa/Khartoum", "/usr/share/zoneinfo/Africa/Kigali", "/usr/share/zoneinfo/Africa/Kinshasa", "/usr/share/zoneinfo/Africa/Lagos", "/usr/share/zoneinfo/Africa/Libreville", "/usr/share/zoneinfo/Africa/Lome", "/usr/share/zoneinfo/Africa/Luanda", "/usr/share/zoneinfo/Africa/Lubumbashi", "/usr/share/zoneinfo/Africa/Lusaka", "/usr/share/zoneinfo/Africa/Malabo", "/usr/share/zoneinfo/Africa/Maputo", "/usr/share/zoneinfo/Africa/Maseru", "/usr/share/zoneinfo/Africa/Mbabane", "/usr/share/zoneinfo/Africa/Mogadishu", "/usr/share/zoneinfo/Africa/Monrovia", "/usr/share/zoneinfo/Africa/Nairobi", "/usr/share/zoneinfo/Africa/Ndjamena", "/usr/share/zoneinfo/Africa/Niamey", "/usr/share/zoneinfo/Africa/Nouakchott", "/usr/share/zoneinfo/Africa/Ouagadougou", "/usr/share/zoneinfo/Africa/Porto-Novo", "/usr/share/zoneinfo/Africa/Sao_Tome", "/usr/share/zoneinfo/Africa/Tripoli", "/usr/share/zoneinfo/Africa/Tunis", "/usr/share/zoneinfo/Africa/Windhoek", "/usr/share/zoneinfo/America/Adak", "/usr/share/zoneinfo/America/Anchorage", "/usr/share/zoneinfo/America/Anguilla", "/usr/share/zoneinfo/America/Antigua", "/usr/share/zoneinfo/America/Araguaina", "/usr/share/zoneinfo/America/Argentina/Buenos_Aires", "/usr/share/zoneinfo/America/Argentina/Catamarca", "/usr/share/zoneinfo/America/Argentina/Cordoba", "/usr/share/zoneinfo/America/Argentina/Jujuy", "/usr/share/zoneinfo/America/Argentina/La_Rioja", "/usr/share/zoneinfo/America/Argentina/Mendoza", "/usr/share/zoneinfo/America/Argentina/Rio_Gallegos", "/usr/share/zoneinfo/America/Argentina/Salta", "/usr/share/zoneinfo/America/Argentina/San_Juan", "/usr/share/zoneinfo/America/Argentina/San_Luis", "/usr/share/zoneinfo/America/Argentina/Tucuman", "/usr/share/zoneinfo/America/Argentina/Ushuaia", "/usr/share/zoneinfo/America/Aruba", "/usr/share/zoneinfo/America/Asuncion", "/usr/share/zoneinfo/America/Atikokan", "/usr/share/zoneinfo/America/Bahia", "/usr/share/zoneinfo/America/Bahia_Banderas", "/usr/share/zoneinfo/America/Barbados", "/usr/share/zoneinfo/America/Belem", "/usr/share/zoneinfo/America/Belize", "/usr/share/zoneinfo/America/Blanc-Sablon", "/usr/share/zoneinfo/America/Boa_Vista", "/usr/share/zoneinfo/America/Bogota", "/usr/share/zoneinfo/America/Boise", "/usr/share/zoneinfo/America/Cambridge_Bay", "/usr/share/zoneinfo/America/Campo_Grande", "/usr/share/zoneinfo/America/Cancun", "/usr/share/zoneinfo/America/Caracas", "/usr/share/zoneinfo/America/Cayenne", "/usr/share/zoneinfo/America/Cayman", "/usr/share/zoneinfo/America/Chicago", "/usr/share/zoneinfo/America/Chihuahua", "/usr/share/zoneinfo/America/Ciudad_Juarez", "/usr/share/zoneinfo/America/Costa_Rica", "/usr/share/zoneinfo/America/Coyhaique", "/usr/share/zoneinfo/America/Creston", "/usr/share/zoneinfo/America/Cuiaba", "/usr/share/zoneinfo/America/Curacao", "/usr/share/zoneinfo/America/Danmarkshavn", "/usr/share/zoneinfo/America/Dawson", "/usr/share/zoneinfo/America/Dawson_Creek", "/usr/share/zoneinfo/America/Denver", "/usr/share/zoneinfo/America/Detroit", "/usr/share/zoneinfo/America/Dominica", "/usr/share/zoneinfo/America/Edmonton", "/usr/share/zoneinfo/America/Eirunepe", "/usr/share/zoneinfo/America/El_Salvador", "/usr/share/zoneinfo/America/Fort_Nelson", "/usr/share/zoneinfo/America/Fortaleza", "/usr/share/zoneinfo/America/Glace_Bay", "/usr/share/zoneinfo/America/Goose_Bay", "/usr/share/zoneinfo/America/Grand_Turk", "/usr/share/zoneinfo/America/Grenada", "/usr/share/zoneinfo/America/Guadeloupe", "/usr/share/zoneinfo/America/Guatemala", "/usr/share/zoneinfo/America/Guayaquil", "/usr/share/zoneinfo/America/Guyana", "/usr/share/zoneinfo/America/Halifax", "/usr/share/zoneinfo/America/Havana", "/usr/share/zoneinfo/America/Hermosillo", "/usr/share/zoneinfo/America/Indiana/Indianapolis", "/usr/share/zoneinfo/America/Indiana/Knox", "/usr/share/zoneinfo/America/Indiana/Marengo", "/usr/share/zoneinfo/America/Indiana/Petersburg", "/usr/share/zoneinfo/America/Indiana/Tell_City", "/usr/share/zoneinfo/America/Indiana/Vevay", "/usr/share/zoneinfo/America/Indiana/Vincennes", "/usr/share/zoneinfo/America/Indiana/Winamac", "/usr/share/zoneinfo/America/Inuvik", "/usr/share/zoneinfo/America/Iqaluit", "/usr/share/zoneinfo/America/Jamaica", "/usr/share/zoneinfo/America/Juneau", "/usr/share/zoneinfo/America/Kentucky/Louisville", "/usr/share/zoneinfo/America/Kentucky/Monticello", "/usr/share/zoneinfo/America/La_Paz", "/usr/share/zoneinfo/America/Lima", "/usr/share/zoneinfo/America/Los_Angeles", "/usr/share/zoneinfo/America/Maceio", "/usr/share/zoneinfo/America/Managua", "/usr/share/zoneinfo/America/Manaus", "/usr/share/zoneinfo/America/Martinique", "/usr/share/zoneinfo/America/Matamoros", "/usr/share/zoneinfo/America/Mazatlan", "/usr/share/zoneinfo/America/Menominee", "/usr/share/zoneinfo/America/Merida", "/usr/share/zoneinfo/America/Metlakatla", "/usr/share/zoneinfo/America/Mexico_City", "/usr/share/zoneinfo/America/Miquelon", "/usr/share/zoneinfo/America/Moncton", "/usr/share/zoneinfo/America/Monterrey", "/usr/share/zoneinfo/America/Montevideo", "/usr/share/zoneinfo/America/Montserrat", "/usr/share/zoneinfo/America/Nassau", "/usr/share/zoneinfo/America/New_York", "/usr/share/zoneinfo/America/Nome", "/usr/share/zoneinfo/America/Noronha", "/usr/share/zoneinfo/America/North_Dakota/Beulah", "/usr/share/zoneinfo/America/North_Dakota/Center", "/usr/share/zoneinfo/America/North_Dakota/New_Salem", "/usr/share/zoneinfo/America/Nuuk", "/usr/share/zoneinfo/America/Ojinaga", "/usr/share/zoneinfo/America/Panama", "/usr/share/zoneinfo/America/Paramaribo", "/usr/share/zoneinfo/America/Phoenix", "/usr/share/zoneinfo/America/Port-au-Prince", "/usr/share/zoneinfo/America/Port_of_Spain", "/usr/share/zoneinfo/America/Porto_Velho", "/usr/share/zoneinfo/America/Puerto_Rico", "/usr/share/zoneinfo/America/Punta_Arenas", "/usr/share/zoneinfo/America/Rankin_Inlet", "/usr/share/zoneinfo/America/Recife", "/usr/share/zoneinfo/America/Regina", "/usr/share/zoneinfo/America/Resolute", "/usr/share/zoneinfo/America/Rio_Branco", "/usr/share/zoneinfo/America/Santarem", "/usr/share/zoneinfo/America/Santiago", "/usr/share/zoneinfo/America/Santo_Domingo", "/usr/share/zoneinfo/America/Sao_Paulo", "/usr/share/zoneinfo/America/Scoresbysund", "/usr/share/zoneinfo/America/Sitka", "/usr/share/zoneinfo/America/St_Johns", "/usr/share/zoneinfo/America/St_Kitts", "/usr/share/zoneinfo/America/St_Lucia", "/usr/share/zoneinfo/America/St_Thomas", "/usr/share/zoneinfo/America/St_Vincent", "/usr/share/zoneinfo/America/Swift_Current", "/usr/share/zoneinfo/America/Tegucigalpa", "/usr/share/zoneinfo/America/Thule", "/usr/share/zoneinfo/America/Tijuana", "/usr/share/zoneinfo/America/Toronto", "/usr/share/zoneinfo/America/Tortola", "/usr/share/zoneinfo/America/Vancouver", "/usr/share/zoneinfo/America/Whitehorse", "/usr/share/zoneinfo/America/Winnipeg", "/usr/share/zoneinfo/America/Yakutat", "/usr/share/zoneinfo/Antarctica/Casey", "/usr/share/zoneinfo/Antarctica/Davis", "/usr/share/zoneinfo/Antarctica/DumontDUrville", "/usr/share/zoneinfo/Antarctica/Macquarie", "/usr/share/zoneinfo/Antarctica/Mawson", "/usr/share/zoneinfo/Antarctica/McMurdo", "/usr/share/zoneinfo/Antarctica/Palmer", "/usr/share/zoneinfo/Antarctica/Rothera", "/usr/share/zoneinfo/Antarctica/Syowa", "/usr/share/zoneinfo/Antarctica/Troll", "/usr/share/zoneinfo/Antarctica/Vostok", "/usr/share/zoneinfo/Asia/Aden", "/usr/share/zoneinfo/Asia/Almaty", "/usr/share/zoneinfo/Asia/Amman", "/usr/share/zoneinfo/Asia/Anadyr", "/usr/share/zoneinfo/Asia/Aqtau", "/usr/share/zoneinfo/Asia/Aqtobe", "/usr/share/zoneinfo/Asia/Ashgabat", "/usr/share/zoneinfo/Asia/Atyrau", "/usr/share/zoneinfo/Asia/Baghdad", "/usr/share/zoneinfo/Asia/Bahrain", "/usr/share/zoneinfo/Asia/Baku", "/usr/share/zoneinfo/Asia/Bangkok", "/usr/share/zoneinfo/Asia/Barnaul", "/usr/share/zoneinfo/Asia/Beirut", "/usr/share/zoneinfo/Asia/Bishkek", "/usr/share/zoneinfo/Asia/Brunei", "/usr/share/zoneinfo/Asia/Chita", "/usr/share/zoneinfo/Asia/Colombo", "/usr/share/zoneinfo/Asia/Damascus", "/usr/share/zoneinfo/Asia/Dhaka", "/usr/share/zoneinfo/Asia/Dili", "/usr/share/zoneinfo/Asia/Dubai", "/usr/share/zoneinfo/Asia/Dushanbe", "/usr/share/zoneinfo/Asia/Famagusta", "/usr/share/zoneinfo/Asia/Gaza", "/usr/share/zoneinfo/Asia/Hebron", "/usr/share/zoneinfo/Asia/Ho_Chi_Minh", "/usr/share/zoneinfo/Asia/Hong_Kong", "/usr/share/zoneinfo/Asia/Hovd", "/usr/share/zoneinfo/Asia/Irkutsk", "/usr/share/zoneinfo/Asia/Jakarta", "/usr/share/zoneinfo/Asia/Jayapura", "/usr/share/zoneinfo/Asia/Jerusalem", "/usr/share/zoneinfo/Asia/Kabul", "/usr/share/zoneinfo/Asia/Kamchatka", "/usr/share/zoneinfo/Asia/Karachi", "/usr/share/zoneinfo/Asia/Kathmandu", "/usr/share/zoneinfo/Asia/Khandyga", "/usr/share/zoneinfo/Asia/Kolkata", "/usr/share/zoneinfo/Asia/Krasnoyarsk", "/usr/share/zoneinfo/Asia/Kuala_Lumpur", "/usr/share/zoneinfo/Asia/Kuching", "/usr/share/zoneinfo/Asia/Kuwait", "/usr/share/zoneinfo/Asia/Macau", "/usr/share/zoneinfo/Asia/Magadan", "/usr/share/zoneinfo/Asia/Makassar", "/usr/share/zoneinfo/Asia/Manila", "/usr/share/zoneinfo/Asia/Muscat", "/usr/share/zoneinfo/Asia/Nicosia", "/usr/share/zoneinfo/Asia/Novokuznetsk", "/usr/share/zoneinfo/Asia/Novosibirsk", "/usr/share/zoneinfo/Asia/Omsk", "/usr/share/zoneinfo/Asia/Oral", "/usr/share/zoneinfo/Asia/Phnom_Penh", "/usr/share/zoneinfo/Asia/Pontianak", "/usr/share/zoneinfo/Asia/Pyongyang", "/usr/share/zoneinfo/Asia/Qatar", "/usr/share/zoneinfo/Asia/Qostanay", "/usr/share/zoneinfo/Asia/Qyzylorda", "/usr/share/zoneinfo/Asia/Riyadh", "/usr/share/zoneinfo/Asia/Sakhalin", "/usr/share/zoneinfo/Asia/Samarkand", "/usr/share/zoneinfo/Asia/Seoul", "/usr/share/zoneinfo/Asia/Shanghai", "/usr/share/zoneinfo/Asia/Singapore", "/usr/share/zoneinfo/Asia/Srednekolymsk", "/usr/share/zoneinfo/Asia/Taipei", "/usr/share/zoneinfo/Asia/Tashkent", "/usr/share/zoneinfo/Asia/Tbilisi", "/usr/share/zoneinfo/Asia/Tehran", "/usr/share/zoneinfo/Asia/Thimphu", "/usr/share/zoneinfo/Asia/Tokyo", "/usr/share/zoneinfo/Asia/Tomsk", "/usr/share/zoneinfo/Asia/Ulaanbaatar", "/usr/share/zoneinfo/Asia/Urumqi", "/usr/share/zoneinfo/Asia/Ust-Nera", "/usr/share/zoneinfo/Asia/Vientiane", "/usr/share/zoneinfo/Asia/Vladivostok", "/usr/share/zoneinfo/Asia/Yakutsk", "/usr/share/zoneinfo/Asia/Yangon", "/usr/share/zoneinfo/Asia/Yekaterinburg", "/usr/share/zoneinfo/Asia/Yerevan", "/usr/share/zoneinfo/Atlantic/Azores", "/usr/share/zoneinfo/Atlantic/Bermuda", "/usr/share/zoneinfo/Atlantic/Canary", "/usr/share/zoneinfo/Atlantic/Cape_Verde", "/usr/share/zoneinfo/Atlantic/Faroe", "/usr/share/zoneinfo/Atlantic/Madeira", "/usr/share/zoneinfo/Atlantic/Reykjavik", "/usr/share/zoneinfo/Atlantic/South_Georgia", "/usr/share/zoneinfo/Atlantic/St_Helena", "/usr/share/zoneinfo/Atlantic/Stanley", "/usr/share/zoneinfo/Australia/Adelaide", "/usr/share/zoneinfo/Australia/Brisbane", "/usr/share/zoneinfo/Australia/Broken_Hill", "/usr/share/zoneinfo/Australia/Darwin", "/usr/share/zoneinfo/Australia/Eucla", "/usr/share/zoneinfo/Australia/Hobart", "/usr/share/zoneinfo/Australia/Lindeman", "/usr/share/zoneinfo/Australia/Lord_Howe", "/usr/share/zoneinfo/Australia/Melbourne", "/usr/share/zoneinfo/Australia/Perth", "/usr/share/zoneinfo/Australia/Sydney", "/usr/share/zoneinfo/Etc/GMT", "/usr/share/zoneinfo/Etc/GMT+1", "/usr/share/zoneinfo/Etc/GMT+10", "/usr/share/zoneinfo/Etc/GMT+11", "/usr/share/zoneinfo/Etc/GMT+12", "/usr/share/zoneinfo/Etc/GMT+2", "/usr/share/zoneinfo/Etc/GMT+3", "/usr/share/zoneinfo/Etc/GMT+4", "/usr/share/zoneinfo/Etc/GMT+5", "/usr/share/zoneinfo/Etc/GMT+6", "/usr/share/zoneinfo/Etc/GMT+7", "/usr/share/zoneinfo/Etc/GMT+8", "/usr/share/zoneinfo/Etc/GMT+9", "/usr/share/zoneinfo/Etc/GMT-1", "/usr/share/zoneinfo/Etc/GMT-10", "/usr/share/zoneinfo/Etc/GMT-11", "/usr/share/zoneinfo/Etc/GMT-12", "/usr/share/zoneinfo/Etc/GMT-13", "/usr/share/zoneinfo/Etc/GMT-14", "/usr/share/zoneinfo/Etc/GMT-2", "/usr/share/zoneinfo/Etc/GMT-3", "/usr/share/zoneinfo/Etc/GMT-4", "/usr/share/zoneinfo/Etc/GMT-5", "/usr/share/zoneinfo/Etc/GMT-6", "/usr/share/zoneinfo/Etc/GMT-7", "/usr/share/zoneinfo/Etc/GMT-8", "/usr/share/zoneinfo/Etc/GMT-9", "/usr/share/zoneinfo/Etc/UTC", "/usr/share/zoneinfo/Europe/Amsterdam", "/usr/share/zoneinfo/Europe/Andorra", "/usr/share/zoneinfo/Europe/Astrakhan", "/usr/share/zoneinfo/Europe/Athens", "/usr/share/zoneinfo/Europe/Belgrade", "/usr/share/zoneinfo/Europe/Berlin", "/usr/share/zoneinfo/Europe/Brussels", "/usr/share/zoneinfo/Europe/Bucharest", "/usr/share/zoneinfo/Europe/Budapest", "/usr/share/zoneinfo/Europe/Chisinau", "/usr/share/zoneinfo/Europe/Copenhagen", "/usr/share/zoneinfo/Europe/Dublin", "/usr/share/zoneinfo/Europe/Gibraltar", "/usr/share/zoneinfo/Europe/Guernsey", "/usr/share/zoneinfo/Europe/Helsinki", "/usr/share/zoneinfo/Europe/Isle_of_Man", "/usr/share/zoneinfo/Europe/Istanbul", "/usr/share/zoneinfo/Europe/Jersey", "/usr/share/zoneinfo/Europe/Kaliningrad", "/usr/share/zoneinfo/Europe/Kirov", "/usr/share/zoneinfo/Europe/Kyiv", "/usr/share/zoneinfo/Europe/Lisbon", "/usr/share/zoneinfo/Europe/Ljubljana", "/usr/share/zoneinfo/Europe/London", "/usr/share/zoneinfo/Europe/Luxembourg", "/usr/share/zoneinfo/Europe/Madrid", "/usr/share/zoneinfo/Europe/Malta", "/usr/share/zoneinfo/Europe/Minsk", "/usr/share/zoneinfo/Europe/Monaco", "/usr/share/zoneinfo/Europe/Moscow", "/usr/share/zoneinfo/Europe/Oslo", "/usr/share/zoneinfo/Europe/Paris", "/usr/share/zoneinfo/Europe/Prague", "/usr/share/zoneinfo/Europe/Riga", "/usr/share/zoneinfo/Europe/Rome", "/usr/share/zoneinfo/Europe/Samara", "/usr/share/zoneinfo/Europe/Sarajevo", "/usr/share/zoneinfo/Europe/Saratov", "/usr/share/zoneinfo/Europe/Simferopol", "/usr/share/zoneinfo/Europe/Skopje", "/usr/share/zoneinfo/Europe/Sofia", "/usr/share/zoneinfo/Europe/Stockholm", "/usr/share/zoneinfo/Europe/Tallinn", "/usr/share/zoneinfo/Europe/Tirane", "/usr/share/zoneinfo/Europe/Ulyanovsk", "/usr/share/zoneinfo/Europe/Vaduz", "/usr/share/zoneinfo/Europe/Vienna", "/usr/share/zoneinfo/Europe/Vilnius", "/usr/share/zoneinfo/Europe/Volgograd", "/usr/share/zoneinfo/Europe/Warsaw", "/usr/share/zoneinfo/Europe/Zagreb", "/usr/share/zoneinfo/Europe/Zurich", "/usr/share/zoneinfo/Factory", "/usr/share/zoneinfo/Indian/Antananarivo", "/usr/share/zoneinfo/Indian/Chagos", "/usr/share/zoneinfo/Indian/Christmas", "/usr/share/zoneinfo/Indian/Cocos", "/usr/share/zoneinfo/Indian/Comoro", "/usr/share/zoneinfo/Indian/Kerguelen", "/usr/share/zoneinfo/Indian/Mahe", "/usr/share/zoneinfo/Indian/Maldives", "/usr/share/zoneinfo/Indian/Mauritius", "/usr/share/zoneinfo/Indian/Mayotte", "/usr/share/zoneinfo/Indian/Reunion", "/usr/share/zoneinfo/Pacific/Apia", "/usr/share/zoneinfo/Pacific/Auckland", "/usr/share/zoneinfo/Pacific/Bougainville", "/usr/share/zoneinfo/Pacific/Chatham", "/usr/share/zoneinfo/Pacific/Chuuk", "/usr/share/zoneinfo/Pacific/Easter", "/usr/share/zoneinfo/Pacific/Efate", "/usr/share/zoneinfo/Pacific/Fakaofo", "/usr/share/zoneinfo/Pacific/Fiji", "/usr/share/zoneinfo/Pacific/Funafuti", "/usr/share/zoneinfo/Pacific/Galapagos", "/usr/share/zoneinfo/Pacific/Gambier", "/usr/share/zoneinfo/Pacific/Guadalcanal", "/usr/share/zoneinfo/Pacific/Guam", "/usr/share/zoneinfo/Pacific/Honolulu", "/usr/share/zoneinfo/Pacific/Kanton", "/usr/share/zoneinfo/Pacific/Kiritimati", "/usr/share/zoneinfo/Pacific/Kosrae", "/usr/share/zoneinfo/Pacific/Kwajalein", "/usr/share/zoneinfo/Pacific/Majuro", "/usr/share/zoneinfo/Pacific/Marquesas", "/usr/share/zoneinfo/Pacific/Midway", "/usr/share/zoneinfo/Pacific/Nauru", "/usr/share/zoneinfo/Pacific/Niue", "/usr/share/zoneinfo/Pacific/Norfolk", "/usr/share/zoneinfo/Pacific/Noumea", "/usr/share/zoneinfo/Pacific/Pago_Pago", "/usr/share/zoneinfo/Pacific/Palau", "/usr/share/zoneinfo/Pacific/Pitcairn", "/usr/share/zoneinfo/Pacific/Pohnpei", "/usr/share/zoneinfo/Pacific/Port_Moresby", "/usr/share/zoneinfo/Pacific/Rarotonga", "/usr/share/zoneinfo/Pacific/Saipan", "/usr/share/zoneinfo/Pacific/Tahiti", "/usr/share/zoneinfo/Pacific/Tarawa", "/usr/share/zoneinfo/Pacific/Tongatapu", "/usr/share/zoneinfo/Pacific/Wake", "/usr/share/zoneinfo/Pacific/Wallis", "/usr/share/zoneinfo/iso3166.tab", "/usr/share/zoneinfo/leap-seconds.list", "/usr/share/zoneinfo/leapseconds", "/usr/share/zoneinfo/tzdata.zi", "/usr/share/zoneinfo/zone.tab", "/usr/share/zoneinfo/zone1970.tab", "/usr/share/zoneinfo/zonenow.tab" ], "AnalyzedBy": "dpkg" }, { "ID": "util-linux@2.41-5", "Name": "util-linux", "Identifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/bin/choom", "/usr/bin/chrt", "/usr/bin/dmesg", "/usr/bin/fallocate", "/usr/bin/findmnt", "/usr/bin/flock", "/usr/bin/getopt", "/usr/bin/hardlink", "/usr/bin/ionice", "/usr/bin/ipcmk", "/usr/bin/ipcrm", "/usr/bin/ipcs", "/usr/bin/lsblk", "/usr/bin/lscpu", "/usr/bin/lsipc", "/usr/bin/lslocks", "/usr/bin/lslogins", "/usr/bin/lsmem", "/usr/bin/lsns", "/usr/bin/mcookie", "/usr/bin/more", "/usr/bin/mountpoint", "/usr/bin/namei", "/usr/bin/nsenter", "/usr/bin/partx", "/usr/bin/prlimit", "/usr/bin/rename.ul", "/usr/bin/rev", "/usr/bin/setarch", "/usr/bin/setpriv", "/usr/bin/setsid", "/usr/bin/setterm", "/usr/bin/su", "/usr/bin/taskset", "/usr/bin/uclampset", "/usr/bin/unshare", "/usr/bin/wdctl", "/usr/bin/whereis", "/usr/lib/mime/packages/util-linux", "/usr/lib/systemd/system/fstrim.service", "/usr/lib/systemd/system/fstrim.timer", "/usr/sbin/agetty", "/usr/sbin/blkdiscard", "/usr/sbin/blkid", "/usr/sbin/blkzone", "/usr/sbin/blockdev", "/usr/sbin/chcpu", "/usr/sbin/chmem", "/usr/sbin/findfs", "/usr/sbin/fsck", "/usr/sbin/fsfreeze", "/usr/sbin/fstrim", "/usr/sbin/isosize", "/usr/sbin/ldattach", "/usr/sbin/mkfs", "/usr/sbin/mkswap", "/usr/sbin/pivot_root", "/usr/sbin/readprofile", "/usr/sbin/rtcwake", "/usr/sbin/runuser", "/usr/sbin/sulogin", "/usr/sbin/swaplabel", "/usr/sbin/switch_root", "/usr/sbin/wipefs", "/usr/sbin/zramctl", "/usr/share/bash-completion/completions/blkdiscard", "/usr/share/bash-completion/completions/blkid", "/usr/share/bash-completion/completions/blkzone", "/usr/share/bash-completion/completions/blockdev", "/usr/share/bash-completion/completions/chcpu", "/usr/share/bash-completion/completions/chmem", "/usr/share/bash-completion/completions/chrt", "/usr/share/bash-completion/completions/dmesg", "/usr/share/bash-completion/completions/fallocate", "/usr/share/bash-completion/completions/findfs", "/usr/share/bash-completion/completions/findmnt", "/usr/share/bash-completion/completions/flock", "/usr/share/bash-completion/completions/fsck", "/usr/share/bash-completion/completions/fsfreeze", "/usr/share/bash-completion/completions/fstrim", "/usr/share/bash-completion/completions/getopt", "/usr/share/bash-completion/completions/hardlink", "/usr/share/bash-completion/completions/ionice", "/usr/share/bash-completion/completions/ipcmk", "/usr/share/bash-completion/completions/ipcrm", "/usr/share/bash-completion/completions/ipcs", "/usr/share/bash-completion/completions/isosize", "/usr/share/bash-completion/completions/ldattach", "/usr/share/bash-completion/completions/lsblk", "/usr/share/bash-completion/completions/lscpu", "/usr/share/bash-completion/completions/lsipc", "/usr/share/bash-completion/completions/lslocks", "/usr/share/bash-completion/completions/lslogins", "/usr/share/bash-completion/completions/lsmem", "/usr/share/bash-completion/completions/lsns", "/usr/share/bash-completion/completions/mcookie", "/usr/share/bash-completion/completions/mkfs", "/usr/share/bash-completion/completions/mkswap", "/usr/share/bash-completion/completions/more", "/usr/share/bash-completion/completions/mountpoint", "/usr/share/bash-completion/completions/namei", "/usr/share/bash-completion/completions/nsenter", "/usr/share/bash-completion/completions/partx", "/usr/share/bash-completion/completions/pivot_root", "/usr/share/bash-completion/completions/prlimit", "/usr/share/bash-completion/completions/readprofile", "/usr/share/bash-completion/completions/rename.ul", "/usr/share/bash-completion/completions/rev", "/usr/share/bash-completion/completions/rtcwake", "/usr/share/bash-completion/completions/setarch", "/usr/share/bash-completion/completions/setpriv", "/usr/share/bash-completion/completions/setsid", "/usr/share/bash-completion/completions/setterm", "/usr/share/bash-completion/completions/su", "/usr/share/bash-completion/completions/swaplabel", "/usr/share/bash-completion/completions/taskset", "/usr/share/bash-completion/completions/uclampset", "/usr/share/bash-completion/completions/unshare", "/usr/share/bash-completion/completions/wdctl", "/usr/share/bash-completion/completions/whereis", "/usr/share/bash-completion/completions/wipefs", "/usr/share/bash-completion/completions/zramctl", "/usr/share/doc/util-linux/00-about-docs.txt", "/usr/share/doc/util-linux/AUTHORS.gz", "/usr/share/doc/util-linux/NEWS.Debian.gz", "/usr/share/doc/util-linux/PAM-configuration.txt", "/usr/share/doc/util-linux/README.Debian", "/usr/share/doc/util-linux/blkid.txt", "/usr/share/doc/util-linux/cal.txt", "/usr/share/doc/util-linux/changelog.Debian.gz", "/usr/share/doc/util-linux/changelog.gz", "/usr/share/doc/util-linux/col.txt", "/usr/share/doc/util-linux/copyright", "/usr/share/doc/util-linux/deprecated.txt", "/usr/share/doc/util-linux/examples/getopt-example.bash", "/usr/share/doc/util-linux/getopt.txt", "/usr/share/doc/util-linux/getopt_changelog.txt", "/usr/share/doc/util-linux/howto-build-sys.txt", "/usr/share/doc/util-linux/howto-compilation.txt", "/usr/share/doc/util-linux/howto-contribute.txt.gz", "/usr/share/doc/util-linux/howto-debug.txt", "/usr/share/doc/util-linux/howto-man-page.txt", "/usr/share/doc/util-linux/howto-pull-request.txt.gz", "/usr/share/doc/util-linux/howto-tests.txt", "/usr/share/doc/util-linux/howto-usage-function.txt.gz", "/usr/share/doc/util-linux/hwclock.txt", "/usr/share/doc/util-linux/modems-with-agetty.txt", "/usr/share/doc/util-linux/mount.txt", "/usr/share/doc/util-linux/parse-date.txt.gz", "/usr/share/doc/util-linux/pg.txt", "/usr/share/doc/util-linux/poeigl.txt.gz", "/usr/share/doc/util-linux/release-schedule.txt", "/usr/share/doc/util-linux/releases/v2.13-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.14-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.15-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.16-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.17-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.18-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.19-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.20-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.21-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.22-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.23-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.24-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.25-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.26-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.27-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.28-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.29-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.30-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.31-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.32-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.33-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.34-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.35-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.36-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.37-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.38-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.39-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.40-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.41-ReleaseNotes.gz", "/usr/share/lintian/overrides/util-linux", "/usr/share/man/man1/choom.1.gz", "/usr/share/man/man1/chrt.1.gz", "/usr/share/man/man1/dmesg.1.gz", "/usr/share/man/man1/fallocate.1.gz", "/usr/share/man/man1/flock.1.gz", "/usr/share/man/man1/getopt.1.gz", "/usr/share/man/man1/hardlink.1.gz", "/usr/share/man/man1/ionice.1.gz", "/usr/share/man/man1/ipcmk.1.gz", "/usr/share/man/man1/ipcrm.1.gz", "/usr/share/man/man1/ipcs.1.gz", "/usr/share/man/man1/lscpu.1.gz", "/usr/share/man/man1/lsipc.1.gz", "/usr/share/man/man1/lslogins.1.gz", "/usr/share/man/man1/lsmem.1.gz", "/usr/share/man/man1/mcookie.1.gz", "/usr/share/man/man1/more.1.gz", "/usr/share/man/man1/mountpoint.1.gz", "/usr/share/man/man1/namei.1.gz", "/usr/share/man/man1/nsenter.1.gz", "/usr/share/man/man1/prlimit.1.gz", "/usr/share/man/man1/rename.ul.1.gz", "/usr/share/man/man1/rev.1.gz", "/usr/share/man/man1/runuser.1.gz", "/usr/share/man/man1/setpriv.1.gz", "/usr/share/man/man1/setsid.1.gz", "/usr/share/man/man1/setterm.1.gz", "/usr/share/man/man1/su.1.gz", "/usr/share/man/man1/taskset.1.gz", "/usr/share/man/man1/uclampset.1.gz", "/usr/share/man/man1/unshare.1.gz", "/usr/share/man/man1/whereis.1.gz", "/usr/share/man/man5/adjtime_config.5.gz", "/usr/share/man/man5/scols-filter.5.gz", "/usr/share/man/man5/terminal-colors.d.5.gz", "/usr/share/man/man8/agetty.8.gz", "/usr/share/man/man8/blkdiscard.8.gz", "/usr/share/man/man8/blkid.8.gz", "/usr/share/man/man8/blkzone.8.gz", "/usr/share/man/man8/blockdev.8.gz", "/usr/share/man/man8/chcpu.8.gz", "/usr/share/man/man8/chmem.8.gz", "/usr/share/man/man8/findfs.8.gz", "/usr/share/man/man8/findmnt.8.gz", "/usr/share/man/man8/fsck.8.gz", "/usr/share/man/man8/fsfreeze.8.gz", "/usr/share/man/man8/fstrim.8.gz", "/usr/share/man/man8/isosize.8.gz", "/usr/share/man/man8/ldattach.8.gz", "/usr/share/man/man8/lsblk.8.gz", "/usr/share/man/man8/lslocks.8.gz", "/usr/share/man/man8/lsns.8.gz", "/usr/share/man/man8/mkfs.8.gz", "/usr/share/man/man8/mkswap.8.gz", "/usr/share/man/man8/partx.8.gz", "/usr/share/man/man8/pivot_root.8.gz", "/usr/share/man/man8/readprofile.8.gz", "/usr/share/man/man8/rtcwake.8.gz", "/usr/share/man/man8/setarch.8.gz", "/usr/share/man/man8/sulogin.8.gz", "/usr/share/man/man8/swaplabel.8.gz", "/usr/share/man/man8/switch_root.8.gz", "/usr/share/man/man8/wdctl.8.gz", "/usr/share/man/man8/wipefs.8.gz", "/usr/share/man/man8/zramctl.8.gz", "/usr/share/util-linux/logcheck/ignore.d.server/util-linux" ], "AnalyzedBy": "dpkg" }, { "ID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "Name": "zlib1g", "Identifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6034e96d79fecdaa" }, "Version": "1.3.dfsg+really1.3.1", "Release": "1+b1", "Epoch": 1, "Arch": "amd64", "SrcName": "zlib", "SrcVersion": "1.3.dfsg+really1.3.1", "SrcRelease": "1", "SrcEpoch": 1, "Licenses": [ "Zlib" ], "Maintainer": "Mark Brown \u003cbroonie@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u1" ], "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libz.so.1.3.1", "/usr/share/doc/zlib1g/changelog.Debian.amd64.gz", "/usr/share/doc/zlib1g/changelog.Debian.gz", "/usr/share/doc/zlib1g/changelog.gz", "/usr/share/doc/zlib1g/copyright" ], "AnalyzedBy": "dpkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-109518", "VendorIDs": [ "DSA-6607-1" ], "PkgID": "apt@3.0.3", "PkgName": "apt", "PkgIdentifier": { "PURL": "pkg:deb/debian/apt@3.0.3?arch=amd64\u0026distro=debian-13.3", "UID": "6e58fdc12982f258" }, "InstalledVersion": "3.0.3", "FixedVersion": "3.0.4", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1319878e92ec38cdd1aec28cb3942bcd30a9f447730970dc383299192361bce3", "Title": "apt: apt: Remote code execution via hard link reuse during package download retries", "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration", "Severity": "HIGH", "CweIDs": [ "CWE-62", "CWE-367" ], "VendorSeverity": { "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/11/04/12", "https://access.redhat.com/security/cve/CVE-2026-109518", "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html", "https://lists.debian.org/debian-security-announce/2026/msg00526.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-109518", "https://ubuntu.com/blog/apt-vulnerability-fixes-available", "https://ubuntu.com/security/notices/USN-8996-1", "https://www.cve.org/CVERecord?id=CVE-2026-109518" ], "PublishedDate": "2026-11-04T16:17:33.01Z", "LastModifiedDate": "2026-11-05T05:18:19.033Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c7bd3d3656fad7b43288a3b0421b65603841e1bfa8a706895bf1f0e652accfa3", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3adbd7c600c31c81caedc1b697b2267286d49aa6b7aea07fdca61db1188a9315", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0826d3e675bd3f1121f5d409f6703e9a196f05beae2f6212ad5bd5f7f68cc537", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0677964f135222a9bdcbf0718fb7cd7803cc38b8071ff9c8d53c5a324134f064", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fd274cff6c5670f77a3d53538901f135a0fca6db592d30c96debdc5faa297770", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:225d91d6e0666c06fbd6d3f93945177eca099ea0113b61c95efe063b7a92c8dd", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d83e46f4a57a17805dfcfeab1502549459c7dd1deb1518c330ddc8074e7d154b", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d50ed73541a2a3d9afc5b0bd4fbd5f4931c9a2a66444c1798b73a2c5db3b2dce", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-41992", "PkgID": "gzip@1.13-1", "PkgName": "gzip", "PkgIdentifier": { "PURL": "pkg:deb/debian/gzip@1.13-1?arch=amd64\u0026distro=debian-13.3", "UID": "954545ce99bc687e" }, "InstalledVersion": "1.13-1", "FixedVersion": "1.13-1+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41992", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fe2d393835250bfa39a8603a19aa2977f2f0ec4084dae9a85a91527de3f208e3", "Title": "gzip: gzip: Information disclosure via global buffer overflow in LZH decompression", "Description": "GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.\nBy decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.\n\nThis issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d.", "Severity": "HIGH", "CweIDs": [ "CWE-126" ], "VendorSeverity": { "alma": 2, "azure": 2, "julia": 2, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 1, "rocky": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 6.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L", "V3Score": 3.6 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/23/1", "http://www.openwall.com/lists/oss-security/2026/08/25/1", "http://www.openwall.com/lists/oss-security/2026/08/27/2", "https://access.redhat.com/errata/RHSA-2026:61623", "https://access.redhat.com/security/cve/CVE-2026-41992", "https://bugzilla.redhat.com/2494158", "https://bugzilla.redhat.com/show_bug.cgi?id=2494158", "https://bugzilla.redhat.com/show_bug.cgi?id=2494159", "https://cert.pl/en/posts/2026/04/CVE-2026-41991", "https://cert.pl/en/posts/2026/04/CVE-2026-41991/", "https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681", "https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=e7378c2d421be6a286922374425680bbe9ad8b7d", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41991", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41992", "https://errata.almalinux.org/9/ALSA-2026-61623.html", "https://errata.rockylinux.org/RLSA-2026:61623", "https://github.com/advisories/GHSA-qxh4-rprf-2mmj", "https://linux.oracle.com/cve/CVE-2026-41992.html", "https://linux.oracle.com/errata/ELSA-2026-65998-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-41992", "https://ubuntu.com/security/notices/USN-8512-1", "https://ubuntu.com/security/notices/USN-8733-1", "https://ubuntu.com/security/notices/USN-8733-2", "https://www.cve.org/CVERecord?id=CVE-2026-41992", "https://www.gnu.org/software/gzip", "https://www.gnu.org/software/gzip/" ], "PublishedDate": "2026-06-29T12:16:29.94Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-54369", "PkgID": "libacl1@2.3.2-2+b1", "PkgName": "libacl1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libacl1@2.3.2-2%2Bb1?arch=amd64\u0026distro=debian-13.3", "UID": "c9360fbd2d576700" }, "InstalledVersion": "2.3.2-2+b1", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54369", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3ea9f47d99821413b6c5b3f829b4c6a03535b2df941f4608d1e54865407030d6", "Title": "acl: Symlink traversal privilege escalation via libacl functions", "Description": "acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:34351", "https://access.redhat.com/errata/RHSA-2026:42736", "https://access.redhat.com/errata/RHSA-2026:42739", "https://access.redhat.com/errata/RHSA-2026:43420", "https://access.redhat.com/errata/RHSA-2026:44481", "https://access.redhat.com/errata/RHSA-2026:46836", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:53371", "https://access.redhat.com/errata/RHSA-2026:54769", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/errata/RHSA-2026:64805", "https://access.redhat.com/errata/RHSA-2026:67140", "https://access.redhat.com/errata/RHSA-2026:67142", "https://access.redhat.com/errata/RHSA-2026:67144", "https://access.redhat.com/security/cve/CVE-2026-54369", "https://bugzilla.redhat.com/2490277", "https://bugzilla.redhat.com/2490279", "https://bugzilla.redhat.com/show_bug.cgi?id=2490277", "https://bugzilla.redhat.com/show_bug.cgi?id=2490279", "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5", "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370", "https://errata.almalinux.org/9/ALSA-2026-42736.html", "https://errata.rockylinux.org/RLSA-2026:42736", "https://linux.oracle.com/cve/CVE-2026-54369.html", "https://linux.oracle.com/errata/ELSA-2026-43420.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54369", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json", "https://www.cve.org/CVERecord?id=CVE-2026-54369", "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions" ], "PublishedDate": "2026-06-29T14:16:57.487Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-109518", "VendorIDs": [ "DSA-6607-1" ], "PkgID": "libapt-pkg7.0@3.0.3", "PkgName": "libapt-pkg7.0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libapt-pkg7.0@3.0.3?arch=amd64\u0026distro=debian-13.3", "UID": "6f787ee147915791" }, "InstalledVersion": "3.0.3", "FixedVersion": "3.0.4", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7eab84f9971836576d808bfb976f01f878ca2a031e3a915742319c0ce066a6ff", "Title": "apt: apt: Remote code execution via hard link reuse during package download retries", "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration", "Severity": "HIGH", "CweIDs": [ "CWE-62", "CWE-367" ], "VendorSeverity": { "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/11/04/12", "https://access.redhat.com/security/cve/CVE-2026-109518", "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html", "https://lists.debian.org/debian-security-announce/2026/msg00526.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-109518", "https://ubuntu.com/blog/apt-vulnerability-fixes-available", "https://ubuntu.com/security/notices/USN-8996-1", "https://www.cve.org/CVERecord?id=CVE-2026-109518" ], "PublishedDate": "2026-11-04T16:17:33.01Z", "LastModifiedDate": "2026-11-05T05:18:19.033Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:98701155f3a6a9b13335ac4e4b8a62a10316a683a598af63ae0b9bdd11ba0975", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3b7afe1c126bb4fb425095d8920cddd3690e738e34eeca125b54b588bd9828f5", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fb9287b74b8dd79df8849a953b27cb9456aaac9d0ceae979dd490fbad191c1dc", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9e0d043eb4f86b5a3ff08bdf603b9d816d428de9ae1d39ea1d712bc29ff58399", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b35e04b1ed3399e64a151d38cf75f15105b707c880df3ffe5d9dd952aa110519", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3ae7540518449a10677f45fc8f48792c89352107598f65e95826c1eb85ba47f5", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5fa29b1545fb265e2ddaeaa66d1e7005a5fe61ca6eb7eea214ac640230be8e37", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "ba8a4fd626195f5f" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:36d1748ae064273cdbe3e82bb09f444fcb258b1f8aa22c9aa68fc8226b01713e", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-4878", "PkgID": "libcap2@1:2.75-10+b3", "PkgName": "libcap2", "PkgIdentifier": { "PURL": "pkg:deb/debian/libcap2@2.75-10%2Bb3?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "9ad8c6c25f12840a" }, "InstalledVersion": "1:2.75-10+b3", "FixedVersion": "1:2.75-10+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-4878", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:40c4e1769bb258570a0c063f8d9471ba9e499b18a454bbe19d48c1502dbe136e", "Title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()", "Description": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "bottlerocket": 2, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 6.7 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4878", "http://www.openwall.com/lists/oss-security/2026/04/07/14", "http://www.openwall.com/lists/oss-security/2026/04/07/4", "http://www.openwall.com/lists/oss-security/2026/04/08/9", "http://www.openwall.com/lists/oss-security/2026/04/09/5", "http://www.openwall.com/lists/oss-security/2026/04/09/6", "https://access.redhat.com/errata/RHSA-2026:12423", "https://access.redhat.com/errata/RHSA-2026:12441", "https://access.redhat.com/errata/RHSA-2026:13285", "https://access.redhat.com/errata/RHSA-2026:14162", "https://access.redhat.com/errata/RHSA-2026:14937", "https://access.redhat.com/errata/RHSA-2026:19130", "https://access.redhat.com/errata/RHSA-2026:19346", "https://access.redhat.com/errata/RHSA-2026:19456", "https://access.redhat.com/errata/RHSA-2026:19458", "https://access.redhat.com/errata/RHSA-2026:20595", "https://access.redhat.com/errata/RHSA-2026:21254", "https://access.redhat.com/errata/RHSA-2026:21275", "https://access.redhat.com/errata/RHSA-2026:22634", "https://access.redhat.com/errata/RHSA-2026:22957", "https://access.redhat.com/errata/RHSA-2026:23233", "https://access.redhat.com/errata/RHSA-2026:23245", "https://access.redhat.com/errata/RHSA-2026:24346", "https://access.redhat.com/errata/RHSA-2026:25044", "https://access.redhat.com/errata/RHSA-2026:25096", "https://access.redhat.com/errata/RHSA-2026:25181", "https://access.redhat.com/errata/RHSA-2026:26542", "https://access.redhat.com/errata/RHSA-2026:27998", "https://access.redhat.com/errata/RHSA-2026:28887", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:30078", "https://access.redhat.com/errata/RHSA-2026:30087", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/errata/RHSA-2026:34098", "https://access.redhat.com/errata/RHSA-2026:39981", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/errata/RHSA-2026:59831", "https://access.redhat.com/errata/RHSA-2026:72502", "https://access.redhat.com/errata/RHSA-2026:74674", "https://access.redhat.com/errata/RHSA-2026:7473", "https://access.redhat.com/errata/RHSA-2026:82304", "https://access.redhat.com/errata/RHSA-2026:82322", "https://access.redhat.com/errata/RHSA-2026:82347", "https://access.redhat.com/errata/RHSA-2026:82354", "https://access.redhat.com/errata/RHSA-2026:82372", "https://access.redhat.com/errata/RHSA-2026:82857", "https://access.redhat.com/errata/RHSA-2026:82888", "https://access.redhat.com/security/cve/CVE-2026-4878", "https://bugzilla.redhat.com/2451615", "https://bugzilla.redhat.com/show_bug.cgi?id=2447554", "https://bugzilla.redhat.com/show_bug.cgi?id=2451615", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4878", "https://errata.almalinux.org/9/ALSA-2026-19346.html", "https://errata.rockylinux.org/RLSA-2026:19346", "https://github.com/AndrewGMorgan/libcap_mirror/security/advisories/GHSA-f78v-p5hx-m7hh", "https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-b8okc9cb56gk.toml", "https://linux.oracle.com/cve/CVE-2026-4878.html", "https://linux.oracle.com/errata/ELSA-2026-19346.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-4878", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json", "https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.x4zn8j3lss6r", "https://ubuntu.com/security/notices/USN-8193-1", "https://ubuntu.com/security/notices/USN-8193-2", "https://www.cve.org/CVERecord?id=CVE-2026-4878" ], "PublishedDate": "2026-04-09T16:16:31.987Z", "LastModifiedDate": "2026-11-04T23:17:39.403Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e498b5bdc0ddb5a1fc3034757f9e8f3afa08164b1a06699c055a710ee5aa92a1", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c1dad64ffb0b44739964117f78090951932d487624d0bab63edce811df9e2a5d", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6f8886ccb6258b49862e316b552be4c5980b96304d972c2322087f77aee186e7", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d5626c1c7ed0a597e1cd3b41358bf9a953080e2c55886e66ce9f5287b2ef835e", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8b3e074689869cc70f36d2d83acda60d716572978d8601d93eb1d9fb5d739187", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:68e4389fc27e4de04c472eaa782747cccc7f61e777453af8e81fabe50d5d78c9", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7d9c894c2a1bbb0e9106c02b2285d5a568dfa6b0234aa17e0ca7ec0b85edf2c6", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "7f0afd002cccac7f" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8cec1f4f29a4c812105295772a006533dce859cf306b5a9618367b78fc9822f8", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2c8226a6842cc4c7cc121f23f31e10947f3a540ec6547c6788b0021cd8476709", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f5dc381f430ffc484b718e09dca5a38e7115668431d8482b58e57e4a4df141db", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:902f684a6d0e7198f611d1036de31338fbd9b5ee535b75725cc0b7d67da9e333", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ce5d96a8bb282738bacca29ff287cdb15c3cedfd3e8cdad7ef5bcd2f6b928a9e", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:47a67245db7ca0955d982d00f0c1c7144764ba4fc688e7ab5b3b0bc21869f52c", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:46350a60f7d04495226042fbbe530a126f3f2b90abf98c1afc040ec9869f6902", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:45a86d39eff9b23d9a69999a55a08cd4e43f2c5e67b739f15730e267263bc84d", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "c8f51339c2201209" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:18deb0684bbaa6c3cad81e8ef4d31befba16cba2462138fa103ee5f7965cab5e", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "libncursesw6@6.5+20250216-2", "PkgName": "libncursesw6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libncursesw6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.3", "UID": "429b80d073ec0af8" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:104048e2593317d15ba572b7e8fc5bf93c656a23c9cc18b42cd62a9b96b6a60b", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-103111", "VendorIDs": [ "DSA-6530-1" ], "PkgID": "libpcre2-8-0@10.46-1~deb13u1", "PkgName": "libpcre2-8-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "29a0698480de124a" }, "InstalledVersion": "10.46-1~deb13u1", "FixedVersion": "10.46-1~deb13u3", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-103111", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7a878ce78c1d8b41e75d4495e173d33f31c63c7f6d6c4bfb93ce132d1d1df4e8", "Title": "pcre2: pcre2: Out-of-bounds write via crafted regular expression", "Description": "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-103111", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m", "https://linux.oracle.com/cve/CVE-2026-103111.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-103111", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-103111" ], "PublishedDate": "2026-09-30T05:16:45.863Z", "LastModifiedDate": "2026-10-04T00:16:35.563Z" }, { "VulnerabilityID": "CVE-2026-86145", "PkgID": "libpcre2-8-0@10.46-1~deb13u1", "PkgName": "libpcre2-8-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "29a0698480de124a" }, "InstalledVersion": "10.46-1~deb13u1", "FixedVersion": "10.46-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86145", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:87422beea513d92220ac1b9832372d75702c69db7f8c7f485f3b577e8a2f980b", "Title": "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions", "Description": "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).", "Severity": "HIGH", "CweIDs": [ "CWE-424" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bottlerocket": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "V3Score": 8.2 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "http://www.openwall.com/lists/oss-security/2026/09/05/3", "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-86145", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf", "https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/17.1.0/BRSA-xqvt0yt0g9rb.toml", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-3r4p-g7gg-ppmf", "https://linux.oracle.com/cve/CVE-2026-86145.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-86145", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-86145" ], "PublishedDate": "2026-09-05T06:17:10.37Z", "LastModifiedDate": "2026-09-09T16:04:24.933Z" }, { "VulnerabilityID": "CVE-2026-89157", "PkgID": "libpcre2-8-0@10.46-1~deb13u1", "PkgName": "libpcre2-8-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "29a0698480de124a" }, "InstalledVersion": "10.46-1~deb13u1", "FixedVersion": "10.46-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89157", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9444a6175ee0e53b23213256f150687bb866a747a5661d4c2ef2896b5333627a", "Title": "pcre2: PCRE2: Out-of-bounds write via large pattern input", "Description": "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "azure": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L", "V3Score": 5.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-89157", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9", "https://linux.oracle.com/cve/CVE-2026-89157.html", "https://linux.oracle.com/errata/ELSA-2026-81613.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89157", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-89157" ], "PublishedDate": "2026-09-11T04:18:03.753Z", "LastModifiedDate": "2026-09-16T19:25:08.88Z" }, { "VulnerabilityID": "CVE-2026-89161", "PkgID": "libpcre2-8-0@10.46-1~deb13u1", "PkgName": "libpcre2-8-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "29a0698480de124a" }, "InstalledVersion": "10.46-1~deb13u1", "FixedVersion": "10.46-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89161", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e5ee291e306e5ba4aa08131894ce3061c06de2b569c344068ea07c2974059eab", "Title": "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match", "Description": "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.", "Severity": "HIGH", "CweIDs": [ "CWE-590" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-89161", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/commit/1dcd0cf42a6a7cb62cc9a7c024196733abcfda95%20%28pcre2-10.48-RC1%29", "https://github.com/PCRE2Project/pcre2/pull/937", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://linux.oracle.com/cve/CVE-2026-89161.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89161", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-89161" ], "PublishedDate": "2026-09-11T04:18:04.47Z", "LastModifiedDate": "2026-09-16T19:10:47.78Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5104de421a698109db6eb7940ae8eb654eec2d3db0125208b7cf5e80af99ff24", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1d5f410356efa5bcdf6653cd1ccb039d501441fa80ffd041ffcb3ce91a0c5fa0", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c231a24b61a701301ff9c59bda6839f0c88bc28bdf8eac325afc233ef091d579", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0746b8e82f06426fc12ff08200c127b057e8c337ce37f84e4dfc6a41d420c5f5", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:496a9964b3facd611fafe58fca6796d907363622f1b67382508801f28397d6ed", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3a07d27c54074836044c359cf69407d0769a05d815b4398f17a360f8a4acda49", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b90e2343bf045ca8a93afa62556606d21a25697579ccb249eaed36e1c9c55278", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "bbcbadced245df71" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:37149466e0ebe4a40de305c0051025a9d2644f13371143eb2ecff5e389765d91", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-11822", "PkgID": "libsqlite3-0@3.46.1-7", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7?arch=amd64\u0026distro=debian-13.3", "UID": "15db68ea57a4323f" }, "InstalledVersion": "3.46.1-7", "FixedVersion": "3.46.1-7+deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11822", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c29a816591208d158a9f73ddb497f6e39c52f4859534fb070cf7b2a630c82141", "Title": "sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data", "Description": "SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in the leaf page so that fts5LeafSeek() reads past the end of the page buffer while comparing terms during an FTS5 MATCH query, in applications compiled with SQLITE_ENABLE_FTS5.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:58936", "https://access.redhat.com/security/cve/CVE-2026-11822", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://cert-portal.siemens.com/productcert/html/ssa-765416.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://errata.almalinux.org/9/ALSA-2026-58936.html", "https://errata.rockylinux.org/RLSA-2026:58936", "https://linux.oracle.com/cve/CVE-2026-11822.html", "https://linux.oracle.com/errata/ELSA-2026-61242-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11822", "https://sqlite.org/releaselog/3_53_2.html", "https://sqlite.org/src/info/061febcf41ca", "https://sqlite.org/src/info/4a5ad516ea93", "https://sqlite.org/src/info/87b653731171", "https://sqlite.org/src/info/fad98805b7d7", "https://ubuntu.com/security/notices/USN-8480-1", "https://www.cve.org/CVERecord?id=CVE-2026-11822", "https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension" ], "PublishedDate": "2026-06-09T20:16:32.15Z", "LastModifiedDate": "2026-10-30T02:17:08.76Z" }, { "VulnerabilityID": "CVE-2026-11824", "PkgID": "libsqlite3-0@3.46.1-7", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7?arch=amd64\u0026distro=debian-13.3", "UID": "15db68ea57a4323f" }, "InstalledVersion": "3.46.1-7", "FixedVersion": "3.46.1-7+deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11824", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:aca3b6fce2fda2fc290d5e8b819dc4d8df2763ef0cafc970873a110ecb1cbe94", "Title": "sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5", "Description": "SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:58936", "https://access.redhat.com/security/cve/CVE-2026-11824", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://cert-portal.siemens.com/productcert/html/ssa-765416.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://errata.almalinux.org/9/ALSA-2026-58936.html", "https://errata.rockylinux.org/RLSA-2026:58936", "https://linux.oracle.com/cve/CVE-2026-11824.html", "https://linux.oracle.com/errata/ELSA-2026-58938.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11824", "https://sqlite.org/releaselog/3_53_2.html", "https://sqlite.org/src/info/061febcf41ca", "https://sqlite.org/src/info/4a5ad516ea93", "https://ubuntu.com/security/notices/USN-8480-1", "https://www.cve.org/CVERecord?id=CVE-2026-11824", "https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate" ], "PublishedDate": "2026-06-09T20:16:32.3Z", "LastModifiedDate": "2026-10-15T02:18:37.653Z" }, { "VulnerabilityID": "CVE-2026-119373", "PkgID": "libsqlite3-0@3.46.1-7", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7?arch=amd64\u0026distro=debian-13.3", "UID": "15db68ea57a4323f" }, "InstalledVersion": "3.46.1-7", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119373", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:814106a188c90a1b5c7dba6aca63165237a3a3ff9a6997339b23a989c87c293d", "Title": "sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5", "Description": "SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge", "https://access.redhat.com/security/cve/CVE-2026-119373", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107", "https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80", "https://nvd.nist.gov/vuln/detail/CVE-2026-119373", "https://sqlite.org/bugs/info/2026-08-04T08:49:27Z", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/a7f8c92f62", "https://www.cve.org/CVERecord?id=CVE-2026-119373", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists" ], "PublishedDate": "2026-10-30T12:16:36.027Z", "LastModifiedDate": "2026-11-05T21:18:41.047Z" }, { "VulnerabilityID": "CVE-2026-119374", "PkgID": "libsqlite3-0@3.46.1-7", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7?arch=amd64\u0026distro=debian-13.3", "UID": "15db68ea57a4323f" }, "InstalledVersion": "3.46.1-7", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119374", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d044d6e4fcb631e2eedc09e77434f405320f86b82144d829b21caada616fc0ec", "Title": "sqlite: sqlite: Arbitrary code execution via corrupted FTS5 index", "Description": "SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-fts5-securedel", "https://access.redhat.com/security/cve/CVE-2026-119374", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525", "https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9", "https://nvd.nist.gov/vuln/detail/CVE-2026-119374", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/9cd4f9e920", "https://www.cve.org/CVERecord?id=CVE-2026-119374", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete" ], "PublishedDate": "2026-10-30T12:16:36.187Z", "LastModifiedDate": "2026-11-03T16:09:06.143Z" }, { "VulnerabilityID": "CVE-2026-119379", "PkgID": "libsqlite3-0@3.46.1-7", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7?arch=amd64\u0026distro=debian-13.3", "UID": "15db68ea57a4323f" }, "InstalledVersion": "3.46.1-7", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119379", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c4cfb879d66ec172a46d44e65fd4992e5e50dd9868ff9070a9d6270d07affbbb", "Title": "sqlite: sqlite: Arbitrary code execution via crafted session changesets", "Description": "SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-session-ncol", "https://access.redhat.com/security/cve/CVE-2026-119379", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619", "https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52", "https://nvd.nist.gov/vuln/detail/CVE-2026-119379", "https://sqlite.org/bugs/info/2026-08-16T10:15:25Z", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/3f57024aecea0f3b", "https://www.cve.org/CVERecord?id=CVE-2026-119379", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind" ], "PublishedDate": "2026-10-30T12:16:36.967Z", "LastModifiedDate": "2026-11-03T15:38:24.827Z" }, { "VulnerabilityID": "CVE-2026-31789", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "libssl3t64@3.5.4-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31789", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:999a50a86884adaf6e2cb80e00d474904a8611e8a8be7bbe2938d231bc8c720e", "Title": "openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing", "Description": "Issue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "CRITICAL", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 2, "julia": 4, "nvd": 4, "photon": 4, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 5.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-31789", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://github.com/advisories/GHSA-j79m-9jxq-788r", "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "https://nvd.nist.gov/vuln/detail/CVE-2026-31789", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://www.cve.org/CVERecord?id=CVE-2026-31789", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.617Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-14456", "VendorIDs": [ "DSA-6465-1" ], "PkgID": "libssl3t64@3.5.4-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14456", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6470af8074ca6e50b18519bea4d9361df39a860af88926f57c509de0a726391e", "Title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server", "Description": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/13/4", "https://access.redhat.com/errata/RHSA-2026:67165", "https://access.redhat.com/security/cve/CVE-2026-14456", "https://bugzilla.redhat.com/2515348", "https://bugzilla.redhat.com/2517559", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2517561", "https://bugzilla.redhat.com/2517562", "https://bugzilla.redhat.com/2517564", "https://bugzilla.redhat.com/2517565", "https://bugzilla.redhat.com/2517566", "https://bugzilla.redhat.com/2517570", "https://bugzilla.redhat.com/show_bug.cgi?id=2515348", "https://bugzilla.redhat.com/show_bug.cgi?id=2517559", "https://bugzilla.redhat.com/show_bug.cgi?id=2517560", "https://bugzilla.redhat.com/show_bug.cgi?id=2517561", "https://bugzilla.redhat.com/show_bug.cgi?id=2517562", "https://bugzilla.redhat.com/show_bug.cgi?id=2517564", "https://bugzilla.redhat.com/show_bug.cgi?id=2517565", "https://bugzilla.redhat.com/show_bug.cgi?id=2517566", "https://bugzilla.redhat.com/show_bug.cgi?id=2517570", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14457", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18798", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54874", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63076", "https://errata.almalinux.org/9/ALSA-2026-67165.html", "https://errata.rockylinux.org/RLSA-2026:67165", "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b", "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139", "https://linux.oracle.com/cve/CVE-2026-14456.html", "https://linux.oracle.com/errata/ELSA-2026-67165-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14456", "https://openssl-library.org/news/secadv/20260813.txt", "https://ubuntu.com/security/notices/USN-8678-1", "https://www.cve.org/CVERecord?id=CVE-2026-14456" ], "PublishedDate": "2026-08-13T15:19:31.82Z", "LastModifiedDate": "2026-11-06T20:26:36.04Z" }, { "VulnerabilityID": "CVE-2026-28387", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "libssl3t64@3.5.4-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28387", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ea3391caad85be731879e90843f9d3a899e8c2263e1890c4e40084a46df36d6e", "Title": "openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication", "Description": "Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "amazon": 3, "azure": 1, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 3.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28387", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "https://nvd.nist.gov/vuln/detail/CVE-2026-28387", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28387", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:20.7Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28388", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "libssl3t64@3.5.4-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28388", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f0806add6f33d538fad1fa391165e8a3c61a195c63a4250954e19b3443c35ead", "Title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing", "Description": "Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28388", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "https://nvd.nist.gov/vuln/detail/CVE-2026-28388", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28388", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:20.863Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28389", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "libssl3t64@3.5.4-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28389", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:60a830c96821ad6da738ae1dac007ce88c19abe2a3f16b83b25896e6d2cad15a", "Title": "openssl: OpenSSL: Denial of Service vulnerability in CMS processing", "Description": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28389", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/advisories/GHSA-7x88-9hgc-69gf", "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "https://nvd.nist.gov/vuln/detail/CVE-2026-28389", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28389", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.03Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28390", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "libssl3t64@3.5.4-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28390", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:97690fdaf547e1f5c05ac0239844742d44f5e4ed16894d8d8f62567a44dab138", "Title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing", "Description": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22312", "https://access.redhat.com/errata/RHSA-2026:22313", "https://access.redhat.com/security/cve/CVE-2026-28390", "https://bugzilla.redhat.com/2456314", "https://bugzilla.redhat.com/show_bug.cgi?id=2456314", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28390", "https://errata.almalinux.org/9/ALSA-2026-22313.html", "https://errata.rockylinux.org/RLSA-2026:22312", "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "https://linux.oracle.com/cve/CVE-2026-28390.html", "https://linux.oracle.com/errata/ELSA-2026-50345.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-28390", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28390", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.19Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-45447", "VendorIDs": [ "DSA-6335-1" ], "PkgID": "libssl3t64@3.5.4-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.6-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45447", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:822378981e42d2ddc5a20e3d61bb6e9e22e0bb88720ad5e9fef683b07d7894a4", "Title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()", "Description": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-416", "CWE-825" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "julia": 3, "oracle-oval": 2, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25237", "https://access.redhat.com/errata/RHSA-2026:25239", "https://access.redhat.com/errata/RHSA-2026:26275", "https://access.redhat.com/errata/RHSA-2026:26319", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:34102", "https://access.redhat.com/errata/RHSA-2026:35869", "https://access.redhat.com/errata/RHSA-2026:36215", "https://access.redhat.com/errata/RHSA-2026:36217", "https://access.redhat.com/errata/RHSA-2026:39009", "https://access.redhat.com/errata/RHSA-2026:39012", "https://access.redhat.com/errata/RHSA-2026:39981", "https://access.redhat.com/errata/RHSA-2026:44438", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:58563", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/errata/RHSA-2026:59831", "https://access.redhat.com/errata/RHSA-2026:66524", "https://access.redhat.com/security/cve/CVE-2026-45447", "https://bugzilla.redhat.com/2481898", "https://bugzilla.redhat.com/show_bug.cgi?id=2481879", "https://bugzilla.redhat.com/show_bug.cgi?id=2481880", "https://bugzilla.redhat.com/show_bug.cgi?id=2481881", "https://bugzilla.redhat.com/show_bug.cgi?id=2481882", "https://bugzilla.redhat.com/show_bug.cgi?id=2481884", "https://bugzilla.redhat.com/show_bug.cgi?id=2481885", "https://bugzilla.redhat.com/show_bug.cgi?id=2481887", "https://bugzilla.redhat.com/show_bug.cgi?id=2481890", "https://bugzilla.redhat.com/show_bug.cgi?id=2481891", "https://bugzilla.redhat.com/show_bug.cgi?id=2481892", "https://bugzilla.redhat.com/show_bug.cgi?id=2481893", "https://bugzilla.redhat.com/show_bug.cgi?id=2481894", "https://bugzilla.redhat.com/show_bug.cgi?id=2481896", "https://bugzilla.redhat.com/show_bug.cgi?id=2481897", "https://bugzilla.redhat.com/show_bug.cgi?id=2481898", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076", "https://errata.almalinux.org/9/ALSA-2026-44438.html", "https://errata.rockylinux.org/RLSA-2026:25239", "https://github.com/advisories/GHSA-f684-cpcq-j565", "https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c", "https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8", "https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54", "https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c", "https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e", "https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c", "https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8", "https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54", "https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c", "https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e", "https://linux.oracle.com/cve/CVE-2026-45447.html", "https://linux.oracle.com/errata/ELSA-2026-50379.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-45447", "https://openssl-library.org/news/secadv/20260609.txt", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json", "https://ubuntu.com/security/notices/USN-8414-1", "https://ubuntu.com/security/notices/USN-8414-2", "https://www.cve.org/CVERecord?id=CVE-2026-45447" ], "PublishedDate": "2026-06-09T17:17:19.277Z", "LastModifiedDate": "2026-09-18T13:18:26.343Z" }, { "VulnerabilityID": "CVE-2026-84782", "VendorIDs": [ "DSA-6531-1" ], "PkgID": "libssl3t64@3.5.4-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "e47ab0789f5b5c76" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u3", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84782", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:22fb39b86e7cd14f0061743da4238f7dffcda153a13e400cae90ae1d6a04d91e", "Title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission", "Description": "Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77396", "https://access.redhat.com/errata/RHSA-2026:80514", "https://access.redhat.com/security/cve/CVE-2026-84782", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2537080", "https://bugzilla.redhat.com/show_bug.cgi?id=2537080", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782", "https://errata.almalinux.org/9/ALSA-2026-80514.html", "https://errata.rockylinux.org/RLSA-2026:77396", "https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943", "https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628", "https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58", "https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c", "https://linux.oracle.com/cve/CVE-2026-84782.html", "https://linux.oracle.com/errata/ELSA-2026-85968.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-84782", "https://openssl-library.org/news/secadv/20260929.txt", "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782", "https://ubuntu.com/security/notices/USN-8847-1", "https://ubuntu.com/security/notices/USN-8847-2", "https://www.cve.org/CVERecord?id=CVE-2026-84782" ], "PublishedDate": "2026-09-29T16:17:12.5Z", "LastModifiedDate": "2026-10-08T01:20:56.003Z" }, { "VulnerabilityID": "CVE-2026-16742", "PkgID": "libsystemd0@257.9-1~deb13u1", "PkgName": "libsystemd0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsystemd0@257.9-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "2ed722ae15cf04f0" }, "InstalledVersion": "257.9-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:02856639f1eb5a0a367bb6fffa5c88d8ab21b71f4934b24dd494e734736f5e5b", "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification", "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-347" ], "VendorSeverity": { "amazon": 3, "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-16742", "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv", "https://nvd.nist.gov/vuln/detail/CVE-2026-16742", "https://ubuntu.com/security/notices/USN-8626-1", "https://www.cve.org/CVERecord?id=CVE-2026-16742" ], "PublishedDate": "2026-08-10T14:17:21.277Z", "LastModifiedDate": "2026-10-23T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "libtinfo6@6.5+20250216-2", "PkgName": "libtinfo6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.3", "UID": "e60cb0d4ec90b4c4" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:94ec7990052d62381cf3ec03fd0a0b85a6055202001fc84a17ddb3db3f9bb05f", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-16742", "PkgID": "libudev1@257.9-1~deb13u1", "PkgName": "libudev1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libudev1@257.9-1~deb13u1?arch=amd64\u0026distro=debian-13.3", "UID": "b88983beb6fa1653" }, "InstalledVersion": "257.9-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d7d9232b7cec83ab054db0895364c351a62537af62fbe5a5a5d7a315e14eec89", "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification", "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-347" ], "VendorSeverity": { "amazon": 3, "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-16742", "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv", "https://nvd.nist.gov/vuln/detail/CVE-2026-16742", "https://ubuntu.com/security/notices/USN-8626-1", "https://www.cve.org/CVERecord?id=CVE-2026-16742" ], "PublishedDate": "2026-08-10T14:17:21.277Z", "LastModifiedDate": "2026-10-23T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:820e013cdc0b5bede60fa4605b895995cb409a0a817187eb3a45ac18787cf6ee", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a1a033b909c08fc4cc093e329b225d4ab0420b5a76a6ab411c1a2d72b48d8681", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b6cb32a0d83c0c4408fc13010395d34c183885c5df1603dc7fe793cf3579a81c", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0725fb241a1dc4ee5547a03c895460eaa74093d40c096fdca1104ab795d24daf", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:cff9f11229d5e623a6df2db943d1827c5d24042aa6748e18e8404834b8ea768b", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:652d78797549412b0b3890241e38015edf6a9569375948cc1d8545264372b305", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:087a9b67eb24a615f28882c435d24a31486240bb9f056d3942d671b61a8c1ade", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "cbf6d6cc92f5996e" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6f194164cea26cac340d82c64b0f9c493553e4d9d50b5319406c9ab0e0f7c860", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bbec23f96d3b5a8fd0be3f6989185dc39fb72486bc5a9c57792c94d010e4751f", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:10a0a08f67dae3747396408605a79b0ef603e8b244dbb9d8983553d991b95d3a", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8af6219b6d5cf2a5b413c8ddadfa0c99be2f3a80a8225cc0ee57d86d6bc0ca43", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:680cbe55d74a837e7d6e8baca4a6a6d8e470d5a643767e9914a456c8b6751fcd", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b1b1e3342c19b74be2fa58c3106de5fd10112919a7ffde01217b5b0b1b6ddca8", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a7d62b9feb7fe72f3e158f13eb4d9cc2e03c390a2cd8e99bf5129db07ef9354c", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f3aaa9e9a066dd085b484ade2d8032ee9040b13a16b8a5b5beeff7576c30fe4d", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6f2b6a55f2c76d8" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e17ef1a358d11d645db1eddb0387106fd38f69dea54800592b7d979e2e581f55", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:66a70c7a507a855d0af2d599460ed0aee4176ff95d441eed54874626fe2ca53f", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f3e3d18545c23787f98cc9d627ff81645c8b31a0d1d897e123f4599b6b013993", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2c1979bc1efe2283fb3c04c04b3736ac59e0167290e77669dce6f7c8999b0eb5", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5db96fe398efa462ad80865a8f06170ceb0a1c06e071320cc669006d51bf2b61", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5fce28a6aab88990c15f6937ee021c009c6519c34d5c8cf24127211b61e9ceaa", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e2b34145925089a18369b310ff8617addfda83a42a49e773bce8b2b677078679", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:64def3596a777a50062bdf337c1eb1316f54d6f7a2e07baf8249cdecf2e36e1f", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9acf74582cc3ab8920023cf9a87f0a3a275e7715ed3fc1094848a05f4bc618d5", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "ncurses-base@6.5+20250216-2", "PkgName": "ncurses-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/ncurses-base@6.5%2B20250216-2?arch=all\u0026distro=debian-13.3", "UID": "767a0231348a5cb5" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b697948de14b85a21529eb9fb8194ba36186bc0ccd05d0469f0122f778414ebd", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "ncurses-bin@6.5+20250216-2", "PkgName": "ncurses-bin", "PkgIdentifier": { "PURL": "pkg:deb/debian/ncurses-bin@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.3", "UID": "5b541563cf6587e5" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:37c1a3017ba7152d2ee49eb173728e82378373d714b407c0e843f03afc1abb9e", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-31789", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl@3.5.4-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31789", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:22ff6b806780476677de6fb86bba4b994f220090ad635d07ba923543d43be584", "Title": "openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing", "Description": "Issue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "CRITICAL", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 2, "julia": 4, "nvd": 4, "photon": 4, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 5.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-31789", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://github.com/advisories/GHSA-j79m-9jxq-788r", "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "https://nvd.nist.gov/vuln/detail/CVE-2026-31789", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://www.cve.org/CVERecord?id=CVE-2026-31789", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.617Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-14456", "VendorIDs": [ "DSA-6465-1" ], "PkgID": "openssl@3.5.4-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14456", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:634d004edebd6ffdf96ee4e10c727abb08302d38fa52bd17fe23529244f243f2", "Title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server", "Description": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/13/4", "https://access.redhat.com/errata/RHSA-2026:67165", "https://access.redhat.com/security/cve/CVE-2026-14456", "https://bugzilla.redhat.com/2515348", "https://bugzilla.redhat.com/2517559", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2517561", "https://bugzilla.redhat.com/2517562", "https://bugzilla.redhat.com/2517564", "https://bugzilla.redhat.com/2517565", "https://bugzilla.redhat.com/2517566", "https://bugzilla.redhat.com/2517570", "https://bugzilla.redhat.com/show_bug.cgi?id=2515348", "https://bugzilla.redhat.com/show_bug.cgi?id=2517559", "https://bugzilla.redhat.com/show_bug.cgi?id=2517560", "https://bugzilla.redhat.com/show_bug.cgi?id=2517561", "https://bugzilla.redhat.com/show_bug.cgi?id=2517562", "https://bugzilla.redhat.com/show_bug.cgi?id=2517564", "https://bugzilla.redhat.com/show_bug.cgi?id=2517565", "https://bugzilla.redhat.com/show_bug.cgi?id=2517566", "https://bugzilla.redhat.com/show_bug.cgi?id=2517570", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14457", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18798", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54874", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63076", "https://errata.almalinux.org/9/ALSA-2026-67165.html", "https://errata.rockylinux.org/RLSA-2026:67165", "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b", "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139", "https://linux.oracle.com/cve/CVE-2026-14456.html", "https://linux.oracle.com/errata/ELSA-2026-67165-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14456", "https://openssl-library.org/news/secadv/20260813.txt", "https://ubuntu.com/security/notices/USN-8678-1", "https://www.cve.org/CVERecord?id=CVE-2026-14456" ], "PublishedDate": "2026-08-13T15:19:31.82Z", "LastModifiedDate": "2026-11-06T20:26:36.04Z" }, { "VulnerabilityID": "CVE-2026-28387", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl@3.5.4-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28387", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:40979cf910a15f50daaff77eee44d8534370a4e5da4f9998c06c5b0136fa8333", "Title": "openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication", "Description": "Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "amazon": 3, "azure": 1, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 3.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28387", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "https://nvd.nist.gov/vuln/detail/CVE-2026-28387", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28387", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:20.7Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28388", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl@3.5.4-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28388", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:88906e64661616c0835e9f40c1eec9e22e84d6771e165c37f0453484ea74ce22", "Title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing", "Description": "Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28388", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "https://nvd.nist.gov/vuln/detail/CVE-2026-28388", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28388", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:20.863Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28389", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl@3.5.4-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28389", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7c12dcd0263ac6d5ff879b4f544971febc65ac18c739bdfe7fe051137623dbdd", "Title": "openssl: OpenSSL: Denial of Service vulnerability in CMS processing", "Description": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28389", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/advisories/GHSA-7x88-9hgc-69gf", "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "https://nvd.nist.gov/vuln/detail/CVE-2026-28389", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28389", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.03Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28390", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl@3.5.4-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28390", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fdb355ebffebe3f17986cc7832f20517c80e045d37a5a00334f47ce949ad6798", "Title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing", "Description": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22312", "https://access.redhat.com/errata/RHSA-2026:22313", "https://access.redhat.com/security/cve/CVE-2026-28390", "https://bugzilla.redhat.com/2456314", "https://bugzilla.redhat.com/show_bug.cgi?id=2456314", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28390", "https://errata.almalinux.org/9/ALSA-2026-22313.html", "https://errata.rockylinux.org/RLSA-2026:22312", "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "https://linux.oracle.com/cve/CVE-2026-28390.html", "https://linux.oracle.com/errata/ELSA-2026-50345.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-28390", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28390", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.19Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-45447", "VendorIDs": [ "DSA-6335-1" ], "PkgID": "openssl@3.5.4-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.6-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45447", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:34f1aaeb1d34304a3b397ddf29967c824235630ecff1f937f9d5fabc9b348a15", "Title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()", "Description": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-416", "CWE-825" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "julia": 3, "oracle-oval": 2, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25237", "https://access.redhat.com/errata/RHSA-2026:25239", "https://access.redhat.com/errata/RHSA-2026:26275", "https://access.redhat.com/errata/RHSA-2026:26319", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:34102", "https://access.redhat.com/errata/RHSA-2026:35869", "https://access.redhat.com/errata/RHSA-2026:36215", "https://access.redhat.com/errata/RHSA-2026:36217", "https://access.redhat.com/errata/RHSA-2026:39009", "https://access.redhat.com/errata/RHSA-2026:39012", "https://access.redhat.com/errata/RHSA-2026:39981", "https://access.redhat.com/errata/RHSA-2026:44438", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:58563", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/errata/RHSA-2026:59831", "https://access.redhat.com/errata/RHSA-2026:66524", "https://access.redhat.com/security/cve/CVE-2026-45447", "https://bugzilla.redhat.com/2481898", "https://bugzilla.redhat.com/show_bug.cgi?id=2481879", "https://bugzilla.redhat.com/show_bug.cgi?id=2481880", "https://bugzilla.redhat.com/show_bug.cgi?id=2481881", "https://bugzilla.redhat.com/show_bug.cgi?id=2481882", "https://bugzilla.redhat.com/show_bug.cgi?id=2481884", "https://bugzilla.redhat.com/show_bug.cgi?id=2481885", "https://bugzilla.redhat.com/show_bug.cgi?id=2481887", "https://bugzilla.redhat.com/show_bug.cgi?id=2481890", "https://bugzilla.redhat.com/show_bug.cgi?id=2481891", "https://bugzilla.redhat.com/show_bug.cgi?id=2481892", "https://bugzilla.redhat.com/show_bug.cgi?id=2481893", "https://bugzilla.redhat.com/show_bug.cgi?id=2481894", "https://bugzilla.redhat.com/show_bug.cgi?id=2481896", "https://bugzilla.redhat.com/show_bug.cgi?id=2481897", "https://bugzilla.redhat.com/show_bug.cgi?id=2481898", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076", "https://errata.almalinux.org/9/ALSA-2026-44438.html", "https://errata.rockylinux.org/RLSA-2026:25239", "https://github.com/advisories/GHSA-f684-cpcq-j565", "https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c", "https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8", "https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54", "https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c", "https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e", "https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c", "https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8", "https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54", "https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c", "https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e", "https://linux.oracle.com/cve/CVE-2026-45447.html", "https://linux.oracle.com/errata/ELSA-2026-50379.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-45447", "https://openssl-library.org/news/secadv/20260609.txt", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json", "https://ubuntu.com/security/notices/USN-8414-1", "https://ubuntu.com/security/notices/USN-8414-2", "https://www.cve.org/CVERecord?id=CVE-2026-45447" ], "PublishedDate": "2026-06-09T17:17:19.277Z", "LastModifiedDate": "2026-09-18T13:18:26.343Z" }, { "VulnerabilityID": "CVE-2026-84782", "VendorIDs": [ "DSA-6531-1" ], "PkgID": "openssl@3.5.4-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "52506dcc24baacc2" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u3", "Status": "fixed", "Layer": { "DiffID": "sha256:6400845f12abd9c03c1a59d5630378e1a6ff58fb36ea655ab2605e166ad4d587" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84782", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:44e13a5dee278c9bdfaab39be45cb6ea0dd83b8fc53d56a69435646e863ffb44", "Title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission", "Description": "Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77396", "https://access.redhat.com/errata/RHSA-2026:80514", "https://access.redhat.com/security/cve/CVE-2026-84782", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2537080", "https://bugzilla.redhat.com/show_bug.cgi?id=2537080", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782", "https://errata.almalinux.org/9/ALSA-2026-80514.html", "https://errata.rockylinux.org/RLSA-2026:77396", "https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943", "https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628", "https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58", "https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c", "https://linux.oracle.com/cve/CVE-2026-84782.html", "https://linux.oracle.com/errata/ELSA-2026-85968.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-84782", "https://openssl-library.org/news/secadv/20260929.txt", "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782", "https://ubuntu.com/security/notices/USN-8847-1", "https://ubuntu.com/security/notices/USN-8847-2", "https://www.cve.org/CVERecord?id=CVE-2026-84782" ], "PublishedDate": "2026-09-29T16:17:12.5Z", "LastModifiedDate": "2026-10-08T01:20:56.003Z" }, { "VulnerabilityID": "CVE-2026-31789", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl-provider-legacy@3.5.4-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31789", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b5c6b1cc16ea430299d56fa04b784d9b2f97f47be6f5581c254ade69195829c4", "Title": "openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing", "Description": "Issue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "CRITICAL", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 2, "julia": 4, "nvd": 4, "photon": 4, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "V3Score": 5.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-31789", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://github.com/advisories/GHSA-j79m-9jxq-788r", "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "https://nvd.nist.gov/vuln/detail/CVE-2026-31789", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://www.cve.org/CVERecord?id=CVE-2026-31789", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.617Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-14456", "VendorIDs": [ "DSA-6465-1" ], "PkgID": "openssl-provider-legacy@3.5.4-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14456", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2fa84e445934e427e5e917d7a147747e918e371c59e269636112b3d7a6a66c66", "Title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server", "Description": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/13/4", "https://access.redhat.com/errata/RHSA-2026:67165", "https://access.redhat.com/security/cve/CVE-2026-14456", "https://bugzilla.redhat.com/2515348", "https://bugzilla.redhat.com/2517559", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2517561", "https://bugzilla.redhat.com/2517562", "https://bugzilla.redhat.com/2517564", "https://bugzilla.redhat.com/2517565", "https://bugzilla.redhat.com/2517566", "https://bugzilla.redhat.com/2517570", "https://bugzilla.redhat.com/show_bug.cgi?id=2515348", "https://bugzilla.redhat.com/show_bug.cgi?id=2517559", "https://bugzilla.redhat.com/show_bug.cgi?id=2517560", "https://bugzilla.redhat.com/show_bug.cgi?id=2517561", "https://bugzilla.redhat.com/show_bug.cgi?id=2517562", "https://bugzilla.redhat.com/show_bug.cgi?id=2517564", "https://bugzilla.redhat.com/show_bug.cgi?id=2517565", "https://bugzilla.redhat.com/show_bug.cgi?id=2517566", "https://bugzilla.redhat.com/show_bug.cgi?id=2517570", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14457", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18798", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54874", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63076", "https://errata.almalinux.org/9/ALSA-2026-67165.html", "https://errata.rockylinux.org/RLSA-2026:67165", "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b", "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139", "https://linux.oracle.com/cve/CVE-2026-14456.html", "https://linux.oracle.com/errata/ELSA-2026-67165-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14456", "https://openssl-library.org/news/secadv/20260813.txt", "https://ubuntu.com/security/notices/USN-8678-1", "https://www.cve.org/CVERecord?id=CVE-2026-14456" ], "PublishedDate": "2026-08-13T15:19:31.82Z", "LastModifiedDate": "2026-11-06T20:26:36.04Z" }, { "VulnerabilityID": "CVE-2026-28387", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl-provider-legacy@3.5.4-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28387", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f390970bdbb5334388c1e98e4d163a7e878e0035d4773410ff551f5a9a6cf07e", "Title": "openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication", "Description": "Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "amazon": 3, "azure": 1, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "V3Score": 3.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28387", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "https://nvd.nist.gov/vuln/detail/CVE-2026-28387", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28387", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:20.7Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28388", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl-provider-legacy@3.5.4-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28388", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:116a49cd2d9ef7d13c8b97cf7a21621b09aace3f8ca7ef54448b10faad030a99", "Title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing", "Description": "Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28388", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "https://nvd.nist.gov/vuln/detail/CVE-2026-28388", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28388", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:20.863Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28389", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl-provider-legacy@3.5.4-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28389", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:00ff9319cc0840c1152e3c1f6f62b84f1b95b26a6b17c899088aaf7f250a66d2", "Title": "openssl: OpenSSL: Denial of Service vulnerability in CMS processing", "Description": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-28389", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://github.com/advisories/GHSA-7x88-9hgc-69gf", "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "https://nvd.nist.gov/vuln/detail/CVE-2026-28389", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28389", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.03Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-28390", "VendorIDs": [ "DSA-6201-1" ], "PkgID": "openssl-provider-legacy@3.5.4-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.5-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-28390", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6dca3bc5a7e4c9bad29dade6ad5445cf7906cac1bd2dd06d51e95d9822451a89", "Title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing", "Description": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 2, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22312", "https://access.redhat.com/errata/RHSA-2026:22313", "https://access.redhat.com/security/cve/CVE-2026-28390", "https://bugzilla.redhat.com/2456314", "https://bugzilla.redhat.com/show_bug.cgi?id=2456314", "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28390", "https://errata.almalinux.org/9/ALSA-2026-22313.html", "https://errata.rockylinux.org/RLSA-2026:22312", "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "https://linux.oracle.com/cve/CVE-2026-28390.html", "https://linux.oracle.com/errata/ELSA-2026-50345.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-28390", "https://openssl-library.org/news/secadv/20260407.txt", "https://ubuntu.com/security/notices/USN-8155-1", "https://ubuntu.com/security/notices/USN-8155-2", "https://www.cve.org/CVERecord?id=CVE-2026-28390", "https://www.openwall.com/lists/oss-security/2026/04/07/11" ], "PublishedDate": "2026-04-07T22:16:21.19Z", "LastModifiedDate": "2026-07-24T23:10:00.563Z" }, { "VulnerabilityID": "CVE-2026-45447", "VendorIDs": [ "DSA-6335-1" ], "PkgID": "openssl-provider-legacy@3.5.4-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.6-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-45447", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3ffa22100c2fea3e43122819485678f59006a098db1cea7b5f09979a55a96042", "Title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()", "Description": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-416", "CWE-825" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "julia": 3, "oracle-oval": 2, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25237", "https://access.redhat.com/errata/RHSA-2026:25239", "https://access.redhat.com/errata/RHSA-2026:26275", "https://access.redhat.com/errata/RHSA-2026:26319", "https://access.redhat.com/errata/RHSA-2026:29197", "https://access.redhat.com/errata/RHSA-2026:34102", "https://access.redhat.com/errata/RHSA-2026:35869", "https://access.redhat.com/errata/RHSA-2026:36215", "https://access.redhat.com/errata/RHSA-2026:36217", "https://access.redhat.com/errata/RHSA-2026:39009", "https://access.redhat.com/errata/RHSA-2026:39012", "https://access.redhat.com/errata/RHSA-2026:39981", "https://access.redhat.com/errata/RHSA-2026:44438", "https://access.redhat.com/errata/RHSA-2026:47735", "https://access.redhat.com/errata/RHSA-2026:47737", "https://access.redhat.com/errata/RHSA-2026:58563", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/errata/RHSA-2026:59831", "https://access.redhat.com/errata/RHSA-2026:66524", "https://access.redhat.com/security/cve/CVE-2026-45447", "https://bugzilla.redhat.com/2481898", "https://bugzilla.redhat.com/show_bug.cgi?id=2481879", "https://bugzilla.redhat.com/show_bug.cgi?id=2481880", "https://bugzilla.redhat.com/show_bug.cgi?id=2481881", "https://bugzilla.redhat.com/show_bug.cgi?id=2481882", "https://bugzilla.redhat.com/show_bug.cgi?id=2481884", "https://bugzilla.redhat.com/show_bug.cgi?id=2481885", "https://bugzilla.redhat.com/show_bug.cgi?id=2481887", "https://bugzilla.redhat.com/show_bug.cgi?id=2481890", "https://bugzilla.redhat.com/show_bug.cgi?id=2481891", "https://bugzilla.redhat.com/show_bug.cgi?id=2481892", "https://bugzilla.redhat.com/show_bug.cgi?id=2481893", "https://bugzilla.redhat.com/show_bug.cgi?id=2481894", "https://bugzilla.redhat.com/show_bug.cgi?id=2481896", "https://bugzilla.redhat.com/show_bug.cgi?id=2481897", "https://bugzilla.redhat.com/show_bug.cgi?id=2481898", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34181", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34183", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42767", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42768", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42769", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076", "https://errata.almalinux.org/9/ALSA-2026-44438.html", "https://errata.rockylinux.org/RLSA-2026:25239", "https://github.com/advisories/GHSA-f684-cpcq-j565", "https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c", "https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8", "https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54", "https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c", "https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e", "https://github.com/openssl/security/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c", "https://github.com/openssl/security/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8", "https://github.com/openssl/security/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54", "https://github.com/openssl/security/commit/a541ae8bfe849a30cc885e8780715c0f488e496c", "https://github.com/openssl/security/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e", "https://linux.oracle.com/cve/CVE-2026-45447.html", "https://linux.oracle.com/errata/ELSA-2026-50379.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-45447", "https://openssl-library.org/news/secadv/20260609.txt", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json", "https://ubuntu.com/security/notices/USN-8414-1", "https://ubuntu.com/security/notices/USN-8414-2", "https://www.cve.org/CVERecord?id=CVE-2026-45447" ], "PublishedDate": "2026-06-09T17:17:19.277Z", "LastModifiedDate": "2026-09-18T13:18:26.343Z" }, { "VulnerabilityID": "CVE-2026-84782", "VendorIDs": [ "DSA-6531-1" ], "PkgID": "openssl-provider-legacy@3.5.4-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.4-1~deb13u2?arch=amd64\u0026distro=debian-13.3", "UID": "d8f9ebb15bfaa5d4" }, "InstalledVersion": "3.5.4-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u3", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84782", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dffbb69df0ed123b4aef8c8cb747f315503235527c3e8b317abc3c601fa5aa5c", "Title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission", "Description": "Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77396", "https://access.redhat.com/errata/RHSA-2026:80514", "https://access.redhat.com/security/cve/CVE-2026-84782", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2537080", "https://bugzilla.redhat.com/show_bug.cgi?id=2537080", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782", "https://errata.almalinux.org/9/ALSA-2026-80514.html", "https://errata.rockylinux.org/RLSA-2026:77396", "https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943", "https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628", "https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58", "https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c", "https://linux.oracle.com/cve/CVE-2026-84782.html", "https://linux.oracle.com/errata/ELSA-2026-85968.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-84782", "https://openssl-library.org/news/secadv/20260929.txt", "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782", "https://ubuntu.com/security/notices/USN-8847-1", "https://ubuntu.com/security/notices/USN-8847-2", "https://www.cve.org/CVERecord?id=CVE-2026-84782" ], "PublishedDate": "2026-09-29T16:17:12.5Z", "LastModifiedDate": "2026-10-08T01:20:56.003Z" }, { "VulnerabilityID": "CVE-2026-13221", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13221", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8c72bde063c5057e0e30d1bc57520c63d25989b79bbabd8d9588b4ce99bfbc95", "Title": "perl: Perl: Incorrect regular expression processing via large regular expressions", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.", "Severity": "CRITICAL", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "nvd": 4, "oracle-oval": 2, "photon": 4, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N", "V3Score": 5.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/5", "https://access.redhat.com/errata/RHSA-2026:67155", "https://access.redhat.com/security/cve/CVE-2026-13221", "https://bugzilla.redhat.com/2499727", "https://bugzilla.redhat.com/show_bug.cgi?id=2499727", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13221", "https://errata.almalinux.org/9/ALSA-2026-67155.html", "https://errata.rockylinux.org/RLSA-2026:67155", "https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch", "https://github.com/Perl/perl5/issues/23388", "https://linux.oracle.com/cve/CVE-2026-13221.html", "https://linux.oracle.com/errata/ELSA-2026-67278-0.html", "https://lists.security.metacpan.org/cve-announce/msg/41780104/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13221", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-13221" ], "PublishedDate": "2026-07-13T17:16:48.923Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-42496", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42496", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1f036427e2b3848def51a878db43036b9c4ce3e6939ef765578c6460e0e4313b", "Title": "perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access", "Description": "Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target.\n\nA subsequent open through the extracted name reads or writes the attacker chosen path.", "Severity": "CRITICAL", "CweIDs": [ "CWE-59", "CWE-22" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30852", "https://access.redhat.com/errata/RHSA-2026:30856", "https://access.redhat.com/errata/RHSA-2026:30857", "https://access.redhat.com/security/cve/CVE-2026-42496", "https://bugzilla.redhat.com/2481314", "https://bugzilla.redhat.com/show_bug.cgi?id=2481314", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42496", "https://errata.almalinux.org/9/ALSA-2026-30856.html", "https://errata.rockylinux.org/RLSA-2026:30856", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://linux.oracle.com/cve/CVE-2026-42496.html", "https://linux.oracle.com/errata/ELSA-2026-30857.html", "https://lists.security.metacpan.org/cve-announce/msg/40396459/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42496", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.13Z", "LastModifiedDate": "2026-07-24T10:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-8376", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8376", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b415fd6b934b5bcb0224f27c22c12eb832431bcdaa8f34f0e3d0fcc4c913b970", "Title": "perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.", "Severity": "CRITICAL", "CweIDs": [ "CWE-680" ], "VendorSeverity": { "amazon": 2, "azure": 2, "nvd": 4, "photon": 4, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 5.7 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/1", "https://access.redhat.com/security/cve/CVE-2026-8376", "https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch", "https://github.com/Perl/perl5/pull/24433", "https://nvd.nist.gov/vuln/detail/CVE-2026-8376", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-8376" ], "PublishedDate": "2026-05-26T00:16:57.15Z", "LastModifiedDate": "2026-09-08T22:19:18.373Z" }, { "VulnerabilityID": "CVE-2026-42497", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42497", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:45c75b3c6a91ffcc0d6caac3a71fb406a7dd02f7a047ea13807e00b633e9b850", "Title": "perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction", "Description": "Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to link() without validating it against absolute paths or .. segments, creating a hardlink that shares the victim file's inode.\n\nA subsequent write through the extracted name modifies the victim file, and the post-extraction chmod, chown, and utime block in _extract_file() (guarded only against symlinks via -l) applies the tar header's mode, owner, and timestamps to the shared inode during extraction alone.", "Severity": "HIGH", "CweIDs": [ "CWE-59", "CWE-732" ], "VendorSeverity": { "amazon": 3, "azure": 2, "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-42497", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://lists.security.metacpan.org/cve-announce/msg/40396457/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42497", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.25Z", "LastModifiedDate": "2026-07-24T11:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-48962", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48962", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:582017e670e413ce766486f49e7b454631dbd50a00744c5ae1f279c6836266b0", "Title": "perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob", "Description": "IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege.", "Severity": "HIGH", "CweIDs": [ "CWE-95", "CWE-94" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/27/4", "https://access.redhat.com/errata/RHSA-2026:29182", "https://access.redhat.com/errata/RHSA-2026:29210", "https://access.redhat.com/errata/RHSA-2026:29867", "https://access.redhat.com/errata/RHSA-2026:29941", "https://access.redhat.com/errata/RHSA-2026:30085", "https://access.redhat.com/errata/RHSA-2026:30086", "https://access.redhat.com/errata/RHSA-2026:30115", "https://access.redhat.com/errata/RHSA-2026:30843", "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30858", "https://access.redhat.com/errata/RHSA-2026:30859", "https://access.redhat.com/errata/RHSA-2026:30860", "https://access.redhat.com/errata/RHSA-2026:50262", "https://access.redhat.com/security/cve/CVE-2026-48962", "https://bugzilla.redhat.com/2481767", "https://bugzilla.redhat.com/show_bug.cgi?id=2481767", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48962", "https://errata.almalinux.org/9/ALSA-2026-30859.html", "https://errata.rockylinux.org/RLSA-2026:30859", "https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch", "https://linux.oracle.com/cve/CVE-2026-48962.html", "https://linux.oracle.com/errata/ELSA-2026-30860.html", "https://lists.security.metacpan.org/cve-announce/msg/40434385/", "https://metacpan.org/release/PMQS/IO-Compress-2.220/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-48962", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-48962" ], "PublishedDate": "2026-05-27T04:16:31.333Z", "LastModifiedDate": "2026-08-05T13:23:22.46Z" }, { "VulnerabilityID": "CVE-2026-57432", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57432", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:959c00ffde891b03ae840e8dd977e7dbb638df27895ea51a3c19f4699ddfdc91", "Title": "perl: Perl: Information disclosure via integer overflow in pack/unpack operations", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.\n\nS_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.\n\nA template derived from untrusted input can read heap memory past the buffer and return it to the caller.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 3, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/6", "https://access.redhat.com/security/cve/CVE-2026-57432", "https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch", "https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780102/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57432", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57432" ], "PublishedDate": "2026-07-13T17:17:55.67Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-57433", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57433", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2690338514efaacf2f297aea9512a94fa5729e7b18b6667681631e864546e766", "Title": "Storable: Storable: Denial of Service via signed integer overflow in deserialization", "Description": "Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.\n\nretrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.\n\nA crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/7", "https://access.redhat.com/security/cve/CVE-2026-57433", "https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780100/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57433", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57433" ], "PublishedDate": "2026-07-13T17:17:55.783Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-9538", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.3", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6419e5de91cfd150d72f0dc84810ea2f115a54f0f888f582422bb77ef8ed3b73", "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size", "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/4", "https://access.redhat.com/errata/RHSA-2026:49525", "https://access.redhat.com/security/cve/CVE-2026-9538", "https://bugzilla.redhat.com/2481315", "https://bugzilla.redhat.com/show_bug.cgi?id=2481315", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538", "https://errata.almalinux.org/9/ALSA-2026-49525.html", "https://errata.rockylinux.org/RLSA-2026:49525", "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch", "https://linux.oracle.com/cve/CVE-2026-9538.html", "https://linux.oracle.com/errata/ELSA-2026-49525.html", "https://lists.security.metacpan.org/cve-announce/msg/40396448/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-9538", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-9538" ], "PublishedDate": "2026-05-26T02:16:41.15Z", "LastModifiedDate": "2026-07-23T11:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:51fa80635a9d24c9a5f5dad5649bf2b19186b1b104b20828bb13d258f2661b66", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6041f2d453ba2531802bb8646aff4e46ab816fadbb6173b6a4bf45b4bc94c80a", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:59aa6276d694d9562eb2932bb1719521f3673ac573eac7786af783fba6082480", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:228c29e26b7895830cf8a7b87787ae7c0639885a78b49dbb23c1c7c01d19bfc0", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:543bde3fd99fc269436c92843598b478960c66a9bf2511f46510207a691c131c", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:88f4d25e0e8cef0cea41fb350f2de614262029b65214079ce5c0e535e71ca3cf", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1f7c906cc809892cfaab95c18796a752c123e4fb6168df86df1b6ae5514d113a", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.3", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3a77211e67c3c14c00f0bdcdb9db256e21d61e40cddf7c2410d7cd6543cf3ace", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-76844", "VendorIDs": [ "DSA-6613-1" ], "PkgID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "PkgName": "zlib1g", "PkgIdentifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6034e96d79fecdaa" }, "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1", "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76844", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e30f2592840c06c4f46b092958de139273fe159add0da394b7e5a8bde2c72c1c", "Title": "webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal", "Description": "zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 2, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-76844", "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490", "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "https://github.com/madler/zlib", "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", "https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148", "https://github.com/webpack/webpack-dev-middleware", "https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js", "https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b", "https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b", "https://github.com/webpack/webpack-dev-middleware/pull/2404", "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6", "https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0", "https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c", "https://nvd.nist.gov/vuln/detail/CVE-2026-76844", "https://www.cve.org/CVERecord?id=CVE-2026-76844", "https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath", "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate" ], "PublishedDate": "2026-08-24T14:17:02.25Z", "LastModifiedDate": "2026-10-12T17:10:00.163Z" }, { "VulnerabilityID": "CVE-2026-85091", "VendorIDs": [ "DSA-6613-1" ], "PkgID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "PkgName": "zlib1g", "PkgIdentifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.3\u0026epoch=1", "UID": "6034e96d79fecdaa" }, "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1", "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:a257f20c716c7b5d0474b1b5998f4d1090b573d90b82f764b8f1f1faeb4b524f" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-85091", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4a56842aff95378c9fcea8e0e6045d1ed0800fa0616ad2d5fa02d63dc7cbd905", "Title": "zlib: zlib: Heap buffer overflow in gz_vacate() allows arbitrary code execution", "Description": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-85091", "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490", "https://github.com/madler/zlib", "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", "https://nvd.nist.gov/vuln/detail/CVE-2026-85091", "https://ubuntu.com/security/notices/USN-8954-1", "https://www.cve.org/CVERecord?id=CVE-2026-85091", "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate" ], "PublishedDate": "2026-09-03T13:06:20.573Z", "LastModifiedDate": "2026-09-09T20:41:07.123Z" } ] }, { "Target": "Python", "Class": "lang-pkgs", "Type": "python-pkg", "Packages": [ { "Name": "Pygments", "Identifier": { "PURL": "pkg:pypi/pygments@2.20.0", "UID": "63fa3660653e15c0" }, "Version": "2.20.0", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/9Q34MeIYQyrr6-TCod79G/pygments-2.20.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "annotated-doc", "Identifier": { "PURL": "pkg:pypi/annotated-doc@0.0.4", "UID": "327ff7698881d945" }, "Version": "0.0.4", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/2aOWwUAZNU1BS1v3Dwhwv/annotated_doc-0.0.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "annotated-types", "Identifier": { "PURL": "pkg:pypi/annotated-types@0.7.0", "UID": "e97e43f93c226ea3" }, "Version": "0.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/PUxCX8AWyPdTsngh-1Lnl/annotated_types-0.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "anyio", "Identifier": { "PURL": "pkg:pypi/anyio@4.13.0", "UID": "d4e91e0084b0f14d" }, "Version": "4.13.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/ZNBYtEsqhAsaEAtmosHbx/anyio-4.13.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "attrs", "Identifier": { "PURL": "pkg:pypi/attrs@26.1.0", "UID": "87fc30c26ff75000" }, "Version": "26.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/bXqGvdC_5D_MIZlPn0tJ1/attrs-26.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "autocommand", "Identifier": { "PURL": "pkg:pypi/autocommand@2.2.2", "UID": "de2aeb22213f7255" }, "Version": "2.2.2", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/autocommand-2.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "backports.tarfile", "Identifier": { "PURL": "pkg:pypi/backports.tarfile@1.2.0", "UID": "1333ca5d453000df" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "certifi", "Identifier": { "PURL": "pkg:pypi/certifi@2026.4.22", "UID": "d8641528a4cc019f" }, "Version": "2026.4.22", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/7pEYBwSVeE9fUyI8i7kDI/certifi-2026.4.22.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "charset-normalizer", "Identifier": { "PURL": "pkg:pypi/charset-normalizer@3.4.7", "UID": "5e04b4ae739e1f9" }, "Version": "3.4.7", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/QpE-ImsY3L-3G17HLTBZn/charset_normalizer-3.4.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "click", "Identifier": { "PURL": "pkg:pypi/click@8.3.3", "UID": "6a22d5fb2714f9f1" }, "Version": "8.3.3", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/PZ3lSULIl9vudVju4d8Qg/click-8.3.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "h11", "Identifier": { "PURL": "pkg:pypi/h11@0.16.0", "UID": "1a696fa0f1c51ea3" }, "Version": "0.16.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/g9NTOtd7_V42Fa0FdfxFa/h11-0.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpcore", "Identifier": { "PURL": "pkg:pypi/httpcore@1.0.9", "UID": "bfa09df3eb9b058" }, "Version": "1.0.9", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/2BGav6VHX9M5EVi3FqVWV/httpcore-1.0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpx", "Identifier": { "PURL": "pkg:pypi/httpx@0.28.1", "UID": "95ab759e256dce84" }, "Version": "0.28.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/-ox8DVeS7oWFL1fN8wCD4/httpx-0.28.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpx-sse", "Identifier": { "PURL": "pkg:pypi/httpx-sse@0.4.3", "UID": "b109bacbf3461004" }, "Version": "0.4.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/PlbfSf147vQ5_KJPODDdl/httpx_sse-0.4.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "idna", "Identifier": { "PURL": "pkg:pypi/idna@3.13", "UID": "411779d3993b579e" }, "Version": "3.13", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/5X0TfiAQqmqF781YUuti2/idna-3.13.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "importlib_metadata", "Identifier": { "PURL": "pkg:pypi/importlib-metadata@8.0.0", "UID": "347a36bc9e660761" }, "Version": "8.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/importlib_metadata-8.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "inflect", "Identifier": { "PURL": "pkg:pypi/inflect@7.3.1", "UID": "51e7d1c898b69383" }, "Version": "7.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/inflect-7.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.collections", "Identifier": { "PURL": "pkg:pypi/jaraco.collections@5.1.0", "UID": "b2e77b8a0b175ddd" }, "Version": "5.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.collections-5.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.context", "Identifier": { "PURL": "pkg:pypi/jaraco.context@5.3.0", "UID": "d6550b81e52efabe" }, "Version": "5.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.context-5.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.functools", "Identifier": { "PURL": "pkg:pypi/jaraco.functools@4.0.1", "UID": "f42118e4940a83a5" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.functools-4.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.text", "Identifier": { "PURL": "pkg:pypi/jaraco.text@3.12.1", "UID": "cac1fcd2d9755e50" }, "Version": "3.12.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.text-3.12.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonschema", "Identifier": { "PURL": "pkg:pypi/jsonschema@4.26.0", "UID": "ee2fe5d6e281ed19" }, "Version": "4.26.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/YEv3srCzRhg5UqPx_4ecF/jsonschema-4.26.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jsonschema-specifications", "Identifier": { "PURL": "pkg:pypi/jsonschema-specifications@2025.9.1", "UID": "5c8f501337209209" }, "Version": "2025.9.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/e69TwqQHZr9P94Yil_9KC/jsonschema_specifications-2025.9.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "markdown-it-py", "Identifier": { "PURL": "pkg:pypi/markdown-it-py@4.0.0", "UID": "fe4abaa77f8ed2c7" }, "Version": "4.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/j_j_Z0RaVfyd-9n59Px8o/markdown_it_py-4.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mcp", "Identifier": { "PURL": "pkg:pypi/mcp@1.12.2", "UID": "e0a86272ea62b531" }, "Version": "1.12.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/rU4l6z19cgmSdwHP4MVZz/mcp-1.12.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "mdurl", "Identifier": { "PURL": "pkg:pypi/mdurl@0.1.2", "UID": "23fbbcd7be61a401" }, "Version": "0.1.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/lIzFPRUMzq9_inpLk5Alk/mdurl-0.1.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "more-itertools", "Identifier": { "PURL": "pkg:pypi/more-itertools@10.3.0", "UID": "cab6d07375997e08" }, "Version": "10.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/more_itertools-10.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "packaging", "Identifier": { "PURL": "pkg:pypi/packaging@24.2", "UID": "dd0943476d1773a8" }, "Version": "24.2", "Licenses": [ "Apache-2.0", "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/packaging-24.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pathlib", "Identifier": { "PURL": "pkg:pypi/pathlib@1.0.1", "UID": "9333d79b8c0ad71" }, "Version": "1.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/qtRMFiZMwkeZ3XIvBUqMk/pathlib-1.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pillow", "Identifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "Version": "12.2.0", "Licenses": [ "MIT-CMU" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pip", "Identifier": { "PURL": "pkg:pypi/pip@26.0.1", "UID": "e05804f1c7c06a33" }, "Version": "26.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "FilePath": "usr/local/lib/python3.11/site-packages/pip-26.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "platformdirs", "Identifier": { "PURL": "pkg:pypi/platformdirs@4.2.2", "UID": "f93e5b8c438aeaf6" }, "Version": "4.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/platformdirs-4.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic", "Identifier": { "PURL": "pkg:pypi/pydantic@2.13.3", "UID": "3a84b67429942b08" }, "Version": "2.13.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/-n6jBI7lReMhwFVdzWcJl/pydantic-2.13.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic-settings", "Identifier": { "PURL": "pkg:pypi/pydantic-settings@2.14.0", "UID": "d36eeedf89a023e4" }, "Version": "2.14.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/jlb5Svy50SLdipHNj_E7q/pydantic_settings-2.14.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic_core", "Identifier": { "PURL": "pkg:pypi/pydantic-core@2.46.3", "UID": "20c6f923f498ae7f" }, "Version": "2.46.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/xYAMdzROtPyk052I0-iSg/pydantic_core-2.46.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-dateutil", "Identifier": { "PURL": "pkg:pypi/python-dateutil@2.9.0.post0", "UID": "8967372a0461e4c9" }, "Version": "2.9.0.post0", "Licenses": [ "BSD-3-Clause", "Apache-2.0" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/uyWjxMHsX2vAdpbUTLThS/python_dateutil-2.9.0.post0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-dotenv", "Identifier": { "PURL": "pkg:pypi/python-dotenv@1.2.2", "UID": "480c5d5fb62dd0c5" }, "Version": "1.2.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/-k010jXu_NwJ0QWSw9HUN/python_dotenv-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-multipart", "Identifier": { "PURL": "pkg:pypi/python-multipart@0.0.26", "UID": "3db0fa4241009714" }, "Version": "0.0.26", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/ockpBtjIXUudjQdzIKyt5/python_multipart-0.0.26.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "referencing", "Identifier": { "PURL": "pkg:pypi/referencing@0.37.0", "UID": "3fc94b5a6b365616" }, "Version": "0.37.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/0huWot-pU_PIqd6Hx-juw/referencing-0.37.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "requests", "Identifier": { "PURL": "pkg:pypi/requests@2.33.1", "UID": "cd970e80c9c22298" }, "Version": "2.33.1", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/WCGRqsGmXzMpVJXOY4v7Q/requests-2.33.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rich", "Identifier": { "PURL": "pkg:pypi/rich@15.0.0", "UID": "3853bd5c91816a05" }, "Version": "15.0.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/HUsTRXXE1_F2_f5HJF1Zk/rich-15.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "rpds-py", "Identifier": { "PURL": "pkg:pypi/rpds-py@0.30.0", "UID": "5ca360ac2fc0278f" }, "Version": "0.30.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/vH7HH5fzB_4rlBPeFunkH/rpds_py-0.30.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "setuptools", "Identifier": { "PURL": "pkg:pypi/setuptools@79.0.1", "UID": "a34f48aa76be299c" }, "Version": "79.0.1", "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools-79.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "shellingham", "Identifier": { "PURL": "pkg:pypi/shellingham@1.5.4", "UID": "8b8655a75346613e" }, "Version": "1.5.4", "Licenses": [ "ISC" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/vPBEJjHbKCj7pvCFTynGh/shellingham-1.5.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "six", "Identifier": { "PURL": "pkg:pypi/six@1.17.0", "UID": "702085e21fe5e00c" }, "Version": "1.17.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/cZfldQ1I5N0GNYLUbO7_8/six-1.17.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sse-starlette", "Identifier": { "PURL": "pkg:pypi/sse-starlette@3.3.4", "UID": "b398cbee7c2a5c85" }, "Version": "3.3.4", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/_mrzMs-qzyjlQDu6L0Bc-/sse_starlette-3.3.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "starlette", "Identifier": { "PURL": "pkg:pypi/starlette@1.0.0", "UID": "2093fd7d372d6c5d" }, "Version": "1.0.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/JR3GBADZIDg4Erf9dkq4I/starlette-1.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tomli", "Identifier": { "PURL": "pkg:pypi/tomli@2.0.1", "UID": "53abaa0d00072d9e" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/tomli-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typeguard", "Identifier": { "PURL": "pkg:pypi/typeguard@4.3.0", "UID": "f19abdf9377301a1" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/typeguard-4.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typer", "Identifier": { "PURL": "pkg:pypi/typer@0.25.0", "UID": "a52f9bcbc7b8a39b" }, "Version": "0.25.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/RNy0U3270lcSwfxNSKdn8/typer-0.25.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing-inspection", "Identifier": { "PURL": "pkg:pypi/typing-inspection@0.4.2", "UID": "cd6ff000dfec347e" }, "Version": "0.4.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/OIgMs3w2i2vt1i_iRUdhV/typing_inspection-0.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing_extensions", "Identifier": { "PURL": "pkg:pypi/typing-extensions@4.12.2", "UID": "4b1f19157aef399d" }, "Version": "4.12.2", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/typing_extensions-4.12.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing_extensions", "Identifier": { "PURL": "pkg:pypi/typing-extensions@4.15.0", "UID": "85fd2230c9b191dc" }, "Version": "4.15.0", "Licenses": [ "PSF-2.0" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/f6fEm0tgm8956iJTEm2F2/typing_extensions-4.15.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "urllib3", "Identifier": { "PURL": "pkg:pypi/urllib3@2.6.3", "UID": "dfed0a91cf6f25e5" }, "Version": "2.6.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/nYZ9t3kf_NgXiNXLRX2od/urllib3-2.6.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uv", "Identifier": { "PURL": "pkg:pypi/uv@0.11.7", "UID": "63decae77b26959f" }, "Version": "0.11.7", "Licenses": [ "MIT OR Apache-2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "FilePath": "usr/local/lib/python3.11/site-packages/uv-0.11.7.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uvicorn", "Identifier": { "PURL": "pkg:pypi/uvicorn@0.46.0", "UID": "6f8c60f0f2aa5f2d" }, "Version": "0.46.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "FilePath": "root/.cache/uv/archive-v0/v1nQgtuf01rd6nirTZt1i/uvicorn-0.46.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wheel", "Identifier": { "PURL": "pkg:pypi/wheel@0.45.1", "UID": "68d1f5691b386b62" }, "Version": "0.45.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/wheel-0.45.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wheel", "Identifier": { "PURL": "pkg:pypi/wheel@0.45.1", "UID": "588d1d5b79ef6155" }, "Version": "0.45.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/wheel-0.45.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zipp", "Identifier": { "PURL": "pkg:pypi/zipp@3.19.2", "UID": "92d9047d0b817060" }, "Version": "3.19.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/zipp-3.19.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-63374", "VendorIDs": [ "GHSA-82r6-8w77-94w6" ], "PkgName": "anyio", "PkgPath": "root/.cache/uv/archive-v0/ZNBYtEsqhAsaEAtmosHbx/anyio-4.13.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/anyio@4.13.0", "UID": "d4e91e0084b0f14d" }, "InstalledVersion": "4.13.0", "FixedVersion": "4.14.2", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-63374", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:b641103740255c7f10a736ca34b94b55bc839f6089ac846448d37f84b5d2ffcb", "Title": "anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding", "Description": "AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a connection to a non-ASCII domain is hijacked or redirected, an attacker can obtain a legitimate certificate for the different ASCII hostname produced by IDNA 2003 and present it to the client, causing the malicious endpoint's certificate to validate. This issue is fixed in version 4.14.2.", "Severity": "CRITICAL", "CweIDs": [ "CWE-295", "CWE-297" ], "VendorSeverity": { "ghsa": 4, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 9.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-63374", "https://advisory.echohq.com/cve/CVE-2026-63374", "https://github.com/advisories/GHSA-82r6-8w77-94w6", "https://github.com/agronholm/anyio", "https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce", "https://github.com/agronholm/anyio/pull/1208", "https://github.com/agronholm/anyio/releases/tag/4.14.2", "https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6", "https://nvd.nist.gov/vuln/detail/CVE-2026-63374", "https://www.cve.org/CVERecord?id=CVE-2026-63374" ], "PublishedDate": "2026-09-22T16:17:50.68Z", "LastModifiedDate": "2026-09-28T17:17:50.357Z" }, { "VulnerabilityID": "GHSA-6q48-6c7w-9gw2", "PkgName": "certifi", "PkgPath": "root/.cache/uv/archive-v0/7pEYBwSVeE9fUyI8i7kDI/certifi-2026.4.22.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/certifi@2026.4.22", "UID": "d8641528a4cc019f" }, "InstalledVersion": "2026.4.22", "FixedVersion": "2026.10.18", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-6q48-6c7w-9gw2", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a290ae42b2d2e7811494194c91aeca06e4de88ac5436adaa3a4519f359f5ad1d", "Title": "certifi bundles emSign root CAs with compromised intermediate CA keys", "Description": "Certifi versions before 2026.10.18 include the `emSign ECC Root CA - G3` root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. \n\nAn attacker with one of the compromised keys can issue valid-looking certificates for any hostname. If the attacker is also on-path, they can intercept or modify TLS traffic from clients that trust the certifi bundle. Examples include `requests`, `urllib3` and `pip`, and the Python.org macOS installer.\n\nCertifi 2026.10.18 removed all emSign roots from the bundle. Certifi 2026.10.19 restored the emSign roots that are not affected. Upgrade to 2026.10.19 or later, and rebuild container images that vendor certifi.", "Severity": "CRITICAL", "VendorSeverity": { "ghsa": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 9.1 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-6q48-6c7w-9gw2", "https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576", "https://emudhra.we-have-a-problem.com", "https://github.com/advisories/GHSA-6q48-6c7w-9gw2", "https://github.com/certifi/python-certifi", "https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2" ], "PublishedDate": "2026-10-20T19:35:05Z", "LastModifiedDate": "2026-10-26T16:02:12Z" }, { "VulnerabilityID": "CVE-2026-23949", "VendorIDs": [ "GHSA-58pv-8j8x-9vj2" ], "PkgName": "jaraco.context", "PkgPath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.context-5.3.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/jaraco.context@5.3.0", "UID": "d6550b81e52efabe" }, "InstalledVersion": "5.3.0", "FixedVersion": "6.1.0", "Status": "fixed", "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23949", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:2991f3d5ae0b18004d6600594715b243d69979eebda024819e0da193c0295325", "Title": "jaraco.context: jaraco.context: Path traversal via malicious tar archives", "Description": "jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the `jaraco.context.tarball()` function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract files outside the intended extraction directory when malicious tar archives are processed. The strip_first_component filter splits the path on the first `/` and extracts the second component, while allowing `../` sequences. Paths like `dummy_dir/../../etc/passwd` become `../../etc/passwd`. Note that this suffers from a nested tarball attack as well with multi-level tar files such as `dummy_dir/inner.tar.gz`, where the inner.tar.gz includes a traversal `dummy_dir/../../config/.env` that also gets translated to `../../config/.env`. Version 6.1.0 contains a patch for the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-23949", "https://advisory.echohq.com/cve/CVE-2026-23949", "https://github.com/jaraco/jaraco.context", "https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91", "https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9", "https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2", "https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76", "https://nvd.nist.gov/vuln/detail/CVE-2026-23949", "https://ubuntu.com/security/notices/USN-7979-1", "https://www.cve.org/CVERecord?id=CVE-2026-23949" ], "PublishedDate": "2026-01-20T01:15:57.723Z", "LastModifiedDate": "2026-06-17T10:22:20.2Z" }, { "VulnerabilityID": "CVE-2025-66416", "VendorIDs": [ "GHSA-9h52-p55h-vw2f" ], "PkgName": "mcp", "PkgPath": "root/.cache/uv/archive-v0/rU4l6z19cgmSdwHP4MVZz/mcp-1.12.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/mcp@1.12.2", "UID": "e0a86272ea62b531" }, "InstalledVersion": "1.12.2", "FixedVersion": "1.23.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-66416", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:32cce4d1e28c5bf8fb01b0a246533eb698a86eaf39f7de00001a74bd7a01acfb", "Title": "mcp: DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK", "Description": "The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.23.0, tThe Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication using FastMCP with streamable HTTP or SSE transport, and has not configured TransportSecuritySettings, a malicious website could exploit DNS rebinding to bypass same-origin policy restrictions and send requests to the local MCP server. This could allow an attacker to invoke tools or access resources exposed by the MCP server on behalf of the user in those limited circumstances. Note that running HTTP-based MCP servers locally without authentication is not recommended per MCP security best practices. This issue does not affect servers using stdio transport. This vulnerability is fixed in 1.23.0.", "Severity": "HIGH", "CweIDs": [ "CWE-1188" ], "VendorSeverity": { "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 7.6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-66416", "https://github.com/advisories/GHSA-9h52-p55h-vw2f", "https://github.com/modelcontextprotocol/python-sdk", "https://github.com/modelcontextprotocol/python-sdk/commit/d3a184119e4479ea6a63590bc41f01dc06e3fa99", "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-9h52-p55h-vw2f", "https://github.com/pypa/advisory-database/tree/main/vulns/mcp/PYSEC-2026-1617.yaml", "https://nvd.nist.gov/vuln/detail/CVE-2025-66416", "https://pypi.org/project/mcp", "https://www.cve.org/CVERecord?id=CVE-2025-66416" ], "PublishedDate": "2025-12-02T19:15:52.52Z", "LastModifiedDate": "2026-10-18T18:10:00.1Z" }, { "VulnerabilityID": "CVE-2026-52869", "VendorIDs": [ "GHSA-jpw9-pfvf-9f58" ], "PkgName": "mcp", "PkgPath": "root/.cache/uv/archive-v0/rU4l6z19cgmSdwHP4MVZz/mcp-1.12.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/mcp@1.12.2", "UID": "e0a86272ea62b531" }, "InstalledVersion": "1.12.2", "FixedVersion": "1.27.2", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-52869", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f14ea9a233990d3ca71613244978237f92a3503298662cabfff61593f644a2a2", "Title": "MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal", "Description": "The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the SSE and stateful Streamable HTTP transports mcp.server.sse.SseServerTransport and mcp.server.streamable_http_manager.StreamableHTTPSessionManager route requests to existing sessions using only the session_id query parameter or Mcp-Session-Id header without verifying the authenticated principal that created the session, allowing a different bearer-token-authenticated client with a known session ID to inject JSON-RPC messages into that session. This issue is fixed in version 1.27.2.", "Severity": "HIGH", "CweIDs": [ "CWE-639" ], "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L", "V3Score": 7.1 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-52869", "https://github.com/modelcontextprotocol/python-sdk", "https://github.com/modelcontextprotocol/python-sdk/commit/1abcca2408a6b50e10ec601181f63f9978705c00", "https://github.com/modelcontextprotocol/python-sdk/commit/ce267b6fc515dc4efc1dc70b6975b16ff0feef0a", "https://github.com/modelcontextprotocol/python-sdk/pull/2690", "https://github.com/modelcontextprotocol/python-sdk/pull/2719", "https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.27.2", "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-jpw9-pfvf-9f58", "https://nvd.nist.gov/vuln/detail/CVE-2026-52869" ], "PublishedDate": "2026-07-15T20:17:38.427Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59950", "VendorIDs": [ "GHSA-vj7q-gjh5-988w" ], "PkgName": "mcp", "PkgPath": "root/.cache/uv/archive-v0/rU4l6z19cgmSdwHP4MVZz/mcp-1.12.2.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/mcp@1.12.2", "UID": "e0a86272ea62b531" }, "InstalledVersion": "1.12.2", "FixedVersion": "1.28.1", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59950", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f88eb54396c305db78eb148db8f621f63306057b12c25b603ff3e61462570bc7", "Title": "MCP Python SDK: WebSocket server transport does not support Host/Origin validation", "Description": "The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.server.websocket.websocket_server transport accepted WebSocket handshakes without applying Host or Origin header validation, leaving no SDK-level way to restrict which origins could connect to applications that exposed that transport. This issue is fixed in version 1.28.1.", "Severity": "HIGH", "CweIDs": [ "CWE-346", "CWE-1385" ], "VendorSeverity": { "ghsa": 3, "nvd": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 7.6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://advisory.echohq.com/cve/CVE-2026-59950", "https://github.com/modelcontextprotocol/python-sdk", "https://github.com/modelcontextprotocol/python-sdk/commit/777b8d06710c140e3606b0d4598e2aa48546c266", "https://github.com/modelcontextprotocol/python-sdk/pull/2992", "https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.28.1", "https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-vj7q-gjh5-988w", "https://nvd.nist.gov/vuln/detail/CVE-2026-59950" ], "PublishedDate": "2026-07-15T21:16:55.683Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-112393", "VendorIDs": [ "GHSA-332p-7hrc-92wf" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112393", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:c0fdbb86bea10be67b6c915ca47d0719924653d747e95536e3b7a7951bcff901", "Title": "pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO", "Description": "Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno(), such as BytesIO. The callback sizes its allocation from the prior buffer size instead of the current write position, allowing an attacker-controlled out-of-line TIFF tag or retained ICC profile to be copied beyond the allocation after libtiff seeks forward. This overflow can crash the process and may allow code execution. Independently, unwritten alignment gaps in compressed TIFF output larger than 64 KiB can disclose stale heap bytes without a crafted tag. File paths and targets with real file descriptors are unaffected. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 4, "bitnami": 4, "ghsa": 4, "nvd": 4, "oracle-oval": 4, "redhat": 3, "rocky": 4, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93077", "https://access.redhat.com/security/cve/CVE-2026-112393", "https://advisory.echohq.com/cve/CVE-2026-112393", "https://bugzilla.redhat.com/2555846", "https://bugzilla.redhat.com/2555867", "https://bugzilla.redhat.com/2555889", "https://bugzilla.redhat.com/show_bug.cgi?id=2555846", "https://bugzilla.redhat.com/show_bug.cgi?id=2555867", "https://bugzilla.redhat.com/show_bug.cgi?id=2555889", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900", "https://errata.almalinux.org/8/ALSA-2026-93077.html", "https://errata.rockylinux.org/RLSA-2026:93077", "https://getsafety.com/v/SFTY-20261021-13350/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf", "https://linux.oracle.com/cve/CVE-2026-112393.html", "https://linux.oracle.com/errata/ELSA-2026-93077.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112393", "https://www.cve.org/CVERecord?id=CVE-2026-112393" ], "PublishedDate": "2026-10-19T21:17:07.613Z", "LastModifiedDate": "2026-10-26T21:01:35.733Z" }, { "VulnerabilityID": "CVE-2026-112398", "VendorIDs": [ "GHSA-5x8w-8jj5-q52h" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112398", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e88cbf55eb6f9bfe77fb5b157db9003aad3601c2560add968f654265933e1355", "Title": "pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding selects raw mode LA with two bytes per pixel, while an unrecognized JPEG mode can be decoded as JCS_UNKNOWN with four components, causing ImagingJpegDecode to write four-component scanlines into the two-byte tile buffer. An attacker can supply a crafted OLE2 FlashPix file to an application with the optional olefile dependency installed that opens or thumbnails untrusted input. This can corrupt heap memory and may allow arbitrary code execution. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-122", "CWE-787" ], "VendorSeverity": { "alma": 4, "bitnami": 4, "ghsa": 4, "nvd": 4, "oracle-oval": 4, "redhat": 3, "rocky": 4, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93077", "https://access.redhat.com/security/cve/CVE-2026-112398", "https://advisory.echohq.com/cve/CVE-2026-112398", "https://bugzilla.redhat.com/2555846", "https://bugzilla.redhat.com/2555867", "https://bugzilla.redhat.com/2555889", "https://bugzilla.redhat.com/show_bug.cgi?id=2555846", "https://bugzilla.redhat.com/show_bug.cgi?id=2555867", "https://bugzilla.redhat.com/show_bug.cgi?id=2555889", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900", "https://errata.almalinux.org/8/ALSA-2026-93077.html", "https://errata.rockylinux.org/RLSA-2026:93077", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h", "https://linux.oracle.com/cve/CVE-2026-112398.html", "https://linux.oracle.com/errata/ELSA-2026-93077.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112398", "https://www.cve.org/CVERecord?id=CVE-2026-112398" ], "PublishedDate": "2026-10-19T22:17:07.107Z", "LastModifiedDate": "2026-10-27T21:01:25.823Z" }, { "VulnerabilityID": "CVE-2026-112403", "VendorIDs": [ "GHSA-8g5g-8vmr-9782" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112403", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:eb5431a9442fb134deb6c03ccc64623cfeab703d13a59f116ecd9c3710280b13", "Title": "pillow: Pillow: Heap buffer overflow in ImagingJpegDecode", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does not verify libjpeg's actual output width and component count after scaling is requested, and an 8-bit lossless SOF3 JPEG decoded by a build linked to libjpeg-turbo 3.x can ignore the requested downscaling geometry. An attacker can supply such a JPEG to an application that uses draft() or thumbnail() to request downscaling. This can corrupt heap memory, crash the process, or potentially allow code execution. Older libjpeg-turbo 2.x and IJG builds reject the SOF3 input. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "bitnami": 4, "ghsa": 4, "nvd": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112403", "https://advisory.echohq.com/cve/CVE-2026-112403", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782", "https://nvd.nist.gov/vuln/detail/CVE-2026-112403", "https://www.cve.org/CVERecord?id=CVE-2026-112403" ], "PublishedDate": "2026-10-19T22:17:07.77Z", "LastModifiedDate": "2026-10-27T15:00:15.043Z" }, { "VulnerabilityID": "CVE-2026-112900", "VendorIDs": [ "GHSA-w889-685w-c8fh" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112900", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:766113c17e7ed16061f36407638090eb16dc3b906322dd724c7a2cf08ebf1b0e", "Title": "pillow: Pillow: Argument Injection in Ghostscript call, potentially leading into RCE", "Description": "Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a caller-controlled input filename after -f without converting it to a safe absolute path, so a name beginning with a hyphen can be interpreted as a Ghostscript option. An attacker who controls the filename can inject Ghostscript arguments. Arbitrary command execution specifically requires a leading @ argument-file filename and control of the referenced text file containing additional Ghostscript arguments; the reported chain reproduces with the default -dSAFER invocation. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-78", "CWE-88" ], "VendorSeverity": { "alma": 4, "bitnami": 4, "ghsa": 4, "nvd": 4, "oracle-oval": 4, "redhat": 4, "rocky": 4, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 9.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93077", "https://access.redhat.com/security/cve/CVE-2026-112900", "https://advisory.echohq.com/cve/CVE-2026-112900", "https://bugzilla.redhat.com/2555846", "https://bugzilla.redhat.com/2555867", "https://bugzilla.redhat.com/2555889", "https://bugzilla.redhat.com/show_bug.cgi?id=2555846", "https://bugzilla.redhat.com/show_bug.cgi?id=2555867", "https://bugzilla.redhat.com/show_bug.cgi?id=2555889", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112393", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112900", "https://errata.almalinux.org/8/ALSA-2026-93077.html", "https://errata.rockylinux.org/RLSA-2026:93077", "https://getsafety.com/v/SFTY-20261021-11431/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/a2c363141da31a265dd536c945677db4b64f3ec9", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-w889-685w-c8fh", "https://linux.oracle.com/cve/CVE-2026-112900.html", "https://linux.oracle.com/errata/ELSA-2026-93077.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112900", "https://www.cve.org/CVERecord?id=CVE-2026-112900" ], "PublishedDate": "2026-10-19T22:17:10.16Z", "LastModifiedDate": "2026-10-27T14:55:00.937Z" }, { "VulnerabilityID": "CVE-2026-96639", "VendorIDs": [ "GHSA-v9pv-5gc8-w2m6" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96639", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1ca5c944af5aea77d80e1f5ca524fd9d3b093845cfe5b2689c8ce64fdbaae204", "Title": "pillow: Pillow multi-frame loaders can reuse stale native image storage after mode transitions", "Description": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses the stale native storage because _im is non-null without verifying that its mode and size still match. Crafted PSD, MPO, DCX, or MIC frame transitions can then write wider pixels into the narrow allocation, causing native out-of-bounds writes and crashes. The MPO path can also cause a native over-read and, in demonstrated runtime-specific profiles, command execution. This issue is fixed in version 13.0.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-125", "CWE-787" ], "VendorSeverity": { "bitnami": 4, "ghsa": 4, "redhat": 4, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96639", "https://advisory.echohq.com/cve/CVE-2026-96639", "https://github.com/advisories/GHSA-v9pv-5gc8-w2m6", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/78d97d994579aef81aafe123773d525f40f2522a", "https://github.com/python-pillow/Pillow/pull/10105", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-v9pv-5gc8-w2m6", "https://nvd.nist.gov/vuln/detail/CVE-2026-96639", "https://www.cve.org/CVERecord?id=CVE-2026-96639" ], "PublishedDate": "2026-10-21T21:20:32.217Z", "LastModifiedDate": "2026-10-29T11:17:39.023Z" }, { "VulnerabilityID": "CVE-2026-112390", "VendorIDs": [ "GHSA-22hg-r758-rrw9" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112390", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:de3a5defb9965800441a42fd30d73a1114790035bf66c95234184055c305c043", "Title": "pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing", "Description": "Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but MicImageFile.tell reports the OLE stream index and its seek() resets TIFF frame state, so an embedded TIFF with at least three IFDs never advances. When an application with olefile installed reads n_frames or saves all frames from a crafted MIC file, the non-advancing traversal can hold a worker at full CPU indefinitely. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112390", "https://advisory.echohq.com/cve/CVE-2026-112390", "https://getsafety.com/v/SFTY-20261021-15476/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9", "https://nvd.nist.gov/vuln/detail/CVE-2026-112390", "https://www.cve.org/CVERecord?id=CVE-2026-112390" ], "PublishedDate": "2026-10-19T21:17:07.34Z", "LastModifiedDate": "2026-10-23T17:01:18.697Z" }, { "VulnerabilityID": "CVE-2026-112392", "VendorIDs": [ "GHSA-27h8-gf7j-v5hc" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112392", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0a829b6df405ca7e5c72b892e2a48017cfdd765474d5afe10c48433225db90ca", "Title": "pillow: pillow: Denial of Service via zero-size images in rank filters", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter is never reached. An attacker can supply or cause creation of a zero-size image to an application that applies a rank, median, minimum, or maximum filter. This causes a native process crash. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112392", "https://advisory.echohq.com/cve/CVE-2026-112392", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-39022/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc", "https://linux.oracle.com/cve/CVE-2026-112392.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112392", "https://www.cve.org/CVERecord?id=CVE-2026-112392" ], "PublishedDate": "2026-10-19T22:17:06.587Z", "LastModifiedDate": "2026-10-26T20:52:03.5Z" }, { "VulnerabilityID": "CVE-2026-112397", "VendorIDs": [ "GHSA-58r4-6rv3-gfh8" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112397", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:8f7b6f59ef82c19ccb8fae9764457b98ad15b05334c19447f2190499f7be8450", "Title": "pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create an image with width zero, and the native morphology routine indexes outrow[width - 1] without rejecting that geometry. An attacker can supply such an image to an application that applies a morphology operation. This can crash the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112397", "https://advisory.echohq.com/cve/CVE-2026-112397", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8", "https://linux.oracle.com/cve/CVE-2026-112397.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112397", "https://www.cve.org/CVERecord?id=CVE-2026-112397" ], "PublishedDate": "2026-10-19T22:17:06.97Z", "LastModifiedDate": "2026-10-27T21:00:11.173Z" }, { "VulnerabilityID": "CVE-2026-112399", "VendorIDs": [ "GHSA-5xm2-6676-qcp9" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112399", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e98b599b7b27f46e1b6c9abfe8f074fdda708b9eab647ab49634fca350e34d34", "Title": "pillow: pillow: Denial of service via crafted APNG image", "Description": "Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OP_PREVIOUS reaches PngImageFile._seek while Image.open() positions frame zero. The full-canvas allocation occurs inside Image.open() without requiring pixel loading or frame iteration. This can exhaust memory and deny service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112399", "https://advisory.echohq.com/cve/CVE-2026-112399", "https://getsafety.com/v/SFTY-20261021-76942/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9", "https://nvd.nist.gov/vuln/detail/CVE-2026-112399", "https://www.cve.org/CVERecord?id=CVE-2026-112399" ], "PublishedDate": "2026-10-19T22:17:07.24Z", "LastModifiedDate": "2026-10-28T16:17:02.13Z" }, { "VulnerabilityID": "CVE-2026-112400", "VendorIDs": [ "GHSA-65qm-jvmh-6pqg" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112400", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:842224f1a0e3074e2ac0280124fa45f6ac040f09ad30d4ecd18e347945499f50", "Title": "pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image", "Description": "Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF can leave rejected dimensions stored after Image.DecompressionBombError; if an application catches that exception and continues processing the same image object, later seek or load operations allocate according to those dimensions and can exhaust memory, denying service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112400", "https://advisory.echohq.com/cve/CVE-2026-112400", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg", "https://nvd.nist.gov/vuln/detail/CVE-2026-112400", "https://www.cve.org/CVERecord?id=CVE-2026-112400" ], "PublishedDate": "2026-10-19T22:17:07.367Z", "LastModifiedDate": "2026-10-27T21:02:32.24Z" }, { "VulnerabilityID": "CVE-2026-112402", "VendorIDs": [ "GHSA-7mwm-ghpf-9vrm" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112402", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:7747938820e3fc30ec97b49592276c916d3c80a6a4237774a9dada2e751c238b", "Title": "pillow: pillow: Denial of service via double free during image transformation", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path handles Transform.EXTENT or pure scale-and-translate Transform.AFFINE operations with the default NEAREST resampling. The output image allocation must succeed while the additional per-column lookup allocation fails, after which the error path deletes image storage that later cleanup releases again. An attacker who can drive such a large Image.transform() operation under memory pressure may trigger the failure. This can crash the process and may corrupt memory. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112402", "https://advisory.echohq.com/cve/CVE-2026-112402", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-43268/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm", "https://linux.oracle.com/cve/CVE-2026-112402.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112402", "https://www.cve.org/CVERecord?id=CVE-2026-112402" ], "PublishedDate": "2026-10-19T22:17:07.633Z", "LastModifiedDate": "2026-10-27T21:03:13.88Z" }, { "VulnerabilityID": "CVE-2026-112404", "VendorIDs": [ "GHSA-c6hw-5grf-ff96" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112404", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:0afa9625032a73f053e6f702b4dcdab1f1b2b99854ad40e0d301bd471d5f4ba9", "Title": "pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding", "Description": "Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently, Pillow does not verify that the required input row fits inside the row libtiff produced, while the strip path has this validation. Loading pixels from such a crafted TIFF can expose adjacent heap data in output pixels or crash the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-126" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112404", "https://advisory.echohq.com/cve/CVE-2026-112404", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96", "https://nvd.nist.gov/vuln/detail/CVE-2026-112404", "https://www.cve.org/CVERecord?id=CVE-2026-112404" ], "PublishedDate": "2026-10-19T22:17:07.9Z", "LastModifiedDate": "2026-10-28T16:17:02.273Z" }, { "VulnerabilityID": "CVE-2026-112405", "VendorIDs": [ "GHSA-cp9v-662q-vvx9" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112405", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:d75c348c73df245709807b8ca783b8899f07c98735839485e114bbf0a8dce63e", "Title": "pillow: Pillow: Denial of Service via null pointer dereference in Image.merge()", "Description": "Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input band, allowing a 32-bit integer or floating-point image backed by image32 storage to be merged as a narrower multiband image. A crafted IPTC file can reach this path when an application opens and loads it, or a caller can invoke Image.merge() directly with such a first band. This causes a native process crash. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-476" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112405", "https://advisory.echohq.com/cve/CVE-2026-112405", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-10844/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/b6ee66e8b2c2c0932bdf65f963268d9f2927ef86", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-cp9v-662q-vvx9", "https://linux.oracle.com/cve/CVE-2026-112405.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112405", "https://www.cve.org/CVERecord?id=CVE-2026-112405" ], "PublishedDate": "2026-10-19T22:17:08.027Z", "LastModifiedDate": "2026-10-27T14:59:59.923Z" }, { "VulnerabilityID": "CVE-2026-112406", "VendorIDs": [ "GHSA-f2g6-542v-9j58" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112406", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:612c204aeb5c4aeaa16aaefaa63544cafdea3da4fcb6f1636232aadeec7cd39e", "Title": "pillow: pillow: Denial of Service via infinite loop during PDF page rewriting", "Description": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows Parent relationships without detecting a cycle in the page tree. An attacker can supply a cyclic PDF to an application that appends an image to that PDF. This can hold the worker at full CPU and deny service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112406", "https://advisory.echohq.com/cve/CVE-2026-112406", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-82408/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58", "https://linux.oracle.com/cve/CVE-2026-112406.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112406", "https://www.cve.org/CVERecord?id=CVE-2026-112406" ], "PublishedDate": "2026-10-19T22:17:08.153Z", "LastModifiedDate": "2026-10-27T14:59:51.513Z" }, { "VulnerabilityID": "CVE-2026-112892", "VendorIDs": [ "GHSA-gg2r-wvfm-q9rx" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112892", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:c00beb962de4936237f91d8979323365678273ba7a20d8a0aa72059d7c791eeb", "Title": "pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder", "Description": "Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting expansion to the declared image size. An attacker can supply a crafted MSP image to an application that loads its pixels. This can exhaust memory and deny service even when the declared pixel count passes the decompression-bomb check. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-409" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112892", "https://advisory.echohq.com/cve/CVE-2026-112892", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-81271/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx", "https://linux.oracle.com/cve/CVE-2026-112892.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112892", "https://www.cve.org/CVERecord?id=CVE-2026-112892" ], "PublishedDate": "2026-10-19T22:17:09.21Z", "LastModifiedDate": "2026-10-27T14:59:30.563Z" }, { "VulnerabilityID": "CVE-2026-112893", "VendorIDs": [ "GHSA-j4m9-6w36-pw47" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112893", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:876451b9a5946b848964e74a90854cbebe334ed087ccaa49981070e02481d542", "Title": "pillow: Pillow: Denial of Service via invalid pointer free during font rendering", "Description": "Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untrusted bytes to an application that draws text with a nonzero stroke width, forcing the glyph-load failure path. This can corrupt memory or crash the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-457", "CWE-763" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112893", "https://advisory.echohq.com/cve/CVE-2026-112893", "https://getsafety.com/v/SFTY-20261021-31867/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47", "https://nvd.nist.gov/vuln/detail/CVE-2026-112893", "https://www.cve.org/CVERecord?id=CVE-2026-112893" ], "PublishedDate": "2026-10-19T22:17:09.35Z", "LastModifiedDate": "2026-10-28T16:17:02.413Z" }, { "VulnerabilityID": "CVE-2026-112894", "VendorIDs": [ "GHSA-jg86-v3jv-hrpm" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112894", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:9a6e9e8bd4d118b330be8a56a87df44a95004567ebbb93e09211067d0d0f2e87", "Title": "pillow: pillow: Denial of Service via crafted multi-frame image conversion", "Description": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser.next_object_id() repeatedly rebuilds and scans all previously reserved identifiers for every object. An attacker can supply a multi-frame image, including a small APNG with a large declared frame count, to an application that converts it to a multipage PDF. This can consume excessive CPU and deny service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112894", "https://advisory.echohq.com/cve/CVE-2026-112894", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://getsafety.com/v/SFTY-20261021-17221/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm", "https://linux.oracle.com/cve/CVE-2026-112894.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112894", "https://www.cve.org/CVERecord?id=CVE-2026-112894" ], "PublishedDate": "2026-10-19T22:17:09.483Z", "LastModifiedDate": "2026-10-27T14:56:28.823Z" }, { "VulnerabilityID": "CVE-2026-112895", "VendorIDs": [ "GHSA-p4wg-p73j-c528" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112895", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:ee68f9565fe943915720a1a83ea1cca00c75c7599cf4be0e8df825fc9185f113", "Title": "pillow: pillow: Denial of service via crafted PDF during append operations", "Description": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree child references without cycle or duplication tracking and follows previous-trailer chains with only an exact repeated-offset guard, so deep or cyclic page trees and long chains of unique trailer offsets can exhaust the Python stack. Repeated non-cyclic /Kids references can also cause super-linear CPU and memory use. An attacker can supply such a PDF to an application that calls Image.save with PDF append enabled. This can raise an uncaught RecursionError or consume excessive CPU and memory before output is written, causing denial of service. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-112895", "https://advisory.echohq.com/cve/CVE-2026-112895", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528", "https://linux.oracle.com/cve/CVE-2026-112895.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-112895", "https://www.cve.org/CVERecord?id=CVE-2026-112895" ], "PublishedDate": "2026-10-19T22:17:09.62Z", "LastModifiedDate": "2026-10-27T14:56:20.7Z" }, { "VulnerabilityID": "CVE-2026-112896", "VendorIDs": [ "GHSA-pchr-8j38-3x4p" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112896", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:9690aa48f50f46c761482fac34f2969cd5dd90fc82a320029d98c9a5c3b55b78", "Title": "pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerSample. A small TIFF can be opened normally and then retain a crafted ColorMap that is reused when the image is saved. An application that re-encodes the attacker's TIFF with libtiff can trigger the out-of-bounds read. This can disclose heap memory in the output or crash the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112896", "https://advisory.echohq.com/cve/CVE-2026-112896", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p", "https://nvd.nist.gov/vuln/detail/CVE-2026-112896", "https://www.cve.org/CVERecord?id=CVE-2026-112896" ], "PublishedDate": "2026-10-19T22:17:09.76Z", "LastModifiedDate": "2026-10-27T14:55:49.017Z" }, { "VulnerabilityID": "CVE-2026-112897", "VendorIDs": [ "GHSA-q45j-58j2-45rg" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112897", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:4df7d7e4c1819e886054b152ea31a11ab3cb2b5b7ed1730f90c453661f84221c", "Title": "pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding", "Description": "Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow converts the expected rows without clearing the unwritten tail. The tile path is affected from 5.3.0 and the strip path from 6.0.0. An attacker can supply a crafted TIFF to an application that loads and returns or re-encodes its pixels. This can disclose stale heap contents without memory corruption or a process crash. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-908" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 6.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112897", "https://advisory.echohq.com/cve/CVE-2026-112897", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg", "https://nvd.nist.gov/vuln/detail/CVE-2026-112897", "https://www.cve.org/CVERecord?id=CVE-2026-112897" ], "PublishedDate": "2026-10-19T22:17:09.9Z", "LastModifiedDate": "2026-10-27T14:55:26.993Z" }, { "VulnerabilityID": "CVE-2026-112902", "VendorIDs": [ "GHSA-xvh5-g6gv-559v" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-112902", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a6aa8844e015291f09e2516064961682d5056ef3641fda7916eeb8b05a463cb0", "Title": "Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags", "Description": "Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to  TIFFSetField()  that do not match libtiff’s definition of the corresponding tag. When an application saves attacker-controlled image metadata through this encoder, crafted tag values can cause invalid memory reads, copying process memory into the encoded output or crashing the process. Applications that return the encoded output to an attacker can disclose that memory. The issue is reachable when re-saving compressed TIFF images and through certain conversions that preserve EXIF metadata into compressed TIFF output. This vulnerability is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-686" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-112902", "https://advisory.echohq.com/cve/CVE-2026-112902", "https://getsafety.com/v/SFTY-20261021-68388/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/570df030c0d30c2bf5336b2ab59f3902d8ab0b6d", "https://github.com/python-pillow/Pillow/commit/af56ace297b0991d02988fcc2ea933e4824b4fb3", "https://github.com/python-pillow/Pillow/pull/10227", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xvh5-g6gv-559v", "https://nvd.nist.gov/vuln/detail/CVE-2026-112902", "https://www.cve.org/CVERecord?id=CVE-2026-112902" ], "PublishedDate": "2026-11-05T21:18:36.713Z", "LastModifiedDate": "2026-11-05T21:18:36.84Z" }, { "VulnerabilityID": "CVE-2026-54058", "VendorIDs": [ "GHSA-62p4-gmf7-7g93" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54058", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6c707aab5986982d82c4a263ab3d29b45e69fa16b16a6f4af0edf05a03cbd301", "Title": "Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as Image.tobytes(), getpixel, convert, or save to read beyond the mapped region and disclose adjacent process memory or fault. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 4, "ghsa": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 9.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.3 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 9.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:48021", "https://access.redhat.com/security/cve/CVE-2026-54058", "https://advisory.echohq.com/cve/CVE-2026-54058", "https://bugzilla.redhat.com/2500043", "https://bugzilla.redhat.com/2500057", "https://bugzilla.redhat.com/show_bug.cgi?id=2500043", "https://bugzilla.redhat.com/show_bug.cgi?id=2500057", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54058", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59197", "https://errata.almalinux.org/8/ALSA-2026-48021.html", "https://errata.rockylinux.org/RLSA-2026:48021", "https://github.com/advisories/GHSA-62p4-gmf7-7g93", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/6a8de891fb00968e5ea79bfa84368ed90b3cfc1d", "https://github.com/python-pillow/Pillow/pull/9719", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-62p4-gmf7-7g93", "https://linux.oracle.com/cve/CVE-2026-54058.html", "https://linux.oracle.com/errata/ELSA-2026-48021.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54058", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-54058" ], "PublishedDate": "2026-07-14T17:17:03.433Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-54059", "VendorIDs": [ "GHSA-8v84-f9pq-wr9x" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54059", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:ee31f5f23f1a7beec8d0e0968abbbde446b157fea671c8a75baf8a501bb66ae9", "Title": "python-pillow: Pillow: Denial of Service via crafted PCF font data", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:39127", "https://access.redhat.com/security/cve/CVE-2026-54059", "https://advisory.echohq.com/cve/CVE-2026-54059", "https://bugzilla.redhat.com/2497452", "https://bugzilla.redhat.com/2497455", "https://bugzilla.redhat.com/2497464", "https://bugzilla.redhat.com/2497466", "https://bugzilla.redhat.com/show_bug.cgi?id=2497452", "https://bugzilla.redhat.com/show_bug.cgi?id=2497455", "https://bugzilla.redhat.com/show_bug.cgi?id=2497464", "https://bugzilla.redhat.com/show_bug.cgi?id=2497466", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380", "https://errata.almalinux.org/8/ALSA-2026-39127.html", "https://errata.rockylinux.org/RLSA-2026:39127", "https://github.com/advisories/GHSA-8v84-f9pq-wr9x", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2253.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst", "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-8v84-f9pq-wr9x", "https://linux.oracle.com/cve/CVE-2026-54059.html", "https://linux.oracle.com/errata/ELSA-2026-39127.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54059", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-54059" ], "PublishedDate": "2026-07-06T19:17:08.127Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-54060", "VendorIDs": [ "GHSA-5x94-69rx-g8h2" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54060", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:db37c1f22210ef79affbfe5925ee40cef8c7fc556c94b517f646b1e2d8107bdb", "Title": "python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new(\"1\", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or saving. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:39127", "https://access.redhat.com/security/cve/CVE-2026-54060", "https://advisory.echohq.com/cve/CVE-2026-54060", "https://bugzilla.redhat.com/2497452", "https://bugzilla.redhat.com/2497455", "https://bugzilla.redhat.com/2497464", "https://bugzilla.redhat.com/2497466", "https://bugzilla.redhat.com/show_bug.cgi?id=2497452", "https://bugzilla.redhat.com/show_bug.cgi?id=2497455", "https://bugzilla.redhat.com/show_bug.cgi?id=2497464", "https://bugzilla.redhat.com/show_bug.cgi?id=2497466", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380", "https://errata.almalinux.org/8/ALSA-2026-39127.html", "https://errata.rockylinux.org/RLSA-2026:39127", "https://github.com/advisories/GHSA-5x94-69rx-g8h2", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2254.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst", "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x94-69rx-g8h2", "https://linux.oracle.com/cve/CVE-2026-54060.html", "https://linux.oracle.com/errata/ELSA-2026-39127.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54060", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-54060" ], "PublishedDate": "2026-07-06T19:17:08.27Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-55379", "VendorIDs": [ "GHSA-45hq-cxwh-f6vc" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-55379", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:646231c2c70d144acf74ea3172f35b089a0c4b55de66acf2ae51d14025add959", "Title": "python-pillow: Pillow: Denial of Service via crafted BDF font file", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow's documented decompression bomb protection and allowing excessive memory allocation. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:39127", "https://access.redhat.com/security/cve/CVE-2026-55379", "https://advisory.echohq.com/cve/CVE-2026-55379", "https://bugzilla.redhat.com/2497452", "https://bugzilla.redhat.com/2497455", "https://bugzilla.redhat.com/2497464", "https://bugzilla.redhat.com/2497466", "https://bugzilla.redhat.com/show_bug.cgi?id=2497452", "https://bugzilla.redhat.com/show_bug.cgi?id=2497455", "https://bugzilla.redhat.com/show_bug.cgi?id=2497464", "https://bugzilla.redhat.com/show_bug.cgi?id=2497466", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380", "https://errata.almalinux.org/8/ALSA-2026-39127.html", "https://errata.rockylinux.org/RLSA-2026:39127", "https://github.com/advisories/GHSA-45hq-cxwh-f6vc", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2255.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst", "https://github.com/python-pillow/Pillow/commit/0a263e6264aa5399988d9acd3bbfbca2ca3ec77d", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc", "https://linux.oracle.com/cve/CVE-2026-55379.html", "https://linux.oracle.com/errata/ELSA-2026-39127.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-55379", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-55379" ], "PublishedDate": "2026-07-06T19:17:08.577Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-55380", "VendorIDs": [ "GHSA-phj9-mv4w-65pm" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-55380", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:8c04df5a1a0d5f8b63f0e791aa5d5ffafb45c081026d6ef4132bc34306519dd6", "Title": "python-pillow: Pillow: Denial of Service via crafted GD 2.x image file", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:39127", "https://access.redhat.com/security/cve/CVE-2026-55380", "https://advisory.echohq.com/cve/CVE-2026-55380", "https://bugzilla.redhat.com/2497452", "https://bugzilla.redhat.com/2497455", "https://bugzilla.redhat.com/2497464", "https://bugzilla.redhat.com/2497466", "https://bugzilla.redhat.com/show_bug.cgi?id=2497452", "https://bugzilla.redhat.com/show_bug.cgi?id=2497455", "https://bugzilla.redhat.com/show_bug.cgi?id=2497464", "https://bugzilla.redhat.com/show_bug.cgi?id=2497466", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54059", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55380", "https://errata.almalinux.org/8/ALSA-2026-39127.html", "https://errata.rockylinux.org/RLSA-2026:39127", "https://github.com/advisories/GHSA-phj9-mv4w-65pm", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-2256.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/blob/main/docs/releasenotes/12.3.0.rst", "https://github.com/python-pillow/Pillow/commit/f39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-phj9-mv4w-65pm", "https://linux.oracle.com/cve/CVE-2026-55380.html", "https://linux.oracle.com/errata/ELSA-2026-39127.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-55380", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-55380" ], "PublishedDate": "2026-07-06T19:17:08.703Z", "LastModifiedDate": "2026-10-25T20:10:00.147Z" }, { "VulnerabilityID": "CVE-2026-59197", "VendorIDs": [ "GHSA-xj96-63gp-2gmr" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59197", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6a1d0a615f6df48e54507683602fdb50155bb531454cb8e4877e61828021ee19", "Title": "Pillow: Pillow: Native heap out-of-bounds write", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "ghsa": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:48021", "https://access.redhat.com/security/cve/CVE-2026-59197", "https://advisory.echohq.com/cve/CVE-2026-59197", "https://bugzilla.redhat.com/2500043", "https://bugzilla.redhat.com/2500057", "https://bugzilla.redhat.com/show_bug.cgi?id=2500043", "https://bugzilla.redhat.com/show_bug.cgi?id=2500057", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54058", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59197", "https://errata.almalinux.org/8/ALSA-2026-48021.html", "https://errata.rockylinux.org/RLSA-2026:48021", "https://github.com/advisories/GHSA-xj96-63gp-2gmr", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/cce3bdb867c77a3420261ed1bfdb6b0787ec8fc1", "https://github.com/python-pillow/Pillow/pull/9695", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-xj96-63gp-2gmr", "https://linux.oracle.com/cve/CVE-2026-59197.html", "https://linux.oracle.com/errata/ELSA-2026-48021.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-59197", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59197" ], "PublishedDate": "2026-07-14T17:17:14.487Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59199", "VendorIDs": [ "GHSA-6r8x-57c9-28j4" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59199", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e76ea50fd1396e4a814a639068a12bc490351d0d3509089233d70719e4cd070e", "Title": "Pillow: Pillow: Denial of Service via out-of-bounds write in image processing", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.crop(), or Image.alpha_composite(). This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-190", "CWE-787" ], "VendorSeverity": { "amazon": 3, "bitnami": 3, "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59199", "https://advisory.echohq.com/cve/CVE-2026-59199", "https://github.com/advisories/GHSA-6r8x-57c9-28j4", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3451.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/ceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b", "https://github.com/python-pillow/Pillow/pull/9703", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-6r8x-57c9-28j4", "https://nvd.nist.gov/vuln/detail/CVE-2026-59199", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59199" ], "PublishedDate": "2026-07-14T16:17:01.937Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59200", "VendorIDs": [ "GHSA-jjj6-mw9f-p565" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59200", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:3d78498fd6877801c50a311f7d0d617e4eb9058d5f5fedc45048f6c488ec3137", "Title": "Pillow: Pillow: Denial of service via crafted PDF stream", "Description": "Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a crafted FlateDecode PDF stream to exhaust memory from a small file. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-770" ], "VendorSeverity": { "amazon": 3, "bitnami": 3, "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59200", "https://advisory.echohq.com/cve/CVE-2026-59200", "https://github.com/advisories/GHSA-jjj6-mw9f-p565", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/f7a31ea75e460e108c37126da1f47812f21f6b09", "https://github.com/python-pillow/Pillow/pull/9718", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-jjj6-mw9f-p565", "https://nvd.nist.gov/vuln/detail/CVE-2026-59200", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59200" ], "PublishedDate": "2026-07-14T17:17:14.62Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59204", "VendorIDs": [ "GHSA-vjc4-5qp5-m44j" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59204", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6661434c011a6ea6e621e1aa2b9a5f73a10f3336a6f1f9ddf62ffbdaf4c1cfa7", "Title": "Pillow: Pillow: Denial of Service via crafted JPEG2000 image", "Description": "Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 file to force substantially higher transient memory usage and trigger out-of-memory failures during decoding. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-789", "CWE-770" ], "VendorSeverity": { "amazon": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59204", "https://advisory.echohq.com/cve/CVE-2026-59204", "https://github.com/advisories/GHSA-vjc4-5qp5-m44j", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/13ada41172142f2fd9f0906f615a00ea623a11ca", "https://github.com/python-pillow/Pillow/pull/9704", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-vjc4-5qp5-m44j", "https://nvd.nist.gov/vuln/detail/CVE-2026-59204", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59204" ], "PublishedDate": "2026-07-14T16:17:02.227Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-59205", "VendorIDs": [ "GHSA-9hw9-ch79-4vh6" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "12.3.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59205", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:c088236fc98b37537ea9c574d53ee8eda098693501722d93f7e1ee9cde041b20", "Title": "Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API", "Description": "Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode does not match the transform's declared output mode. This issue is fixed in version 12.3.0.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "amazon": 3, "bitnami": 3, "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-59205", "https://advisory.echohq.com/cve/CVE-2026-59205", "https://github.com/advisories/GHSA-9hw9-ch79-4vh6", "https://github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2026-3453.yaml", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/a9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721", "https://github.com/python-pillow/Pillow/pull/9715", "https://github.com/python-pillow/Pillow/releases/tag/12.3.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9hw9-ch79-4vh6", "https://nvd.nist.gov/vuln/detail/CVE-2026-59205", "https://ubuntu.com/security/notices/USN-8999-1", "https://www.cve.org/CVERecord?id=CVE-2026-59205" ], "PublishedDate": "2026-07-14T16:17:02.37Z", "LastModifiedDate": "2026-10-24T21:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-96637", "VendorIDs": [ "GHSA-g842-9rc4-69pw" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96637", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:5ddcfb763b05dd8a4b9a092f89f776759601a015f443b8300253621f2dfb6d0a", "Title": "pillow: pillow: Denial of Service via decompression bomb bypass in SPIDER images", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without rerunning Image._decompression_bomb_check(). A tiny file can use a safe first frame to pass Image.open() and then declare very large dimensions in a later mode F frame. Loading that frame allocates approximately four bytes per attacker-declared pixel and can consume multiple gigabytes of memory. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-409" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96637", "https://advisory.echohq.com/cve/CVE-2026-96637", "https://getsafety.com/v/SFTY-20261022-38655/52d", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/7cb0e02389d8aac2a60896a490f572db0b07b841", "https://github.com/python-pillow/Pillow/pull/10076", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-g842-9rc4-69pw", "https://nvd.nist.gov/vuln/detail/CVE-2026-96637", "https://www.cve.org/CVERecord?id=CVE-2026-96637" ], "PublishedDate": "2026-10-21T21:20:31.927Z", "LastModifiedDate": "2026-10-27T14:24:56.513Z" }, { "VulnerabilityID": "CVE-2026-96640", "VendorIDs": [ "GHSA-mrfp-p49p-3hf2" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96640", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f54649ceb1af577ec8fd1c7708d9e4a3cbaf4f1bacbe00d42c087531a88a6edd", "Title": "pillow: pillow: Denial of Service via duplicate page references in PDF files", "Description": "Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate indirect references. When Image.save(..., format=\"PDF\", append=True) processes an attacker-controlled existing PDF whose /Kids arrays repeatedly reference the same child /Pages node, Pillow expands the shared subtree as distinct pages. A compact malformed PDF can therefore create exponentially many page references and consume disproportionate CPU before the append completes. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "alma": 3, "bitnami": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92639", "https://access.redhat.com/security/cve/CVE-2026-96640", "https://advisory.echohq.com/cve/CVE-2026-96640", "https://bugzilla.redhat.com/2555851", "https://bugzilla.redhat.com/2555859", "https://bugzilla.redhat.com/2555866", "https://bugzilla.redhat.com/2555868", "https://bugzilla.redhat.com/2555873", "https://bugzilla.redhat.com/2555875", "https://bugzilla.redhat.com/2555879", "https://bugzilla.redhat.com/2556322", "https://bugzilla.redhat.com/2558576", "https://bugzilla.redhat.com/2559393", "https://bugzilla.redhat.com/show_bug.cgi?id=2555851", "https://bugzilla.redhat.com/show_bug.cgi?id=2555859", "https://bugzilla.redhat.com/show_bug.cgi?id=2555866", "https://bugzilla.redhat.com/show_bug.cgi?id=2555868", "https://bugzilla.redhat.com/show_bug.cgi?id=2555873", "https://bugzilla.redhat.com/show_bug.cgi?id=2555875", "https://bugzilla.redhat.com/show_bug.cgi?id=2555879", "https://bugzilla.redhat.com/show_bug.cgi?id=2556322", "https://bugzilla.redhat.com/show_bug.cgi?id=2558576", "https://bugzilla.redhat.com/show_bug.cgi?id=2559393", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112405", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112892", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112895", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-96640", "https://errata.almalinux.org/8/ALSA-2026-92639.html", "https://errata.rockylinux.org/RLSA-2026:92639", "https://github.com/advisories/GHSA-mrfp-p49p-3hf2", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7", "https://github.com/python-pillow/Pillow/pull/10093", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-mrfp-p49p-3hf2", "https://linux.oracle.com/cve/CVE-2026-96640.html", "https://linux.oracle.com/errata/ELSA-2026-92639.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-96640", "https://www.cve.org/CVERecord?id=CVE-2026-96640" ], "PublishedDate": "2026-10-21T21:20:32.357Z", "LastModifiedDate": "2026-10-28T02:17:07.99Z" }, { "VulnerabilityID": "CVE-2026-96642", "VendorIDs": [ "GHSA-3j72-p6qg-6xp7" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96642", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:cf1db67567abf8bba82824d006115b23878a4cf895828d2484d014fdc2ecb557", "Title": "pillow: Pillow: Denial of Service via negative archive member size in TarIO", "Description": "Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the same 512-byte header. When the requested member name does not match, the parser repeatedly reads that header, consumes a full CPU core, and never returns. TarIO is reached only when an application directly uses PIL.TarIO.TarIO rather than the default Image.open() path. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-835" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 2, "redhat": 2, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96642", "https://advisory.echohq.com/cve/CVE-2026-96642", "https://github.com/advisories/GHSA-3j72-p6qg-6xp7", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/19b695fdcc5eddc37374e2b1645fc4185edaf71d", "https://github.com/python-pillow/Pillow/pull/10012", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-3j72-p6qg-6xp7", "https://nvd.nist.gov/vuln/detail/CVE-2026-96642", "https://www.cve.org/CVERecord?id=CVE-2026-96642" ], "PublishedDate": "2026-10-21T21:20:32.65Z", "LastModifiedDate": "2026-10-30T17:17:32.24Z" }, { "VulnerabilityID": "CVE-2026-96643", "VendorIDs": [ "GHSA-g4qv-2jxx-769h" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96643", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:bdd1a8ae43074bf30494000668f06ef7fe91237d259d914d8260d140c488ff3e", "Title": "pillow: pillow: Denial of Service via repeated EXIF headers", "Description": "Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif header. src/PIL/PngImagePlugin.py accepts an uncapped PNG eXIf chunk, so a file filled with repeated headers causes a new shrinking copy on every iteration and quadratic CPU work. The condition is reachable through Image.getexif(), Image._getexif(), and ImageOps.exif_transpose(), including common photo-upload rotation workflows. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 6.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96643", "https://advisory.echohq.com/cve/CVE-2026-96643", "https://github.com/advisories/GHSA-g4qv-2jxx-769h", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/806e38381c781f32bbd22f4cd026678acd40fd6c", "https://github.com/python-pillow/Pillow/pull/10073", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-g4qv-2jxx-769h", "https://nvd.nist.gov/vuln/detail/CVE-2026-96643", "https://www.cve.org/CVERecord?id=CVE-2026-96643" ], "PublishedDate": "2026-10-21T21:20:32.797Z", "LastModifiedDate": "2026-10-27T14:26:51.563Z" }, { "VulnerabilityID": "CVE-2026-96644", "VendorIDs": [ "GHSA-9v9v-9qvf-h2hj" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96644", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:d47152aa99847e5d0262235ca9ac01cc95ce24af9d158856aa3a160d8f0b0d14", "Title": "pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser", "Description": "Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using the original full dimensions. A crafted wide, short metafile can pass the pixel-count decompression-bomb check and make the Windows-only renderer read beyond the heap buffer, potentially disclosing memory or crashing the process. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96644", "https://advisory.echohq.com/cve/CVE-2026-96644", "https://github.com/advisories/GHSA-9v9v-9qvf-h2hj", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/4cf46bee338304c5c8968fd7f132ba0d40c428b7", "https://github.com/python-pillow/Pillow/pull/10120", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-9v9v-9qvf-h2hj", "https://nvd.nist.gov/vuln/detail/CVE-2026-96644", "https://www.cve.org/CVERecord?id=CVE-2026-96644" ], "PublishedDate": "2026-10-21T21:20:32.943Z", "LastModifiedDate": "2026-10-28T19:19:28.633Z" }, { "VulnerabilityID": "CVE-2026-96778", "VendorIDs": [ "GHSA-g7cr-3p24-7wf7" ], "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-96778", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:86e2c5612a4d7639b40caf7dccd279b5bdc0ef1e6664ce0d24ae86743aa38eed", "Title": "pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow", "Description": "Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC profile has exactly filled the 65536-byte encoder buffer. libjpeg writes one byte before checking the exhausted free_in_buffer counter, which then wraps and permits the attacker-controlled comment and subsequent compressed image data to overwrite adjacent heap memory. Re-saving an untrusted image as JPEG while preserving its ICC profile and forwarded comment can crash the process and may enable code execution in suitable runtime and heap layouts. This issue is fixed in version 13.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "bitnami": 3, "ghsa": 3, "nvd": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.7 }, "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 7.7 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-96778", "https://advisory.echohq.com/cve/CVE-2026-96778", "https://github.com/advisories/GHSA-g7cr-3p24-7wf7", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/02561b8dc6117d5670d4b469fecdd02c70854f9b", "https://github.com/python-pillow/Pillow/pull/10124", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-g7cr-3p24-7wf7", "https://nvd.nist.gov/vuln/detail/CVE-2026-96778", "https://www.cve.org/CVERecord?id=CVE-2026-96778" ], "PublishedDate": "2026-10-21T21:20:33.093Z", "LastModifiedDate": "2026-10-28T02:17:08.253Z" }, { "VulnerabilityID": "GHSA-78g4-xqwv-q3g8", "PkgName": "pillow", "PkgPath": "root/.cache/uv/archive-v0/SkqgUl1FKOxkM6q_M6r4V/pillow-12.2.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pillow@12.2.0", "UID": "91c1801e132ece62" }, "InstalledVersion": "12.2.0", "FixedVersion": "13.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-78g4-xqwv-q3g8", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:868699c948c2176c1e47f01e8eef61e1338389ece5dddad19e2efd5880d1d5f0", "Title": "Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()", "Description": "### Summary\n\nEvery Pillow wheel from 11.1.0 onward bundles a libopenjp2 containing a heap-buffer-overflow **write** that is fixed upstream on master but has never appeared in an OpenJPEG release. See https://osv.dev/vulnerability/OSV-2025-219\n\nBecause the wheel bundles its own copy, a patched host OS does not help. It is reachable from `Image.open(fp); im.load()` with default settings.\n\nI am reporting it here rather than only upstream because Pillow is where the vulnerable binary actually reaches users.\n\nNote the inversion that makes this easy to miss: **OpenJPEG 2.5.2 and earlier are safe.** The bug was introduced in `954c6e3c` (2024-06-25), so keeping the dependency current is what creates the exposure.\n\n### Details\n\n## Affected wheels\n\nFrom `.github/dependencies.json` (`openjpeg`) at each tag:\n\n| Pillow | bundled OpenJPEG | status |\n|---|---|---|\n| 10.4.0 | 2.5.2 | safe |\n| 11.0.0 | 2.5.2 | safe |\n| **11.1.0, 11.2.1, 11.3.0** | **2.5.3** | **affected** |\n| **12.0.0 … 12.3.0** | **2.5.4** | **affected** |\n\nConfirmed on an installed wheel: `PIL.features.version_codec('jpg_2000')` → `2.5.4`, bundled file `pillow.libs/libopenjp2-*.so.2.5.4`. `main` still pins `2.5.4` as of 2026-10-06.\n\n## The defect\n\n`src/lib/openjp2/j2k.c`, in `opj_j2k_read_sod`:\n\n```c\nOPJ_UINT32 l_current_tile_part =\n l_cstr_index-\u003etile_index[p_j2k-\u003em_current_tile_number].current_tpsno;\nl_cstr_index-\u003etile_index[...].tp_index[l_current_tile_part].end_header = l_current_pos;\nl_cstr_index-\u003etile_index[...].tp_index[l_current_tile_part].end_pos =\n l_current_pos + p_j2k-\u003em_specific_param.m_decoder.m_sot_length + 2;\n```\n\n`tp_index` is neither null-checked nor bounds-checked, and `l_current_tile_part` comes directly from the one-byte `TPsot` field of the SOT marker.\n\nThe correct guard already exists a few lines later in `opj_j2k_add_tlmarker` (j2k.c:8459), writing the **same array at the same index** behind `if (tp_index \u0026\u0026 l_current_tile_part \u003c nb_tps)`. One writer checked, its sibling not.\n\nReached by giving the codestream a *valid* TLM marker — so `tp_index` is allocated once by `opj_j2k_build_tp_index_from_tlm`, sized to the TLM entry count, and `opj_j2k_read_sot` then skips all resizing — while setting `TNsot = 0` in every SOT, which keeps the TLM \"valid\" and lets `TPsot` walk past the allocation.\n\n## Patch status\n\nFixed upstream in `91d08b11` (\"Fix heap buffer overlfow in opj_j2k_read_sod\", 2026-02-10).\n\nThe newest OpenJPEG tag is **v2.5.4 (2025-09-20)**, and `compare/v2.5.4...91d08b11` reports *ahead 6, behind 0* — the fix is **in no release, 8 months on**.\n\n## Suggested remediation\n\n1. Carry `91d08b11` as a patch in the wheel build until an OpenJPEG release includes it — three lines, identical to a guard already present in the same file.\n2. Consider asking OpenJPEG to cut a release; they have had an unreleased memory-corruption fix on master since February 2026, and every distro is shipping the vulnerable code.\n3. Your security handbook already tells applications to block EPS at the application layer. A similarly explicit note that `Image.open()` ignores filename/Content-Type and will reach any compiled-in codec unless `formats=` is passed would help downstream apps a lot.\n\n## Not a Pillow bug, but relevant: the extension allowlist most apps rely on does not apply\n\n`Image.open()` sniffs magic bytes, so a JPEG 2000 codestream in a file named `avatar.png` declared `Content-Type: image/png` reaches the JP2 decoder anyway.\n\nI verified this against a production service documenting PNG/JPEG-only uploads: it accepted and fully decoded a JP2 through exactly that path, with 16 formats reachable from one upload endpoint against 43 registered openers. That service has since fixed it by passing `formats=` and validating on the detected format rather than the client's `Content-Type`.\n\nThat is the reason a decoder-level issue like this one has much wider reach than downstream maintainers tend to assume.\n\n### Proof of concept\n\nASan build of OpenJPEG 2.5.4 interposed under a **stock Pillow 12.3.0**, running `Image.open(p); im.load()`:\n\n```\n==766332==ERROR: AddressSanitizer: heap-buffer-overflow\nWRITE of size 8\n #0 opj_j2k_read_sod j2k.c:5086\n #1 opj_j2k_read_tile_header j2k.c:9912\n #2 opj_read_tile_header openjpeg.c:575\n #3 j2k_decode_entry src/libImaging/Jpeg2KDecode.c:793\n #4 ImagingJpeg2KDecode src/libImaging/Jpeg2KDecode.c:949\n #5 _decode src/decode.c:132\nlocated 8 bytes to the right of a 24-byte region allocated by\n opj_j2k_build_tp_index_from_tlm j2k.c:8939\n```\n\nFrames 3–5 are Pillow's own decoder, not a synthetic harness. No non-default decoder options are involved; strict mode is on, which is Pillow's behaviour since Pillow never calls `opj_decoder_set_strict_mode`. A benign twin image runs the same path cleanly and returns a valid image, so this is the payload and not a parse failure.\n\nI have deliberately **not** attached the PoC file to this initial report. I'm happy to attach the PoC, the builder script and the RIP-control harness here on request, or hold everything until a fix is ready.\n\nNo disclosure deadline from me; I will not publish anything while this is being worked on.\n\n### Impact\n\nAny application that calls `Image.open()` / `im.load()` on an image it did not produce — the overwhelmingly common case for upload handlers, thumbnailers and preview pipelines — can be made to perform an out-of-bounds heap write by supplying one crafted file.\n\n**Floor, already certain.** On a stock non-sanitised wheel the overflow performs 245 writes walking to +5856 bytes past a 24-byte allocation, and glibc's own heap-metadata checker aborts the process (`corrupted size vs. prev_size`, `corrupted double-linked list`, SIGABRT). One file reliably kills a long-lived worker.\n\n**Ceiling, demonstrated as a primitive but not as a finished exploit.** With same-size-class objects alive on both sides — an ordinary busy heap — the walk crosses `opj_event_mgr_t`, which holds three `opj_msg_callback` function pointers, and `opj_event_msg` then calls one (event.c:136):\n\n```\nrip 0x4000 \u003c- value chosen by the attacker's file layout\nrsi 0x3ff2 \u003c- m_error_data, written by the same walk\n```\n\nShifting the codestream with a COM marker moves `rip` with it (`0x16ce` → `0x4000`), so the instruction pointer is attacker-**chosen** rather than incidentally invalid. A benign control image leaves the same groomed heap untouched.\n\nTo be explicit about what I did not do: I have **not** built a working exploit. That additionally needs remote heap grooming and an ASLR defeat, and I attempted neither. I am reporting a controlled control-flow primitive, not a finished chain. The CVSS AC:H reflects that.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-78g4-xqwv-q3g8", "https://github.com/advisories/GHSA-78g4-xqwv-q3g8", "https://github.com/python-pillow/Pillow", "https://github.com/python-pillow/Pillow/commit/5f8114c8096b181fae493543cd3837d9f9a971cc", "https://github.com/python-pillow/Pillow/commit/d3470c327840f4c216a1610f30e7091dfd0b97c0", "https://github.com/python-pillow/Pillow/releases/tag/13.0.0", "https://github.com/python-pillow/Pillow/security/advisories/GHSA-78g4-xqwv-q3g8", "https://github.com/uclouvain/openjpeg/commit/91d08b11a72764f6d199f32fa0c1b1abd4edc2ad", "https://osv.dev/vulnerability/OSV-2025-219" ], "PublishedDate": "2026-10-22T17:01:08Z", "LastModifiedDate": "2026-10-22T17:01:08Z" }, { "VulnerabilityID": "CVE-2026-42561", "VendorIDs": [ "GHSA-pp6c-gr5w-3c5g" ], "PkgName": "python-multipart", "PkgPath": "root/.cache/uv/archive-v0/ockpBtjIXUudjQdzIKyt5/python_multipart-0.0.26.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/python-multipart@0.0.26", "UID": "3db0fa4241009714" }, "InstalledVersion": "0.0.26", "FixedVersion": "0.0.27", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42561", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1fdbb0654005e046f3cbba6d3ebf31bd39d74f2d3bd253b19c41e07ee35baad7", "Title": "python-multipart: python-multipart: Denial of Service via excessive multipart part headers", "Description": "Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header parsing. When parsing multipart/form-data, MultipartParser previously had no limit on the number of part headers or the size of an individual part header. An attacker could send a request with either many repeated headers without terminating the header block or a single very large header value, causing excessive CPU work before request rejection or completion. This vulnerability is fixed in 0.0.27.", "Severity": "HIGH", "CweIDs": [ "CWE-770", "CWE-606" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:44696", "https://access.redhat.com/errata/RHSA-2026:51194", "https://access.redhat.com/errata/RHSA-2026:51219", "https://access.redhat.com/errata/RHSA-2026:51357", "https://access.redhat.com/security/cve/CVE-2026-42561", "https://advisory.echohq.com/cve/CVE-2026-42561", "https://bugzilla.redhat.com/show_bug.cgi?id=2477309", "https://github.com/Kludex/python-multipart", "https://github.com/Kludex/python-multipart/security/advisories/GHSA-pp6c-gr5w-3c5g", "https://nvd.nist.gov/vuln/detail/CVE-2026-42561", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42561.json", "https://www.cve.org/CVERecord?id=CVE-2026-42561" ], "PublishedDate": "2026-05-13T21:16:47.07Z", "LastModifiedDate": "2026-10-26T14:10:00.13Z" }, { "VulnerabilityID": "CVE-2026-53539", "VendorIDs": [ "GHSA-5rvq-cxj2-64vf" ], "PkgName": "python-multipart", "PkgPath": "root/.cache/uv/archive-v0/ockpBtjIXUudjQdzIKyt5/python_multipart-0.0.26.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/python-multipart@0.0.26", "UID": "3db0fa4241009714" }, "InstalledVersion": "0.0.26", "FixedVersion": "0.0.30", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53539", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:b19155510ff6b96c296cf3966cd8397fbadae24a4ebc1836edb7e3fcca670e56", "Title": "python-multipart: Python-Multipart: Denial of Service via crafted form-urlencoded bodies", "Description": "Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded bodies, QuerystringParser located the field separator with a two step lookup: it first scanned the entire remaining buffer for \u0026, and only when no \u0026 existed anywhere ahead did it fall back to scanning for ;. For a body that uses ; as the separator and contains no \u0026, every field iteration performed a full failed \u0026 scan over the entire remaining buffer before locating the nearby ;. With N semicolon separated fields in a chunk of size B, this yields O(B^2) byte comparisons per chunk. An attacker can submit a small crafted body of the form a;a;a;... and cause the parser to spend seconds of CPU per request. A handful of concurrent requests can exhaust worker processes. This vulnerability is fixed in 0.0.30.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-53539", "https://advisory.echohq.com/cve/CVE-2026-53539", "https://github.com/Kludex/python-multipart", "https://github.com/Kludex/python-multipart/security/advisories/GHSA-5rvq-cxj2-64vf", "https://nvd.nist.gov/vuln/detail/CVE-2026-53539", "https://www.cve.org/CVERecord?id=CVE-2026-53539" ], "PublishedDate": "2026-06-22T18:16:44.36Z", "LastModifiedDate": "2026-10-25T23:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-48818", "VendorIDs": [ "GHSA-wqp7-x3pw-xc5r" ], "PkgName": "starlette", "PkgPath": "root/.cache/uv/archive-v0/JR3GBADZIDg4Erf9dkq4I/starlette-1.0.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/starlette@1.0.0", "UID": "2093fd7d372d6c5d" }, "InstalledVersion": "1.0.0", "FixedVersion": "1.1.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48818", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:6a5e609406dccccf460c74acc122a08416067a2ebe616fbe676eb353f60b153f", "Title": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows", "Description": "Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Windows is vulnerable to SSRF. An UNC path such as \\\\attacker.com\\share can cause os.path.realpath to initiate an outbound SMB connection before the path is rejected, exposing the service account’s NTLMv2 credentials for offline cracking or relay even though the HTTP response is only a 404. The issue affects default follow_symlink=False deployments, including frameworks built on Starlette such as FastAPI; POSIX systems and follow_symlink=True are unaffected. The issue is fixed in 1.1.0.", "Severity": "HIGH", "CweIDs": [ "CWE-918" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30087", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/security/cve/CVE-2026-48818", "https://advisory.echohq.com/cve/CVE-2026-48818", "https://bugzilla.redhat.com/show_bug.cgi?id=2490020", "https://github.com/Kludex/starlette", "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5", "https://github.com/Kludex/starlette/pull/3287", "https://github.com/Kludex/starlette/releases/tag/1.1.0", "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r", "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-2281.yaml", "https://nvd.nist.gov/vuln/detail/CVE-2026-48818", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json", "https://www.cve.org/CVERecord?id=CVE-2026-48818" ], "PublishedDate": "2026-06-17T19:18:09.807Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-54283", "VendorIDs": [ "GHSA-82w8-qh3p-5jfq" ], "PkgName": "starlette", "PkgPath": "root/.cache/uv/archive-v0/JR3GBADZIDg4Erf9dkq4I/starlette-1.0.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/starlette@1.0.0", "UID": "2093fd7d372d6c5d" }, "InstalledVersion": "1.0.0", "FixedVersion": "1.3.1", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54283", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:4808db40bdcac7970c8f097b74f62b7af557e7b132ad38f66ea3ca39c4b263fe", "Title": "starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS", "Description": "Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data. These limits are enforced for multipart/form-data, but silently ignored for application/x-www-form-urlencoded. An unauthenticated attacker can therefore send a urlencoded body with an arbitrarily large number of fields or an arbitrarily large field, even when the application configured limits it believed would apply. This vulnerability is fixed in 1.3.1.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-54283", "https://advisory.echohq.com/cve/CVE-2026-54283", "https://github.com/Kludex/starlette", "https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq", "https://nvd.nist.gov/vuln/detail/CVE-2026-54283", "https://www.cve.org/CVERecord?id=CVE-2026-54283" ], "PublishedDate": "2026-06-22T18:16:46.943Z", "LastModifiedDate": "2026-10-25T23:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-44431", "VendorIDs": [ "GHSA-qccp-gfcp-xxvc" ], "PkgName": "urllib3", "PkgPath": "root/.cache/uv/archive-v0/nYZ9t3kf_NgXiNXLRX2od/urllib3-2.6.3.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.6.3", "UID": "dfed0a91cf6f25e5" }, "InstalledVersion": "2.6.3", "FixedVersion": "2.7.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44431", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a399c86b2c97e6c8d3080a89137680979e346026b0addbff90e039674706d5eb", "Title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers", "Description": "urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.", "Severity": "HIGH", "CweIDs": [ "CWE-200" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "ghsa": 3, "nvd": 2, "oracle-oval": 2, "photon": 2, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 5.3, "V40Score": 8.2 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "V3Score": 5.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 5.9 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:28158", "https://access.redhat.com/errata/RHSA-2026:28159", "https://access.redhat.com/security/cve/CVE-2026-44431", "https://advisory.echohq.com/cve/CVE-2026-44431", "https://bugzilla.redhat.com/2477154", "https://bugzilla.redhat.com/2477167", "https://bugzilla.redhat.com/show_bug.cgi?id=2477154", "https://bugzilla.redhat.com/show_bug.cgi?id=2477167", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44432", "https://errata.almalinux.org/9/ALSA-2026-28159.html", "https://errata.rockylinux.org/RLSA-2026:28158", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc", "https://linux.oracle.com/cve/CVE-2026-44431.html", "https://linux.oracle.com/errata/ELSA-2026-49927.html", "https://lists.debian.org/debian-lts-announce/2026/06/msg00040.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-44431", "https://ubuntu.com/security/notices/USN-8379-1", "https://ubuntu.com/security/notices/USN-8811-1", "https://www.cve.org/CVERecord?id=CVE-2026-44431" ], "PublishedDate": "2026-05-13T16:16:57.15Z", "LastModifiedDate": "2026-06-26T12:16:32.423Z" }, { "VulnerabilityID": "CVE-2026-44432", "VendorIDs": [ "GHSA-mf9v-mfxr-j63j" ], "PkgName": "urllib3", "PkgPath": "root/.cache/uv/archive-v0/nYZ9t3kf_NgXiNXLRX2od/urllib3-2.6.3.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.6.3", "UID": "dfed0a91cf6f25e5" }, "InstalledVersion": "2.6.3", "FixedVersion": "2.7.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-44432", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:4ca48181ea5f736cb31b1569a92bcd37d066ae574fe0498991fa878f42f118f3", "Title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression", "Description": "urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed using the official Brotli library or (2) when HTTPResponse.drain_conn() was called after the response had been read and decompressed partially (compression algorithm did not matter here). These issues could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This could result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data) on the client side. This vulnerability is fixed in 2.7.0.", "Severity": "HIGH", "CweIDs": [ "CWE-409" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V3Score": 7.5, "V40Score": 8.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:15862", "https://access.redhat.com/errata/RHSA-2026:20338", "https://access.redhat.com/errata/RHSA-2026:22934", "https://access.redhat.com/errata/RHSA-2026:24000", "https://access.redhat.com/errata/RHSA-2026:24009", "https://access.redhat.com/errata/RHSA-2026:24014", "https://access.redhat.com/errata/RHSA-2026:24069", "https://access.redhat.com/errata/RHSA-2026:24374", "https://access.redhat.com/errata/RHSA-2026:24476", "https://access.redhat.com/errata/RHSA-2026:24483", "https://access.redhat.com/errata/RHSA-2026:24540", "https://access.redhat.com/errata/RHSA-2026:24541", "https://access.redhat.com/errata/RHSA-2026:24542", "https://access.redhat.com/errata/RHSA-2026:24544", "https://access.redhat.com/errata/RHSA-2026:25039", "https://access.redhat.com/errata/RHSA-2026:25143", "https://access.redhat.com/errata/RHSA-2026:25928", "https://access.redhat.com/errata/RHSA-2026:26212", "https://access.redhat.com/errata/RHSA-2026:26304", "https://access.redhat.com/errata/RHSA-2026:27929", "https://access.redhat.com/errata/RHSA-2026:28000", "https://access.redhat.com/errata/RHSA-2026:28157", "https://access.redhat.com/errata/RHSA-2026:28158", "https://access.redhat.com/errata/RHSA-2026:28159", "https://access.redhat.com/errata/RHSA-2026:28571", "https://access.redhat.com/errata/RHSA-2026:30076", "https://access.redhat.com/errata/RHSA-2026:30078", "https://access.redhat.com/errata/RHSA-2026:30087", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/errata/RHSA-2026:32992", "https://access.redhat.com/errata/RHSA-2026:33313", "https://access.redhat.com/errata/RHSA-2026:33683", "https://access.redhat.com/errata/RHSA-2026:34160", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:34526", "https://access.redhat.com/errata/RHSA-2026:34531", "https://access.redhat.com/errata/RHSA-2026:34533", "https://access.redhat.com/errata/RHSA-2026:34607", "https://access.redhat.com/errata/RHSA-2026:36350", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42078", "https://access.redhat.com/errata/RHSA-2026:42079", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42144", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:44481", "https://access.redhat.com/errata/RHSA-2026:51206", "https://access.redhat.com/errata/RHSA-2026:56347", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/errata/RHSA-2026:59409", "https://access.redhat.com/errata/RHSA-2026:60362", "https://access.redhat.com/errata/RHSA-2026:60371", "https://access.redhat.com/errata/RHSA-2026:7625", "https://access.redhat.com/errata/RHSA-2026:7634", "https://access.redhat.com/security/cve/CVE-2026-44432", "https://advisory.echohq.com/cve/CVE-2026-44432", "https://bugzilla.redhat.com/2477154", "https://bugzilla.redhat.com/2477167", "https://bugzilla.redhat.com/show_bug.cgi?id=2477154", "https://bugzilla.redhat.com/show_bug.cgi?id=2477167", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44431", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-44432", "https://errata.almalinux.org/9/ALSA-2026-28159.html", "https://errata.rockylinux.org/RLSA-2026:28158", "https://github.com/pypa/advisory-database/tree/main/vulns/urllib3/PYSEC-2026-142.yaml", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j", "https://linux.oracle.com/cve/CVE-2026-44432.html", "https://linux.oracle.com/errata/ELSA-2026-32992.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-44432", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44432.json", "https://ubuntu.com/security/notices/USN-8379-1", "https://www.cve.org/CVERecord?id=CVE-2026-44432" ], "PublishedDate": "2026-05-13T16:16:57.303Z", "LastModifiedDate": "2026-09-10T13:20:11.887Z" }, { "VulnerabilityID": "CVE-2026-97687", "VendorIDs": [ "GHSA-8988-9cw3-xx77" ], "PkgName": "urllib3", "PkgPath": "root/.cache/uv/archive-v0/nYZ9t3kf_NgXiNXLRX2od/urllib3-2.6.3.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.6.3", "UID": "dfed0a91cf6f25e5" }, "InstalledVersion": "2.6.3", "FixedVersion": "2.8.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97687", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:3df0516d5b44c554767108aa607a36090f2cb7d10758681c606e62909e996d8c", "Title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override", "Description": "urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mode, use_forwarding_for_https=True, and CERT_NONE configuration paths fail to remain separated because target-server TLS settings are incorrectly applied to the HTTPS proxy connection. The trigger is that an application uses an HTTPS proxy and configures target-server TLS settings that must remain separate from the proxy TLS handshake, including HTTPS forwarding with target-specific identity or credentials. Applying cert_reqs=CERT_NONE can overwrite proxy_ssl_context.verify_mode in place, and the mutation persists so later connections reusing the same context may connect to the HTTPS proxy without certificate verification. The attack mechanism is that an attacker intercepts and impersonates the HTTPS proxy after the effective proxy policy accepts the attacker's certificate. The impact is that the attacker can observe or modify forwarded traffic or receive a target TLS client certificate, while CONNECT tunneling still preserves the separate end-to-end target TLS connection. This issue is fixed in version 2.8.0.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-440" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 7.6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:90494", "https://access.redhat.com/security/cve/CVE-2026-97687", "https://advisory.echohq.com/cve/CVE-2026-97687", "https://bugzilla.redhat.com/2543245", "https://bugzilla.redhat.com/2543255", "https://bugzilla.redhat.com/show_bug.cgi?id=2543245", "https://bugzilla.redhat.com/show_bug.cgi?id=2543255", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689", "https://errata.almalinux.org/9/ALSA-2026-90494.html", "https://errata.rockylinux.org/RLSA-2026:90494", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465", "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3", "https://github.com/urllib3/urllib3/pull/5093", "https://github.com/urllib3/urllib3/releases/tag/2.8.0", "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77", "https://linux.oracle.com/cve/CVE-2026-97687.html", "https://linux.oracle.com/errata/ELSA-2026-92474.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97687", "https://ubuntu.com/security/notices/USN-8926-1", "https://www.cve.org/CVERecord?id=CVE-2026-97687" ], "PublishedDate": "2026-09-29T16:17:18.517Z", "LastModifiedDate": "2026-10-13T20:27:23.13Z" }, { "VulnerabilityID": "CVE-2026-97689", "VendorIDs": [ "GHSA-vxq7-64xx-v4gw" ], "PkgName": "urllib3", "PkgPath": "root/.cache/uv/archive-v0/nYZ9t3kf_NgXiNXLRX2od/urllib3-2.6.3.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.6.3", "UID": "dfed0a91cf6f25e5" }, "InstalledVersion": "2.6.3", "FixedVersion": "2.8.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3422f70f2e118bab40c1a0adb2059870b628134d325ca618eeffe395e9cd60b1" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97689", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:29e8b7a15f8a19061153ea741aabcb583987385d747162782f80e88bb0fe567c", "Title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser", "Description": "urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V40Score": 8.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:90494", "https://access.redhat.com/security/cve/CVE-2026-97689", "https://advisory.echohq.com/cve/CVE-2026-97689", "https://bugzilla.redhat.com/2543245", "https://bugzilla.redhat.com/2543255", "https://bugzilla.redhat.com/show_bug.cgi?id=2543245", "https://bugzilla.redhat.com/show_bug.cgi?id=2543255", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689", "https://errata.almalinux.org/9/ALSA-2026-90494.html", "https://errata.rockylinux.org/RLSA-2026:90494", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed", "https://github.com/urllib3/urllib3/releases/tag/2.8.0", "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw", "https://linux.oracle.com/cve/CVE-2026-97689.html", "https://linux.oracle.com/errata/ELSA-2026-92474.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97689", "https://ubuntu.com/security/notices/USN-8926-1", "https://www.cve.org/CVERecord?id=CVE-2026-97689" ], "PublishedDate": "2026-09-29T16:17:18.837Z", "LastModifiedDate": "2026-10-13T20:20:06.95Z" }, { "VulnerabilityID": "GHSA-hq85-5cpj-mr62", "PkgName": "uv", "PkgPath": "usr/local/lib/python3.11/site-packages/uv-0.11.7.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/uv@0.11.7", "UID": "63decae77b26959f" }, "InstalledVersion": "0.11.7", "FixedVersion": "0.13.4", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-hq85-5cpj-mr62", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:17208fa1c4ead6840aae73a5d1d250fe8d3932194ff78974b37386300de20e1c", "Title": "uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised", "Description": "By default, uv verifies TLS connections against a vendored copy of the `webpki-root-certs` bundle. Versions before 0.13.4 include the `emSign ECC Root CA - G3` root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them.\n\nAn attacker with one of the compromised keys can issue certificates that uv accepts for any hostname, and can be used to issue certificates to enable MITM attacks.\n\nuv 0.13.4 removes the root from its vendored bundle, following `webpki-root-certs` 1.0.10. Upgrade to 0.13.4 or later.", "Severity": "CRITICAL", "VendorSeverity": { "ghsa": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 9.1 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-hq85-5cpj-mr62", "https://emudhra.we-have-a-problem.com", "https://github.com/advisories/GHSA-hq85-5cpj-mr62", "https://github.com/astral-sh/uv", "https://github.com/astral-sh/uv/security/advisories/GHSA-hq85-5cpj-mr62", "https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2", "https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/0R3XLJL6FuE/m/0XofdebrAAAJ" ], "PublishedDate": "2026-10-20T19:37:52Z", "LastModifiedDate": "2026-10-20T19:37:53Z" }, { "VulnerabilityID": "CVE-2026-24049", "VendorIDs": [ "GHSA-8rrh-rw8j-w5fx" ], "PkgName": "wheel", "PkgPath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/wheel-0.45.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/wheel@0.45.1", "UID": "68d1f5691b386b62" }, "InstalledVersion": "0.45.1", "FixedVersion": "0.46.2", "Status": "fixed", "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24049", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a738f6377dc8b296f1c4ad000873f471f12a93b1fe0ed39c8ecaf7cdff219bd0", "Title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking", "Description": "wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts. This issue has been fixed in version 0.46.2.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-732" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "cbl-mariner": 2, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:1504", "https://access.redhat.com/errata/RHSA-2026:17599", "https://access.redhat.com/errata/RHSA-2026:1902", "https://access.redhat.com/errata/RHSA-2026:1939", "https://access.redhat.com/errata/RHSA-2026:1942", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20089", "https://access.redhat.com/errata/RHSA-2026:2090", "https://access.redhat.com/errata/RHSA-2026:2106", "https://access.redhat.com/errata/RHSA-2026:2139", "https://access.redhat.com/errata/RHSA-2026:2675", "https://access.redhat.com/errata/RHSA-2026:2681", "https://access.redhat.com/errata/RHSA-2026:2694", "https://access.redhat.com/errata/RHSA-2026:2695", "https://access.redhat.com/errata/RHSA-2026:2710", "https://access.redhat.com/errata/RHSA-2026:2754", "https://access.redhat.com/errata/RHSA-2026:2762", "https://access.redhat.com/errata/RHSA-2026:2823", "https://access.redhat.com/errata/RHSA-2026:2865", "https://access.redhat.com/errata/RHSA-2026:2866", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:2925", "https://access.redhat.com/errata/RHSA-2026:3461", "https://access.redhat.com/errata/RHSA-2026:3462", "https://access.redhat.com/errata/RHSA-2026:3713", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:3958", "https://access.redhat.com/errata/RHSA-2026:3959", "https://access.redhat.com/errata/RHSA-2026:3960", "https://access.redhat.com/errata/RHSA-2026:4185", "https://access.redhat.com/errata/RHSA-2026:4215", "https://access.redhat.com/errata/RHSA-2026:4271", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:5119", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:62115", "https://access.redhat.com/errata/RHSA-2026:6555", "https://access.redhat.com/errata/RHSA-2026:6562", "https://access.redhat.com/errata/RHSA-2026:6565", "https://access.redhat.com/errata/RHSA-2026:7250", "https://access.redhat.com/security/cve/CVE-2026-24049", "https://advisory.echohq.com/cve/CVE-2026-24049", "https://bugzilla.redhat.com/2431959", "https://bugzilla.redhat.com/show_bug.cgi?id=2431959", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049", "https://errata.almalinux.org/9/ALSA-2026-1939.html", "https://errata.rockylinux.org/RLSA-2026:1939", "https://github.com/pypa/wheel", "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef", "https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e", "https://github.com/pypa/wheel/releases/tag/0.46.2", "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx", "https://linux.oracle.com/cve/CVE-2026-24049.html", "https://linux.oracle.com/errata/ELSA-2026-2090.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-24049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json", "https://ubuntu.com/security/notices/USN-8221-1", "https://www.cve.org/CVERecord?id=CVE-2026-24049" ], "PublishedDate": "2026-01-22T05:16:23.157Z", "LastModifiedDate": "2026-09-10T13:17:45.017Z" }, { "VulnerabilityID": "CVE-2026-24049", "VendorIDs": [ "GHSA-8rrh-rw8j-w5fx" ], "PkgName": "wheel", "PkgPath": "usr/local/lib/python3.11/site-packages/wheel-0.45.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/wheel@0.45.1", "UID": "588d1d5b79ef6155" }, "InstalledVersion": "0.45.1", "FixedVersion": "0.46.2", "Status": "fixed", "Layer": { "DiffID": "sha256:11eedb26209894f612959676c175604e16ad7325d5866cdf74a401cbd3cef464" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24049", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a738f6377dc8b296f1c4ad000873f471f12a93b1fe0ed39c8ecaf7cdff219bd0", "Title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking", "Description": "wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts. This issue has been fixed in version 0.46.2.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-732" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "cbl-mariner": 2, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:1504", "https://access.redhat.com/errata/RHSA-2026:17599", "https://access.redhat.com/errata/RHSA-2026:1902", "https://access.redhat.com/errata/RHSA-2026:1939", "https://access.redhat.com/errata/RHSA-2026:1942", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20089", "https://access.redhat.com/errata/RHSA-2026:2090", "https://access.redhat.com/errata/RHSA-2026:2106", "https://access.redhat.com/errata/RHSA-2026:2139", "https://access.redhat.com/errata/RHSA-2026:2675", "https://access.redhat.com/errata/RHSA-2026:2681", "https://access.redhat.com/errata/RHSA-2026:2694", "https://access.redhat.com/errata/RHSA-2026:2695", "https://access.redhat.com/errata/RHSA-2026:2710", "https://access.redhat.com/errata/RHSA-2026:2754", "https://access.redhat.com/errata/RHSA-2026:2762", "https://access.redhat.com/errata/RHSA-2026:2823", "https://access.redhat.com/errata/RHSA-2026:2865", "https://access.redhat.com/errata/RHSA-2026:2866", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:2925", "https://access.redhat.com/errata/RHSA-2026:3461", "https://access.redhat.com/errata/RHSA-2026:3462", "https://access.redhat.com/errata/RHSA-2026:3713", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:3958", "https://access.redhat.com/errata/RHSA-2026:3959", "https://access.redhat.com/errata/RHSA-2026:3960", "https://access.redhat.com/errata/RHSA-2026:4185", "https://access.redhat.com/errata/RHSA-2026:4215", "https://access.redhat.com/errata/RHSA-2026:4271", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:5119", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:62115", "https://access.redhat.com/errata/RHSA-2026:6555", "https://access.redhat.com/errata/RHSA-2026:6562", "https://access.redhat.com/errata/RHSA-2026:6565", "https://access.redhat.com/errata/RHSA-2026:7250", "https://access.redhat.com/security/cve/CVE-2026-24049", "https://advisory.echohq.com/cve/CVE-2026-24049", "https://bugzilla.redhat.com/2431959", "https://bugzilla.redhat.com/show_bug.cgi?id=2431959", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049", "https://errata.almalinux.org/9/ALSA-2026-1939.html", "https://errata.rockylinux.org/RLSA-2026:1939", "https://github.com/pypa/wheel", "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef", "https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e", "https://github.com/pypa/wheel/releases/tag/0.46.2", "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx", "https://linux.oracle.com/cve/CVE-2026-24049.html", "https://linux.oracle.com/errata/ELSA-2026-2090.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-24049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json", "https://ubuntu.com/security/notices/USN-8221-1", "https://www.cve.org/CVERecord?id=CVE-2026-24049" ], "PublishedDate": "2026-01-22T05:16:23.157Z", "LastModifiedDate": "2026-09-10T13:17:45.017Z" } ] }, { "Target": "usr/local/bin/uv", "Class": "lang-pkgs", "Type": "rustbinary", "Packages": [ { "ID": "uv@0.11.7", "Name": "uv", "Identifier": { "PURL": "pkg:cargo/uv@0.11.7", "UID": "e91d90f7e349eaaa" }, "Version": "0.11.7", "Relationship": "root", "DependsOn": [ "anstream@1.0.0", "anyhow@1.0.102", "astral-version-ranges@0.1.4", "axoupdater@0.10.0", "clap@4.6.0", "console@0.16.3", "ctrlc@3.5.2", "diskus@0.9.0", "dotenvy@0.15.7", "dunce@1.0.5", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.0", "indexmap@2.13.1", "indicatif@0.18.4", "indoc@2.0.7", "itertools@0.14.0", "jiff@0.2.23", "miette@7.6.0", "nix@0.31.2", "open@5.3.3", "owo-colors@4.3.0", "petgraph@0.8.3", "reqwest@0.13.2", "rkyv@0.8.15", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.149", "tempfile@3.27.0", "textwrap@0.16.2", "thiserror@2.0.18", "tokio@1.51.0", "toml@0.9.10+spec-1.1.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "tracing-subscriber@0.3.23", "tracing-tree@0.4.1", "unicode-width@0.2.2", "url@2.5.8", "uuid@1.23.0", "uv-audit@0.0.40", "uv-auth@0.0.40", "uv-bin-install@0.0.40", "uv-build-backend@0.0.40", "uv-build-frontend@0.0.40", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-cli@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-console@0.0.40", "uv-dispatch@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-extract@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-git@0.0.40", "uv-git-types@0.0.40", "uv-install-wheel@0.0.40", "uv-installer@0.0.40", "uv-logging@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-performance-memory-allocator@0.0.40", "uv-platform@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-publish@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-requirements@0.0.40", "uv-requirements-txt@0.0.40", "uv-resolver@0.0.40", "uv-scripts@0.0.40", "uv-settings@0.0.40", "uv-shell@0.0.40", "uv-static@0.0.40", "uv-test@0.0.40", "uv-tool@0.0.40", "uv-torch@0.0.40", "uv-trampoline-builder@0.0.40", "uv-types@0.0.40", "uv-unix@0.0.40", "uv-version@0.11.7", "uv-virtualenv@0.0.40", "uv-warnings@0.0.40", "uv-workspace@0.0.40", "walkdir@2.5.0", "which@8.0.2", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "adler2@2.0.1", "Name": "adler2", "Identifier": { "PURL": "pkg:cargo/adler2@2.0.1", "UID": "1646dd151d54a16e" }, "Version": "2.0.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "aes@0.8.4", "Name": "aes", "Identifier": { "PURL": "pkg:cargo/aes@0.8.4", "UID": "3dae6b7bddff03ff" }, "Version": "0.8.4", "DependsOn": [ "cfg-if@1.0.4", "cipher@0.4.4", "cpufeatures@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "aho-corasick@1.1.4", "Name": "aho-corasick", "Identifier": { "PURL": "pkg:cargo/aho-corasick@1.1.4", "UID": "7f5c95d8ee0741cf" }, "Version": "1.1.4", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "allocator-api2@0.2.21", "Name": "allocator-api2", "Identifier": { "PURL": "pkg:cargo/allocator-api2@0.2.21", "UID": "ba303594bf81b72a" }, "Version": "0.2.21", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ambient-id@0.0.11", "Name": "ambient-id", "Identifier": { "PURL": "pkg:cargo/ambient-id@0.0.11", "UID": "bb2134931cae2606" }, "Version": "0.0.11", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "reqwest@0.13.2", "secrecy@0.10.3", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstream@1.0.0", "Name": "anstream", "Identifier": { "PURL": "pkg:cargo/anstream@1.0.0", "UID": "dd1704a57c9247bb" }, "Version": "1.0.0", "DependsOn": [ "anstyle@1.0.14", "anstyle-parse@1.0.0", "anstyle-query@1.1.5", "colorchoice@1.0.5", "is_terminal_polyfill@1.70.2", "utf8parse@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle@1.0.14", "Name": "anstyle", "Identifier": { "PURL": "pkg:cargo/anstyle@1.0.14", "UID": "29a20887371f606a" }, "Version": "1.0.14", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle-parse@1.0.0", "Name": "anstyle-parse", "Identifier": { "PURL": "pkg:cargo/anstyle-parse@1.0.0", "UID": "5809ad61ecedcc5" }, "Version": "1.0.0", "DependsOn": [ "utf8parse@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle-query@1.1.5", "Name": "anstyle-query", "Identifier": { "PURL": "pkg:cargo/anstyle-query@1.1.5", "UID": "57f1e6b89ce54ac1" }, "Version": "1.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anyhow@1.0.102", "Name": "anyhow", "Identifier": { "PURL": "pkg:cargo/anyhow@1.0.102", "UID": "e4d46b1740bd0c11" }, "Version": "1.0.102", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "arcstr@1.2.0", "Name": "arcstr", "Identifier": { "PURL": "pkg:cargo/arcstr@1.2.0", "UID": "761b54316029d6be" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "asn1-rs@0.7.1", "Name": "asn1-rs", "Identifier": { "PURL": "pkg:cargo/asn1-rs@0.7.1", "UID": "bb0d5cfafe4c8c66" }, "Version": "0.7.1", "DependsOn": [ "asn1-rs-impl@0.2.0", "displaydoc@0.2.5", "nom@7.1.3", "num-traits@0.2.19", "rusticata-macros@4.1.0", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "asn1-rs-impl@0.2.0", "Name": "asn1-rs-impl", "Identifier": { "PURL": "pkg:cargo/asn1-rs-impl@0.2.0", "UID": "1b0f5c7a1948c41c" }, "Version": "0.2.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert-json-diff@2.0.2", "Name": "assert-json-diff", "Identifier": { "PURL": "pkg:cargo/assert-json-diff@2.0.2", "UID": "d19055c7b4044a31" }, "Version": "2.0.2", "DependsOn": [ "serde@1.0.228", "serde_json@1.0.149" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert_cmd@2.2.0", "Name": "assert_cmd", "Identifier": { "PURL": "pkg:cargo/assert_cmd@2.2.0", "UID": "2e3bced3acab6abb" }, "Version": "2.2.0", "DependsOn": [ "anstyle@1.0.14", "bstr@1.12.1", "predicates@3.1.4", "predicates-core@1.0.10", "predicates-tree@1.0.13", "wait-timeout@0.2.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert_fs@1.1.3", "Name": "assert_fs", "Identifier": { "PURL": "pkg:cargo/assert_fs@1.1.3", "UID": "2f670e7ffce9ffd" }, "Version": "1.1.3", "DependsOn": [ "anstyle@1.0.14", "doc-comment@0.3.4", "globwalk@0.9.1", "predicates@3.1.4", "predicates-core@1.0.10", "predicates-tree@1.0.13", "tempfile@3.27.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-pubgrub@0.3.3", "Name": "astral-pubgrub", "Identifier": { "PURL": "pkg:cargo/astral-pubgrub@0.3.3", "UID": "6a0c1d5fcf0c6234" }, "Version": "0.3.3", "DependsOn": [ "astral-version-ranges@0.1.4", "indexmap@2.13.1", "log@0.4.29", "priority-queue@2.7.0", "rustc-hash@2.1.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-reqwest-middleware@0.5.1", "Name": "astral-reqwest-middleware", "Identifier": { "PURL": "pkg:cargo/astral-reqwest-middleware@0.5.1", "UID": "fc3d4122088a3eb0" }, "Version": "0.5.1", "DependsOn": [ "anyhow@1.0.102", "async-trait@0.1.89", "http@1.4.0", "reqwest@0.13.2", "serde@1.0.228", "thiserror@2.0.18", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-reqwest-retry@0.9.1", "Name": "astral-reqwest-retry", "Identifier": { "PURL": "pkg:cargo/astral-reqwest-retry@0.9.1", "UID": "70bbfd41ed54c5d4" }, "Version": "0.9.1", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "async-trait@0.1.89", "futures@0.3.32", "http@1.4.0", "hyper@1.9.0", "reqwest@0.13.2", "retry-policies@0.5.1", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-tl@0.7.11", "Name": "astral-tl", "Identifier": { "PURL": "pkg:cargo/astral-tl@0.7.11", "UID": "32f213ce3e0c3b52" }, "Version": "0.7.11", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-tokio-tar@0.6.0", "Name": "astral-tokio-tar", "Identifier": { "PURL": "pkg:cargo/astral-tokio-tar@0.6.0", "UID": "e051fe63ce2b5700" }, "Version": "0.6.0", "DependsOn": [ "filetime@0.2.27", "futures-core@0.3.32", "libc@0.2.183", "portable-atomic@1.13.1", "rustc-hash@2.1.2", "tokio@1.51.0", "tokio-stream@0.1.18", "xattr@1.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-version-ranges@0.1.4", "Name": "astral-version-ranges", "Identifier": { "PURL": "pkg:cargo/astral-version-ranges@0.1.4", "UID": "b96323259005c3cc" }, "Version": "0.1.4", "DependsOn": [ "smallvec@1.15.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral_async_http_range_reader@0.11.0", "Name": "astral_async_http_range_reader", "Identifier": { "PURL": "pkg:cargo/astral_async_http_range_reader@0.11.0", "UID": "97cad817c121a584" }, "Version": "0.11.0", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "futures@0.3.32", "http-content-range@0.2.4", "itertools@0.14.0", "memmap2@0.9.10", "reqwest@0.13.2", "thiserror@2.0.18", "tokio@1.51.0", "tokio-stream@0.1.18", "tokio-util@0.7.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral_async_zip@0.0.17", "Name": "astral_async_zip", "Identifier": { "PURL": "pkg:cargo/astral_async_zip@0.0.17", "UID": "688070e138dd00c3" }, "Version": "0.0.17", "DependsOn": [ "async-compression@0.4.19", "crc32fast@1.5.0", "futures-lite@2.6.1", "pin-project@1.1.11", "thiserror@1.0.69", "tokio@1.51.0", "tokio-util@0.7.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-broadcast@0.7.2", "Name": "async-broadcast", "Identifier": { "PURL": "pkg:cargo/async-broadcast@0.7.2", "UID": "6185d2a6d7e147d1" }, "Version": "0.7.2", "DependsOn": [ "event-listener@5.4.1", "event-listener-strategy@0.5.4", "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-channel@2.5.0", "Name": "async-channel", "Identifier": { "PURL": "pkg:cargo/async-channel@2.5.0", "UID": "ccd8ed80571be85f" }, "Version": "2.5.0", "DependsOn": [ "concurrent-queue@2.5.0", "event-listener-strategy@0.5.4", "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-compression@0.4.19", "Name": "async-compression", "Identifier": { "PURL": "pkg:cargo/async-compression@0.4.19", "UID": "a367e5f127133ba7" }, "Version": "0.4.19", "DependsOn": [ "bzip2@0.5.2", "flate2@1.1.9", "futures-core@0.3.32", "futures-io@0.3.32", "memchr@2.8.0", "pin-project-lite@0.2.17", "tokio@1.51.0", "xz2@0.1.7", "zstd@0.13.3", "zstd-safe@7.2.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-recursion@1.1.1", "Name": "async-recursion", "Identifier": { "PURL": "pkg:cargo/async-recursion@1.1.1", "UID": "e7c3bd94584a3345" }, "Version": "1.1.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-trait@0.1.89", "Name": "async-trait", "Identifier": { "PURL": "pkg:cargo/async-trait@0.1.89", "UID": "9b2d60636d8f1832" }, "Version": "0.1.89", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "atomic-waker@1.1.2", "Name": "atomic-waker", "Identifier": { "PURL": "pkg:cargo/atomic-waker@1.1.2", "UID": "a4fe08313f71f63" }, "Version": "1.1.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "aws-lc-rs@1.16.2", "Name": "aws-lc-rs", "Identifier": { "PURL": "pkg:cargo/aws-lc-rs@1.16.2", "UID": "ae2ada81f68a9585" }, "Version": "1.16.2", "DependsOn": [ "aws-lc-sys@0.39.0", "untrusted@0.7.1", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "aws-lc-sys@0.39.0", "Name": "aws-lc-sys", "Identifier": { "PURL": "pkg:cargo/aws-lc-sys@0.39.0", "UID": "6e8321007d124a22" }, "Version": "0.39.0", "DependsOn": [ "dunce@1.0.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoasset@2.0.1", "Name": "axoasset", "Identifier": { "PURL": "pkg:cargo/axoasset@2.0.1", "UID": "4f2dd468bfef6306" }, "Version": "2.0.1", "DependsOn": [ "camino@1.2.2", "image@0.25.10", "lazy_static@1.5.0", "miette@7.6.0", "mime@0.3.17", "reqwest@0.13.2", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "url@2.5.8", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoprocess@0.2.1", "Name": "axoprocess", "Identifier": { "PURL": "pkg:cargo/axoprocess@0.2.1", "UID": "6cf1b4444192d593" }, "Version": "0.2.1", "DependsOn": [ "miette@7.6.0", "thiserror@2.0.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "axotag@0.3.0", "Name": "axotag", "Identifier": { "PURL": "pkg:cargo/axotag@0.3.0", "UID": "26c3339298fb55c9" }, "Version": "0.3.0", "DependsOn": [ "miette@7.6.0", "semver@1.0.27", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoupdater@0.10.0", "Name": "axoupdater", "Identifier": { "PURL": "pkg:cargo/axoupdater@0.10.0", "UID": "29ac942341a752fb" }, "Version": "0.10.0", "DependsOn": [ "axoasset@2.0.1", "axoprocess@0.2.1", "axotag@0.3.0", "camino@1.2.2", "homedir@0.3.6", "miette@7.6.0", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64@0.21.7", "Name": "base64", "Identifier": { "PURL": "pkg:cargo/base64@0.21.7", "UID": "d7068303ae5a7267" }, "Version": "0.21.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64@0.22.1", "Name": "base64", "Identifier": { "PURL": "pkg:cargo/base64@0.22.1", "UID": "b4c38959f7e6eb20" }, "Version": "0.22.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64ct@1.8.3", "Name": "base64ct", "Identifier": { "PURL": "pkg:cargo/base64ct@1.8.3", "UID": "bc0b5d5aaf1c6517" }, "Version": "1.8.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bitflags@1.3.2", "Name": "bitflags", "Identifier": { "PURL": "pkg:cargo/bitflags@1.3.2", "UID": "7b657468e04c7854" }, "Version": "1.3.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bitflags@2.11.0", "Name": "bitflags", "Identifier": { "PURL": "pkg:cargo/bitflags@2.11.0", "UID": "de0c117ae2437bf6" }, "Version": "2.11.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "blake2@0.10.6", "Name": "blake2", "Identifier": { "PURL": "pkg:cargo/blake2@0.10.6", "UID": "a8e15fe83e5c808f" }, "Version": "0.10.6", "DependsOn": [ "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "block-buffer@0.10.4", "Name": "block-buffer", "Identifier": { "PURL": "pkg:cargo/block-buffer@0.10.4", "UID": "d9cbf7b5c8eb6f8e" }, "Version": "0.10.4", "DependsOn": [ "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "block-padding@0.3.3", "Name": "block-padding", "Identifier": { "PURL": "pkg:cargo/block-padding@0.3.3", "UID": "b83ae8472c243ac8" }, "Version": "0.3.3", "DependsOn": [ "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "boxcar@0.2.14", "Name": "boxcar", "Identifier": { "PURL": "pkg:cargo/boxcar@0.2.14", "UID": "bef71e82535d1334" }, "Version": "0.2.14", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bstr@1.12.1", "Name": "bstr", "Identifier": { "PURL": "pkg:cargo/bstr@1.12.1", "UID": "ac10744e95bee7a1" }, "Version": "1.12.1", "DependsOn": [ "memchr@2.8.0", "regex-automata@0.4.14", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bumpalo@3.20.2", "Name": "bumpalo", "Identifier": { "PURL": "pkg:cargo/bumpalo@3.20.2", "UID": "54824ddcd8e2a6d1" }, "Version": "3.20.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytecheck@0.8.2", "Name": "bytecheck", "Identifier": { "PURL": "pkg:cargo/bytecheck@0.8.2", "UID": "19367e19831f89d9" }, "Version": "0.8.2", "DependsOn": [ "ptr_meta@0.3.1", "rancor@0.1.1", "simdutf8@0.1.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytemuck@1.25.0", "Name": "bytemuck", "Identifier": { "PURL": "pkg:cargo/bytemuck@1.25.0", "UID": "ca983a773dfd55c1" }, "Version": "1.25.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "byteorder-lite@0.1.0", "Name": "byteorder-lite", "Identifier": { "PURL": "pkg:cargo/byteorder-lite@0.1.0", "UID": "524170c0dddc9d01" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytes@1.11.1", "Name": "bytes", "Identifier": { "PURL": "pkg:cargo/bytes@1.11.1", "UID": "7006cbaad092b2fd" }, "Version": "1.11.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2@0.5.2", "Name": "bzip2", "Identifier": { "PURL": "pkg:cargo/bzip2@0.5.2", "UID": "a3765b1d0b689a4c" }, "Version": "0.5.2", "DependsOn": [ "bzip2-sys@0.1.13+1.0.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2@0.6.1", "Name": "bzip2", "Identifier": { "PURL": "pkg:cargo/bzip2@0.6.1", "UID": "a9658b9954c6b73e" }, "Version": "0.6.1", "DependsOn": [ "libbz2-rs-sys@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2-sys@0.1.13+1.0.8", "Name": "bzip2-sys", "Identifier": { "PURL": "pkg:cargo/bzip2-sys@0.1.13%2B1.0.8", "UID": "7f0092898f4e99be" }, "Version": "0.1.13+1.0.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "camino@1.2.2", "Name": "camino", "Identifier": { "PURL": "pkg:cargo/camino@1.2.2", "UID": "d119e0f489bfee3d" }, "Version": "1.2.2", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cargo-util@0.2.27", "Name": "cargo-util", "Identifier": { "PURL": "pkg:cargo/cargo-util@0.2.27", "UID": "579e569d5b1177e2" }, "Version": "0.2.27", "DependsOn": [ "anyhow@1.0.102", "filetime@0.2.27", "hex@0.4.3", "ignore@0.4.25", "jobserver@0.1.34", "libc@0.2.183", "same-file@1.0.6", "sha2@0.10.9", "shell-escape@0.1.5", "tempfile@3.27.0", "tracing@0.1.44", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cbc@0.1.2", "Name": "cbc", "Identifier": { "PURL": "pkg:cargo/cbc@0.1.2", "UID": "d2307f6e8b4fa9a1" }, "Version": "0.1.2", "DependsOn": [ "cipher@0.4.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cfg-if@1.0.4", "Name": "cfg-if", "Identifier": { "PURL": "pkg:cargo/cfg-if@1.0.4", "UID": "e76cf36dca742ef3" }, "Version": "1.0.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "charset@0.1.5", "Name": "charset", "Identifier": { "PURL": "pkg:cargo/charset@0.1.5", "UID": "3ee75c1d7e608795" }, "Version": "0.1.5", "DependsOn": [ "base64@0.22.1", "encoding_rs@0.8.35" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cipher@0.4.4", "Name": "cipher", "Identifier": { "PURL": "pkg:cargo/cipher@0.4.4", "UID": "28dcefcc1f160cab" }, "Version": "0.4.4", "DependsOn": [ "crypto-common@0.1.7", "inout@0.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap@4.6.0", "Name": "clap", "Identifier": { "PURL": "pkg:cargo/clap@4.6.0", "UID": "d7b331d6f5ba0687" }, "Version": "4.6.0", "DependsOn": [ "clap_builder@4.6.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_builder@4.6.0", "Name": "clap_builder", "Identifier": { "PURL": "pkg:cargo/clap_builder@4.6.0", "UID": "f22a68c36cf3b7de" }, "Version": "4.6.0", "DependsOn": [ "anstream@1.0.0", "anstyle@1.0.14", "clap_lex@1.1.0", "strsim@0.11.1", "terminal_size@0.4.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete@4.6.0", "Name": "clap_complete", "Identifier": { "PURL": "pkg:cargo/clap_complete@4.6.0", "UID": "2bcffeafc043bf75" }, "Version": "4.6.0", "DependsOn": [ "clap@4.6.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete_command@0.6.1", "Name": "clap_complete_command", "Identifier": { "PURL": "pkg:cargo/clap_complete_command@0.6.1", "UID": "35a85146967360c3" }, "Version": "0.6.1", "DependsOn": [ "clap@4.6.0", "clap_complete@4.6.0", "clap_complete_nushell@4.6.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete_nushell@4.6.0", "Name": "clap_complete_nushell", "Identifier": { "PURL": "pkg:cargo/clap_complete_nushell@4.6.0", "UID": "90a8052c550c0629" }, "Version": "4.6.0", "DependsOn": [ "clap@4.6.0", "clap_complete@4.6.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_lex@1.1.0", "Name": "clap_lex", "Identifier": { "PURL": "pkg:cargo/clap_lex@1.1.0", "UID": "c587acffed9d68d2" }, "Version": "1.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "colorchoice@1.0.5", "Name": "colorchoice", "Identifier": { "PURL": "pkg:cargo/colorchoice@1.0.5", "UID": "7fb0b58cd6e94bfd" }, "Version": "1.0.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "concurrent-queue@2.5.0", "Name": "concurrent-queue", "Identifier": { "PURL": "pkg:cargo/concurrent-queue@2.5.0", "UID": "e508d536b7b2aa3d" }, "Version": "2.5.0", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "configparser@3.1.0", "Name": "configparser", "Identifier": { "PURL": "pkg:cargo/configparser@3.1.0", "UID": "319d426d3ce5defd" }, "Version": "3.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "console@0.16.3", "Name": "console", "Identifier": { "PURL": "pkg:cargo/console@0.16.3", "UID": "395a80b1c94f9cf5" }, "Version": "0.16.3", "DependsOn": [ "libc@0.2.183", "unicode-width@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "const-oid@0.9.6", "Name": "const-oid", "Identifier": { "PURL": "pkg:cargo/const-oid@0.9.6", "UID": "d5f9f41afa5ac85b" }, "Version": "0.9.6", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "const-random@0.1.18", "Name": "const-random", "Identifier": { "PURL": "pkg:cargo/const-random@0.1.18", "UID": "14c1a94b9a7138ec" }, "Version": "0.1.18", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cpufeatures@0.2.17", "Name": "cpufeatures", "Identifier": { "PURL": "pkg:cargo/cpufeatures@0.2.17", "UID": "d0212e968e363b9d" }, "Version": "0.2.17", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crc32fast@1.5.0", "Name": "crc32fast", "Identifier": { "PURL": "pkg:cargo/crc32fast@1.5.0", "UID": "a9d1f549a7726549" }, "Version": "1.5.0", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-channel@0.5.15", "Name": "crossbeam-channel", "Identifier": { "PURL": "pkg:cargo/crossbeam-channel@0.5.15", "UID": "161851aa6ca9b503" }, "Version": "0.5.15", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-deque@0.8.6", "Name": "crossbeam-deque", "Identifier": { "PURL": "pkg:cargo/crossbeam-deque@0.8.6", "UID": "10a9218d919925ab" }, "Version": "0.8.6", "DependsOn": [ "crossbeam-epoch@0.9.18", "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-epoch@0.9.18", "Name": "crossbeam-epoch", "Identifier": { "PURL": "pkg:cargo/crossbeam-epoch@0.9.18", "UID": "c5a312eb272846fc" }, "Version": "0.9.18", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-utils@0.8.21", "Name": "crossbeam-utils", "Identifier": { "PURL": "pkg:cargo/crossbeam-utils@0.8.21", "UID": "1560c2767371b6dd" }, "Version": "0.8.21", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crypto-common@0.1.7", "Name": "crypto-common", "Identifier": { "PURL": "pkg:cargo/crypto-common@0.1.7", "UID": "45a61e9d78015a7d" }, "Version": "0.1.7", "DependsOn": [ "generic-array@0.14.7", "typenum@1.19.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "csv@1.4.0", "Name": "csv", "Identifier": { "PURL": "pkg:cargo/csv@1.4.0", "UID": "7ac9c8c951b98829" }, "Version": "1.4.0", "DependsOn": [ "csv-core@0.1.13", "itoa@1.0.17", "ryu@1.0.23", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "csv-core@0.1.13", "Name": "csv-core", "Identifier": { "PURL": "pkg:cargo/csv-core@0.1.13", "UID": "5fa78a6b993e0530" }, "Version": "0.1.13", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ctrlc@3.5.2", "Name": "ctrlc", "Identifier": { "PURL": "pkg:cargo/ctrlc@3.5.2", "UID": "deef4ca7c9f5417a" }, "Version": "3.5.2", "DependsOn": [ "nix@0.31.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cyclonedx-bom@0.8.0", "Name": "cyclonedx-bom", "Identifier": { "PURL": "pkg:cargo/cyclonedx-bom@0.8.0", "UID": "9b211b5620291fbb" }, "Version": "0.8.0", "DependsOn": [ "base64@0.21.7", "cyclonedx-bom-macros@0.1.0", "fluent-uri@0.1.4", "indexmap@2.13.1", "once_cell@1.21.4", "ordered-float@4.6.0", "purl@0.1.6", "regex@1.12.3", "serde@1.0.228", "serde_json@1.0.149", "spdx@0.10.9", "strum@0.26.3", "thiserror@1.0.69", "time@0.3.47", "uuid@1.23.0", "xml-rs@0.8.28" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cyclonedx-bom-macros@0.1.0", "Name": "cyclonedx-bom-macros", "Identifier": { "PURL": "pkg:cargo/cyclonedx-bom-macros@0.1.0", "UID": "d0bd92b79a024fd" }, "Version": "0.1.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dashmap@6.1.0", "Name": "dashmap", "Identifier": { "PURL": "pkg:cargo/dashmap@6.1.0", "UID": "c1d640d094f07a65" }, "Version": "6.1.0", "DependsOn": [ "cfg-if@1.0.4", "crossbeam-utils@0.8.21", "hashbrown@0.14.5", "lock_api@0.4.14", "once_cell@1.21.4", "parking_lot_core@0.9.12" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "data-encoding@2.10.0", "Name": "data-encoding", "Identifier": { "PURL": "pkg:cargo/data-encoding@2.10.0", "UID": "966171e13b6a1690" }, "Version": "2.10.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "deadpool@0.12.3", "Name": "deadpool", "Identifier": { "PURL": "pkg:cargo/deadpool@0.12.3", "UID": "c548b15cabd0770e" }, "Version": "0.12.3", "DependsOn": [ "deadpool-runtime@0.1.4", "lazy_static@1.5.0", "num_cpus@1.17.0", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "deadpool-runtime@0.1.4", "Name": "deadpool-runtime", "Identifier": { "PURL": "pkg:cargo/deadpool-runtime@0.1.4", "UID": "4c7376cccdc5587a" }, "Version": "0.1.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "der@0.7.10", "Name": "der", "Identifier": { "PURL": "pkg:cargo/der@0.7.10", "UID": "2cd21bb7af13e5c" }, "Version": "0.7.10", "DependsOn": [ "const-oid@0.9.6", "pem-rfc7468@0.7.0", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "der-parser@10.0.0", "Name": "der-parser", "Identifier": { "PURL": "pkg:cargo/der-parser@10.0.0", "UID": "5af1565bf6ebead5" }, "Version": "10.0.0", "DependsOn": [ "asn1-rs@0.7.1", "displaydoc@0.2.5", "nom@7.1.3", "num-bigint@0.4.6", "num-traits@0.2.19", "rusticata-macros@4.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "deranged@0.5.8", "Name": "deranged", "Identifier": { "PURL": "pkg:cargo/deranged@0.5.8", "UID": "dbcfcb18dabff897" }, "Version": "0.5.8", "DependsOn": [ "powerfmt@0.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "difflib@0.4.0", "Name": "difflib", "Identifier": { "PURL": "pkg:cargo/difflib@0.4.0", "UID": "86941066865523f5" }, "Version": "0.4.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "digest@0.10.7", "Name": "digest", "Identifier": { "PURL": "pkg:cargo/digest@0.10.7", "UID": "cfb26951b595e164" }, "Version": "0.10.7", "DependsOn": [ "block-buffer@0.10.4", "const-oid@0.9.6", "crypto-common@0.1.7", "subtle@2.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dirs@6.0.0", "Name": "dirs", "Identifier": { "PURL": "pkg:cargo/dirs@6.0.0", "UID": "a3b1743262d7033e" }, "Version": "6.0.0", "DependsOn": [ "dirs-sys@0.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dirs-sys@0.5.0", "Name": "dirs-sys", "Identifier": { "PURL": "pkg:cargo/dirs-sys@0.5.0", "UID": "fe9158e28af450ca" }, "Version": "0.5.0", "DependsOn": [ "libc@0.2.183", "option-ext@0.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "diskus@0.9.0", "Name": "diskus", "Identifier": { "PURL": "pkg:cargo/diskus@0.9.0", "UID": "77a71575ddd8c2a1" }, "Version": "0.9.0", "DependsOn": [ "crossbeam-channel@0.5.15", "rayon@1.11.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "displaydoc@0.2.5", "Name": "displaydoc", "Identifier": { "PURL": "pkg:cargo/displaydoc@0.2.5", "UID": "fe04fb2c4e4748b9" }, "Version": "0.2.5", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dlv-list@0.5.2", "Name": "dlv-list", "Identifier": { "PURL": "pkg:cargo/dlv-list@0.5.2", "UID": "35418052fb538189" }, "Version": "0.5.2", "DependsOn": [ "const-random@0.1.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "doc-comment@0.3.4", "Name": "doc-comment", "Identifier": { "PURL": "pkg:cargo/doc-comment@0.3.4", "UID": "cdb103566993456a" }, "Version": "0.3.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dotenvy@0.15.7", "Name": "dotenvy", "Identifier": { "PURL": "pkg:cargo/dotenvy@0.15.7", "UID": "1c9234466f3149c6" }, "Version": "0.15.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dunce@1.0.5", "Name": "dunce", "Identifier": { "PURL": "pkg:cargo/dunce@1.0.5", "UID": "a2d4176f2e0fdf1e" }, "Version": "1.0.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dyn-clone@1.0.20", "Name": "dyn-clone", "Identifier": { "PURL": "pkg:cargo/dyn-clone@1.0.20", "UID": "1870b6e027dfa353" }, "Version": "1.0.20", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "either@1.15.0", "Name": "either", "Identifier": { "PURL": "pkg:cargo/either@1.15.0", "UID": "895ff1f0b7be04ac" }, "Version": "1.15.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "encoding_rs@0.8.35", "Name": "encoding_rs", "Identifier": { "PURL": "pkg:cargo/encoding_rs@0.8.35", "UID": "315ec39db087a6df" }, "Version": "0.8.35", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "encoding_rs_io@0.1.7", "Name": "encoding_rs_io", "Identifier": { "PURL": "pkg:cargo/encoding_rs_io@0.1.7", "UID": "c98896eef421119" }, "Version": "0.1.7", "DependsOn": [ "encoding_rs@0.8.35" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "endi@1.1.1", "Name": "endi", "Identifier": { "PURL": "pkg:cargo/endi@1.1.1", "UID": "181090240b336d6d" }, "Version": "1.1.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "enumflags2@0.7.12", "Name": "enumflags2", "Identifier": { "PURL": "pkg:cargo/enumflags2@0.7.12", "UID": "5580b3855a48159a" }, "Version": "0.7.12", "DependsOn": [ "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "equivalent@1.0.2", "Name": "equivalent", "Identifier": { "PURL": "pkg:cargo/equivalent@1.0.2", "UID": "7d42eda27a69bb62" }, "Version": "1.0.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "erased-serde@0.4.10", "Name": "erased-serde", "Identifier": { "PURL": "pkg:cargo/erased-serde@0.4.10", "UID": "70c5bb0e1194dfd2" }, "Version": "0.4.10", "DependsOn": [ "serde_core@1.0.228", "typeid@1.0.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "errno@0.3.14", "Name": "errno", "Identifier": { "PURL": "pkg:cargo/errno@0.3.14", "UID": "bffbbc81b9760d8f" }, "Version": "0.3.14", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "etcetera@0.11.0", "Name": "etcetera", "Identifier": { "PURL": "pkg:cargo/etcetera@0.11.0", "UID": "38af1d4f1df08a18" }, "Version": "0.11.0", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "event-listener@5.4.1", "Name": "event-listener", "Identifier": { "PURL": "pkg:cargo/event-listener@5.4.1", "UID": "52b00cc6d50614ee" }, "Version": "5.4.1", "DependsOn": [ "concurrent-queue@2.5.0", "parking@2.2.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "event-listener-strategy@0.5.4", "Name": "event-listener-strategy", "Identifier": { "PURL": "pkg:cargo/event-listener-strategy@0.5.4", "UID": "83200d0ae1e23fe7" }, "Version": "0.5.4", "DependsOn": [ "event-listener@5.4.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fastrand@2.3.0", "Name": "fastrand", "Identifier": { "PURL": "pkg:cargo/fastrand@2.3.0", "UID": "8fb95f6f01dd7cf3" }, "Version": "2.3.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "filetime@0.2.27", "Name": "filetime", "Identifier": { "PURL": "pkg:cargo/filetime@0.2.27", "UID": "d1042c48c4fc2a48" }, "Version": "0.2.27", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fixedbitset@0.5.7", "Name": "fixedbitset", "Identifier": { "PURL": "pkg:cargo/fixedbitset@0.5.7", "UID": "81dd0d5c58109e39" }, "Version": "0.5.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "flate2@1.1.9", "Name": "flate2", "Identifier": { "PURL": "pkg:cargo/flate2@1.1.9", "UID": "fcc17295c79a6f9b" }, "Version": "1.1.9", "DependsOn": [ "crc32fast@1.5.0", "miniz_oxide@0.8.9", "zlib-rs@0.6.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "float-cmp@0.10.0", "Name": "float-cmp", "Identifier": { "PURL": "pkg:cargo/float-cmp@0.10.0", "UID": "b15cbefe282abe97" }, "Version": "0.10.0", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fluent-uri@0.1.4", "Name": "fluent-uri", "Identifier": { "PURL": "pkg:cargo/fluent-uri@0.1.4", "UID": "c5fae4c319ed2794" }, "Version": "0.1.4", "DependsOn": [ "bitflags@1.3.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fnv@1.0.7", "Name": "fnv", "Identifier": { "PURL": "pkg:cargo/fnv@1.0.7", "UID": "7e2cc2a85563e853" }, "Version": "1.0.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "foldhash@0.1.5", "Name": "foldhash", "Identifier": { "PURL": "pkg:cargo/foldhash@0.1.5", "UID": "906e7aef83cb4ea2" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "foldhash@0.2.0", "Name": "foldhash", "Identifier": { "PURL": "pkg:cargo/foldhash@0.2.0", "UID": "28f7a88e4051945e" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "form_urlencoded@1.2.2", "Name": "form_urlencoded", "Identifier": { "PURL": "pkg:cargo/form_urlencoded@1.2.2", "UID": "c78c0ad8b2b96e07" }, "Version": "1.2.2", "DependsOn": [ "percent-encoding@2.3.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fs-err@3.3.0", "Name": "fs-err", "Identifier": { "PURL": "pkg:cargo/fs-err@3.3.0", "UID": "7d330f10aa230881" }, "Version": "3.3.0", "DependsOn": [ "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures@0.3.32", "Name": "futures", "Identifier": { "PURL": "pkg:cargo/futures@0.3.32", "UID": "7a7bdb8cb1c045de" }, "Version": "0.3.32", "DependsOn": [ "futures-channel@0.3.32", "futures-core@0.3.32", "futures-executor@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "futures-task@0.3.32", "futures-util@0.3.32" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-channel@0.3.32", "Name": "futures-channel", "Identifier": { "PURL": "pkg:cargo/futures-channel@0.3.32", "UID": "cf908331b579428d" }, "Version": "0.3.32", "DependsOn": [ "futures-core@0.3.32", "futures-sink@0.3.32" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-core@0.3.32", "Name": "futures-core", "Identifier": { "PURL": "pkg:cargo/futures-core@0.3.32", "UID": "a924254f6b05b4fc" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-executor@0.3.32", "Name": "futures-executor", "Identifier": { "PURL": "pkg:cargo/futures-executor@0.3.32", "UID": "f395a8aab6d813cb" }, "Version": "0.3.32", "DependsOn": [ "futures-core@0.3.32", "futures-task@0.3.32", "futures-util@0.3.32" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-io@0.3.32", "Name": "futures-io", "Identifier": { "PURL": "pkg:cargo/futures-io@0.3.32", "UID": "6583264ce3ae041c" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-lite@2.6.1", "Name": "futures-lite", "Identifier": { "PURL": "pkg:cargo/futures-lite@2.6.1", "UID": "c94a6426eae5dfbd" }, "Version": "2.6.1", "DependsOn": [ "fastrand@2.3.0", "futures-core@0.3.32", "futures-io@0.3.32", "parking@2.2.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-sink@0.3.32", "Name": "futures-sink", "Identifier": { "PURL": "pkg:cargo/futures-sink@0.3.32", "UID": "a11e8a0cc278cdc8" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-task@0.3.32", "Name": "futures-task", "Identifier": { "PURL": "pkg:cargo/futures-task@0.3.32", "UID": "5664788379add3e4" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-util@0.3.32", "Name": "futures-util", "Identifier": { "PURL": "pkg:cargo/futures-util@0.3.32", "UID": "5430e1c4f636c758" }, "Version": "0.3.32", "DependsOn": [ "futures-channel@0.3.32", "futures-core@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "futures-task@0.3.32", "memchr@2.8.0", "pin-project-lite@0.2.17", "slab@0.4.12" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "generic-array@0.14.7", "Name": "generic-array", "Identifier": { "PURL": "pkg:cargo/generic-array@0.14.7", "UID": "c8c63218f84b11b7" }, "Version": "0.14.7", "DependsOn": [ "typenum@1.19.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.2.16", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.2.16", "UID": "db0fc2593b3ab153" }, "Version": "0.2.16", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.3.3", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.3.3", "UID": "f78137c8b7479dc4" }, "Version": "0.3.3", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.4.1", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.4.1", "UID": "4af4a0e83c067c9e" }, "Version": "0.4.1", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "glob@0.3.3", "Name": "glob", "Identifier": { "PURL": "pkg:cargo/glob@0.3.3", "UID": "120b7c99088bb328" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "globset@0.4.18", "Name": "globset", "Identifier": { "PURL": "pkg:cargo/globset@0.4.18", "UID": "7bf3032f6cb1ee44" }, "Version": "0.4.18", "DependsOn": [ "aho-corasick@1.1.4", "bstr@1.12.1", "log@0.4.29", "regex-automata@0.4.14", "regex-syntax@0.8.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "globwalk@0.9.1", "Name": "globwalk", "Identifier": { "PURL": "pkg:cargo/globwalk@0.9.1", "UID": "220d639291c46856" }, "Version": "0.9.1", "DependsOn": [ "bitflags@2.11.0", "ignore@0.4.25", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "goblin@0.10.5", "Name": "goblin", "Identifier": { "PURL": "pkg:cargo/goblin@0.10.5", "UID": "d54c88ab369c6388" }, "Version": "0.10.5", "DependsOn": [ "log@0.4.29", "plain@0.2.3", "scroll@0.13.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "h2@0.4.13", "Name": "h2", "Identifier": { "PURL": "pkg:cargo/h2@0.4.13", "UID": "41503f712e553964" }, "Version": "0.4.13", "DependsOn": [ "atomic-waker@1.1.2", "bytes@1.11.1", "fnv@1.0.7", "futures-core@0.3.32", "futures-sink@0.3.32", "http@1.4.0", "indexmap@2.13.1", "slab@0.4.12", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.14.5", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.14.5", "UID": "ee3e1f5ba7599c95" }, "Version": "0.14.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.15.5", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.15.5", "UID": "5488c671e7424340" }, "Version": "0.15.5", "DependsOn": [ "foldhash@0.1.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.16.1", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.16.1", "UID": "259d91f5b80a380d" }, "Version": "0.16.1", "DependsOn": [ "allocator-api2@0.2.21", "equivalent@1.0.2", "foldhash@0.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hex@0.4.3", "Name": "hex", "Identifier": { "PURL": "pkg:cargo/hex@0.4.3", "UID": "2f3cc2e498c3da9a" }, "Version": "0.4.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hkdf@0.12.4", "Name": "hkdf", "Identifier": { "PURL": "pkg:cargo/hkdf@0.12.4", "UID": "f0722833a272a516" }, "Version": "0.12.4", "DependsOn": [ "hmac@0.12.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hmac@0.12.1", "Name": "hmac", "Identifier": { "PURL": "pkg:cargo/hmac@0.12.1", "UID": "f61a59ef18f5ca9d" }, "Version": "0.12.1", "DependsOn": [ "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "homedir@0.3.6", "Name": "homedir", "Identifier": { "PURL": "pkg:cargo/homedir@0.3.6", "UID": "df79ddf098a88a7" }, "Version": "0.3.6", "DependsOn": [ "cfg-if@1.0.4", "nix@0.30.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "html-escape@0.2.13", "Name": "html-escape", "Identifier": { "PURL": "pkg:cargo/html-escape@0.2.13", "UID": "d81b902a8a826307" }, "Version": "0.2.13", "DependsOn": [ "utf8-width@0.1.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "http@1.4.0", "Name": "http", "Identifier": { "PURL": "pkg:cargo/http@1.4.0", "UID": "da9a440f8279a3e5" }, "Version": "1.4.0", "DependsOn": [ "bytes@1.11.1", "itoa@1.0.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-body@1.0.1", "Name": "http-body", "Identifier": { "PURL": "pkg:cargo/http-body@1.0.1", "UID": "86c2100bc7064179" }, "Version": "1.0.1", "DependsOn": [ "bytes@1.11.1", "http@1.4.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-body-util@0.1.3", "Name": "http-body-util", "Identifier": { "PURL": "pkg:cargo/http-body-util@0.1.3", "UID": "12a3b6cf6259e8b2" }, "Version": "0.1.3", "DependsOn": [ "bytes@1.11.1", "futures-core@0.3.32", "http@1.4.0", "http-body@1.0.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-content-range@0.2.4", "Name": "http-content-range", "Identifier": { "PURL": "pkg:cargo/http-content-range@0.2.4", "UID": "511dd65e4e7072fc" }, "Version": "0.2.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "httparse@1.10.1", "Name": "httparse", "Identifier": { "PURL": "pkg:cargo/httparse@1.10.1", "UID": "c0769afff87b775f" }, "Version": "1.10.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "httpdate@1.0.3", "Name": "httpdate", "Identifier": { "PURL": "pkg:cargo/httpdate@1.0.3", "UID": "c7ddd79293310d52" }, "Version": "1.0.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper@1.9.0", "Name": "hyper", "Identifier": { "PURL": "pkg:cargo/hyper@1.9.0", "UID": "55673a7c24bcb222" }, "Version": "1.9.0", "DependsOn": [ "atomic-waker@1.1.2", "bytes@1.11.1", "futures-channel@0.3.32", "futures-core@0.3.32", "h2@0.4.13", "http@1.4.0", "http-body@1.0.1", "httparse@1.10.1", "httpdate@1.0.3", "itoa@1.0.17", "pin-project-lite@0.2.17", "smallvec@1.15.1", "tokio@1.51.0", "want@0.3.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper-rustls@0.27.7", "Name": "hyper-rustls", "Identifier": { "PURL": "pkg:cargo/hyper-rustls@0.27.7", "UID": "5f9ccd57a4ed25a2" }, "Version": "0.27.7", "DependsOn": [ "http@1.4.0", "hyper@1.9.0", "hyper-util@0.1.20", "rustls@0.23.37", "rustls-pki-types@1.14.0", "tokio@1.51.0", "tokio-rustls@0.26.4", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper-util@0.1.20", "Name": "hyper-util", "Identifier": { "PURL": "pkg:cargo/hyper-util@0.1.20", "UID": "191959379afc0323" }, "Version": "0.1.20", "DependsOn": [ "base64@0.22.1", "bytes@1.11.1", "futures-channel@0.3.32", "futures-util@0.3.32", "http@1.4.0", "http-body@1.0.1", "hyper@1.9.0", "ipnet@2.12.0", "libc@0.2.183", "percent-encoding@2.3.2", "pin-project-lite@0.2.17", "socket2@0.6.3", "tokio@1.51.0", "tower-service@0.3.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_collections@2.1.1", "Name": "icu_collections", "Identifier": { "PURL": "pkg:cargo/icu_collections@2.1.1", "UID": "13b661901a731694" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "potential_utf@0.1.4", "yoke@0.8.1", "zerofrom@0.1.6", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_locale_core@2.1.1", "Name": "icu_locale_core", "Identifier": { "PURL": "pkg:cargo/icu_locale_core@2.1.1", "UID": "4e4b007207cdfbb" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "litemap@0.8.1", "tinystr@0.8.2", "writeable@0.6.2", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_normalizer@2.1.1", "Name": "icu_normalizer", "Identifier": { "PURL": "pkg:cargo/icu_normalizer@2.1.1", "UID": "a39258a264fd6cef" }, "Version": "2.1.1", "DependsOn": [ "icu_collections@2.1.1", "icu_normalizer_data@2.1.1", "icu_properties@2.1.2", "icu_provider@2.1.1", "smallvec@1.15.1", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_normalizer_data@2.1.1", "Name": "icu_normalizer_data", "Identifier": { "PURL": "pkg:cargo/icu_normalizer_data@2.1.1", "UID": "8d5d15181c8b67d4" }, "Version": "2.1.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_properties@2.1.2", "Name": "icu_properties", "Identifier": { "PURL": "pkg:cargo/icu_properties@2.1.2", "UID": "6d683fe45111f0da" }, "Version": "2.1.2", "DependsOn": [ "icu_collections@2.1.1", "icu_locale_core@2.1.1", "icu_properties_data@2.1.2", "icu_provider@2.1.1", "zerotrie@0.2.3", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_properties_data@2.1.2", "Name": "icu_properties_data", "Identifier": { "PURL": "pkg:cargo/icu_properties_data@2.1.2", "UID": "71f0cfdd8996af47" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_provider@2.1.1", "Name": "icu_provider", "Identifier": { "PURL": "pkg:cargo/icu_provider@2.1.1", "UID": "b507d81fe5b87ecd" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "icu_locale_core@2.1.1", "writeable@0.6.2", "yoke@0.8.1", "zerofrom@0.1.6", "zerotrie@0.2.3", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "idna@1.1.0", "Name": "idna", "Identifier": { "PURL": "pkg:cargo/idna@1.1.0", "UID": "62620f2a1ae24547" }, "Version": "1.1.0", "DependsOn": [ "idna_adapter@1.2.1", "smallvec@1.15.1", "utf8_iter@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "idna_adapter@1.2.1", "Name": "idna_adapter", "Identifier": { "PURL": "pkg:cargo/idna_adapter@1.2.1", "UID": "8dd1121e1313f523" }, "Version": "1.2.1", "DependsOn": [ "icu_normalizer@2.1.1", "icu_properties@2.1.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ignore@0.4.25", "Name": "ignore", "Identifier": { "PURL": "pkg:cargo/ignore@0.4.25", "UID": "d93dc32599f043f2" }, "Version": "0.4.25", "DependsOn": [ "crossbeam-deque@0.8.6", "globset@0.4.18", "log@0.4.29", "memchr@2.8.0", "regex-automata@0.4.14", "same-file@1.0.6", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "image@0.25.10", "Name": "image", "Identifier": { "PURL": "pkg:cargo/image@0.25.10", "UID": "710b7173e8f4c43f" }, "Version": "0.25.10", "DependsOn": [ "bytemuck@1.25.0", "byteorder-lite@0.1.0", "moxcms@0.8.1", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "indexmap@2.13.1", "Name": "indexmap", "Identifier": { "PURL": "pkg:cargo/indexmap@2.13.1", "UID": "b7f3ddead52b9743" }, "Version": "2.13.1", "DependsOn": [ "equivalent@1.0.2", "hashbrown@0.16.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "indicatif@0.18.4", "Name": "indicatif", "Identifier": { "PURL": "pkg:cargo/indicatif@0.18.4", "UID": "6655703e14a564d1" }, "Version": "0.18.4", "DependsOn": [ "console@0.16.3", "portable-atomic@1.13.1", "unicode-width@0.2.2", "unit-prefix@0.5.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "indoc@2.0.7", "Name": "indoc", "Identifier": { "PURL": "pkg:cargo/indoc@2.0.7", "UID": "9b1efaa375a75f98" }, "Version": "2.0.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "inout@0.1.4", "Name": "inout", "Identifier": { "PURL": "pkg:cargo/inout@0.1.4", "UID": "f49eb9b738b950fe" }, "Version": "0.1.4", "DependsOn": [ "block-padding@0.3.3", "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "insta@1.47.2", "Name": "insta", "Identifier": { "PURL": "pkg:cargo/insta@1.47.2", "UID": "69425d1bf3128322" }, "Version": "1.47.2", "DependsOn": [ "console@0.16.3", "once_cell@1.21.4", "pest@2.8.6", "pest_derive@2.8.6", "regex@1.12.3", "serde@1.0.228", "similar@2.7.0", "tempfile@3.27.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ipnet@2.12.0", "Name": "ipnet", "Identifier": { "PURL": "pkg:cargo/ipnet@2.12.0", "UID": "f9f299e369c76d2b" }, "Version": "2.12.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "iri-string@0.7.10", "Name": "iri-string", "Identifier": { "PURL": "pkg:cargo/iri-string@0.7.10", "UID": "3e2d6560df570cbf" }, "Version": "0.7.10", "DependsOn": [ "memchr@2.8.0", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "is-docker@0.2.0", "Name": "is-docker", "Identifier": { "PURL": "pkg:cargo/is-docker@0.2.0", "UID": "87ad98e442b3dd8c" }, "Version": "0.2.0", "DependsOn": [ "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "is-wsl@0.4.0", "Name": "is-wsl", "Identifier": { "PURL": "pkg:cargo/is-wsl@0.4.0", "UID": "dfde986ef386b255" }, "Version": "0.4.0", "DependsOn": [ "is-docker@0.2.0", "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "is_ci@1.2.0", "Name": "is_ci", "Identifier": { "PURL": "pkg:cargo/is_ci@1.2.0", "UID": "b588f572f3bc8634" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "is_terminal_polyfill@1.70.2", "Name": "is_terminal_polyfill", "Identifier": { "PURL": "pkg:cargo/is_terminal_polyfill@1.70.2", "UID": "801a6e856cc2af38" }, "Version": "1.70.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "itertools@0.14.0", "Name": "itertools", "Identifier": { "PURL": "pkg:cargo/itertools@0.14.0", "UID": "352886a2973bb654" }, "Version": "0.14.0", "DependsOn": [ "either@1.15.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "itoa@1.0.17", "Name": "itoa", "Identifier": { "PURL": "pkg:cargo/itoa@1.0.17", "UID": "1d52706f210d289" }, "Version": "1.0.17", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "jiff@0.2.23", "Name": "jiff", "Identifier": { "PURL": "pkg:cargo/jiff@0.2.23", "UID": "abf7b6598ebfd80a" }, "Version": "0.2.23", "DependsOn": [ "log@0.4.29", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "jobserver@0.1.34", "Name": "jobserver", "Identifier": { "PURL": "pkg:cargo/jobserver@0.1.34", "UID": "29c680c5fdea36fd" }, "Version": "0.1.34", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "jsonwebtoken@10.3.0", "Name": "jsonwebtoken", "Identifier": { "PURL": "pkg:cargo/jsonwebtoken@10.3.0", "UID": "d128b7a3db5e1d1b" }, "Version": "10.3.0", "DependsOn": [ "aws-lc-rs@1.16.2", "base64@0.22.1", "pem@3.0.6", "serde@1.0.228", "serde_json@1.0.149", "signature@2.2.0", "simple_asn1@0.6.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lazy_static@1.5.0", "Name": "lazy_static", "Identifier": { "PURL": "pkg:cargo/lazy_static@1.5.0", "UID": "d7a7ad030f93b3fa" }, "Version": "1.5.0", "DependsOn": [ "spin@0.9.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "libbz2-rs-sys@0.2.2", "Name": "libbz2-rs-sys", "Identifier": { "PURL": "pkg:cargo/libbz2-rs-sys@0.2.2", "UID": "c7678adaf775a54d" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "libc@0.2.183", "Name": "libc", "Identifier": { "PURL": "pkg:cargo/libc@0.2.183", "UID": "235737bb0ba857d7" }, "Version": "0.2.183", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "libm@0.2.16", "Name": "libm", "Identifier": { "PURL": "pkg:cargo/libm@0.2.16", "UID": "fed084b53c9dba50" }, "Version": "0.2.16", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "linux-raw-sys@0.12.1", "Name": "linux-raw-sys", "Identifier": { "PURL": "pkg:cargo/linux-raw-sys@0.12.1", "UID": "f6c186a163539fd7" }, "Version": "0.12.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "litemap@0.8.1", "Name": "litemap", "Identifier": { "PURL": "pkg:cargo/litemap@0.8.1", "UID": "fdc699429c2a66d6" }, "Version": "0.8.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lock_api@0.4.14", "Name": "lock_api", "Identifier": { "PURL": "pkg:cargo/lock_api@0.4.14", "UID": "8a44af15388d18f3" }, "Version": "0.4.14", "DependsOn": [ "scopeguard@1.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "log@0.4.29", "Name": "log", "Identifier": { "PURL": "pkg:cargo/log@0.4.29", "UID": "bde4d1b8962e32fe" }, "Version": "0.4.29", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lru-slab@0.1.2", "Name": "lru-slab", "Identifier": { "PURL": "pkg:cargo/lru-slab@0.1.2", "UID": "a8bd9098f4569566" }, "Version": "0.1.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lzma-rust2@0.16.2", "Name": "lzma-rust2", "Identifier": { "PURL": "pkg:cargo/lzma-rust2@0.16.2", "UID": "e4da17265995f00d" }, "Version": "0.16.2", "DependsOn": [ "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lzma-sys@0.1.20", "Name": "lzma-sys", "Identifier": { "PURL": "pkg:cargo/lzma-sys@0.1.20", "UID": "6868fa6a0171f151" }, "Version": "0.1.20", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "mailparse@0.16.1", "Name": "mailparse", "Identifier": { "PURL": "pkg:cargo/mailparse@0.16.1", "UID": "b6db5a7f07c149c8" }, "Version": "0.16.1", "DependsOn": [ "charset@0.1.5", "data-encoding@2.10.0", "quoted_printable@0.5.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "matchers@0.2.0", "Name": "matchers", "Identifier": { "PURL": "pkg:cargo/matchers@0.2.0", "UID": "726d47f150ae061f" }, "Version": "0.2.0", "DependsOn": [ "regex-automata@0.4.14" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "md-5@0.10.6", "Name": "md-5", "Identifier": { "PURL": "pkg:cargo/md-5@0.10.6", "UID": "ba26f6e04f016cfe" }, "Version": "0.10.6", "DependsOn": [ "cfg-if@1.0.4", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "memchr@2.8.0", "Name": "memchr", "Identifier": { "PURL": "pkg:cargo/memchr@2.8.0", "UID": "25d67e7d23f356f0" }, "Version": "2.8.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "memmap2@0.9.10", "Name": "memmap2", "Identifier": { "PURL": "pkg:cargo/memmap2@0.9.10", "UID": "3c4545119462e48" }, "Version": "0.9.10", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "miette@7.6.0", "Name": "miette", "Identifier": { "PURL": "pkg:cargo/miette@7.6.0", "UID": "6aecb264d511b7d8" }, "Version": "7.6.0", "DependsOn": [ "cfg-if@1.0.4", "owo-colors@4.3.0", "supports-color@3.0.2", "supports-hyperlinks@3.2.0", "supports-unicode@3.0.0", "terminal_size@0.4.3", "textwrap@0.16.2", "unicode-width@0.1.14" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "mime@0.3.17", "Name": "mime", "Identifier": { "PURL": "pkg:cargo/mime@0.3.17", "UID": "9c96127864e1c37a" }, "Version": "0.3.17", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "mime_guess@2.0.5", "Name": "mime_guess", "Identifier": { "PURL": "pkg:cargo/mime_guess@2.0.5", "UID": "7cca6dad2314c661" }, "Version": "2.0.5", "DependsOn": [ "mime@0.3.17", "unicase@2.9.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "minimal-lexical@0.2.1", "Name": "minimal-lexical", "Identifier": { "PURL": "pkg:cargo/minimal-lexical@0.2.1", "UID": "68c5934190803ce9" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "miniz_oxide@0.8.9", "Name": "miniz_oxide", "Identifier": { "PURL": "pkg:cargo/miniz_oxide@0.8.9", "UID": "800ff59c905577a0" }, "Version": "0.8.9", "DependsOn": [ "adler2@2.0.1", "simd-adler32@0.3.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "mio@1.2.0", "Name": "mio", "Identifier": { "PURL": "pkg:cargo/mio@1.2.0", "UID": "90ceb62f629cb400" }, "Version": "1.2.0", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "moxcms@0.8.1", "Name": "moxcms", "Identifier": { "PURL": "pkg:cargo/moxcms@0.8.1", "UID": "1e5226eaf5ba7836" }, "Version": "0.8.1", "DependsOn": [ "num-traits@0.2.19", "pxfm@0.1.28" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "munge@0.4.7", "Name": "munge", "Identifier": { "PURL": "pkg:cargo/munge@0.4.7", "UID": "48b8e9318888b0f3" }, "Version": "0.4.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nanoid@0.4.0", "Name": "nanoid", "Identifier": { "PURL": "pkg:cargo/nanoid@0.4.0", "UID": "f6172f5c4be3876c" }, "Version": "0.4.0", "DependsOn": [ "rand@0.8.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nix@0.30.1", "Name": "nix", "Identifier": { "PURL": "pkg:cargo/nix@0.30.1", "UID": "239fec910137b54d" }, "Version": "0.30.1", "DependsOn": [ "bitflags@2.11.0", "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nix@0.31.2", "Name": "nix", "Identifier": { "PURL": "pkg:cargo/nix@0.31.2", "UID": "9804bd0be5074088" }, "Version": "0.31.2", "DependsOn": [ "bitflags@2.11.0", "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nom@7.1.3", "Name": "nom", "Identifier": { "PURL": "pkg:cargo/nom@7.1.3", "UID": "4bbb10e10a3f6b71" }, "Version": "7.1.3", "DependsOn": [ "memchr@2.8.0", "minimal-lexical@0.2.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "normalize-line-endings@0.3.0", "Name": "normalize-line-endings", "Identifier": { "PURL": "pkg:cargo/normalize-line-endings@0.3.0", "UID": "f677f2b67fb9b27d" }, "Version": "0.3.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nu-ansi-term@0.50.3", "Name": "nu-ansi-term", "Identifier": { "PURL": "pkg:cargo/nu-ansi-term@0.50.3", "UID": "4853b412c93fac7" }, "Version": "0.50.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num@0.4.3", "Name": "num", "Identifier": { "PURL": "pkg:cargo/num@0.4.3", "UID": "f364ccca3536c54f" }, "Version": "0.4.3", "DependsOn": [ "num-bigint@0.4.6", "num-complex@0.4.6", "num-integer@0.1.46", "num-iter@0.1.45", "num-rational@0.4.2", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-bigint@0.4.6", "Name": "num-bigint", "Identifier": { "PURL": "pkg:cargo/num-bigint@0.4.6", "UID": "35f4188a3e9a0116" }, "Version": "0.4.6", "DependsOn": [ "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-bigint-dig@0.8.6", "Name": "num-bigint-dig", "Identifier": { "PURL": "pkg:cargo/num-bigint-dig@0.8.6", "UID": "e201e3b58aa43b93" }, "Version": "0.8.6", "DependsOn": [ "lazy_static@1.5.0", "libm@0.2.16", "num-integer@0.1.46", "num-iter@0.1.45", "num-traits@0.2.19", "rand@0.8.5", "smallvec@1.15.1", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-complex@0.4.6", "Name": "num-complex", "Identifier": { "PURL": "pkg:cargo/num-complex@0.4.6", "UID": "3c9980be4c2c4ed7" }, "Version": "0.4.6", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-conv@0.2.0", "Name": "num-conv", "Identifier": { "PURL": "pkg:cargo/num-conv@0.2.0", "UID": "9d92bb40d48e11a9" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-integer@0.1.46", "Name": "num-integer", "Identifier": { "PURL": "pkg:cargo/num-integer@0.1.46", "UID": "1d1767ec9336aace" }, "Version": "0.1.46", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-iter@0.1.45", "Name": "num-iter", "Identifier": { "PURL": "pkg:cargo/num-iter@0.1.45", "UID": "322bf6330926ca92" }, "Version": "0.1.45", "DependsOn": [ "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-rational@0.4.2", "Name": "num-rational", "Identifier": { "PURL": "pkg:cargo/num-rational@0.4.2", "UID": "12a25ac6d4b32cfc" }, "Version": "0.4.2", "DependsOn": [ "num-bigint@0.4.6", "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-traits@0.2.19", "Name": "num-traits", "Identifier": { "PURL": "pkg:cargo/num-traits@0.2.19", "UID": "8b4bdf84ea8518f6" }, "Version": "0.2.19", "DependsOn": [ "libm@0.2.16" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num_cpus@1.17.0", "Name": "num_cpus", "Identifier": { "PURL": "pkg:cargo/num_cpus@1.17.0", "UID": "e488f76e07c1119c" }, "Version": "1.17.0", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "oid-registry@0.8.1", "Name": "oid-registry", "Identifier": { "PURL": "pkg:cargo/oid-registry@0.8.1", "UID": "ecfd064a739a66e4" }, "Version": "0.8.1", "DependsOn": [ "asn1-rs@0.7.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "once_cell@1.21.4", "Name": "once_cell", "Identifier": { "PURL": "pkg:cargo/once_cell@1.21.4", "UID": "992ba555454941b7" }, "Version": "1.21.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "open@5.3.3", "Name": "open", "Identifier": { "PURL": "pkg:cargo/open@5.3.3", "UID": "b1b7b795014134af" }, "Version": "5.3.3", "DependsOn": [ "is-wsl@0.4.0", "libc@0.2.183", "pathdiff@0.2.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "openssl-probe@0.2.1", "Name": "openssl-probe", "Identifier": { "PURL": "pkg:cargo/openssl-probe@0.2.1", "UID": "1c036dd791f8ce41" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "option-ext@0.2.0", "Name": "option-ext", "Identifier": { "PURL": "pkg:cargo/option-ext@0.2.0", "UID": "aaa40d7cafdaddea" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-float@4.6.0", "Name": "ordered-float", "Identifier": { "PURL": "pkg:cargo/ordered-float@4.6.0", "UID": "7c912ccf0de1fa88" }, "Version": "4.6.0", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-multimap@0.7.3", "Name": "ordered-multimap", "Identifier": { "PURL": "pkg:cargo/ordered-multimap@0.7.3", "UID": "1ebca2c43a0f2b14" }, "Version": "0.7.3", "DependsOn": [ "dlv-list@0.5.2", "hashbrown@0.14.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-stream@0.2.0", "Name": "ordered-stream", "Identifier": { "PURL": "pkg:cargo/ordered-stream@0.2.0", "UID": "b2df11691829a4a4" }, "Version": "0.2.0", "DependsOn": [ "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "os_str_bytes@6.6.1", "Name": "os_str_bytes", "Identifier": { "PURL": "pkg:cargo/os_str_bytes@6.6.1", "UID": "25e9492818492e69" }, "Version": "6.6.1", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "owo-colors@4.3.0", "Name": "owo-colors", "Identifier": { "PURL": "pkg:cargo/owo-colors@4.3.0", "UID": "bc6ba78bbefcb23c" }, "Version": "4.3.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking@2.2.1", "Name": "parking", "Identifier": { "PURL": "pkg:cargo/parking@2.2.1", "UID": "b6bb523d41750d9d" }, "Version": "2.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking_lot@0.12.5", "Name": "parking_lot", "Identifier": { "PURL": "pkg:cargo/parking_lot@0.12.5", "UID": "e12ac1270495cb95" }, "Version": "0.12.5", "DependsOn": [ "lock_api@0.4.14", "parking_lot_core@0.9.12" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking_lot_core@0.9.12", "Name": "parking_lot_core", "Identifier": { "PURL": "pkg:cargo/parking_lot_core@0.9.12", "UID": "2faacc20205362c9" }, "Version": "0.9.12", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183", "smallvec@1.15.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "path-slash@0.2.1", "Name": "path-slash", "Identifier": { "PURL": "pkg:cargo/path-slash@0.2.1", "UID": "c6397b4b90bca66" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pathdiff@0.2.3", "Name": "pathdiff", "Identifier": { "PURL": "pkg:cargo/pathdiff@0.2.3", "UID": "3484c11e1a073ca4" }, "Version": "0.2.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pbkdf2@0.12.2", "Name": "pbkdf2", "Identifier": { "PURL": "pkg:cargo/pbkdf2@0.12.2", "UID": "d9840af02aecc6a" }, "Version": "0.12.2", "DependsOn": [ "digest@0.10.7", "hmac@0.12.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pem@3.0.6", "Name": "pem", "Identifier": { "PURL": "pkg:cargo/pem@3.0.6", "UID": "2508e2376132b135" }, "Version": "3.0.6", "DependsOn": [ "base64@0.22.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pem-rfc7468@0.7.0", "Name": "pem-rfc7468", "Identifier": { "PURL": "pkg:cargo/pem-rfc7468@0.7.0", "UID": "25c0967d3316260d" }, "Version": "0.7.0", "DependsOn": [ "base64ct@1.8.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "percent-encoding@2.3.2", "Name": "percent-encoding", "Identifier": { "PURL": "pkg:cargo/percent-encoding@2.3.2", "UID": "5774c79ce51f5c31" }, "Version": "2.3.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest@2.8.6", "Name": "pest", "Identifier": { "PURL": "pkg:cargo/pest@2.8.6", "UID": "94cf6a12b87f86f8" }, "Version": "2.8.6", "DependsOn": [ "memchr@2.8.0", "ucd-trie@0.1.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_derive@2.8.6", "Name": "pest_derive", "Identifier": { "PURL": "pkg:cargo/pest_derive@2.8.6", "UID": "faf09cba5830506" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "pest_generator@2.8.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_generator@2.8.6", "Name": "pest_generator", "Identifier": { "PURL": "pkg:cargo/pest_generator@2.8.6", "UID": "be3c88e835d798c" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "pest_meta@2.8.6", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_meta@2.8.6", "Name": "pest_meta", "Identifier": { "PURL": "pkg:cargo/pest_meta@2.8.6", "UID": "7d8e1b0881745655" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "petgraph@0.8.3", "Name": "petgraph", "Identifier": { "PURL": "pkg:cargo/petgraph@0.8.3", "UID": "412dab9ec3dbcac0" }, "Version": "0.8.3", "DependsOn": [ "fixedbitset@0.5.7", "hashbrown@0.15.5", "indexmap@2.13.1", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pin-project@1.1.11", "Name": "pin-project", "Identifier": { "PURL": "pkg:cargo/pin-project@1.1.11", "UID": "8457bd2378e75688" }, "Version": "1.1.11", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pin-project-lite@0.2.17", "Name": "pin-project-lite", "Identifier": { "PURL": "pkg:cargo/pin-project-lite@0.2.17", "UID": "daace6bbdf3b2a46" }, "Version": "0.2.17", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs1@0.7.5", "Name": "pkcs1", "Identifier": { "PURL": "pkg:cargo/pkcs1@0.7.5", "UID": "f502f64ff395b3c9" }, "Version": "0.7.5", "DependsOn": [ "der@0.7.10", "pkcs8@0.10.2", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs5@0.7.1", "Name": "pkcs5", "Identifier": { "PURL": "pkg:cargo/pkcs5@0.7.1", "UID": "50acc3ac59d60d74" }, "Version": "0.7.1", "DependsOn": [ "aes@0.8.4", "cbc@0.1.2", "der@0.7.10", "pbkdf2@0.12.2", "scrypt@0.11.0", "sha2@0.10.9", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs8@0.10.2", "Name": "pkcs8", "Identifier": { "PURL": "pkg:cargo/pkcs8@0.10.2", "UID": "2d46af6bb91b15aa" }, "Version": "0.10.2", "DependsOn": [ "der@0.7.10", "pkcs5@0.7.1", "rand_core@0.6.4", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "plain@0.2.3", "Name": "plain", "Identifier": { "PURL": "pkg:cargo/plain@0.2.3", "UID": "39538196afef622b" }, "Version": "0.2.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "portable-atomic@1.13.1", "Name": "portable-atomic", "Identifier": { "PURL": "pkg:cargo/portable-atomic@1.13.1", "UID": "dabd7a3b02833bbb" }, "Version": "1.13.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "potential_utf@0.1.4", "Name": "potential_utf", "Identifier": { "PURL": "pkg:cargo/potential_utf@0.1.4", "UID": "9accbebddced7737" }, "Version": "0.1.4", "DependsOn": [ "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "powerfmt@0.2.0", "Name": "powerfmt", "Identifier": { "PURL": "pkg:cargo/powerfmt@0.2.0", "UID": "70b765ee6b0429b0" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ppv-lite86@0.2.21", "Name": "ppv-lite86", "Identifier": { "PURL": "pkg:cargo/ppv-lite86@0.2.21", "UID": "6ac1b443f14f2560" }, "Version": "0.2.21", "DependsOn": [ "zerocopy@0.8.42" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates@3.1.4", "Name": "predicates", "Identifier": { "PURL": "pkg:cargo/predicates@3.1.4", "UID": "f1fb4fa228972b53" }, "Version": "3.1.4", "DependsOn": [ "anstyle@1.0.14", "difflib@0.4.0", "float-cmp@0.10.0", "normalize-line-endings@0.3.0", "predicates-core@1.0.10", "regex@1.12.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates-core@1.0.10", "Name": "predicates-core", "Identifier": { "PURL": "pkg:cargo/predicates-core@1.0.10", "UID": "e46ff1f315a9e799" }, "Version": "1.0.10", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates-tree@1.0.13", "Name": "predicates-tree", "Identifier": { "PURL": "pkg:cargo/predicates-tree@1.0.13", "UID": "5105f204cd503e00" }, "Version": "1.0.13", "DependsOn": [ "predicates-core@1.0.10", "termtree@0.5.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "priority-queue@2.7.0", "Name": "priority-queue", "Identifier": { "PURL": "pkg:cargo/priority-queue@2.7.0", "UID": "7443dd20dca73e77" }, "Version": "2.7.0", "DependsOn": [ "equivalent@1.0.2", "indexmap@2.13.1", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "proc-macro-crate@3.5.0", "Name": "proc-macro-crate", "Identifier": { "PURL": "pkg:cargo/proc-macro-crate@3.5.0", "UID": "288844e84056024c" }, "Version": "3.5.0", "DependsOn": [ "toml_edit@0.25.4+spec-1.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "proc-macro2@1.0.106", "Name": "proc-macro2", "Identifier": { "PURL": "pkg:cargo/proc-macro2@1.0.106", "UID": "82c5f9176e43fbf1" }, "Version": "1.0.106", "DependsOn": [ "unicode-ident@1.0.24" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "procfs@0.18.0", "Name": "procfs", "Identifier": { "PURL": "pkg:cargo/procfs@0.18.0", "UID": "fc245d92d5d3611d" }, "Version": "0.18.0", "DependsOn": [ "bitflags@2.11.0", "flate2@1.1.9", "procfs-core@0.18.0", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "procfs-core@0.18.0", "Name": "procfs-core", "Identifier": { "PURL": "pkg:cargo/procfs-core@0.18.0", "UID": "6d2864d3e2292618" }, "Version": "0.18.0", "DependsOn": [ "bitflags@2.11.0", "hex@0.4.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ptr_meta@0.3.1", "Name": "ptr_meta", "Identifier": { "PURL": "pkg:cargo/ptr_meta@0.3.1", "UID": "fed159fc365e7a48" }, "Version": "0.3.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "purl@0.1.6", "Name": "purl", "Identifier": { "PURL": "pkg:cargo/purl@0.1.6", "UID": "c6aa9d52c779b995" }, "Version": "0.1.6", "DependsOn": [ "hex@0.4.3", "percent-encoding@2.3.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pxfm@0.1.28", "Name": "pxfm", "Identifier": { "PURL": "pkg:cargo/pxfm@0.1.28", "UID": "c4aebcd74f848cf1" }, "Version": "0.1.28", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quick-xml@0.39.2", "Name": "quick-xml", "Identifier": { "PURL": "pkg:cargo/quick-xml@0.39.2", "UID": "dd95ab93e37fe600" }, "Version": "0.39.2", "DependsOn": [ "memchr@2.8.0", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn@0.11.9", "Name": "quinn", "Identifier": { "PURL": "pkg:cargo/quinn@0.11.9", "UID": "20c538b9ee9ccd51" }, "Version": "0.11.9", "DependsOn": [ "bytes@1.11.1", "pin-project-lite@0.2.17", "quinn-proto@0.11.14", "quinn-udp@0.5.14", "rustc-hash@2.1.2", "rustls@0.23.37", "socket2@0.6.3", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn-proto@0.11.14", "Name": "quinn-proto", "Identifier": { "PURL": "pkg:cargo/quinn-proto@0.11.14", "UID": "baf26ec0baf32304" }, "Version": "0.11.14", "DependsOn": [ "aws-lc-rs@1.16.2", "bytes@1.11.1", "lru-slab@0.1.2", "rand@0.9.2", "rustc-hash@2.1.2", "rustls@0.23.37", "slab@0.4.12", "thiserror@2.0.18", "tinyvec@1.11.0", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn-udp@0.5.14", "Name": "quinn-udp", "Identifier": { "PURL": "pkg:cargo/quinn-udp@0.5.14", "UID": "d30e3e05f16a52e9" }, "Version": "0.5.14", "DependsOn": [ "libc@0.2.183", "socket2@0.6.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quote@1.0.45", "Name": "quote", "Identifier": { "PURL": "pkg:cargo/quote@1.0.45", "UID": "c1c57db36dc975e5" }, "Version": "1.0.45", "DependsOn": [ "proc-macro2@1.0.106" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quoted_printable@0.5.1", "Name": "quoted_printable", "Identifier": { "PURL": "pkg:cargo/quoted_printable@0.5.1", "UID": "4b136f87479a857a" }, "Version": "0.5.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rancor@0.1.1", "Name": "rancor", "Identifier": { "PURL": "pkg:cargo/rancor@0.1.1", "UID": "93ccf7340b5d8e2f" }, "Version": "0.1.1", "DependsOn": [ "ptr_meta@0.3.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand@0.8.5", "Name": "rand", "Identifier": { "PURL": "pkg:cargo/rand@0.8.5", "UID": "7e3f93935199e815" }, "Version": "0.8.5", "DependsOn": [ "libc@0.2.183", "rand_chacha@0.3.1", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand@0.9.2", "Name": "rand", "Identifier": { "PURL": "pkg:cargo/rand@0.9.2", "UID": "8ced70d318eccbfb" }, "Version": "0.9.2", "DependsOn": [ "rand_chacha@0.9.0", "rand_core@0.9.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_chacha@0.3.1", "Name": "rand_chacha", "Identifier": { "PURL": "pkg:cargo/rand_chacha@0.3.1", "UID": "27a98ed6e3a5c0a4" }, "Version": "0.3.1", "DependsOn": [ "ppv-lite86@0.2.21", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_chacha@0.9.0", "Name": "rand_chacha", "Identifier": { "PURL": "pkg:cargo/rand_chacha@0.9.0", "UID": "acaa0d467f1e679f" }, "Version": "0.9.0", "DependsOn": [ "ppv-lite86@0.2.21", "rand_core@0.9.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_core@0.6.4", "Name": "rand_core", "Identifier": { "PURL": "pkg:cargo/rand_core@0.6.4", "UID": "2c5d8b51d09e4286" }, "Version": "0.6.4", "DependsOn": [ "getrandom@0.2.16" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_core@0.9.5", "Name": "rand_core", "Identifier": { "PURL": "pkg:cargo/rand_core@0.9.5", "UID": "2ab84646789770da" }, "Version": "0.9.5", "DependsOn": [ "getrandom@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rayon@1.11.0", "Name": "rayon", "Identifier": { "PURL": "pkg:cargo/rayon@1.11.0", "UID": "79a42b265670b447" }, "Version": "1.11.0", "DependsOn": [ "either@1.15.0", "rayon-core@1.13.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rayon-core@1.13.0", "Name": "rayon-core", "Identifier": { "PURL": "pkg:cargo/rayon-core@1.13.0", "UID": "1cd3d380c02d35e3" }, "Version": "1.13.0", "DependsOn": [ "crossbeam-deque@0.8.6", "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ref-cast@1.0.25", "Name": "ref-cast", "Identifier": { "PURL": "pkg:cargo/ref-cast@1.0.25", "UID": "a168e988fb52f3dc" }, "Version": "1.0.25", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reflink-copy@0.1.29", "Name": "reflink-copy", "Identifier": { "PURL": "pkg:cargo/reflink-copy@0.1.29", "UID": "a4cb704bf519a7f9" }, "Version": "0.1.29", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex@1.12.3", "Name": "regex", "Identifier": { "PURL": "pkg:cargo/regex@1.12.3", "UID": "c96115bbf6575813" }, "Version": "1.12.3", "DependsOn": [ "aho-corasick@1.1.4", "memchr@2.8.0", "regex-automata@0.4.14", "regex-syntax@0.8.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex-automata@0.4.14", "Name": "regex-automata", "Identifier": { "PURL": "pkg:cargo/regex-automata@0.4.14", "UID": "4dce34fc0b14347d" }, "Version": "0.4.14", "DependsOn": [ "aho-corasick@1.1.4", "memchr@2.8.0", "regex-syntax@0.8.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex-syntax@0.8.10", "Name": "regex-syntax", "Identifier": { "PURL": "pkg:cargo/regex-syntax@0.8.10", "UID": "10e93d8d4306475a" }, "Version": "0.8.10", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rend@0.5.3", "Name": "rend", "Identifier": { "PURL": "pkg:cargo/rend@0.5.3", "UID": "18d0683d5c4364b6" }, "Version": "0.5.3", "DependsOn": [ "bytecheck@0.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign@0.20.0", "Name": "reqsign", "Identifier": { "PURL": "pkg:cargo/reqsign@0.20.0", "UID": "15c9ab182affdde1" }, "Version": "0.20.0", "DependsOn": [ "reqsign-aws-v4@3.0.0", "reqsign-command-execute-tokio@3.0.0", "reqsign-core@3.0.0", "reqsign-file-read-tokio@3.0.0", "reqsign-google@3.0.0", "reqsign-http-send-reqwest@4.0.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-aws-v4@3.0.0", "Name": "reqsign-aws-v4", "Identifier": { "PURL": "pkg:cargo/reqsign-aws-v4@3.0.0", "UID": "9faf55d6b0053d05" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "bytes@1.11.1", "form_urlencoded@1.2.2", "http@1.4.0", "log@0.4.29", "percent-encoding@2.3.2", "quick-xml@0.39.2", "reqsign-core@3.0.0", "rust-ini@0.21.3", "serde@1.0.228", "serde_json@1.0.149", "serde_urlencoded@0.7.1", "sha1@0.10.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-command-execute-tokio@3.0.0", "Name": "reqsign-command-execute-tokio", "Identifier": { "PURL": "pkg:cargo/reqsign-command-execute-tokio@3.0.0", "UID": "6f1ca14bbfc65196" }, "Version": "3.0.0", "DependsOn": [ "reqsign-core@3.0.0", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-core@3.0.0", "Name": "reqsign-core", "Identifier": { "PURL": "pkg:cargo/reqsign-core@3.0.0", "UID": "998e58dc7d764811" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "base64@0.22.1", "bytes@1.11.1", "form_urlencoded@1.2.2", "futures@0.3.32", "hex@0.4.3", "hmac@0.12.1", "http@1.4.0", "jiff@0.2.23", "log@0.4.29", "percent-encoding@2.3.2", "sha1@0.10.6", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-file-read-tokio@3.0.0", "Name": "reqsign-file-read-tokio", "Identifier": { "PURL": "pkg:cargo/reqsign-file-read-tokio@3.0.0", "UID": "d927a590d28a6466" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "reqsign-core@3.0.0", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-google@3.0.0", "Name": "reqsign-google", "Identifier": { "PURL": "pkg:cargo/reqsign-google@3.0.0", "UID": "cdd924deaea4efcd" }, "Version": "3.0.0", "DependsOn": [ "form_urlencoded@1.2.2", "http@1.4.0", "jsonwebtoken@10.3.0", "log@0.4.29", "percent-encoding@2.3.2", "reqsign-aws-v4@3.0.0", "reqsign-core@3.0.0", "rsa@0.9.10", "serde@1.0.228", "serde_json@1.0.149", "sha2@0.10.9", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-http-send-reqwest@4.0.0", "Name": "reqsign-http-send-reqwest", "Identifier": { "PURL": "pkg:cargo/reqsign-http-send-reqwest@4.0.0", "UID": "9705bfc4fa685c29" }, "Version": "4.0.0", "DependsOn": [ "anyhow@1.0.102", "bytes@1.11.1", "http@1.4.0", "http-body-util@0.1.3", "reqsign-core@3.0.0", "reqwest@0.13.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqwest@0.13.2", "Name": "reqwest", "Identifier": { "PURL": "pkg:cargo/reqwest@0.13.2", "UID": "84d92aa656cc2b9a" }, "Version": "0.13.2", "DependsOn": [ "base64@0.22.1", "bytes@1.11.1", "futures-channel@0.3.32", "futures-core@0.3.32", "futures-util@0.3.32", "h2@0.4.13", "http@1.4.0", "http-body@1.0.1", "http-body-util@0.1.3", "hyper@1.9.0", "hyper-rustls@0.27.7", "hyper-util@0.1.20", "log@0.4.29", "mime_guess@2.0.5", "percent-encoding@2.3.2", "pin-project-lite@0.2.17", "quinn@0.11.9", "rustls@0.23.37", "rustls-pki-types@1.14.0", "rustls-platform-verifier@0.6.2", "serde@1.0.228", "serde_json@1.0.149", "serde_urlencoded@0.7.1", "sync_wrapper@1.0.2", "tokio@1.51.0", "tokio-rustls@0.26.4", "tokio-util@0.7.18", "tower@0.5.3", "tower-http@0.6.8", "tower-service@0.3.3", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "retry-policies@0.5.1", "Name": "retry-policies", "Identifier": { "PURL": "pkg:cargo/retry-policies@0.5.1", "UID": "869633b56c4822d0" }, "Version": "0.5.1", "DependsOn": [ "rand@0.9.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ring@0.17.14", "Name": "ring", "Identifier": { "PURL": "pkg:cargo/ring@0.17.14", "UID": "cd0ad82c88c4e763" }, "Version": "0.17.14", "DependsOn": [ "cfg-if@1.0.4", "getrandom@0.2.16", "untrusted@0.9.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rkyv@0.8.15", "Name": "rkyv", "Identifier": { "PURL": "pkg:cargo/rkyv@0.8.15", "UID": "8765fba41a628f38" }, "Version": "0.8.15", "DependsOn": [ "bytecheck@0.8.2", "bytes@1.11.1", "hashbrown@0.16.1", "indexmap@2.13.1", "munge@0.4.7", "ptr_meta@0.3.1", "rancor@0.1.1", "rend@0.5.3", "smallvec@1.15.1", "tinyvec@1.11.0", "uuid@1.23.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rmp@0.8.15", "Name": "rmp", "Identifier": { "PURL": "pkg:cargo/rmp@0.8.15", "UID": "22f02fde0fc11879" }, "Version": "0.8.15", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rmp-serde@1.3.1", "Name": "rmp-serde", "Identifier": { "PURL": "pkg:cargo/rmp-serde@1.3.1", "UID": "54cb518c3f6f3f2f" }, "Version": "1.3.1", "DependsOn": [ "rmp@0.8.15", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rsa@0.9.10", "Name": "rsa", "Identifier": { "PURL": "pkg:cargo/rsa@0.9.10", "UID": "7624b65415ecb770" }, "Version": "0.9.10", "DependsOn": [ "const-oid@0.9.6", "digest@0.10.7", "num-bigint-dig@0.8.6", "num-integer@0.1.46", "num-traits@0.2.19", "pkcs1@0.7.5", "pkcs8@0.10.2", "rand_core@0.6.4", "sha2@0.10.9", "signature@2.2.0", "spki@0.7.3", "subtle@2.6.1", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rust-ini@0.21.3", "Name": "rust-ini", "Identifier": { "PURL": "pkg:cargo/rust-ini@0.21.3", "UID": "5912053758ae3d92" }, "Version": "0.21.3", "DependsOn": [ "cfg-if@1.0.4", "ordered-multimap@0.7.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rust-netrc@0.1.2", "Name": "rust-netrc", "Identifier": { "PURL": "pkg:cargo/rust-netrc@0.1.2", "UID": "891a9370fdc148f5" }, "Version": "0.1.2", "DependsOn": [ "shellexpand@3.1.2", "thiserror@1.0.69" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustc-hash@2.1.2", "Name": "rustc-hash", "Identifier": { "PURL": "pkg:cargo/rustc-hash@2.1.2", "UID": "39f4593e86cddcb0" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rusticata-macros@4.1.0", "Name": "rusticata-macros", "Identifier": { "PURL": "pkg:cargo/rusticata-macros@4.1.0", "UID": "94cc4f0d0a10ccb1" }, "Version": "4.1.0", "DependsOn": [ "nom@7.1.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustix@1.1.4", "Name": "rustix", "Identifier": { "PURL": "pkg:cargo/rustix@1.1.4", "UID": "600020e23c5333ff" }, "Version": "1.1.4", "DependsOn": [ "bitflags@2.11.0", "errno@0.3.14", "libc@0.2.183", "linux-raw-sys@0.12.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls@0.23.37", "Name": "rustls", "Identifier": { "PURL": "pkg:cargo/rustls@0.23.37", "UID": "a9df100032409128" }, "Version": "0.23.37", "DependsOn": [ "aws-lc-rs@1.16.2", "once_cell@1.21.4", "rustls-pki-types@1.14.0", "rustls-webpki@0.103.10", "subtle@2.6.1", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-native-certs@0.8.3", "Name": "rustls-native-certs", "Identifier": { "PURL": "pkg:cargo/rustls-native-certs@0.8.3", "UID": "43f80154a9631d39" }, "Version": "0.8.3", "DependsOn": [ "openssl-probe@0.2.1", "rustls-pki-types@1.14.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-pki-types@1.14.0", "Name": "rustls-pki-types", "Identifier": { "PURL": "pkg:cargo/rustls-pki-types@1.14.0", "UID": "7956d8f09189d8d7" }, "Version": "1.14.0", "DependsOn": [ "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-platform-verifier@0.6.2", "Name": "rustls-platform-verifier", "Identifier": { "PURL": "pkg:cargo/rustls-platform-verifier@0.6.2", "UID": "b22ae7ffcc7b1c5d" }, "Version": "0.6.2", "DependsOn": [ "log@0.4.29", "rustls@0.23.37", "rustls-native-certs@0.8.3", "rustls-webpki@0.103.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-webpki@0.103.10", "Name": "rustls-webpki", "Identifier": { "PURL": "pkg:cargo/rustls-webpki@0.103.10", "UID": "7663477542b3a20f" }, "Version": "0.103.10", "DependsOn": [ "aws-lc-rs@1.16.2", "ring@0.17.14", "rustls-pki-types@1.14.0", "untrusted@0.9.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ryu@1.0.23", "Name": "ryu", "Identifier": { "PURL": "pkg:cargo/ryu@1.0.23", "UID": "b88047820248c39e" }, "Version": "1.0.23", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "salsa20@0.10.2", "Name": "salsa20", "Identifier": { "PURL": "pkg:cargo/salsa20@0.10.2", "UID": "d5adb46f8d53050" }, "Version": "0.10.2", "DependsOn": [ "cipher@0.4.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "same-file@1.0.6", "Name": "same-file", "Identifier": { "PURL": "pkg:cargo/same-file@1.0.6", "UID": "935225a7013f012d" }, "Version": "1.0.6", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "schemars@1.2.1", "Name": "schemars", "Identifier": { "PURL": "pkg:cargo/schemars@1.2.1", "UID": "10c81372b6aad29a" }, "Version": "1.2.1", "DependsOn": [ "dyn-clone@1.0.20", "ref-cast@1.0.25", "serde@1.0.228", "serde_json@1.0.149", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "scopeguard@1.2.0", "Name": "scopeguard", "Identifier": { "PURL": "pkg:cargo/scopeguard@1.2.0", "UID": "12ef2a1d9e36d84b" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "scroll@0.13.0", "Name": "scroll", "Identifier": { "PURL": "pkg:cargo/scroll@0.13.0", "UID": "557c7348a3456093" }, "Version": "0.13.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "scrypt@0.11.0", "Name": "scrypt", "Identifier": { "PURL": "pkg:cargo/scrypt@0.11.0", "UID": "3171cef5037e870e" }, "Version": "0.11.0", "DependsOn": [ "pbkdf2@0.12.2", "salsa20@0.10.2", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "seahash@4.1.0", "Name": "seahash", "Identifier": { "PURL": "pkg:cargo/seahash@4.1.0", "UID": "253000633d348c09" }, "Version": "4.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "secrecy@0.10.3", "Name": "secrecy", "Identifier": { "PURL": "pkg:cargo/secrecy@0.10.3", "UID": "9915e970f6e300f3" }, "Version": "0.10.3", "DependsOn": [ "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "secret-service@5.1.0", "Name": "secret-service", "Identifier": { "PURL": "pkg:cargo/secret-service@5.1.0", "UID": "279521dddcee47e8" }, "Version": "5.1.0", "DependsOn": [ "aes@0.8.4", "cbc@0.1.2", "futures-util@0.3.32", "generic-array@0.14.7", "getrandom@0.2.16", "hkdf@0.12.4", "num@0.4.3", "once_cell@1.21.4", "serde@1.0.228", "sha2@0.10.9", "zbus@5.14.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "semver@1.0.27", "Name": "semver", "Identifier": { "PURL": "pkg:cargo/semver@1.0.27", "UID": "1b9d679ffaf6dfb7" }, "Version": "1.0.27", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde@1.0.228", "Name": "serde", "Identifier": { "PURL": "pkg:cargo/serde@1.0.228", "UID": "1809e33cd77bda84" }, "Version": "1.0.228", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde-untagged@0.1.9", "Name": "serde-untagged", "Identifier": { "PURL": "pkg:cargo/serde-untagged@0.1.9", "UID": "f96f88a6306a9eda" }, "Version": "0.1.9", "DependsOn": [ "erased-serde@0.4.10", "serde_core@1.0.228", "typeid@1.0.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_core@1.0.228", "Name": "serde_core", "Identifier": { "PURL": "pkg:cargo/serde_core@1.0.228", "UID": "d6c96730cf20b21d" }, "Version": "1.0.228", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_json@1.0.149", "Name": "serde_json", "Identifier": { "PURL": "pkg:cargo/serde_json@1.0.149", "UID": "dde5956007c8db" }, "Version": "1.0.149", "DependsOn": [ "itoa@1.0.17", "memchr@2.8.0", "serde_core@1.0.228", "zmij@1.0.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_repr@0.1.20", "Name": "serde_repr", "Identifier": { "PURL": "pkg:cargo/serde_repr@0.1.20", "UID": "1f605416b6fe1243" }, "Version": "0.1.20", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_spanned@1.0.4", "Name": "serde_spanned", "Identifier": { "PURL": "pkg:cargo/serde_spanned@1.0.4", "UID": "9d39344132702ddb" }, "Version": "1.0.4", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_urlencoded@0.7.1", "Name": "serde_urlencoded", "Identifier": { "PURL": "pkg:cargo/serde_urlencoded@0.7.1", "UID": "d12eb425bb3f83a5" }, "Version": "0.7.1", "DependsOn": [ "form_urlencoded@1.2.2", "itoa@1.0.17", "ryu@1.0.23", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "sha1@0.10.6", "Name": "sha1", "Identifier": { "PURL": "pkg:cargo/sha1@0.10.6", "UID": "2e0f4ecce935a3da" }, "Version": "0.10.6", "DependsOn": [ "cfg-if@1.0.4", "cpufeatures@0.2.17", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "sha2@0.10.9", "Name": "sha2", "Identifier": { "PURL": "pkg:cargo/sha2@0.10.9", "UID": "afabe8476cb64d97" }, "Version": "0.10.9", "DependsOn": [ "cfg-if@1.0.4", "cpufeatures@0.2.17", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "sharded-slab@0.1.7", "Name": "sharded-slab", "Identifier": { "PURL": "pkg:cargo/sharded-slab@0.1.7", "UID": "dc3b1a78d1663e06" }, "Version": "0.1.7", "DependsOn": [ "lazy_static@1.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "shell-escape@0.1.5", "Name": "shell-escape", "Identifier": { "PURL": "pkg:cargo/shell-escape@0.1.5", "UID": "658f474854901b40" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "shellexpand@3.1.2", "Name": "shellexpand", "Identifier": { "PURL": "pkg:cargo/shellexpand@3.1.2", "UID": "24487722080de5bc" }, "Version": "3.1.2", "DependsOn": [ "bstr@1.12.1", "dirs@6.0.0", "os_str_bytes@6.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "signal-hook-registry@1.4.8", "Name": "signal-hook-registry", "Identifier": { "PURL": "pkg:cargo/signal-hook-registry@1.4.8", "UID": "76aa65c5696c7643" }, "Version": "1.4.8", "DependsOn": [ "errno@0.3.14", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "signature@2.2.0", "Name": "signature", "Identifier": { "PURL": "pkg:cargo/signature@2.2.0", "UID": "122a44e3f5822807" }, "Version": "2.2.0", "DependsOn": [ "digest@0.10.7", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "simd-adler32@0.3.8", "Name": "simd-adler32", "Identifier": { "PURL": "pkg:cargo/simd-adler32@0.3.8", "UID": "a9167a4675349708" }, "Version": "0.3.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "simdutf8@0.1.5", "Name": "simdutf8", "Identifier": { "PURL": "pkg:cargo/simdutf8@0.1.5", "UID": "a92e1105160cd779" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "similar@2.7.0", "Name": "similar", "Identifier": { "PURL": "pkg:cargo/similar@2.7.0", "UID": "fdf18dc4751bb1f4" }, "Version": "2.7.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "simple_asn1@0.6.4", "Name": "simple_asn1", "Identifier": { "PURL": "pkg:cargo/simple_asn1@0.6.4", "UID": "507a4f75b34fade4" }, "Version": "0.6.4", "DependsOn": [ "num-bigint@0.4.6", "num-traits@0.2.19", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "slab@0.4.12", "Name": "slab", "Identifier": { "PURL": "pkg:cargo/slab@0.4.12", "UID": "e70aa3a8399bb697" }, "Version": "0.4.12", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "smallvec@1.15.1", "Name": "smallvec", "Identifier": { "PURL": "pkg:cargo/smallvec@1.15.1", "UID": "48eef906bd157e0f" }, "Version": "1.15.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "smawk@0.3.2", "Name": "smawk", "Identifier": { "PURL": "pkg:cargo/smawk@0.3.2", "UID": "fb6ab2a8bbbdb7e2" }, "Version": "0.3.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "socket2@0.6.3", "Name": "socket2", "Identifier": { "PURL": "pkg:cargo/socket2@0.6.3", "UID": "f975f4421072ef80" }, "Version": "0.6.3", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "spdx@0.10.9", "Name": "spdx", "Identifier": { "PURL": "pkg:cargo/spdx@0.10.9", "UID": "8fa4703a778a90f3" }, "Version": "0.10.9", "DependsOn": [ "smallvec@1.15.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "spdx@0.13.4", "Name": "spdx", "Identifier": { "PURL": "pkg:cargo/spdx@0.13.4", "UID": "6d7edfe985d2d9f2" }, "Version": "0.13.4", "DependsOn": [ "smallvec@1.15.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "spin@0.9.8", "Name": "spin", "Identifier": { "PURL": "pkg:cargo/spin@0.9.8", "UID": "f39c941fe0768f7" }, "Version": "0.9.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "spki@0.7.3", "Name": "spki", "Identifier": { "PURL": "pkg:cargo/spki@0.7.3", "UID": "871e4756f5f2aa62" }, "Version": "0.7.3", "DependsOn": [ "base64ct@1.8.3", "der@0.7.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "stable_deref_trait@1.2.1", "Name": "stable_deref_trait", "Identifier": { "PURL": "pkg:cargo/stable_deref_trait@1.2.1", "UID": "1f026959693ad531" }, "Version": "1.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "strsim@0.11.1", "Name": "strsim", "Identifier": { "PURL": "pkg:cargo/strsim@0.11.1", "UID": "2441658df0087891" }, "Version": "0.11.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "strum@0.26.3", "Name": "strum", "Identifier": { "PURL": "pkg:cargo/strum@0.26.3", "UID": "65428694a8d45d02" }, "Version": "0.26.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "subtle@2.6.1", "Name": "subtle", "Identifier": { "PURL": "pkg:cargo/subtle@2.6.1", "UID": "e70788a2b80d439f" }, "Version": "2.6.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-color@3.0.2", "Name": "supports-color", "Identifier": { "PURL": "pkg:cargo/supports-color@3.0.2", "UID": "ed873d8ceac7d2df" }, "Version": "3.0.2", "DependsOn": [ "is_ci@1.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-hyperlinks@3.2.0", "Name": "supports-hyperlinks", "Identifier": { "PURL": "pkg:cargo/supports-hyperlinks@3.2.0", "UID": "faf222a8a141a6db" }, "Version": "3.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-unicode@3.0.0", "Name": "supports-unicode", "Identifier": { "PURL": "pkg:cargo/supports-unicode@3.0.0", "UID": "37900ccfdd3b33b6" }, "Version": "3.0.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "syn@2.0.117", "Name": "syn", "Identifier": { "PURL": "pkg:cargo/syn@2.0.117", "UID": "2d1a41286d80f774" }, "Version": "2.0.117", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "unicode-ident@1.0.24" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "sync_wrapper@1.0.2", "Name": "sync_wrapper", "Identifier": { "PURL": "pkg:cargo/sync_wrapper@1.0.2", "UID": "ab65b6bb9b58ed4f" }, "Version": "1.0.2", "DependsOn": [ "futures-core@0.3.32" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "synstructure@0.13.2", "Name": "synstructure", "Identifier": { "PURL": "pkg:cargo/synstructure@0.13.2", "UID": "44596428469ec541" }, "Version": "0.13.2", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tar@0.4.45", "Name": "tar", "Identifier": { "PURL": "pkg:cargo/tar@0.4.45", "UID": "fb240df2d0da4585" }, "Version": "0.4.45", "DependsOn": [ "filetime@0.2.27", "libc@0.2.183", "xattr@1.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "target-lexicon@0.13.5", "Name": "target-lexicon", "Identifier": { "PURL": "pkg:cargo/target-lexicon@0.13.5", "UID": "c331bb285111e03a" }, "Version": "0.13.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "temp-env@0.3.6", "Name": "temp-env", "Identifier": { "PURL": "pkg:cargo/temp-env@0.3.6", "UID": "11c8fd67d6b011fc" }, "Version": "0.3.6", "DependsOn": [ "futures@0.3.32", "parking_lot@0.12.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tempfile@3.27.0", "Name": "tempfile", "Identifier": { "PURL": "pkg:cargo/tempfile@3.27.0", "UID": "a9db7126e9aa065d" }, "Version": "3.27.0", "DependsOn": [ "fastrand@2.3.0", "getrandom@0.4.1", "once_cell@1.21.4", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "terminal_size@0.4.3", "Name": "terminal_size", "Identifier": { "PURL": "pkg:cargo/terminal_size@0.4.3", "UID": "cc4a1b369ffc937d" }, "Version": "0.4.3", "DependsOn": [ "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "termtree@0.5.1", "Name": "termtree", "Identifier": { "PURL": "pkg:cargo/termtree@0.5.1", "UID": "f59afd7a2c7f3a21" }, "Version": "0.5.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "textwrap@0.16.2", "Name": "textwrap", "Identifier": { "PURL": "pkg:cargo/textwrap@0.16.2", "UID": "d91f35ce8d5ea8bb" }, "Version": "0.16.2", "DependsOn": [ "smawk@0.3.2", "unicode-linebreak@0.1.5", "unicode-width@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "thiserror@1.0.69", "Name": "thiserror", "Identifier": { "PURL": "pkg:cargo/thiserror@1.0.69", "UID": "6198ef97bc4e9346" }, "Version": "1.0.69", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "thiserror@2.0.18", "Name": "thiserror", "Identifier": { "PURL": "pkg:cargo/thiserror@2.0.18", "UID": "b5806ac9bad2e282" }, "Version": "2.0.18", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "thread_local@1.1.9", "Name": "thread_local", "Identifier": { "PURL": "pkg:cargo/thread_local@1.1.9", "UID": "71233f1d4e20cd0a" }, "Version": "1.1.9", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tikv-jemalloc-sys@0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "Name": "tikv-jemalloc-sys", "Identifier": { "PURL": "pkg:cargo/tikv-jemalloc-sys@0.6.1%2B5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "UID": "e42b499b5c3d8676" }, "Version": "0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tikv-jemallocator@0.6.1", "Name": "tikv-jemallocator", "Identifier": { "PURL": "pkg:cargo/tikv-jemallocator@0.6.1", "UID": "e7d1c84f80d10ea" }, "Version": "0.6.1", "DependsOn": [ "libc@0.2.183", "tikv-jemalloc-sys@0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "time@0.3.47", "Name": "time", "Identifier": { "PURL": "pkg:cargo/time@0.3.47", "UID": "6693c4711506d18d" }, "Version": "0.3.47", "DependsOn": [ "deranged@0.5.8", "itoa@1.0.17", "num-conv@0.2.0", "powerfmt@0.2.0", "serde_core@1.0.228", "time-core@0.1.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "time-core@0.1.8", "Name": "time-core", "Identifier": { "PURL": "pkg:cargo/time-core@0.1.8", "UID": "8d86f26e11edd6a5" }, "Version": "0.1.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinystr@0.8.2", "Name": "tinystr", "Identifier": { "PURL": "pkg:cargo/tinystr@0.8.2", "UID": "4256958321305a6" }, "Version": "0.8.2", "DependsOn": [ "displaydoc@0.2.5", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinyvec@1.11.0", "Name": "tinyvec", "Identifier": { "PURL": "pkg:cargo/tinyvec@1.11.0", "UID": "ef90a4807f00dd4b" }, "Version": "1.11.0", "DependsOn": [ "tinyvec_macros@0.1.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinyvec_macros@0.1.1", "Name": "tinyvec_macros", "Identifier": { "PURL": "pkg:cargo/tinyvec_macros@0.1.1", "UID": "3cb88c68776c82d8" }, "Version": "0.1.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio@1.51.0", "Name": "tokio", "Identifier": { "PURL": "pkg:cargo/tokio@1.51.0", "UID": "79f7b044784a88d8" }, "Version": "1.51.0", "DependsOn": [ "bytes@1.11.1", "libc@0.2.183", "mio@1.2.0", "parking_lot@0.12.5", "pin-project-lite@0.2.17", "signal-hook-registry@1.4.8", "socket2@0.6.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-rustls@0.26.4", "Name": "tokio-rustls", "Identifier": { "PURL": "pkg:cargo/tokio-rustls@0.26.4", "UID": "914340fab96d9687" }, "Version": "0.26.4", "DependsOn": [ "rustls@0.23.37", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-stream@0.1.18", "Name": "tokio-stream", "Identifier": { "PURL": "pkg:cargo/tokio-stream@0.1.18", "UID": "a61c52388d1a1c07" }, "Version": "0.1.18", "DependsOn": [ "futures-core@0.3.32", "pin-project-lite@0.2.17", "tokio@1.51.0", "tokio-util@0.7.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-util@0.7.18", "Name": "tokio-util", "Identifier": { "PURL": "pkg:cargo/tokio-util@0.7.18", "UID": "ed8956aa6b7fe25a" }, "Version": "0.7.18", "DependsOn": [ "bytes@1.11.1", "futures-core@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "pin-project-lite@0.2.17", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml@0.9.10+spec-1.1.0", "Name": "toml", "Identifier": { "PURL": "pkg:cargo/toml@0.9.10%2Bspec-1.1.0", "UID": "102ce2d5762cb5eb" }, "Version": "0.9.10+spec-1.1.0", "DependsOn": [ "foldhash@0.2.0", "indexmap@2.13.1", "serde_core@1.0.228", "serde_spanned@1.0.4", "toml_datetime@0.7.5+spec-1.1.0", "toml_parser@1.0.9+spec-1.1.0", "toml_writer@1.0.6+spec-1.1.0", "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_datetime@0.7.5+spec-1.1.0", "Name": "toml_datetime", "Identifier": { "PURL": "pkg:cargo/toml_datetime@0.7.5%2Bspec-1.1.0", "UID": "3fae234a38cfb9e6" }, "Version": "0.7.5+spec-1.1.0", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_datetime@1.0.0+spec-1.1.0", "Name": "toml_datetime", "Identifier": { "PURL": "pkg:cargo/toml_datetime@1.0.0%2Bspec-1.1.0", "UID": "33bba0c103a42687" }, "Version": "1.0.0+spec-1.1.0", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_edit@0.24.0+spec-1.1.0", "Name": "toml_edit", "Identifier": { "PURL": "pkg:cargo/toml_edit@0.24.0%2Bspec-1.1.0", "UID": "e645fafa1a099e18" }, "Version": "0.24.0+spec-1.1.0", "DependsOn": [ "indexmap@2.13.1", "serde_core@1.0.228", "serde_spanned@1.0.4", "toml_datetime@0.7.5+spec-1.1.0", "toml_parser@1.0.9+spec-1.1.0", "toml_writer@1.0.6+spec-1.1.0", "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_edit@0.25.4+spec-1.1.0", "Name": "toml_edit", "Identifier": { "PURL": "pkg:cargo/toml_edit@0.25.4%2Bspec-1.1.0", "UID": "e7602e1031d451fc" }, "Version": "0.25.4+spec-1.1.0", "DependsOn": [ "indexmap@2.13.1", "toml_datetime@1.0.0+spec-1.1.0", "toml_parser@1.0.9+spec-1.1.0", "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_parser@1.0.9+spec-1.1.0", "Name": "toml_parser", "Identifier": { "PURL": "pkg:cargo/toml_parser@1.0.9%2Bspec-1.1.0", "UID": "607b230c3ae59d4a" }, "Version": "1.0.9+spec-1.1.0", "DependsOn": [ "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_writer@1.0.6+spec-1.1.0", "Name": "toml_writer", "Identifier": { "PURL": "pkg:cargo/toml_writer@1.0.6%2Bspec-1.1.0", "UID": "9fe89489eb05cef6" }, "Version": "1.0.6+spec-1.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower@0.5.3", "Name": "tower", "Identifier": { "PURL": "pkg:cargo/tower@0.5.3", "UID": "e461888c067b912b" }, "Version": "0.5.3", "DependsOn": [ "futures-core@0.3.32", "futures-util@0.3.32", "pin-project-lite@0.2.17", "sync_wrapper@1.0.2", "tokio@1.51.0", "tower-layer@0.3.3", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-http@0.6.8", "Name": "tower-http", "Identifier": { "PURL": "pkg:cargo/tower-http@0.6.8", "UID": "1d28f02d662806ff" }, "Version": "0.6.8", "DependsOn": [ "async-compression@0.4.19", "bitflags@2.11.0", "bytes@1.11.1", "futures-core@0.3.32", "futures-util@0.3.32", "http@1.4.0", "http-body@1.0.1", "http-body-util@0.1.3", "iri-string@0.7.10", "pin-project-lite@0.2.17", "tokio@1.51.0", "tokio-util@0.7.18", "tower@0.5.3", "tower-layer@0.3.3", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-layer@0.3.3", "Name": "tower-layer", "Identifier": { "PURL": "pkg:cargo/tower-layer@0.3.3", "UID": "ab56996e82e57f9a" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-service@0.3.3", "Name": "tower-service", "Identifier": { "PURL": "pkg:cargo/tower-service@0.3.3", "UID": "604a9805e4f217ca" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing@0.1.44", "Name": "tracing", "Identifier": { "PURL": "pkg:cargo/tracing@0.1.44", "UID": "90ff59515e34f113" }, "Version": "0.1.44", "DependsOn": [ "pin-project-lite@0.2.17", "tracing-attributes@0.1.31", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-attributes@0.1.31", "Name": "tracing-attributes", "Identifier": { "PURL": "pkg:cargo/tracing-attributes@0.1.31", "UID": "37aa314ef7b98912" }, "Version": "0.1.31", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-core@0.1.36", "Name": "tracing-core", "Identifier": { "PURL": "pkg:cargo/tracing-core@0.1.36", "UID": "a1fb6895a9e4a969" }, "Version": "0.1.36", "DependsOn": [ "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-log@0.2.0", "Name": "tracing-log", "Identifier": { "PURL": "pkg:cargo/tracing-log@0.2.0", "UID": "e785a31afbcb1148" }, "Version": "0.2.0", "DependsOn": [ "log@0.4.29", "once_cell@1.21.4", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-serde@0.2.0", "Name": "tracing-serde", "Identifier": { "PURL": "pkg:cargo/tracing-serde@0.2.0", "UID": "f44dcfa083d476cf" }, "Version": "0.2.0", "DependsOn": [ "serde@1.0.228", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-subscriber@0.3.23", "Name": "tracing-subscriber", "Identifier": { "PURL": "pkg:cargo/tracing-subscriber@0.3.23", "UID": "bbadceba85aa65aa" }, "Version": "0.3.23", "DependsOn": [ "matchers@0.2.0", "nu-ansi-term@0.50.3", "once_cell@1.21.4", "regex-automata@0.4.14", "serde@1.0.228", "serde_json@1.0.149", "sharded-slab@0.1.7", "smallvec@1.15.1", "thread_local@1.1.9", "tracing@0.1.44", "tracing-core@0.1.36", "tracing-log@0.2.0", "tracing-serde@0.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-tree@0.4.1", "Name": "tracing-tree", "Identifier": { "PURL": "pkg:cargo/tracing-tree@0.4.1", "UID": "a7ed63f314886ec0" }, "Version": "0.4.1", "DependsOn": [ "nu-ansi-term@0.50.3", "tracing-core@0.1.36", "tracing-log@0.2.0", "tracing-subscriber@0.3.23" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "try-lock@0.2.5", "Name": "try-lock", "Identifier": { "PURL": "pkg:cargo/try-lock@0.2.5", "UID": "540849a4f5dcf6f9" }, "Version": "0.2.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "typed-path@0.12.3", "Name": "typed-path", "Identifier": { "PURL": "pkg:cargo/typed-path@0.12.3", "UID": "3464d8628733d32f" }, "Version": "0.12.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "typeid@1.0.3", "Name": "typeid", "Identifier": { "PURL": "pkg:cargo/typeid@1.0.3", "UID": "20275c9e25f60500" }, "Version": "1.0.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "typenum@1.19.0", "Name": "typenum", "Identifier": { "PURL": "pkg:cargo/typenum@1.19.0", "UID": "a2a3bbe8c65e7d84" }, "Version": "1.19.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ucd-trie@0.1.7", "Name": "ucd-trie", "Identifier": { "PURL": "pkg:cargo/ucd-trie@0.1.7", "UID": "b5a15d00a76d7071" }, "Version": "0.1.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicase@2.9.0", "Name": "unicase", "Identifier": { "PURL": "pkg:cargo/unicase@2.9.0", "UID": "75a2a78fcfe18285" }, "Version": "2.9.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-ident@1.0.24", "Name": "unicode-ident", "Identifier": { "PURL": "pkg:cargo/unicode-ident@1.0.24", "UID": "f96af0fe1e500855" }, "Version": "1.0.24", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-linebreak@0.1.5", "Name": "unicode-linebreak", "Identifier": { "PURL": "pkg:cargo/unicode-linebreak@0.1.5", "UID": "ffb00b334d196c33" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-width@0.1.14", "Name": "unicode-width", "Identifier": { "PURL": "pkg:cargo/unicode-width@0.1.14", "UID": "d14cffd09ac343a5" }, "Version": "0.1.14", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-width@0.2.2", "Name": "unicode-width", "Identifier": { "PURL": "pkg:cargo/unicode-width@0.2.2", "UID": "74690550563ba57d" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unit-prefix@0.5.2", "Name": "unit-prefix", "Identifier": { "PURL": "pkg:cargo/unit-prefix@0.5.2", "UID": "be440760d8a22388" }, "Version": "0.5.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unscanny@0.1.0", "Name": "unscanny", "Identifier": { "PURL": "pkg:cargo/unscanny@0.1.0", "UID": "8380a0b5436dc12a" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "untrusted@0.7.1", "Name": "untrusted", "Identifier": { "PURL": "pkg:cargo/untrusted@0.7.1", "UID": "3d372b0947b7d4f1" }, "Version": "0.7.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "untrusted@0.9.0", "Name": "untrusted", "Identifier": { "PURL": "pkg:cargo/untrusted@0.9.0", "UID": "ea86688a0ff283ce" }, "Version": "0.9.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "url@2.5.8", "Name": "url", "Identifier": { "PURL": "pkg:cargo/url@2.5.8", "UID": "a6607ee709e91e33" }, "Version": "2.5.8", "DependsOn": [ "form_urlencoded@1.2.2", "idna@1.1.0", "percent-encoding@2.3.2", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8-width@0.1.8", "Name": "utf8-width", "Identifier": { "PURL": "pkg:cargo/utf8-width@0.1.8", "UID": "897ad5568862341a" }, "Version": "0.1.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8_iter@1.0.4", "Name": "utf8_iter", "Identifier": { "PURL": "pkg:cargo/utf8_iter@1.0.4", "UID": "e1b2c47c0d6e63ef" }, "Version": "1.0.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8parse@0.2.2", "Name": "utf8parse", "Identifier": { "PURL": "pkg:cargo/utf8parse@0.2.2", "UID": "46c9936a36cc16d7" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uuid@1.23.0", "Name": "uuid", "Identifier": { "PURL": "pkg:cargo/uuid@1.23.0", "UID": "1286b1281de43df" }, "Version": "1.23.0", "DependsOn": [ "getrandom@0.4.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-audit@0.0.40", "Name": "uv-audit", "Identifier": { "PURL": "pkg:cargo/uv-audit@0.0.40", "UID": "f53037d2223db6bd" }, "Version": "0.0.40", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "clap@4.6.0", "futures@0.3.32", "jiff@0.2.23", "rustc-hash@2.1.2", "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "uv-configuration@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-auth@0.0.40", "Name": "uv-auth", "Identifier": { "PURL": "pkg:cargo/uv-auth@0.0.40", "UID": "f1c24ea297f87aea" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "arcstr@1.2.0", "astral-reqwest-middleware@0.5.1", "async-trait@0.1.89", "base64@0.22.1", "etcetera@0.11.0", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.0", "jiff@0.2.23", "percent-encoding@2.3.2", "reqsign@0.20.0", "reqwest@0.13.2", "rust-netrc@0.1.2", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "tokio@1.51.0", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-fs@0.0.40", "uv-keyring@0.0.40", "uv-once-map@0.0.40", "uv-preview@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40", "uv-state@0.0.40", "uv-static@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-bin-install@0.0.40", "Name": "uv-bin-install", "Identifier": { "PURL": "pkg:cargo/uv-bin-install@0.0.40", "UID": "fef376a019360c50" }, "Version": "0.0.40", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "fs-err@3.3.0", "futures@0.3.32", "jiff@0.2.23", "reqwest@0.13.2", "serde@1.0.228", "serde_json@1.0.149", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "url@2.5.8", "uv-cache@0.0.40", "uv-client@0.0.40", "uv-distribution-filename@0.0.40", "uv-extract@0.0.40", "uv-pep440@0.0.40", "uv-platform@0.0.40", "uv-redacted@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-build-backend@0.0.40", "Name": "uv-build-backend", "Identifier": { "PURL": "pkg:cargo/uv-build-backend@0.0.40", "UID": "a67226531ac98f4" }, "Version": "0.0.40", "DependsOn": [ "astral-version-ranges@0.1.4", "base64@0.22.1", "csv@1.4.0", "flate2@1.1.9", "fs-err@3.3.0", "globset@0.4.18", "indexmap@2.13.1", "itertools@0.14.0", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "sha2@0.10.9", "spdx@0.13.4", "tar@0.4.45", "tempfile@3.27.0", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "uv-distribution-filename@0.0.40", "uv-fs@0.0.40", "uv-globfilter@0.0.40", "uv-normalize@0.0.40", "uv-options-metadata@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-warnings@0.0.40", "walkdir@2.5.0", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-build-frontend@0.0.40", "Name": "uv-build-frontend", "Identifier": { "PURL": "pkg:cargo/uv-build-frontend@0.0.40", "UID": "7385b39b657a5da1" }, "Version": "0.0.40", "DependsOn": [ "anstream@1.0.0", "fs-err@3.3.0", "indoc@2.0.7", "itertools@0.14.0", "owo-colors@4.3.0", "regex@1.12.3", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.149", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "uv-auth@0.0.40", "uv-cache-key@0.0.40", "uv-configuration@0.0.40", "uv-distribution@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-static@0.0.40", "uv-types@0.0.40", "uv-virtualenv@0.0.40", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache@0.0.40", "Name": "uv-cache", "Identifier": { "PURL": "pkg:cargo/uv-cache@0.0.40", "UID": "5215ac2b382da876" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "fs-err@3.3.0", "nanoid@0.4.0", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "same-file@1.0.6", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tracing@0.1.44", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-dirs@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache-info@0.0.40", "Name": "uv-cache-info", "Identifier": { "PURL": "pkg:cargo/uv-cache-info@0.0.40", "UID": "d4b865aa044c7c30" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "globwalk@0.9.1", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "uv-fs@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache-key@0.0.40", "Name": "uv-cache-key", "Identifier": { "PURL": "pkg:cargo/uv-cache-key@0.0.40", "UID": "845361cb79095eb" }, "Version": "0.0.40", "DependsOn": [ "hex@0.4.3", "memchr@2.8.0", "percent-encoding@2.3.2", "seahash@4.1.0", "url@2.5.8", "uv-redacted@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cli@0.0.40", "Name": "uv-cli", "Identifier": { "PURL": "pkg:cargo/uv-cli@0.0.40", "UID": "2ccee4686032161a" }, "Version": "0.0.40", "DependsOn": [ "anstream@1.0.0", "anyhow@1.0.102", "clap@4.6.0", "clap_complete_command@0.6.1", "fs-err@3.3.0", "serde@1.0.228", "url@2.5.8", "uv-audit@0.0.40", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-configuration@0.0.40", "uv-distribution-types@0.0.40", "uv-install-wheel@0.0.40", "uv-normalize@0.0.40", "uv-pep508@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-resolver@0.0.40", "uv-settings@0.0.40", "uv-static@0.0.40", "uv-torch@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-client@0.0.40", "Name": "uv-client", "Identifier": { "PURL": "pkg:cargo/uv-client@0.0.40", "UID": "69d7d4580a17951a" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "astral-tl@0.7.11", "astral_async_http_range_reader@0.11.0", "astral_async_zip@0.0.17", "async-trait@0.1.89", "bytecheck@0.8.2", "fs-err@3.3.0", "futures@0.3.32", "h2@0.4.13", "html-escape@0.2.13", "http@1.4.0", "itertools@0.14.0", "jiff@0.2.23", "percent-encoding@2.3.2", "reqwest@0.13.2", "rkyv@0.8.15", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "rustls-native-certs@0.8.3", "rustls-pki-types@1.14.0", "rustls-webpki@0.103.10", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-cache-key@0.0.40", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-metadata@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40", "uv-static@0.0.40", "uv-torch@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "webpki-root-certs@1.0.6", "x509-parser@0.18.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-configuration@0.0.40", "Name": "uv-configuration", "Identifier": { "PURL": "pkg:cargo/uv-configuration@0.0.40", "UID": "68d697e2ccadf2d3" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "either@1.15.0", "fs-err@3.3.0", "rayon@1.11.0", "reqwest@0.13.2", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-distribution-types@0.0.40", "uv-git@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-console@0.0.40", "Name": "uv-console", "Identifier": { "PURL": "pkg:cargo/uv-console@0.0.40", "UID": "628ad840e1863e86" }, "Version": "0.0.40", "DependsOn": [ "console@0.16.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-dirs@0.0.40", "Name": "uv-dirs", "Identifier": { "PURL": "pkg:cargo/uv-dirs@0.0.40", "UID": "5e7cac7e6a450c87" }, "Version": "0.0.40", "DependsOn": [ "etcetera@0.11.0", "fs-err@3.3.0", "tracing@0.1.44", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-dispatch@0.0.40", "Name": "uv-dispatch", "Identifier": { "PURL": "pkg:cargo/uv-dispatch@0.0.40", "UID": "3073dbd62ca12dea" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "futures@0.3.32", "itertools@0.14.0", "rustc-hash@2.1.2", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "uv-build-backend@0.0.40", "uv-build-frontend@0.0.40", "uv-cache@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-git@0.0.40", "uv-install-wheel@0.0.40", "uv-installer@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-resolver@0.0.40", "uv-types@0.0.40", "uv-version@0.11.7", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution@0.0.40", "Name": "uv-distribution", "Identifier": { "PURL": "pkg:cargo/uv-distribution@0.0.40", "UID": "97c29edf251f02be" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "either@1.15.0", "fs-err@3.3.0", "futures@0.3.32", "nanoid@0.4.0", "owo-colors@4.3.0", "reqwest@0.13.2", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-extract@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-git@0.0.40", "uv-git-types@0.0.40", "uv-install-wheel@0.0.40", "uv-metadata@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-types@0.0.40", "uv-warnings@0.0.40", "uv-workspace@0.0.40", "walkdir@2.5.0", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution-filename@0.0.40", "Name": "uv-distribution-filename", "Identifier": { "PURL": "pkg:cargo/uv-distribution-filename@0.0.40", "UID": "f8df96209ba4208d" }, "Version": "0.0.40", "DependsOn": [ "memchr@2.8.0", "rkyv@0.8.15", "serde@1.0.228", "smallvec@1.15.1", "thiserror@2.0.18", "uv-cache-key@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-platform-tags@0.0.40", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution-types@0.0.40", "Name": "uv-distribution-types", "Identifier": { "PURL": "pkg:cargo/uv-distribution-types@0.0.40", "UID": "5ad8051206f6c41" }, "Version": "0.0.40", "DependsOn": [ "arcstr@1.2.0", "astral-version-ranges@0.1.4", "bitflags@2.11.0", "fs-err@3.3.0", "http@1.4.0", "itertools@0.14.0", "jiff@0.2.23", "owo-colors@4.3.0", "percent-encoding@2.3.2", "petgraph@0.8.3", "rkyv@0.8.15", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-distribution-filename@0.0.40", "uv-fs@0.0.40", "uv-git-types@0.0.40", "uv-install-wheel@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-extract@0.0.40", "Name": "uv-extract", "Identifier": { "PURL": "pkg:cargo/uv-extract@0.0.40", "UID": "b78a926a456f5ada" }, "Version": "0.0.40", "DependsOn": [ "astral-tokio-tar@0.6.0", "astral_async_zip@0.0.17", "async-compression@0.4.19", "blake2@0.10.6", "fs-err@3.3.0", "futures@0.3.32", "md-5@0.10.6", "rayon@1.11.0", "regex@1.12.3", "reqwest@0.13.2", "rustc-hash@2.1.2", "sha2@0.10.9", "tar@0.4.45", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-pypi-types@0.0.40", "uv-static@0.0.40", "uv-warnings@0.0.40", "xz2@0.1.7", "zip@8.1.0", "zstd@0.13.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-flags@0.0.40", "Name": "uv-flags", "Identifier": { "PURL": "pkg:cargo/uv-flags@0.0.40", "UID": "90ec079bedea650b" }, "Version": "0.0.40", "DependsOn": [ "bitflags@2.11.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-fs@0.0.40", "Name": "uv-fs", "Identifier": { "PURL": "pkg:cargo/uv-fs@0.0.40", "UID": "e7ab4b21ba0b5dd" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "dunce@1.0.5", "either@1.15.0", "encoding_rs_io@0.1.7", "fs-err@3.3.0", "path-slash@0.2.1", "percent-encoding@2.3.2", "reflink-copy@0.1.29", "rustc-hash@2.1.2", "rustix@1.1.4", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "uv-static@0.0.40", "uv-warnings@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-git@0.0.40", "Name": "uv-git", "Identifier": { "PURL": "pkg:cargo/uv-git@0.0.40", "UID": "c56b87738c65e88c" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "cargo-util@0.2.27", "dashmap@6.1.0", "fs-err@3.3.0", "owo-colors@4.3.0", "reqwest@0.13.2", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "uv-auth@0.0.40", "uv-cache-key@0.0.40", "uv-fs@0.0.40", "uv-git-types@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "which@8.0.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-git-types@0.0.40", "Name": "uv-git-types", "Identifier": { "PURL": "pkg:cargo/uv-git-types@0.0.40", "UID": "69b2abdd44d80045" }, "Version": "0.0.40", "DependsOn": [ "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-globfilter@0.0.40", "Name": "uv-globfilter", "Identifier": { "PURL": "pkg:cargo/uv-globfilter@0.0.40", "UID": "8a4ae7be3d1859ed" }, "Version": "0.0.40", "DependsOn": [ "globset@0.4.18", "owo-colors@4.3.0", "regex@1.12.3", "regex-automata@0.4.14", "thiserror@2.0.18", "tracing@0.1.44", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-install-wheel@0.0.40", "Name": "uv-install-wheel", "Identifier": { "PURL": "pkg:cargo/uv-install-wheel@0.0.40", "UID": "f28477544dd0e18a" }, "Version": "0.0.40", "DependsOn": [ "configparser@3.1.0", "csv@1.4.0", "data-encoding@2.10.0", "fs-err@3.3.0", "itertools@0.14.0", "mailparse@0.16.1", "owo-colors@4.3.0", "pathdiff@0.2.3", "regex@1.12.3", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.149", "sha2@0.10.9", "thiserror@2.0.18", "tracing@0.1.44", "uv-distribution-filename@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-shell@0.0.40", "uv-trampoline-builder@0.0.40", "uv-warnings@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-installer@0.0.40", "Name": "uv-installer", "Identifier": { "PURL": "pkg:cargo/uv-installer@0.0.40", "UID": "f3e4f8952b8186e8" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "async-channel@2.5.0", "fs-err@3.3.0", "futures@0.3.32", "owo-colors@4.3.0", "rayon@1.11.0", "rustc-hash@2.1.2", "same-file@1.0.6", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "url@2.5.8", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-configuration@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-git-types@0.0.40", "uv-install-wheel@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "uv-types@0.0.40", "uv-warnings@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-keyring@0.0.40", "Name": "uv-keyring", "Identifier": { "PURL": "pkg:cargo/uv-keyring@0.0.40", "UID": "d2258771a5999396" }, "Version": "0.0.40", "DependsOn": [ "async-trait@0.1.89", "secret-service@5.1.0", "thiserror@2.0.18", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-logging@0.0.40", "Name": "uv-logging", "Identifier": { "PURL": "pkg:cargo/uv-logging@0.0.40", "UID": "41e315871ea7adaa" }, "Version": "0.0.40", "DependsOn": [ "jiff@0.2.23", "owo-colors@4.3.0", "tracing@0.1.44", "tracing-subscriber@0.3.23" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-metadata@0.0.40", "Name": "uv-metadata", "Identifier": { "PURL": "pkg:cargo/uv-metadata@0.0.40", "UID": "bb5a2361a66c29f7" }, "Version": "0.0.40", "DependsOn": [ "astral_async_zip@0.0.17", "fs-err@3.3.0", "futures@0.3.32", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "uv-distribution-filename@0.0.40", "uv-normalize@0.0.40", "uv-pypi-types@0.0.40", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-normalize@0.0.40", "Name": "uv-normalize", "Identifier": { "PURL": "pkg:cargo/uv-normalize@0.0.40", "UID": "33d4b2e578cee948" }, "Version": "0.0.40", "DependsOn": [ "rkyv@0.8.15", "schemars@1.2.1", "serde@1.0.228", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-once-map@0.0.40", "Name": "uv-once-map", "Identifier": { "PURL": "pkg:cargo/uv-once-map@0.0.40", "UID": "5c533d916543c11c" }, "Version": "0.0.40", "DependsOn": [ "dashmap@6.1.0", "futures@0.3.32", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-options-metadata@0.0.40", "Name": "uv-options-metadata", "Identifier": { "PURL": "pkg:cargo/uv-options-metadata@0.0.40", "UID": "5473ef75d180aa34" }, "Version": "0.0.40", "DependsOn": [ "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pep440@0.0.40", "Name": "uv-pep440", "Identifier": { "PURL": "pkg:cargo/uv-pep440@0.0.40", "UID": "71e4beaf49167c31" }, "Version": "0.0.40", "DependsOn": [ "astral-version-ranges@0.1.4", "rkyv@0.8.15", "serde@1.0.228", "tracing@0.1.44", "unicode-width@0.2.2", "unscanny@0.1.0", "uv-cache-key@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pep508@0.0.40", "Name": "uv-pep508", "Identifier": { "PURL": "pkg:cargo/uv-pep508@0.0.40", "UID": "ed678a564416a95e" }, "Version": "0.0.40", "DependsOn": [ "arcstr@1.2.0", "astral-version-ranges@0.1.4", "boxcar@0.2.14", "indexmap@2.13.1", "itertools@0.14.0", "regex@1.12.3", "rkyv@0.8.15", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "smallvec@1.15.1", "temp-env@0.3.6", "thiserror@2.0.18", "unicode-width@0.2.2", "url@2.5.8", "uv-cache-key@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-redacted@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-performance-memory-allocator@0.0.40", "Name": "uv-performance-memory-allocator", "Identifier": { "PURL": "pkg:cargo/uv-performance-memory-allocator@0.0.40", "UID": "c77f44c6debe9e61" }, "Version": "0.0.40", "DependsOn": [ "tikv-jemallocator@0.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-platform@0.0.40", "Name": "uv-platform", "Identifier": { "PURL": "pkg:cargo/uv-platform@0.0.40", "UID": "7be4d5c4cc2d127c" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "goblin@0.10.5", "procfs@0.18.0", "regex@1.12.3", "rustix@1.1.4", "target-lexicon@0.13.5", "thiserror@2.0.18", "tracing@0.1.44", "uv-fs@0.0.40", "uv-platform-tags@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-platform-tags@0.0.40", "Name": "uv-platform-tags", "Identifier": { "PURL": "pkg:cargo/uv-platform-tags@0.0.40", "UID": "8167f0ce1184304f" }, "Version": "0.0.40", "DependsOn": [ "bitflags@2.11.0", "memchr@2.8.0", "rkyv@0.8.15", "rustc-hash@2.1.2", "serde@1.0.228", "thiserror@2.0.18", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-preview@0.0.40", "Name": "uv-preview", "Identifier": { "PURL": "pkg:cargo/uv-preview@0.0.40", "UID": "414df7b755889c8" }, "Version": "0.0.40", "DependsOn": [ "enumflags2@0.7.12", "itertools@0.14.0", "thiserror@2.0.18", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-publish@0.0.40", "Name": "uv-publish", "Identifier": { "PURL": "pkg:cargo/uv-publish@0.0.40", "UID": "57f6a085e5933b14" }, "Version": "0.0.40", "DependsOn": [ "ambient-id@0.0.11", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "astral-tokio-tar@0.6.0", "async-compression@0.4.19", "base64@0.22.1", "fs-err@3.3.0", "futures@0.3.32", "glob@0.3.3", "itertools@0.14.0", "reqwest@0.13.2", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-extract@0.0.40", "uv-fs@0.0.40", "uv-metadata@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "uv-warnings@0.0.40", "wiremock@0.6.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pypi-types@0.0.40", "Name": "uv-pypi-types", "Identifier": { "PURL": "pkg:cargo/uv-pypi-types@0.0.40", "UID": "a6a67936b1efa200" }, "Version": "0.0.40", "DependsOn": [ "hashbrown@0.16.1", "indexmap@2.13.1", "itertools@0.14.0", "jiff@0.2.23", "mailparse@0.16.1", "petgraph@0.8.3", "regex@1.12.3", "rkyv@0.8.15", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "thiserror@2.0.18", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-distribution-filename@0.0.40", "uv-git-types@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-python@0.0.40", "Name": "uv-python", "Identifier": { "PURL": "pkg:cargo/uv-python@0.0.40", "UID": "7f1f80d1fe58aa21" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "clap@4.6.0", "configparser@3.1.0", "dunce@1.0.5", "fs-err@3.3.0", "futures@0.3.32", "indexmap@2.13.1", "itertools@0.14.0", "owo-colors@4.3.0", "ref-cast@1.0.25", "regex@1.12.3", "reqwest@0.13.2", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "target-lexicon@0.13.5", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-client@0.0.40", "uv-dirs@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-extract@0.0.40", "uv-fs@0.0.40", "uv-install-wheel@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-state@0.0.40", "uv-static@0.0.40", "uv-trampoline-builder@0.0.40", "uv-warnings@0.0.40", "which@8.0.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-redacted@0.0.40", "Name": "uv-redacted", "Identifier": { "PURL": "pkg:cargo/uv-redacted@0.0.40", "UID": "e1172d19f9a78870" }, "Version": "0.0.40", "DependsOn": [ "ref-cast@1.0.25", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-requirements@0.0.40", "Name": "uv-requirements", "Identifier": { "PURL": "pkg:cargo/uv-requirements@0.0.40", "UID": "8f758574c2aaca32" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "configparser@3.1.0", "console@0.16.3", "fs-err@3.3.0", "futures@0.3.32", "rustc-hash@2.1.2", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-console@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-git@0.0.40", "uv-normalize@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-requirements-txt@0.0.40", "uv-resolver@0.0.40", "uv-scripts@0.0.40", "uv-types@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-requirements-txt@0.0.40", "Name": "uv-requirements-txt", "Identifier": { "PURL": "pkg:cargo/uv-requirements-txt@0.0.40", "UID": "803e3012ef78653a" }, "Version": "0.0.40", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "fs-err@3.3.0", "memchr@2.8.0", "reqwest@0.13.2", "rustc-hash@2.1.2", "thiserror@2.0.18", "tracing@0.1.44", "unscanny@0.1.0", "url@2.5.8", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-resolver@0.0.40", "Name": "uv-resolver", "Identifier": { "PURL": "pkg:cargo/uv-resolver@0.0.40", "UID": "6630dc2834870a8a" }, "Version": "0.0.40", "DependsOn": [ "arcstr@1.2.0", "astral-pubgrub@0.3.3", "clap@4.6.0", "cyclonedx-bom@0.8.0", "dashmap@6.1.0", "either@1.15.0", "fs-err@3.3.0", "futures@0.3.32", "hashbrown@0.16.1", "indexmap@2.13.1", "itertools@0.14.0", "jiff@0.2.23", "owo-colors@4.3.0", "percent-encoding@2.3.2", "petgraph@0.8.3", "rkyv@0.8.15", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "smallvec@1.15.1", "textwrap@0.16.2", "thiserror@2.0.18", "tokio@1.51.0", "tokio-stream@0.1.18", "toml@0.9.10+spec-1.1.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-console@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-git@0.0.40", "uv-git-types@0.0.40", "uv-metadata@0.0.40", "uv-normalize@0.0.40", "uv-once-map@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-requirements-txt@0.0.40", "uv-small-str@0.0.40", "uv-static@0.0.40", "uv-torch@0.0.40", "uv-types@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-scripts@0.0.40", "Name": "uv-scripts", "Identifier": { "PURL": "pkg:cargo/uv-scripts@0.0.40", "UID": "9430cab9351d032e" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "indoc@2.0.7", "memchr@2.8.0", "regex@1.12.3", "serde@1.0.228", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-configuration@0.0.40", "uv-distribution-types@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-settings@0.0.40", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-settings@0.0.40", "Name": "uv-settings", "Identifier": { "PURL": "pkg:cargo/uv-settings@0.0.40", "UID": "6155d6430f189612" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "fs-err@3.3.0", "schemars@1.2.1", "serde@1.0.228", "textwrap@0.16.2", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-info@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-dirs@0.0.40", "uv-distribution-types@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-install-wheel@0.0.40", "uv-normalize@0.0.40", "uv-options-metadata@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-resolver@0.0.40", "uv-static@0.0.40", "uv-torch@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-shell@0.0.40", "Name": "uv-shell", "Identifier": { "PURL": "pkg:cargo/uv-shell@0.0.40", "UID": "cb9e1ddbf532130" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "fs-err@3.3.0", "nix@0.31.2", "same-file@1.0.6", "tracing@0.1.44", "uv-fs@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-small-str@0.0.40", "Name": "uv-small-str", "Identifier": { "PURL": "pkg:cargo/uv-small-str@0.0.40", "UID": "5412f9e074b5cd02" }, "Version": "0.0.40", "DependsOn": [ "arcstr@1.2.0", "rkyv@0.8.15", "schemars@1.2.1", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-state@0.0.40", "Name": "uv-state", "Identifier": { "PURL": "pkg:cargo/uv-state@0.0.40", "UID": "27dfb67ea4c001f9" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "tempfile@3.27.0", "uv-dirs@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-static@0.0.40", "Name": "uv-static", "Identifier": { "PURL": "pkg:cargo/uv-static@0.0.40", "UID": "f78ad117f903ffdf" }, "Version": "0.0.40", "DependsOn": [ "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-test@0.0.40", "Name": "uv-test", "Identifier": { "PURL": "pkg:cargo/uv-test@0.0.40", "UID": "1a14394e98178fb" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "assert_cmd@2.2.0", "assert_fs@1.1.3", "base64@0.22.1", "fs-err@3.3.0", "futures@0.3.32", "ignore@0.4.25", "indoc@2.0.7", "insta@1.47.2", "itertools@0.14.0", "predicates@3.1.4", "regex@1.12.3", "reqwest@0.13.2", "similar@2.7.0", "tempfile@3.27.0", "tokio@1.51.0", "uv-cache@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-fs@0.0.40", "uv-preview@0.0.40", "uv-python@0.0.40", "uv-static@0.0.40", "uv-version@0.11.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-tool@0.0.40", "Name": "uv-tool", "Identifier": { "PURL": "pkg:cargo/uv-tool@0.0.40", "UID": "6b03c2992f52d69c" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "owo-colors@4.3.0", "pathdiff@0.2.3", "serde@1.0.228", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "uv-cache@0.0.40", "uv-dirs@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-install-wheel@0.0.40", "uv-installer@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-settings@0.0.40", "uv-state@0.0.40", "uv-static@0.0.40", "uv-virtualenv@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-torch@0.0.40", "Name": "uv-torch", "Identifier": { "PURL": "pkg:cargo/uv-torch@0.0.40", "UID": "dde86fbe6092ba48" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "either@1.15.0", "fs-err@3.3.0", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-distribution-types@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-platform-tags@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-trampoline-builder@0.0.40", "Name": "uv-trampoline-builder", "Identifier": { "PURL": "pkg:cargo/uv-trampoline-builder@0.0.40", "UID": "480a424335f59574" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "fs-err@3.3.0", "goblin@0.10.5", "tempfile@3.27.0", "thiserror@2.0.18", "uv-fs@0.0.40", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-types@0.0.40", "Name": "uv-types", "Identifier": { "PURL": "pkg:cargo/uv-types@0.0.40", "UID": "563a61c63c1a5aa" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "dashmap@6.1.0", "rustc-hash@2.1.2", "thiserror@2.0.18", "uv-cache@0.0.40", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-git@0.0.40", "uv-normalize@0.0.40", "uv-once-map@0.0.40", "uv-pep440@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-unix@0.0.40", "Name": "uv-unix", "Identifier": { "PURL": "pkg:cargo/uv-unix@0.0.40", "UID": "5e5e5f696891dd8a" }, "Version": "0.0.40", "DependsOn": [ "nix@0.31.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-version@0.11.7", "Name": "uv-version", "Identifier": { "PURL": "pkg:cargo/uv-version@0.11.7", "UID": "b34620f1ba514605" }, "Version": "0.11.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-virtualenv@0.0.40", "Name": "uv-virtualenv", "Identifier": { "PURL": "pkg:cargo/uv-virtualenv@0.0.40", "UID": "74482ce0e36f14e9" }, "Version": "0.0.40", "DependsOn": [ "console@0.16.3", "fs-err@3.3.0", "itertools@0.14.0", "owo-colors@4.3.0", "pathdiff@0.2.3", "thiserror@2.0.18", "tracing@0.1.44", "uv-console@0.0.40", "uv-fs@0.0.40", "uv-platform-tags@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-shell@0.0.40", "uv-version@0.11.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-warnings@0.0.40", "Name": "uv-warnings", "Identifier": { "PURL": "pkg:cargo/uv-warnings@0.0.40", "UID": "da3bfd1180e6c40d" }, "Version": "0.0.40", "DependsOn": [ "anstream@1.0.0", "owo-colors@4.3.0", "rustc-hash@2.1.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-workspace@0.0.40", "Name": "uv-workspace", "Identifier": { "PURL": "pkg:cargo/uv-workspace@0.0.40", "UID": "d081495dcc72372a" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "fs-err@3.3.0", "glob@0.3.3", "ignore@0.4.25", "itertools@0.14.0", "owo-colors@4.3.0", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "tokio@1.51.0", "toml@0.9.10+spec-1.1.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "uv-build-backend@0.0.40", "uv-cache-key@0.0.40", "uv-configuration@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-git-types@0.0.40", "uv-normalize@0.0.40", "uv-options-metadata@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "wait-timeout@0.2.1", "Name": "wait-timeout", "Identifier": { "PURL": "pkg:cargo/wait-timeout@0.2.1", "UID": "74d4928691844913" }, "Version": "0.2.1", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "walkdir@2.5.0", "Name": "walkdir", "Identifier": { "PURL": "pkg:cargo/walkdir@2.5.0", "UID": "79453bd4ad9ef45c" }, "Version": "2.5.0", "DependsOn": [ "same-file@1.0.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "want@0.3.1", "Name": "want", "Identifier": { "PURL": "pkg:cargo/want@0.3.1", "UID": "85a4d01d246eb721" }, "Version": "0.3.1", "DependsOn": [ "try-lock@0.2.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "webpki-root-certs@1.0.6", "Name": "webpki-root-certs", "Identifier": { "PURL": "pkg:cargo/webpki-root-certs@1.0.6", "UID": "a6a953ebd354090c" }, "Version": "1.0.6", "DependsOn": [ "rustls-pki-types@1.14.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "which@8.0.2", "Name": "which", "Identifier": { "PURL": "pkg:cargo/which@8.0.2", "UID": "3b3cdea3a8a5cf0a" }, "Version": "8.0.2", "DependsOn": [ "libc@0.2.183", "regex@1.12.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "winnow@0.7.15", "Name": "winnow", "Identifier": { "PURL": "pkg:cargo/winnow@0.7.15", "UID": "bd86d7dbe5b25e47" }, "Version": "0.7.15", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "wiremock@0.6.5", "Name": "wiremock", "Identifier": { "PURL": "pkg:cargo/wiremock@0.6.5", "UID": "6b3d7fdc591fb292" }, "Version": "0.6.5", "DependsOn": [ "assert-json-diff@2.0.2", "base64@0.22.1", "deadpool@0.12.3", "futures@0.3.32", "http@1.4.0", "http-body-util@0.1.3", "hyper@1.9.0", "hyper-util@0.1.20", "log@0.4.29", "once_cell@1.21.4", "regex@1.12.3", "serde@1.0.228", "serde_json@1.0.149", "tokio@1.51.0", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "writeable@0.6.2", "Name": "writeable", "Identifier": { "PURL": "pkg:cargo/writeable@0.6.2", "UID": "cb8e490c3b3d7410" }, "Version": "0.6.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "x509-parser@0.18.1", "Name": "x509-parser", "Identifier": { "PURL": "pkg:cargo/x509-parser@0.18.1", "UID": "6ccd7b766acd1d9f" }, "Version": "0.18.1", "DependsOn": [ "asn1-rs@0.7.1", "data-encoding@2.10.0", "der-parser@10.0.0", "lazy_static@1.5.0", "nom@7.1.3", "oid-registry@0.8.1", "ring@0.17.14", "rusticata-macros@4.1.0", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "xattr@1.6.1", "Name": "xattr", "Identifier": { "PURL": "pkg:cargo/xattr@1.6.1", "UID": "435463d9fc5f42f9" }, "Version": "1.6.1", "DependsOn": [ "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "xml-rs@0.8.28", "Name": "xml-rs", "Identifier": { "PURL": "pkg:cargo/xml-rs@0.8.28", "UID": "8310673c83576b59" }, "Version": "0.8.28", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "xz2@0.1.7", "Name": "xz2", "Identifier": { "PURL": "pkg:cargo/xz2@0.1.7", "UID": "456f0d1bf463ce25" }, "Version": "0.1.7", "DependsOn": [ "lzma-sys@0.1.20" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "yoke@0.8.1", "Name": "yoke", "Identifier": { "PURL": "pkg:cargo/yoke@0.8.1", "UID": "7311d1c2b01fa3d9" }, "Version": "0.8.1", "DependsOn": [ "stable_deref_trait@1.2.1", "yoke-derive@0.8.1", "zerofrom@0.1.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "yoke-derive@0.8.1", "Name": "yoke-derive", "Identifier": { "PURL": "pkg:cargo/yoke-derive@0.8.1", "UID": "e45ed6e3609854af" }, "Version": "0.8.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "synstructure@0.13.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus@5.14.0", "Name": "zbus", "Identifier": { "PURL": "pkg:cargo/zbus@5.14.0", "UID": "8b1dfb6ab5b9e867" }, "Version": "5.14.0", "DependsOn": [ "async-broadcast@0.7.2", "async-recursion@1.1.1", "async-trait@0.1.89", "enumflags2@0.7.12", "event-listener@5.4.1", "futures-core@0.3.32", "futures-lite@2.6.1", "hex@0.4.3", "libc@0.2.183", "ordered-stream@0.2.0", "rustix@1.1.4", "serde@1.0.228", "serde_repr@0.1.20", "tokio@1.51.0", "tracing@0.1.44", "uuid@1.23.0", "winnow@0.7.15", "zbus_macros@5.14.0", "zbus_names@4.3.1", "zvariant@5.10.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus_macros@5.14.0", "Name": "zbus_macros", "Identifier": { "PURL": "pkg:cargo/zbus_macros@5.14.0", "UID": "21f8f3fa5ba3b445" }, "Version": "5.14.0", "DependsOn": [ "proc-macro-crate@3.5.0", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "zbus_names@4.3.1", "zvariant@5.10.0", "zvariant_utils@3.3.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus_names@4.3.1", "Name": "zbus_names", "Identifier": { "PURL": "pkg:cargo/zbus_names@4.3.1", "UID": "e25d36042710faff" }, "Version": "4.3.1", "DependsOn": [ "serde@1.0.228", "winnow@0.7.15", "zvariant@5.10.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerocopy@0.8.42", "Name": "zerocopy", "Identifier": { "PURL": "pkg:cargo/zerocopy@0.8.42", "UID": "32027ff41e5d2031" }, "Version": "0.8.42", "DependsOn": [ "zerocopy-derive@0.8.42" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerocopy-derive@0.8.42", "Name": "zerocopy-derive", "Identifier": { "PURL": "pkg:cargo/zerocopy-derive@0.8.42", "UID": "8469a58b86107fd8" }, "Version": "0.8.42", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerofrom@0.1.6", "Name": "zerofrom", "Identifier": { "PURL": "pkg:cargo/zerofrom@0.1.6", "UID": "47eefea2da1c873f" }, "Version": "0.1.6", "DependsOn": [ "zerofrom-derive@0.1.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerofrom-derive@0.1.6", "Name": "zerofrom-derive", "Identifier": { "PURL": "pkg:cargo/zerofrom-derive@0.1.6", "UID": "23fa7502c05e20e5" }, "Version": "0.1.6", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "synstructure@0.13.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zeroize@1.8.2", "Name": "zeroize", "Identifier": { "PURL": "pkg:cargo/zeroize@1.8.2", "UID": "ed62cd266ab5f5" }, "Version": "1.8.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerotrie@0.2.3", "Name": "zerotrie", "Identifier": { "PURL": "pkg:cargo/zerotrie@0.2.3", "UID": "596160387dfb4dcc" }, "Version": "0.2.3", "DependsOn": [ "displaydoc@0.2.5", "yoke@0.8.1", "zerofrom@0.1.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerovec@0.11.5", "Name": "zerovec", "Identifier": { "PURL": "pkg:cargo/zerovec@0.11.5", "UID": "bacf537f9858a1c9" }, "Version": "0.11.5", "DependsOn": [ "yoke@0.8.1", "zerofrom@0.1.6", "zerovec-derive@0.11.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerovec-derive@0.11.2", "Name": "zerovec-derive", "Identifier": { "PURL": "pkg:cargo/zerovec-derive@0.11.2", "UID": "401c91ee40f9e883" }, "Version": "0.11.2", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zip@8.1.0", "Name": "zip", "Identifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "c5715016cd96a80" }, "Version": "8.1.0", "DependsOn": [ "bzip2@0.6.1", "crc32fast@1.5.0", "flate2@1.1.9", "indexmap@2.13.1", "lzma-rust2@0.16.2", "memchr@2.8.0", "typed-path@0.12.3", "zopfli@0.8.3", "zstd@0.13.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zlib-rs@0.6.3", "Name": "zlib-rs", "Identifier": { "PURL": "pkg:cargo/zlib-rs@0.6.3", "UID": "8b6ce3aea613bda5" }, "Version": "0.6.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zmij@1.0.21", "Name": "zmij", "Identifier": { "PURL": "pkg:cargo/zmij@1.0.21", "UID": "20296a75eca1a2ae" }, "Version": "1.0.21", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zopfli@0.8.3", "Name": "zopfli", "Identifier": { "PURL": "pkg:cargo/zopfli@0.8.3", "UID": "85ea56eb8c9ac9ae" }, "Version": "0.8.3", "DependsOn": [ "bumpalo@3.20.2", "crc32fast@1.5.0", "log@0.4.29", "simd-adler32@0.3.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd@0.13.3", "Name": "zstd", "Identifier": { "PURL": "pkg:cargo/zstd@0.13.3", "UID": "eaf121bd0eac8b8d" }, "Version": "0.13.3", "DependsOn": [ "zstd-safe@7.2.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd-safe@7.2.4", "Name": "zstd-safe", "Identifier": { "PURL": "pkg:cargo/zstd-safe@7.2.4", "UID": "89bd5dc92786822b" }, "Version": "7.2.4", "DependsOn": [ "zstd-sys@2.0.16+zstd.1.5.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd-sys@2.0.16+zstd.1.5.7", "Name": "zstd-sys", "Identifier": { "PURL": "pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7", "UID": "fc7c754a19edb0e7" }, "Version": "2.0.16+zstd.1.5.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant@5.10.0", "Name": "zvariant", "Identifier": { "PURL": "pkg:cargo/zvariant@5.10.0", "UID": "b6388a6e7ce9f8e2" }, "Version": "5.10.0", "DependsOn": [ "endi@1.1.1", "enumflags2@0.7.12", "serde@1.0.228", "winnow@0.7.15", "zvariant_derive@5.10.0", "zvariant_utils@3.3.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant_derive@5.10.0", "Name": "zvariant_derive", "Identifier": { "PURL": "pkg:cargo/zvariant_derive@5.10.0", "UID": "ef72f187e46aaebd" }, "Version": "5.10.0", "DependsOn": [ "proc-macro-crate@3.5.0", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "zvariant_utils@3.3.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant_utils@3.3.0", "Name": "zvariant_utils", "Identifier": { "PURL": "pkg:cargo/zvariant_utils@3.3.0", "UID": "9d32f45e6a074b73" }, "Version": "3.3.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "serde@1.0.228", "syn@2.0.117", "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" } ], "Vulnerabilities": [ { "VulnerabilityID": "GHSA-4w2j-m93h-cj5j", "PkgID": "quinn-proto@0.11.14", "PkgName": "quinn-proto", "PkgIdentifier": { "PURL": "pkg:cargo/quinn-proto@0.11.14", "UID": "baf26ec0baf32304" }, "InstalledVersion": "0.11.14", "FixedVersion": "0.11.15", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-4w2j-m93h-cj5j", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:73e20dca101e324d3fc60683ddbeb9a4560d6bc2785172b702784f1f7613db13", "Title": "Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly", "Description": "## Summary\n\nThe `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/quinn-rs/quinn", "https://github.com/quinn-rs/quinn/commit/fed0321a9a672819662caab37f5662f1ad91308e", "https://github.com/quinn-rs/quinn/pull/2694", "https://github.com/quinn-rs/quinn/releases/tag/quinn-proto-0.11.15", "https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j", "https://rustsec.org/advisories/RUSTSEC-2026-0185.html" ], "PublishedDate": "2026-07-24T14:07:54Z", "LastModifiedDate": "2026-07-24T14:07:54Z" }, { "VulnerabilityID": "GHSA-82j2-j2ch-gfr8", "PkgID": "rustls-webpki@0.103.10", "PkgName": "rustls-webpki", "PkgIdentifier": { "PURL": "pkg:cargo/rustls-webpki@0.103.10", "UID": "7663477542b3a20f" }, "InstalledVersion": "0.103.10", "FixedVersion": "0.103.13, 0.104.0-alpha.7", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-82j2-j2ch-gfr8", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:39c00a0420901463bb1d12d1f581953fdc6069f30178d085df78025f034a2042", "Title": "rustls-webpki: Denial of service via panic on malformed CRL BIT STRING", "Description": "### Summary\n\n`bit_string_flags()` in `src/der.rs` panics with an index-out-of-bounds when given a BIT STRING whose content is exactly `[0x00]` (one byte: zero padding bits, zero data bytes). This is reachable through the public API `BorrowedCertRevocationList::from_der()` via the `issuingDistributionPoint` CRL extension.\n\n**Precondition**: CRL checking is opt-in in rustls-webpki. This vulnerability affects only applications that explicitly pass `RevocationOptions` to `verify_for_usage()` and load CRL bytes from a source the attacker can influence. The default rustls configuration (no `RevocationOptions`) is not affected.\n\n\u003e **AI disclosure**: This report was prepared with AI assistance (Claude). The vulnerability was discovered by differential fuzzing against a formally-verified Rust oracle. All technical claims have been independently verified against the live source code before submission.\n\n### Details\n`bit_string_flags()` in `src/der.rs` reads the content of named-bit BIT\nSTRINGs (KeyUsage, ReasonFlags, etc.). Its input guard:\n\n```rust\nif padding_bits \u003e 7 || (raw_bits.is_empty() \u0026\u0026 padding_bits != 0) {\n return Err(Error::BadDer);\n}\nlet last_byte = raw_bits[raw_bits.len() - 1]; // ← crash\n```\nmisses the case `padding_bits == 0 \u0026\u0026 raw_bits.is_empty()`.\nWhen a BIT STRING has content `[0x00]` (one padding-bits byte set to zero, no data bytes):\n- padding_bits = 0x00 — passes the \u003e 7 check ✓\n- raw_bits = [] — passes is_empty() \u0026\u0026 != 0 check ✓ (because 0 != 0 is false)\n- raw_bits.len() - 1 = 0usize - 1 = underflow → usize::MAX\n- raw_bits[usize::MAX] → panic\n\n\nDebug: thread 'main' panicked: attempt to subtract with overflow\nRelease: thread 'main' panicked: index out of bounds: the len is 0\n but the index is 18446744073709551615\n\n### PoC\nCargo.toml:\n```\n[dependencies]\nrustls-webpki = \"0.102.8\" # also reproduces on 0.103.12\n```\nsrc/main.rs:\n```\nfn main() {\n let crl: \u0026[u8] = \u0026[\n 0x30, 0x65, 0x30, 0x50, 0x02, 0x01, 0x01, 0x30, 0x0d, 0x06, 0x09,\n 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b, 0x05, 0x00,\n 0x30, 0x0c, 0x31, 0x0a, 0x30, 0x08, 0x06, 0x03, 0x55, 0x04, 0x03,\n 0x13, 0x01, 0x41, 0x17, 0x0d, 0x32, 0x30, 0x30, 0x31, 0x30, 0x31,\n 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a, 0x17, 0x0d, 0x32, 0x31,\n 0x30, 0x31, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a,\n 0xa0, 0x10, 0x30, 0x0e, 0x30, 0x0c, 0x06, 0x03, 0x55, 0x1d, 0x1c,\n 0x04, 0x05, 0x30, 0x03, 0x83, 0x01, 0x00, 0x30, 0x0d, 0x06, 0x09,\n 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b, 0x05, 0x00,\n 0x03, 0x02, 0x00, 0x00,\n ];\n // Panics — never returns\n let _ = webpki::BorrowedCertRevocationList::from_der(crl);\n}\n```\noutput:\n```\nthread 'main' panicked at src/der.rs:...\nindex out of bounds: the len is 0 but the index is 18446744073709551615\n```\n#### Trigger\n```\na0 10 -- cRLExtensions [0] EXPLICIT\n 30 0e -- SEQUENCE OF Extension\n 30 0c -- Extension SEQUENCE\n 06 03 55 1d 1c -- OID 2.5.29.28 (id-ce-issuingDistributionPoint)\n 04 05 -- OCTET STRING (extnValue)\n 30 03 -- IssuingDistributionPoint SEQUENCE\n 83 01 00 -- [3] onlySomeReasons: BIT STRING, len=1, content=0x00\n -- padding_bits=0, data=[] ← TRIGGER\n```\n\n\n### Impact\n- Who is affected: \nApplications that (1) use rustls-webpki with CRL\nrevocation checking explicitly enabled via RevocationOptions, and (2)\nload CRL bytes from a source an attacker can influence.\n- Attack paths:\n - mTLS server (most realistic): An attacker obtains any certificate from a CA that permits custom CDP URLs — common in enterprise PKI. They set the CDP to a server they control, serve the 103-byte crafted CRL, and connect to the target. The server fetches the attacker's CRL during the handshake and panics. No MITM required.\n - TLS client with server-cert CRL checking: An attacker who can MITM an HTTP CRL distribution point (ARP/DNS poisoning on a local network) serves the crafted CRL in place of the legitimate one.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/rustls/webpki", "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8", "https://rustsec.org/advisories/RUSTSEC-2026-0104.html" ], "PublishedDate": "2026-04-24T16:20:17Z", "LastModifiedDate": "2026-04-24T16:20:17Z" }, { "VulnerabilityID": "CVE-2026-115905", "VendorIDs": [ "GHSA-m665-v7pm-7grj" ], "PkgID": "zip@8.1.0", "PkgName": "zip", "PkgIdentifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "c5715016cd96a80" }, "InstalledVersion": "8.1.0", "FixedVersion": "9.0.5", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115905", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:10f27318a18325592508c7545d4a203bdb61dc10b1830cd39e4ec58c93d58882", "Title": "zip2: zip: Critical Parser Differential \u0026 Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite \u0026 RCE", "Description": "zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames without reconciling the duplicate metadata in src/read/stream.rs. A crafted archive can therefore appear benign to a component that inspects the central directory but cause a streaming extractor to write a different attacker-selected path and content, potentially overwriting files used by a downstream service. This issue is fixed in version 9.0.5.", "Severity": "CRITICAL", "CweIDs": [ "CWE-20", "CWE-436" ], "VendorSeverity": { "ghsa": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L", "V40Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115905", "https://github.com/zip-rs/zip2", "https://github.com/zip-rs/zip2/commit/8068ab480ccf8daa7411424e365fcdbe6d09443e", "https://github.com/zip-rs/zip2/releases/tag/v9.0.5", "https://github.com/zip-rs/zip2/security/advisories/GHSA-m665-v7pm-7grj", "https://nvd.nist.gov/vuln/detail/CVE-2026-115905", "https://www.cve.org/CVERecord?id=CVE-2026-115905" ], "PublishedDate": "2026-10-26T17:17:17.823Z", "LastModifiedDate": "2026-11-02T18:18:38.683Z" }, { "VulnerabilityID": "CVE-2026-115907", "VendorIDs": [ "GHSA-9hj8-73fh-9963" ], "PkgID": "zip@8.1.0", "PkgName": "zip", "PkgIdentifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "c5715016cd96a80" }, "InstalledVersion": "8.1.0", "FixedVersion": "9.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115907", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:9bc2bde1e627c9a491ce82775f6c68fd9edeca59388a904932b2e11f9bb9ece1", "Title": "zip: zip: Denial of Service via unbounded memory preallocation", "Description": "zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can reserve output capacity from an attacker-controlled ZIP64 uncompressed size before validating the compressed stream. The ShrinkDecoder path in src/legacy/shrink.rs can panic with a capacity overflow during ZipArchive::extract, and the Reduce and Implode decoders contain the same unbounded preallocation pattern. An unhandled panic can terminate an archive-processing service. This issue is fixed in version 9.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-789" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115907", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1152227", "https://github.com/cveproject/cvelistv5/tree/main/cves/2026/115xxx/cve-2026-115907.json", "https://github.com/zip-rs/zip2", "https://github.com/zip-rs/zip2/commit/8b4991288b79ad11cce201c2d785d5baa795bd3e", "https://github.com/zip-rs/zip2/pull/991", "https://github.com/zip-rs/zip2/releases/tag/v9.0.0", "https://github.com/zip-rs/zip2/security/advisories/GHSA-9hj8-73fh-9963", "https://github.com/zip-rs/zip2/security/advisories/ghsa-9hj8-73fh-9963", "https://nvd.nist.gov/vuln/detail/CVE-2026-115907", "https://nvd.nist.gov/vuln/detail/cve-2026-115907", "https://security-tracker.debian.org/tracker/cve-2026-115907", "https://www.cve.org/CVERecord?id=CVE-2026-115907" ], "PublishedDate": "2026-10-26T17:17:18.147Z", "LastModifiedDate": "2026-10-30T15:16:45.727Z" }, { "VulnerabilityID": "CVE-2026-115908", "VendorIDs": [ "GHSA-hjqx-j4rw-g7xv" ], "PkgID": "zip@8.1.0", "PkgName": "zip", "PkgIdentifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "c5715016cd96a80" }, "InstalledVersion": "8.1.0", "FixedVersion": "9.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115908", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:ad785de3bc6cbde35bf02f109a75337d6324dc3cbf9fe579e5c484bd647b3333", "Title": "zip: zip: Arbitrary file overwrite via improper symbolic link validation during extraction", "Description": "zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extract_unwrapped_root_dir use safe_prepare_path in src/read/zipfile.rs and simplified_components in src/path.rs to validate symbolic link targets with a lexical prefix comparison rather than resolving each intermediate link. An attacker who knows or can guess the absolute extraction destination can create a chain whose apparent target remains under the destination while an intermediate symlink resolves outside it, allowing attacker-controlled files to be created or overwritten with the extracting process's privileges. On Windows, discarded drive and UNC prefixes can permit a single-link escape when the process has SeCreateSymbolicLinkPrivilege, such as through administrator rights or Developer Mode. This regression is distinct from CVE-2025-29787. This issue is fixed in version 9.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-59", "CWE-61" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115908", "https://github.com/cveproject/cvelistv5/tree/main/cves/2026/115xxx/cve-2026-115908.json", "https://github.com/zip-rs/zip2", "https://github.com/zip-rs/zip2/commit/09c030eab56e8db8fb3c1c33f554407b30bad8fa", "https://github.com/zip-rs/zip2/releases/tag/v9.0.0", "https://github.com/zip-rs/zip2/security/advisories/GHSA-hjqx-j4rw-g7xv", "https://github.com/zip-rs/zip2/security/advisories/ghsa-hjqx-j4rw-g7xv", "https://nvd.nist.gov/vuln/detail/CVE-2026-115908", "https://nvd.nist.gov/vuln/detail/cve-2026-115908", "https://www.cve.org/CVERecord?id=CVE-2026-115908" ], "PublishedDate": "2026-10-26T17:17:18.293Z", "LastModifiedDate": "2026-10-26T20:17:51.557Z" }, { "VulnerabilityID": "CVE-2026-115909", "VendorIDs": [ "GHSA-q7v9-x93c-xqv3" ], "PkgID": "zip@8.1.0", "PkgName": "zip", "PkgIdentifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "c5715016cd96a80" }, "InstalledVersion": "8.1.0", "FixedVersion": "9.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115909", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:5637997c169ffc686efb1fdc0ee07d32b9bcf4184e72ccdf9669d7c36bd465e4", "Title": "zip: zip: Denial of Service via excessive memory allocation in symbolic link extraction", "Description": "zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipArchive::extract in src/read/mod.rs calls Vec::with_capacity for a symbolic link target using the attacker-controlled ZIP64 uncompressed_size before reading entry data. A small archive can request an impossible capacity, causing the infallible allocation path to abort the process before the entry is validated. The failure cannot be contained with catch_unwind or a worker thread, allowing repeated denial of service in archive-processing applications. This issue is fixed in version 9.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-789" ], "VendorSeverity": { "ghsa": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115909", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1152227", "https://github.com/cveproject/cvelistv5/tree/main/cves/2026/115xxx/cve-2026-115909.json", "https://github.com/zip-rs/zip2", "https://github.com/zip-rs/zip2/commit/a543a1fc8f3f3eef36f27bb137230295284cdb98", "https://github.com/zip-rs/zip2/pull/984", "https://github.com/zip-rs/zip2/releases/tag/v9.0.0", "https://github.com/zip-rs/zip2/security/advisories/GHSA-q7v9-x93c-xqv3", "https://github.com/zip-rs/zip2/security/advisories/ghsa-q7v9-x93c-xqv3", "https://nvd.nist.gov/vuln/detail/CVE-2026-115909", "https://nvd.nist.gov/vuln/detail/cve-2026-115909", "https://security-tracker.debian.org/tracker/cve-2026-115909", "https://www.cve.org/CVERecord?id=CVE-2026-115909" ], "PublishedDate": "2026-10-26T17:17:18.45Z", "LastModifiedDate": "2026-10-26T20:17:51.68Z" } ] }, { "Target": "usr/local/bin/uvx", "Class": "lang-pkgs", "Type": "rustbinary", "Packages": [ { "ID": "uv@0.11.7", "Name": "uv", "Identifier": { "PURL": "pkg:cargo/uv@0.11.7", "UID": "7952a643a1b30418" }, "Version": "0.11.7", "Relationship": "root", "DependsOn": [ "anstream@1.0.0", "anyhow@1.0.102", "astral-version-ranges@0.1.4", "axoupdater@0.10.0", "clap@4.6.0", "console@0.16.3", "ctrlc@3.5.2", "diskus@0.9.0", "dotenvy@0.15.7", "dunce@1.0.5", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.0", "indexmap@2.13.1", "indicatif@0.18.4", "indoc@2.0.7", "itertools@0.14.0", "jiff@0.2.23", "miette@7.6.0", "nix@0.31.2", "open@5.3.3", "owo-colors@4.3.0", "petgraph@0.8.3", "reqwest@0.13.2", "rkyv@0.8.15", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.149", "tempfile@3.27.0", "textwrap@0.16.2", "thiserror@2.0.18", "tokio@1.51.0", "toml@0.9.10+spec-1.1.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "tracing-subscriber@0.3.23", "tracing-tree@0.4.1", "unicode-width@0.2.2", "url@2.5.8", "uuid@1.23.0", "uv-audit@0.0.40", "uv-auth@0.0.40", "uv-bin-install@0.0.40", "uv-build-backend@0.0.40", "uv-build-frontend@0.0.40", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-cli@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-console@0.0.40", "uv-dispatch@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-extract@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-git@0.0.40", "uv-git-types@0.0.40", "uv-install-wheel@0.0.40", "uv-installer@0.0.40", "uv-logging@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-performance-memory-allocator@0.0.40", "uv-platform@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-publish@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-requirements@0.0.40", "uv-requirements-txt@0.0.40", "uv-resolver@0.0.40", "uv-scripts@0.0.40", "uv-settings@0.0.40", "uv-shell@0.0.40", "uv-static@0.0.40", "uv-test@0.0.40", "uv-tool@0.0.40", "uv-torch@0.0.40", "uv-trampoline-builder@0.0.40", "uv-types@0.0.40", "uv-unix@0.0.40", "uv-version@0.11.7", "uv-virtualenv@0.0.40", "uv-warnings@0.0.40", "uv-workspace@0.0.40", "walkdir@2.5.0", "which@8.0.2", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "adler2@2.0.1", "Name": "adler2", "Identifier": { "PURL": "pkg:cargo/adler2@2.0.1", "UID": "9c533833fe991dac" }, "Version": "2.0.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "aes@0.8.4", "Name": "aes", "Identifier": { "PURL": "pkg:cargo/aes@0.8.4", "UID": "8ef5f1a213d913f5" }, "Version": "0.8.4", "DependsOn": [ "cfg-if@1.0.4", "cipher@0.4.4", "cpufeatures@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "aho-corasick@1.1.4", "Name": "aho-corasick", "Identifier": { "PURL": "pkg:cargo/aho-corasick@1.1.4", "UID": "35551e3f84b25fbd" }, "Version": "1.1.4", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "allocator-api2@0.2.21", "Name": "allocator-api2", "Identifier": { "PURL": "pkg:cargo/allocator-api2@0.2.21", "UID": "2182677b6e60c0d0" }, "Version": "0.2.21", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ambient-id@0.0.11", "Name": "ambient-id", "Identifier": { "PURL": "pkg:cargo/ambient-id@0.0.11", "UID": "571d1b1bd4ac5a7c" }, "Version": "0.0.11", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "reqwest@0.13.2", "secrecy@0.10.3", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstream@1.0.0", "Name": "anstream", "Identifier": { "PURL": "pkg:cargo/anstream@1.0.0", "UID": "39fa61d4fae0e4bd" }, "Version": "1.0.0", "DependsOn": [ "anstyle@1.0.14", "anstyle-parse@1.0.0", "anstyle-query@1.1.5", "colorchoice@1.0.5", "is_terminal_polyfill@1.70.2", "utf8parse@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle@1.0.14", "Name": "anstyle", "Identifier": { "PURL": "pkg:cargo/anstyle@1.0.14", "UID": "8a9dbb356ab66ac4" }, "Version": "1.0.14", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle-parse@1.0.0", "Name": "anstyle-parse", "Identifier": { "PURL": "pkg:cargo/anstyle-parse@1.0.0", "UID": "43d2f579b67a2063" }, "Version": "1.0.0", "DependsOn": [ "utf8parse@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anstyle-query@1.1.5", "Name": "anstyle-query", "Identifier": { "PURL": "pkg:cargo/anstyle-query@1.1.5", "UID": "8c2c4a2b1f241a23" }, "Version": "1.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "anyhow@1.0.102", "Name": "anyhow", "Identifier": { "PURL": "pkg:cargo/anyhow@1.0.102", "UID": "af34edd451e19b4b" }, "Version": "1.0.102", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "arcstr@1.2.0", "Name": "arcstr", "Identifier": { "PURL": "pkg:cargo/arcstr@1.2.0", "UID": "f482264519b8e0f0" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "asn1-rs@0.7.1", "Name": "asn1-rs", "Identifier": { "PURL": "pkg:cargo/asn1-rs@0.7.1", "UID": "f690df24c76dd184" }, "Version": "0.7.1", "DependsOn": [ "asn1-rs-impl@0.2.0", "displaydoc@0.2.5", "nom@7.1.3", "num-traits@0.2.19", "rusticata-macros@4.1.0", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "asn1-rs-impl@0.2.0", "Name": "asn1-rs-impl", "Identifier": { "PURL": "pkg:cargo/asn1-rs-impl@0.2.0", "UID": "e435d4d7d9940fa2" }, "Version": "0.2.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert-json-diff@2.0.2", "Name": "assert-json-diff", "Identifier": { "PURL": "pkg:cargo/assert-json-diff@2.0.2", "UID": "4669a70028f7017f" }, "Version": "2.0.2", "DependsOn": [ "serde@1.0.228", "serde_json@1.0.149" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert_cmd@2.2.0", "Name": "assert_cmd", "Identifier": { "PURL": "pkg:cargo/assert_cmd@2.2.0", "UID": "68184ed0da0453f5" }, "Version": "2.2.0", "DependsOn": [ "anstyle@1.0.14", "bstr@1.12.1", "predicates@3.1.4", "predicates-core@1.0.10", "predicates-tree@1.0.13", "wait-timeout@0.2.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "assert_fs@1.1.3", "Name": "assert_fs", "Identifier": { "PURL": "pkg:cargo/assert_fs@1.1.3", "UID": "d7eef4f20ed646f3" }, "Version": "1.1.3", "DependsOn": [ "anstyle@1.0.14", "doc-comment@0.3.4", "globwalk@0.9.1", "predicates@3.1.4", "predicates-core@1.0.10", "predicates-tree@1.0.13", "tempfile@3.27.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-pubgrub@0.3.3", "Name": "astral-pubgrub", "Identifier": { "PURL": "pkg:cargo/astral-pubgrub@0.3.3", "UID": "7567bb5350b80e12" }, "Version": "0.3.3", "DependsOn": [ "astral-version-ranges@0.1.4", "indexmap@2.13.1", "log@0.4.29", "priority-queue@2.7.0", "rustc-hash@2.1.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-reqwest-middleware@0.5.1", "Name": "astral-reqwest-middleware", "Identifier": { "PURL": "pkg:cargo/astral-reqwest-middleware@0.5.1", "UID": "574e5122527e559a" }, "Version": "0.5.1", "DependsOn": [ "anyhow@1.0.102", "async-trait@0.1.89", "http@1.4.0", "reqwest@0.13.2", "serde@1.0.228", "thiserror@2.0.18", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-reqwest-retry@0.9.1", "Name": "astral-reqwest-retry", "Identifier": { "PURL": "pkg:cargo/astral-reqwest-retry@0.9.1", "UID": "609ded6eaad7e70e" }, "Version": "0.9.1", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "async-trait@0.1.89", "futures@0.3.32", "http@1.4.0", "hyper@1.9.0", "reqwest@0.13.2", "retry-policies@0.5.1", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-tl@0.7.11", "Name": "astral-tl", "Identifier": { "PURL": "pkg:cargo/astral-tl@0.7.11", "UID": "1ae06407bb82c5d0" }, "Version": "0.7.11", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-tokio-tar@0.6.0", "Name": "astral-tokio-tar", "Identifier": { "PURL": "pkg:cargo/astral-tokio-tar@0.6.0", "UID": "4a6b08f052a0e59a" }, "Version": "0.6.0", "DependsOn": [ "filetime@0.2.27", "futures-core@0.3.32", "libc@0.2.183", "portable-atomic@1.13.1", "rustc-hash@2.1.2", "tokio@1.51.0", "tokio-stream@0.1.18", "xattr@1.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral-version-ranges@0.1.4", "Name": "astral-version-ranges", "Identifier": { "PURL": "pkg:cargo/astral-version-ranges@0.1.4", "UID": "1a7e98f0919de76e" }, "Version": "0.1.4", "DependsOn": [ "smallvec@1.15.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral_async_http_range_reader@0.11.0", "Name": "astral_async_http_range_reader", "Identifier": { "PURL": "pkg:cargo/astral_async_http_range_reader@0.11.0", "UID": "d7925e647bcd8e2" }, "Version": "0.11.0", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "futures@0.3.32", "http-content-range@0.2.4", "itertools@0.14.0", "memmap2@0.9.10", "reqwest@0.13.2", "thiserror@2.0.18", "tokio@1.51.0", "tokio-stream@0.1.18", "tokio-util@0.7.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "astral_async_zip@0.0.17", "Name": "astral_async_zip", "Identifier": { "PURL": "pkg:cargo/astral_async_zip@0.0.17", "UID": "de0eff77262dcdc1" }, "Version": "0.0.17", "DependsOn": [ "async-compression@0.4.19", "crc32fast@1.5.0", "futures-lite@2.6.1", "pin-project@1.1.11", "thiserror@1.0.69", "tokio@1.51.0", "tokio-util@0.7.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-broadcast@0.7.2", "Name": "async-broadcast", "Identifier": { "PURL": "pkg:cargo/async-broadcast@0.7.2", "UID": "13c2f6f6d40985b" }, "Version": "0.7.2", "DependsOn": [ "event-listener@5.4.1", "event-listener-strategy@0.5.4", "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-channel@2.5.0", "Name": "async-channel", "Identifier": { "PURL": "pkg:cargo/async-channel@2.5.0", "UID": "b7aafd489902a33d" }, "Version": "2.5.0", "DependsOn": [ "concurrent-queue@2.5.0", "event-listener-strategy@0.5.4", "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-compression@0.4.19", "Name": "async-compression", "Identifier": { "PURL": "pkg:cargo/async-compression@0.4.19", "UID": "f6fe87db10a80b9d" }, "Version": "0.4.19", "DependsOn": [ "bzip2@0.5.2", "flate2@1.1.9", "futures-core@0.3.32", "futures-io@0.3.32", "memchr@2.8.0", "pin-project-lite@0.2.17", "tokio@1.51.0", "xz2@0.1.7", "zstd@0.13.3", "zstd-safe@7.2.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-recursion@1.1.1", "Name": "async-recursion", "Identifier": { "PURL": "pkg:cargo/async-recursion@1.1.1", "UID": "4fa046681b6e7f53" }, "Version": "1.1.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "async-trait@0.1.89", "Name": "async-trait", "Identifier": { "PURL": "pkg:cargo/async-trait@0.1.89", "UID": "b799cdc54a88ac94" }, "Version": "0.1.89", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "atomic-waker@1.1.2", "Name": "atomic-waker", "Identifier": { "PURL": "pkg:cargo/atomic-waker@1.1.2", "UID": "806ec00228293f75" }, "Version": "1.1.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "aws-lc-rs@1.16.2", "Name": "aws-lc-rs", "Identifier": { "PURL": "pkg:cargo/aws-lc-rs@1.16.2", "UID": "f2736ef3be12edb" }, "Version": "1.16.2", "DependsOn": [ "aws-lc-sys@0.39.0", "untrusted@0.7.1", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "aws-lc-sys@0.39.0", "Name": "aws-lc-sys", "Identifier": { "PURL": "pkg:cargo/aws-lc-sys@0.39.0", "UID": "c7b026703a5bb00" }, "Version": "0.39.0", "DependsOn": [ "dunce@1.0.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoasset@2.0.1", "Name": "axoasset", "Identifier": { "PURL": "pkg:cargo/axoasset@2.0.1", "UID": "57de20bba1fdb0fc" }, "Version": "2.0.1", "DependsOn": [ "camino@1.2.2", "image@0.25.10", "lazy_static@1.5.0", "miette@7.6.0", "mime@0.3.17", "reqwest@0.13.2", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "url@2.5.8", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoprocess@0.2.1", "Name": "axoprocess", "Identifier": { "PURL": "pkg:cargo/axoprocess@0.2.1", "UID": "66259f359debb369" }, "Version": "0.2.1", "DependsOn": [ "miette@7.6.0", "thiserror@2.0.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "axotag@0.3.0", "Name": "axotag", "Identifier": { "PURL": "pkg:cargo/axotag@0.3.0", "UID": "4368022aa8911adf" }, "Version": "0.3.0", "DependsOn": [ "miette@7.6.0", "semver@1.0.27", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "axoupdater@0.10.0", "Name": "axoupdater", "Identifier": { "PURL": "pkg:cargo/axoupdater@0.10.0", "UID": "b27487e467eb59d5" }, "Version": "0.10.0", "DependsOn": [ "axoasset@2.0.1", "axoprocess@0.2.1", "axotag@0.3.0", "camino@1.2.2", "homedir@0.3.6", "miette@7.6.0", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64@0.21.7", "Name": "base64", "Identifier": { "PURL": "pkg:cargo/base64@0.21.7", "UID": "4b2b5117a2506635" }, "Version": "0.21.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64@0.22.1", "Name": "base64", "Identifier": { "PURL": "pkg:cargo/base64@0.22.1", "UID": "4ede071fec25f9d2" }, "Version": "0.22.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "base64ct@1.8.3", "Name": "base64ct", "Identifier": { "PURL": "pkg:cargo/base64ct@1.8.3", "UID": "9e9ed34dacf6a5cd" }, "Version": "1.8.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bitflags@1.3.2", "Name": "bitflags", "Identifier": { "PURL": "pkg:cargo/bitflags@1.3.2", "UID": "3e10da6189055a82" }, "Version": "1.3.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bitflags@2.11.0", "Name": "bitflags", "Identifier": { "PURL": "pkg:cargo/bitflags@2.11.0", "UID": "973766689c20ab74" }, "Version": "2.11.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "blake2@0.10.6", "Name": "blake2", "Identifier": { "PURL": "pkg:cargo/blake2@0.10.6", "UID": "ea91956859948aa1" }, "Version": "0.10.6", "DependsOn": [ "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "block-buffer@0.10.4", "Name": "block-buffer", "Identifier": { "PURL": "pkg:cargo/block-buffer@0.10.4", "UID": "c88e1ccf7ba716d4" }, "Version": "0.10.4", "DependsOn": [ "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "block-padding@0.3.3", "Name": "block-padding", "Identifier": { "PURL": "pkg:cargo/block-padding@0.3.3", "UID": "d9818e1fb3231ace" }, "Version": "0.3.3", "DependsOn": [ "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "boxcar@0.2.14", "Name": "boxcar", "Identifier": { "PURL": "pkg:cargo/boxcar@0.2.14", "UID": "cb255b4653f399e2" }, "Version": "0.2.14", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bstr@1.12.1", "Name": "bstr", "Identifier": { "PURL": "pkg:cargo/bstr@1.12.1", "UID": "b626841b45eb0fb7" }, "Version": "1.12.1", "DependsOn": [ "memchr@2.8.0", "regex-automata@0.4.14", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bumpalo@3.20.2", "Name": "bumpalo", "Identifier": { "PURL": "pkg:cargo/bumpalo@3.20.2", "UID": "79ae76539e4d147f" }, "Version": "3.20.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytecheck@0.8.2", "Name": "bytecheck", "Identifier": { "PURL": "pkg:cargo/bytecheck@0.8.2", "UID": "f36fced85ea1bbf3" }, "Version": "0.8.2", "DependsOn": [ "ptr_meta@0.3.1", "rancor@0.1.1", "simdutf8@0.1.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytemuck@1.25.0", "Name": "bytemuck", "Identifier": { "PURL": "pkg:cargo/bytemuck@1.25.0", "UID": "5b1f9dced0cedd5b" }, "Version": "1.25.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "byteorder-lite@0.1.0", "Name": "byteorder-lite", "Identifier": { "PURL": "pkg:cargo/byteorder-lite@0.1.0", "UID": "39794c29626cb4b" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bytes@1.11.1", "Name": "bytes", "Identifier": { "PURL": "pkg:cargo/bytes@1.11.1", "UID": "d593d2e585f85d9b" }, "Version": "1.11.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2@0.5.2", "Name": "bzip2", "Identifier": { "PURL": "pkg:cargo/bzip2@0.5.2", "UID": "934dea5b83bcdad6" }, "Version": "0.5.2", "DependsOn": [ "bzip2-sys@0.1.13+1.0.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2@0.6.1", "Name": "bzip2", "Identifier": { "PURL": "pkg:cargo/bzip2@0.6.1", "UID": "2b8d69f649dbf918" }, "Version": "0.6.1", "DependsOn": [ "libbz2-rs-sys@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "bzip2-sys@0.1.13+1.0.8", "Name": "bzip2-sys", "Identifier": { "PURL": "pkg:cargo/bzip2-sys@0.1.13%2B1.0.8", "UID": "24e624d7e9235480" }, "Version": "0.1.13+1.0.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "camino@1.2.2", "Name": "camino", "Identifier": { "PURL": "pkg:cargo/camino@1.2.2", "UID": "5947b2683315685f" }, "Version": "1.2.2", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cargo-util@0.2.27", "Name": "cargo-util", "Identifier": { "PURL": "pkg:cargo/cargo-util@0.2.27", "UID": "9737cc7b90beb020" }, "Version": "0.2.27", "DependsOn": [ "anyhow@1.0.102", "filetime@0.2.27", "hex@0.4.3", "ignore@0.4.25", "jobserver@0.1.34", "libc@0.2.183", "same-file@1.0.6", "sha2@0.10.9", "shell-escape@0.1.5", "tempfile@3.27.0", "tracing@0.1.44", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cbc@0.1.2", "Name": "cbc", "Identifier": { "PURL": "pkg:cargo/cbc@0.1.2", "UID": "ec1695c51398d43b" }, "Version": "0.1.2", "DependsOn": [ "cipher@0.4.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cfg-if@1.0.4", "Name": "cfg-if", "Identifier": { "PURL": "pkg:cargo/cfg-if@1.0.4", "UID": "8383a4cbb22ef699" }, "Version": "1.0.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "charset@0.1.5", "Name": "charset", "Identifier": { "PURL": "pkg:cargo/charset@0.1.5", "UID": "b73675f5ddddf36f" }, "Version": "0.1.5", "DependsOn": [ "base64@0.22.1", "encoding_rs@0.8.35" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cipher@0.4.4", "Name": "cipher", "Identifier": { "PURL": "pkg:cargo/cipher@0.4.4", "UID": "625989ca1fb0276d" }, "Version": "0.4.4", "DependsOn": [ "crypto-common@0.1.7", "inout@0.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap@4.6.0", "Name": "clap", "Identifier": { "PURL": "pkg:cargo/clap@4.6.0", "UID": "99556e075d4abe69" }, "Version": "4.6.0", "DependsOn": [ "clap_builder@4.6.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_builder@4.6.0", "Name": "clap_builder", "Identifier": { "PURL": "pkg:cargo/clap_builder@4.6.0", "UID": "aafa66e88cb07308" }, "Version": "4.6.0", "DependsOn": [ "anstream@1.0.0", "anstyle@1.0.14", "clap_lex@1.1.0", "strsim@0.11.1", "terminal_size@0.4.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete@4.6.0", "Name": "clap_complete", "Identifier": { "PURL": "pkg:cargo/clap_complete@4.6.0", "UID": "195b559aec2b86eb" }, "Version": "4.6.0", "DependsOn": [ "clap@4.6.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete_command@0.6.1", "Name": "clap_complete_command", "Identifier": { "PURL": "pkg:cargo/clap_complete_command@0.6.1", "UID": "1e43b21d6e219349" }, "Version": "0.6.1", "DependsOn": [ "clap@4.6.0", "clap_complete@4.6.0", "clap_complete_nushell@4.6.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_complete_nushell@4.6.0", "Name": "clap_complete_nushell", "Identifier": { "PURL": "pkg:cargo/clap_complete_nushell@4.6.0", "UID": "51a6e9eb7d6f42ab" }, "Version": "4.6.0", "DependsOn": [ "clap@4.6.0", "clap_complete@4.6.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "clap_lex@1.1.0", "Name": "clap_lex", "Identifier": { "PURL": "pkg:cargo/clap_lex@1.1.0", "UID": "c22253212afa8b74" }, "Version": "1.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "colorchoice@1.0.5", "Name": "colorchoice", "Identifier": { "PURL": "pkg:cargo/colorchoice@1.0.5", "UID": "aa1f3919b0798d1f" }, "Version": "1.0.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "concurrent-queue@2.5.0", "Name": "concurrent-queue", "Identifier": { "PURL": "pkg:cargo/concurrent-queue@2.5.0", "UID": "aa89b2471766548f" }, "Version": "2.5.0", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "configparser@3.1.0", "Name": "configparser", "Identifier": { "PURL": "pkg:cargo/configparser@3.1.0", "UID": "d29e6fb1a69563b3" }, "Version": "3.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "console@0.16.3", "Name": "console", "Identifier": { "PURL": "pkg:cargo/console@0.16.3", "UID": "ac835bd29cc3f81f" }, "Version": "0.16.3", "DependsOn": [ "libc@0.2.183", "unicode-width@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "const-oid@0.9.6", "Name": "const-oid", "Identifier": { "PURL": "pkg:cargo/const-oid@0.9.6", "UID": "d4fec7948cc4a911" }, "Version": "0.9.6", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "const-random@0.1.18", "Name": "const-random", "Identifier": { "PURL": "pkg:cargo/const-random@0.1.18", "UID": "e9ab5f9c33b2ed2" }, "Version": "0.1.18", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cpufeatures@0.2.17", "Name": "cpufeatures", "Identifier": { "PURL": "pkg:cargo/cpufeatures@0.2.17", "UID": "db376604a2e34237" }, "Version": "0.2.17", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crc32fast@1.5.0", "Name": "crc32fast", "Identifier": { "PURL": "pkg:cargo/crc32fast@1.5.0", "UID": "15ca5d9911fa5d77" }, "Version": "1.5.0", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-channel@0.5.15", "Name": "crossbeam-channel", "Identifier": { "PURL": "pkg:cargo/crossbeam-channel@0.5.15", "UID": "771300df6e4e4c45" }, "Version": "0.5.15", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-deque@0.8.6", "Name": "crossbeam-deque", "Identifier": { "PURL": "pkg:cargo/crossbeam-deque@0.8.6", "UID": "f09abca9481aa539" }, "Version": "0.8.6", "DependsOn": [ "crossbeam-epoch@0.9.18", "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-epoch@0.9.18", "Name": "crossbeam-epoch", "Identifier": { "PURL": "pkg:cargo/crossbeam-epoch@0.9.18", "UID": "c5d59c3a389a3dd6" }, "Version": "0.9.18", "DependsOn": [ "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crossbeam-utils@0.8.21", "Name": "crossbeam-utils", "Identifier": { "PURL": "pkg:cargo/crossbeam-utils@0.8.21", "UID": "44c32186cd2f4713" }, "Version": "0.8.21", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "crypto-common@0.1.7", "Name": "crypto-common", "Identifier": { "PURL": "pkg:cargo/crypto-common@0.1.7", "UID": "1539fc299f96b09b" }, "Version": "0.1.7", "DependsOn": [ "generic-array@0.14.7", "typenum@1.19.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "csv@1.4.0", "Name": "csv", "Identifier": { "PURL": "pkg:cargo/csv@1.4.0", "UID": "e9cbba7f71520253" }, "Version": "1.4.0", "DependsOn": [ "csv-core@0.1.13", "itoa@1.0.17", "ryu@1.0.23", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "csv-core@0.1.13", "Name": "csv-core", "Identifier": { "PURL": "pkg:cargo/csv-core@0.1.13", "UID": "357f67d417beaada" }, "Version": "0.1.13", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ctrlc@3.5.2", "Name": "ctrlc", "Identifier": { "PURL": "pkg:cargo/ctrlc@3.5.2", "UID": "c0cb4b97c5a4a4" }, "Version": "3.5.2", "DependsOn": [ "nix@0.31.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cyclonedx-bom@0.8.0", "Name": "cyclonedx-bom", "Identifier": { "PURL": "pkg:cargo/cyclonedx-bom@0.8.0", "UID": "6463abd7c0673a65" }, "Version": "0.8.0", "DependsOn": [ "base64@0.21.7", "cyclonedx-bom-macros@0.1.0", "fluent-uri@0.1.4", "indexmap@2.13.1", "once_cell@1.21.4", "ordered-float@4.6.0", "purl@0.1.6", "regex@1.12.3", "serde@1.0.228", "serde_json@1.0.149", "spdx@0.10.9", "strum@0.26.3", "thiserror@1.0.69", "time@0.3.47", "uuid@1.23.0", "xml-rs@0.8.28" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "cyclonedx-bom-macros@0.1.0", "Name": "cyclonedx-bom-macros", "Identifier": { "PURL": "pkg:cargo/cyclonedx-bom-macros@0.1.0", "UID": "72c0f23b4d402563" }, "Version": "0.1.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dashmap@6.1.0", "Name": "dashmap", "Identifier": { "PURL": "pkg:cargo/dashmap@6.1.0", "UID": "98314133c5786dcb" }, "Version": "6.1.0", "DependsOn": [ "cfg-if@1.0.4", "crossbeam-utils@0.8.21", "hashbrown@0.14.5", "lock_api@0.4.14", "once_cell@1.21.4", "parking_lot_core@0.9.12" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "data-encoding@2.10.0", "Name": "data-encoding", "Identifier": { "PURL": "pkg:cargo/data-encoding@2.10.0", "UID": "4c48cd56f8dcf04a" }, "Version": "2.10.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "deadpool@0.12.3", "Name": "deadpool", "Identifier": { "PURL": "pkg:cargo/deadpool@0.12.3", "UID": "3d8d8e21778b53f0" }, "Version": "0.12.3", "DependsOn": [ "deadpool-runtime@0.1.4", "lazy_static@1.5.0", "num_cpus@1.17.0", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "deadpool-runtime@0.1.4", "Name": "deadpool-runtime", "Identifier": { "PURL": "pkg:cargo/deadpool-runtime@0.1.4", "UID": "6a7223e8d3f6d114" }, "Version": "0.1.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "der@0.7.10", "Name": "der", "Identifier": { "PURL": "pkg:cargo/der@0.7.10", "UID": "7a302ce722ec883e" }, "Version": "0.7.10", "DependsOn": [ "const-oid@0.9.6", "pem-rfc7468@0.7.0", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "der-parser@10.0.0", "Name": "der-parser", "Identifier": { "PURL": "pkg:cargo/der-parser@10.0.0", "UID": "85569bcf130a822b" }, "Version": "10.0.0", "DependsOn": [ "asn1-rs@0.7.1", "displaydoc@0.2.5", "nom@7.1.3", "num-bigint@0.4.6", "num-traits@0.2.19", "rusticata-macros@4.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "deranged@0.5.8", "Name": "deranged", "Identifier": { "PURL": "pkg:cargo/deranged@0.5.8", "UID": "12dec749e0e7a649" }, "Version": "0.5.8", "DependsOn": [ "powerfmt@0.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "difflib@0.4.0", "Name": "difflib", "Identifier": { "PURL": "pkg:cargo/difflib@0.4.0", "UID": "2e50eded769246cf" }, "Version": "0.4.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "digest@0.10.7", "Name": "digest", "Identifier": { "PURL": "pkg:cargo/digest@0.10.7", "UID": "b1458d0137310fc6" }, "Version": "0.10.7", "DependsOn": [ "block-buffer@0.10.4", "const-oid@0.9.6", "crypto-common@0.1.7", "subtle@2.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dirs@6.0.0", "Name": "dirs", "Identifier": { "PURL": "pkg:cargo/dirs@6.0.0", "UID": "8c89694d7a9ddcf4" }, "Version": "6.0.0", "DependsOn": [ "dirs-sys@0.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dirs-sys@0.5.0", "Name": "dirs-sys", "Identifier": { "PURL": "pkg:cargo/dirs-sys@0.5.0", "UID": "66c32067d579ef24" }, "Version": "0.5.0", "DependsOn": [ "libc@0.2.183", "option-ext@0.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "diskus@0.9.0", "Name": "diskus", "Identifier": { "PURL": "pkg:cargo/diskus@0.9.0", "UID": "7e299c1cea1738b3" }, "Version": "0.9.0", "DependsOn": [ "crossbeam-channel@0.5.15", "rayon@1.11.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "displaydoc@0.2.5", "Name": "displaydoc", "Identifier": { "PURL": "pkg:cargo/displaydoc@0.2.5", "UID": "6fcf7aada7094513" }, "Version": "0.2.5", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dlv-list@0.5.2", "Name": "dlv-list", "Identifier": { "PURL": "pkg:cargo/dlv-list@0.5.2", "UID": "f97aa674044a813" }, "Version": "0.5.2", "DependsOn": [ "const-random@0.1.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "doc-comment@0.3.4", "Name": "doc-comment", "Identifier": { "PURL": "pkg:cargo/doc-comment@0.3.4", "UID": "1477598804b333a8" }, "Version": "0.3.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dotenvy@0.15.7", "Name": "dotenvy", "Identifier": { "PURL": "pkg:cargo/dotenvy@0.15.7", "UID": "aa273d11a43a3f44" }, "Version": "0.15.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dunce@1.0.5", "Name": "dunce", "Identifier": { "PURL": "pkg:cargo/dunce@1.0.5", "UID": "8b7b43778df25128" }, "Version": "1.0.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "dyn-clone@1.0.20", "Name": "dyn-clone", "Identifier": { "PURL": "pkg:cargo/dyn-clone@1.0.20", "UID": "349c9a12908cbb75" }, "Version": "1.0.20", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "either@1.15.0", "Name": "either", "Identifier": { "PURL": "pkg:cargo/either@1.15.0", "UID": "4367831c5060d376" }, "Version": "1.15.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "encoding_rs@0.8.35", "Name": "encoding_rs", "Identifier": { "PURL": "pkg:cargo/encoding_rs@0.8.35", "UID": "a543043f8b3faaa1" }, "Version": "0.8.35", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "encoding_rs_io@0.1.7", "Name": "encoding_rs_io", "Identifier": { "PURL": "pkg:cargo/encoding_rs_io@0.1.7", "UID": "88d9ab660446067b" }, "Version": "0.1.7", "DependsOn": [ "encoding_rs@0.8.35" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "endi@1.1.1", "Name": "endi", "Identifier": { "PURL": "pkg:cargo/endi@1.1.1", "UID": "e34b4926b9a91473" }, "Version": "1.1.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "enumflags2@0.7.12", "Name": "enumflags2", "Identifier": { "PURL": "pkg:cargo/enumflags2@0.7.12", "UID": "5b0cacdb4db4e8e4" }, "Version": "0.7.12", "DependsOn": [ "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "equivalent@1.0.2", "Name": "equivalent", "Identifier": { "PURL": "pkg:cargo/equivalent@1.0.2", "UID": "e0daf4cbc292f1b4" }, "Version": "1.0.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "erased-serde@0.4.10", "Name": "erased-serde", "Identifier": { "PURL": "pkg:cargo/erased-serde@0.4.10", "UID": "73c883f32017ab74" }, "Version": "0.4.10", "DependsOn": [ "serde_core@1.0.228", "typeid@1.0.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "errno@0.3.14", "Name": "errno", "Identifier": { "PURL": "pkg:cargo/errno@0.3.14", "UID": "d26a68d8d0346b79" }, "Version": "0.3.14", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "etcetera@0.11.0", "Name": "etcetera", "Identifier": { "PURL": "pkg:cargo/etcetera@0.11.0", "UID": "8c1e845ff4b67d3e" }, "Version": "0.11.0", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "event-listener@5.4.1", "Name": "event-listener", "Identifier": { "PURL": "pkg:cargo/event-listener@5.4.1", "UID": "6e56db4592dff30c" }, "Version": "5.4.1", "DependsOn": [ "concurrent-queue@2.5.0", "parking@2.2.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "event-listener-strategy@0.5.4", "Name": "event-listener-strategy", "Identifier": { "PURL": "pkg:cargo/event-listener-strategy@0.5.4", "UID": "295f918cb9ba9bbd" }, "Version": "0.5.4", "DependsOn": [ "event-listener@5.4.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fastrand@2.3.0", "Name": "fastrand", "Identifier": { "PURL": "pkg:cargo/fastrand@2.3.0", "UID": "222651413d9cc4ad" }, "Version": "2.3.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "filetime@0.2.27", "Name": "filetime", "Identifier": { "PURL": "pkg:cargo/filetime@0.2.27", "UID": "a5864159012622ce" }, "Version": "0.2.27", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fixedbitset@0.5.7", "Name": "fixedbitset", "Identifier": { "PURL": "pkg:cargo/fixedbitset@0.5.7", "UID": "3acad1b7143146f" }, "Version": "0.5.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "flate2@1.1.9", "Name": "flate2", "Identifier": { "PURL": "pkg:cargo/flate2@1.1.9", "UID": "c2da07b677c735b1" }, "Version": "1.1.9", "DependsOn": [ "crc32fast@1.5.0", "miniz_oxide@0.8.9", "zlib-rs@0.6.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "float-cmp@0.10.0", "Name": "float-cmp", "Identifier": { "PURL": "pkg:cargo/float-cmp@0.10.0", "UID": "c968f399d6cb09c9" }, "Version": "0.10.0", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fluent-uri@0.1.4", "Name": "fluent-uri", "Identifier": { "PURL": "pkg:cargo/fluent-uri@0.1.4", "UID": "391470dcafc18a16" }, "Version": "0.1.4", "DependsOn": [ "bitflags@1.3.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fnv@1.0.7", "Name": "fnv", "Identifier": { "PURL": "pkg:cargo/fnv@1.0.7", "UID": "296c253bb342c7d9" }, "Version": "1.0.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "foldhash@0.1.5", "Name": "foldhash", "Identifier": { "PURL": "pkg:cargo/foldhash@0.1.5", "UID": "cde577fe9d847c30" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "foldhash@0.2.0", "Name": "foldhash", "Identifier": { "PURL": "pkg:cargo/foldhash@0.2.0", "UID": "9ac540bf267d3804" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "form_urlencoded@1.2.2", "Name": "form_urlencoded", "Identifier": { "PURL": "pkg:cargo/form_urlencoded@1.2.2", "UID": "205700e7b1d7cd4d" }, "Version": "1.2.2", "DependsOn": [ "percent-encoding@2.3.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "fs-err@3.3.0", "Name": "fs-err", "Identifier": { "PURL": "pkg:cargo/fs-err@3.3.0", "UID": "a0ddbabbf8b1106f" }, "Version": "3.3.0", "DependsOn": [ "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures@0.3.32", "Name": "futures", "Identifier": { "PURL": "pkg:cargo/futures@0.3.32", "UID": "4e819aff618f2c00" }, "Version": "0.3.32", "DependsOn": [ "futures-channel@0.3.32", "futures-core@0.3.32", "futures-executor@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "futures-task@0.3.32", "futures-util@0.3.32" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-channel@0.3.32", "Name": "futures-channel", "Identifier": { "PURL": "pkg:cargo/futures-channel@0.3.32", "UID": "540d9df6fa665dc7" }, "Version": "0.3.32", "DependsOn": [ "futures-core@0.3.32", "futures-sink@0.3.32" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-core@0.3.32", "Name": "futures-core", "Identifier": { "PURL": "pkg:cargo/futures-core@0.3.32", "UID": "aceb96977c6bb3aa" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-executor@0.3.32", "Name": "futures-executor", "Identifier": { "PURL": "pkg:cargo/futures-executor@0.3.32", "UID": "3aeb7fd678e5b8b5" }, "Version": "0.3.32", "DependsOn": [ "futures-core@0.3.32", "futures-task@0.3.32", "futures-util@0.3.32" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-io@0.3.32", "Name": "futures-io", "Identifier": { "PURL": "pkg:cargo/futures-io@0.3.32", "UID": "7e2c7e5b425b4aea" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-lite@2.6.1", "Name": "futures-lite", "Identifier": { "PURL": "pkg:cargo/futures-lite@2.6.1", "UID": "730529ef55df0937" }, "Version": "2.6.1", "DependsOn": [ "fastrand@2.3.0", "futures-core@0.3.32", "futures-io@0.3.32", "parking@2.2.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-sink@0.3.32", "Name": "futures-sink", "Identifier": { "PURL": "pkg:cargo/futures-sink@0.3.32", "UID": "187c792dec9ddc4e" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-task@0.3.32", "Name": "futures-task", "Identifier": { "PURL": "pkg:cargo/futures-task@0.3.32", "UID": "22b859279df8080e" }, "Version": "0.3.32", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "futures-util@0.3.32", "Name": "futures-util", "Identifier": { "PURL": "pkg:cargo/futures-util@0.3.32", "UID": "767f23b07b8ace16" }, "Version": "0.3.32", "DependsOn": [ "futures-channel@0.3.32", "futures-core@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "futures-task@0.3.32", "memchr@2.8.0", "pin-project-lite@0.2.17", "slab@0.4.12" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "generic-array@0.14.7", "Name": "generic-array", "Identifier": { "PURL": "pkg:cargo/generic-array@0.14.7", "UID": "f7ed899c172d0971" }, "Version": "0.14.7", "DependsOn": [ "typenum@1.19.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.2.16", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.2.16", "UID": "1e0907122565b531" }, "Version": "0.2.16", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.3.3", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.3.3", "UID": "852f19de46e4af46" }, "Version": "0.3.3", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "getrandom@0.4.1", "Name": "getrandom", "Identifier": { "PURL": "pkg:cargo/getrandom@0.4.1", "UID": "93ad9c8804cdd268" }, "Version": "0.4.1", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "glob@0.3.3", "Name": "glob", "Identifier": { "PURL": "pkg:cargo/glob@0.3.3", "UID": "d07c341e665d26de" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "globset@0.4.18", "Name": "globset", "Identifier": { "PURL": "pkg:cargo/globset@0.4.18", "UID": "845933a5ca9f0ce2" }, "Version": "0.4.18", "DependsOn": [ "aho-corasick@1.1.4", "bstr@1.12.1", "log@0.4.29", "regex-automata@0.4.14", "regex-syntax@0.8.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "globwalk@0.9.1", "Name": "globwalk", "Identifier": { "PURL": "pkg:cargo/globwalk@0.9.1", "UID": "786546d2f075e9a4" }, "Version": "0.9.1", "DependsOn": [ "bitflags@2.11.0", "ignore@0.4.25", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "goblin@0.10.5", "Name": "goblin", "Identifier": { "PURL": "pkg:cargo/goblin@0.10.5", "UID": "b9725877ce2b9c16" }, "Version": "0.10.5", "DependsOn": [ "log@0.4.29", "plain@0.2.3", "scroll@0.13.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "h2@0.4.13", "Name": "h2", "Identifier": { "PURL": "pkg:cargo/h2@0.4.13", "UID": "811d3c69434e5f86" }, "Version": "0.4.13", "DependsOn": [ "atomic-waker@1.1.2", "bytes@1.11.1", "fnv@1.0.7", "futures-core@0.3.32", "futures-sink@0.3.32", "http@1.4.0", "indexmap@2.13.1", "slab@0.4.12", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.14.5", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.14.5", "UID": "b01454123ca3aa2b" }, "Version": "0.14.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.15.5", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.15.5", "UID": "62d380e73560bff6" }, "Version": "0.15.5", "DependsOn": [ "foldhash@0.1.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hashbrown@0.16.1", "Name": "hashbrown", "Identifier": { "PURL": "pkg:cargo/hashbrown@0.16.1", "UID": "f1052660220a6c0f" }, "Version": "0.16.1", "DependsOn": [ "allocator-api2@0.2.21", "equivalent@1.0.2", "foldhash@0.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hex@0.4.3", "Name": "hex", "Identifier": { "PURL": "pkg:cargo/hex@0.4.3", "UID": "d3d65dc7b989ce1c" }, "Version": "0.4.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hkdf@0.12.4", "Name": "hkdf", "Identifier": { "PURL": "pkg:cargo/hkdf@0.12.4", "UID": "9459b6b08faa6d08" }, "Version": "0.12.4", "DependsOn": [ "hmac@0.12.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hmac@0.12.1", "Name": "hmac", "Identifier": { "PURL": "pkg:cargo/hmac@0.12.1", "UID": "16fe431947a6ff57" }, "Version": "0.12.1", "DependsOn": [ "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "homedir@0.3.6", "Name": "homedir", "Identifier": { "PURL": "pkg:cargo/homedir@0.3.6", "UID": "990a19f0b027fac9" }, "Version": "0.3.6", "DependsOn": [ "cfg-if@1.0.4", "nix@0.30.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "html-escape@0.2.13", "Name": "html-escape", "Identifier": { "PURL": "pkg:cargo/html-escape@0.2.13", "UID": "5acabeea4ce7a889" }, "Version": "0.2.13", "DependsOn": [ "utf8-width@0.1.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "http@1.4.0", "Name": "http", "Identifier": { "PURL": "pkg:cargo/http@1.4.0", "UID": "99791e56cce4bf53" }, "Version": "1.4.0", "DependsOn": [ "bytes@1.11.1", "itoa@1.0.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-body@1.0.1", "Name": "http-body", "Identifier": { "PURL": "pkg:cargo/http-body@1.0.1", "UID": "f9b370074922c59b" }, "Version": "1.0.1", "DependsOn": [ "bytes@1.11.1", "http@1.4.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-body-util@0.1.3", "Name": "http-body-util", "Identifier": { "PURL": "pkg:cargo/http-body-util@0.1.3", "UID": "1fffcbc12117fff4" }, "Version": "0.1.3", "DependsOn": [ "bytes@1.11.1", "futures-core@0.3.32", "http@1.4.0", "http-body@1.0.1", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "http-content-range@0.2.4", "Name": "http-content-range", "Identifier": { "PURL": "pkg:cargo/http-content-range@0.2.4", "UID": "404e18b80cc1e90a" }, "Version": "0.2.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "httparse@1.10.1", "Name": "httparse", "Identifier": { "PURL": "pkg:cargo/httparse@1.10.1", "UID": "91270f3aaf776bb9" }, "Version": "1.10.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "httpdate@1.0.3", "Name": "httpdate", "Identifier": { "PURL": "pkg:cargo/httpdate@1.0.3", "UID": "9f35bda2d8fc1d08" }, "Version": "1.0.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper@1.9.0", "Name": "hyper", "Identifier": { "PURL": "pkg:cargo/hyper@1.9.0", "UID": "1f0d43afc55c1014" }, "Version": "1.9.0", "DependsOn": [ "atomic-waker@1.1.2", "bytes@1.11.1", "futures-channel@0.3.32", "futures-core@0.3.32", "h2@0.4.13", "http@1.4.0", "http-body@1.0.1", "httparse@1.10.1", "httpdate@1.0.3", "itoa@1.0.17", "pin-project-lite@0.2.17", "smallvec@1.15.1", "tokio@1.51.0", "want@0.3.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper-rustls@0.27.7", "Name": "hyper-rustls", "Identifier": { "PURL": "pkg:cargo/hyper-rustls@0.27.7", "UID": "dc22c9d7010a3238" }, "Version": "0.27.7", "DependsOn": [ "http@1.4.0", "hyper@1.9.0", "hyper-util@0.1.20", "rustls@0.23.37", "rustls-pki-types@1.14.0", "tokio@1.51.0", "tokio-rustls@0.26.4", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "hyper-util@0.1.20", "Name": "hyper-util", "Identifier": { "PURL": "pkg:cargo/hyper-util@0.1.20", "UID": "2fa4559fb6dbe119" }, "Version": "0.1.20", "DependsOn": [ "base64@0.22.1", "bytes@1.11.1", "futures-channel@0.3.32", "futures-util@0.3.32", "http@1.4.0", "http-body@1.0.1", "hyper@1.9.0", "ipnet@2.12.0", "libc@0.2.183", "percent-encoding@2.3.2", "pin-project-lite@0.2.17", "socket2@0.6.3", "tokio@1.51.0", "tower-service@0.3.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_collections@2.1.1", "Name": "icu_collections", "Identifier": { "PURL": "pkg:cargo/icu_collections@2.1.1", "UID": "b9291ef7e432122a" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "potential_utf@0.1.4", "yoke@0.8.1", "zerofrom@0.1.6", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_locale_core@2.1.1", "Name": "icu_locale_core", "Identifier": { "PURL": "pkg:cargo/icu_locale_core@2.1.1", "UID": "3254251be9bb9a39" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "litemap@0.8.1", "tinystr@0.8.2", "writeable@0.6.2", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_normalizer@2.1.1", "Name": "icu_normalizer", "Identifier": { "PURL": "pkg:cargo/icu_normalizer@2.1.1", "UID": "efbbba746dfc795d" }, "Version": "2.1.1", "DependsOn": [ "icu_collections@2.1.1", "icu_normalizer_data@2.1.1", "icu_properties@2.1.2", "icu_provider@2.1.1", "smallvec@1.15.1", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_normalizer_data@2.1.1", "Name": "icu_normalizer_data", "Identifier": { "PURL": "pkg:cargo/icu_normalizer_data@2.1.1", "UID": "e13063e8a54f3d32" }, "Version": "2.1.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_properties@2.1.2", "Name": "icu_properties", "Identifier": { "PURL": "pkg:cargo/icu_properties@2.1.2", "UID": "df612507b1266994" }, "Version": "2.1.2", "DependsOn": [ "icu_collections@2.1.1", "icu_locale_core@2.1.1", "icu_properties_data@2.1.2", "icu_provider@2.1.1", "zerotrie@0.2.3", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_properties_data@2.1.2", "Name": "icu_properties_data", "Identifier": { "PURL": "pkg:cargo/icu_properties_data@2.1.2", "UID": "8d2e2e8b8aff78e5" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "icu_provider@2.1.1", "Name": "icu_provider", "Identifier": { "PURL": "pkg:cargo/icu_provider@2.1.1", "UID": "d6fc790b579724ab" }, "Version": "2.1.1", "DependsOn": [ "displaydoc@0.2.5", "icu_locale_core@2.1.1", "writeable@0.6.2", "yoke@0.8.1", "zerofrom@0.1.6", "zerotrie@0.2.3", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "idna@1.1.0", "Name": "idna", "Identifier": { "PURL": "pkg:cargo/idna@1.1.0", "UID": "2a41bbc3aede0c99" }, "Version": "1.1.0", "DependsOn": [ "idna_adapter@1.2.1", "smallvec@1.15.1", "utf8_iter@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "idna_adapter@1.2.1", "Name": "idna_adapter", "Identifier": { "PURL": "pkg:cargo/idna_adapter@1.2.1", "UID": "d8419cb54c5d1825" }, "Version": "1.2.1", "DependsOn": [ "icu_normalizer@2.1.1", "icu_properties@2.1.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ignore@0.4.25", "Name": "ignore", "Identifier": { "PURL": "pkg:cargo/ignore@0.4.25", "UID": "877273326f60883c" }, "Version": "0.4.25", "DependsOn": [ "crossbeam-deque@0.8.6", "globset@0.4.18", "log@0.4.29", "memchr@2.8.0", "regex-automata@0.4.14", "same-file@1.0.6", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "image@0.25.10", "Name": "image", "Identifier": { "PURL": "pkg:cargo/image@0.25.10", "UID": "dd51f50b6806d2f5" }, "Version": "0.25.10", "DependsOn": [ "bytemuck@1.25.0", "byteorder-lite@0.1.0", "moxcms@0.8.1", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "indexmap@2.13.1", "Name": "indexmap", "Identifier": { "PURL": "pkg:cargo/indexmap@2.13.1", "UID": "b9140528ed2b3df5" }, "Version": "2.13.1", "DependsOn": [ "equivalent@1.0.2", "hashbrown@0.16.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "indicatif@0.18.4", "Name": "indicatif", "Identifier": { "PURL": "pkg:cargo/indicatif@0.18.4", "UID": "cb481efba74fc943" }, "Version": "0.18.4", "DependsOn": [ "console@0.16.3", "portable-atomic@1.13.1", "unicode-width@0.2.2", "unit-prefix@0.5.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "indoc@2.0.7", "Name": "indoc", "Identifier": { "PURL": "pkg:cargo/indoc@2.0.7", "UID": "344781058a96bf26" }, "Version": "2.0.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "inout@0.1.4", "Name": "inout", "Identifier": { "PURL": "pkg:cargo/inout@0.1.4", "UID": "aa2a3252090e24b8" }, "Version": "0.1.4", "DependsOn": [ "block-padding@0.3.3", "generic-array@0.14.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "insta@1.47.2", "Name": "insta", "Identifier": { "PURL": "pkg:cargo/insta@1.47.2", "UID": "229066a7016ff714" }, "Version": "1.47.2", "DependsOn": [ "console@0.16.3", "once_cell@1.21.4", "pest@2.8.6", "pest_derive@2.8.6", "regex@1.12.3", "serde@1.0.228", "similar@2.7.0", "tempfile@3.27.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ipnet@2.12.0", "Name": "ipnet", "Identifier": { "PURL": "pkg:cargo/ipnet@2.12.0", "UID": "d630dd64b1204691" }, "Version": "2.12.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "iri-string@0.7.10", "Name": "iri-string", "Identifier": { "PURL": "pkg:cargo/iri-string@0.7.10", "UID": "7fe123ae93c20a55" }, "Version": "0.7.10", "DependsOn": [ "memchr@2.8.0", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "is-docker@0.2.0", "Name": "is-docker", "Identifier": { "PURL": "pkg:cargo/is-docker@0.2.0", "UID": "23d63b29b33f9276" }, "Version": "0.2.0", "DependsOn": [ "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "is-wsl@0.4.0", "Name": "is-wsl", "Identifier": { "PURL": "pkg:cargo/is-wsl@0.4.0", "UID": "8a9106d6a04fd927" }, "Version": "0.4.0", "DependsOn": [ "is-docker@0.2.0", "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "is_ci@1.2.0", "Name": "is_ci", "Identifier": { "PURL": "pkg:cargo/is_ci@1.2.0", "UID": "e88c890db76c5746" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "is_terminal_polyfill@1.70.2", "Name": "is_terminal_polyfill", "Identifier": { "PURL": "pkg:cargo/is_terminal_polyfill@1.70.2", "UID": "bae1ba91ac5297be" }, "Version": "1.70.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "itertools@0.14.0", "Name": "itertools", "Identifier": { "PURL": "pkg:cargo/itertools@0.14.0", "UID": "9c7209426eb38f3a" }, "Version": "0.14.0", "DependsOn": [ "either@1.15.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "itoa@1.0.17", "Name": "itoa", "Identifier": { "PURL": "pkg:cargo/itoa@1.0.17", "UID": "93d31de44f871f0f" }, "Version": "1.0.17", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "jiff@0.2.23", "Name": "jiff", "Identifier": { "PURL": "pkg:cargo/jiff@0.2.23", "UID": "f77d1b5684e5faac" }, "Version": "0.2.23", "DependsOn": [ "log@0.4.29", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "jobserver@0.1.34", "Name": "jobserver", "Identifier": { "PURL": "pkg:cargo/jobserver@0.1.34", "UID": "b3600fea1407420f" }, "Version": "0.1.34", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "jsonwebtoken@10.3.0", "Name": "jsonwebtoken", "Identifier": { "PURL": "pkg:cargo/jsonwebtoken@10.3.0", "UID": "d7eff75fcdd5d671" }, "Version": "10.3.0", "DependsOn": [ "aws-lc-rs@1.16.2", "base64@0.22.1", "pem@3.0.6", "serde@1.0.228", "serde_json@1.0.149", "signature@2.2.0", "simple_asn1@0.6.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lazy_static@1.5.0", "Name": "lazy_static", "Identifier": { "PURL": "pkg:cargo/lazy_static@1.5.0", "UID": "3ef8c5c9d895c140" }, "Version": "1.5.0", "DependsOn": [ "spin@0.9.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "libbz2-rs-sys@0.2.2", "Name": "libbz2-rs-sys", "Identifier": { "PURL": "pkg:cargo/libbz2-rs-sys@0.2.2", "UID": "8ba658fdef0c61cb" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "libc@0.2.183", "Name": "libc", "Identifier": { "PURL": "pkg:cargo/libc@0.2.183", "UID": "7b4381460acff7a9" }, "Version": "0.2.183", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "libm@0.2.16", "Name": "libm", "Identifier": { "PURL": "pkg:cargo/libm@0.2.16", "UID": "2d124066d795b56" }, "Version": "0.2.16", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "linux-raw-sys@0.12.1", "Name": "linux-raw-sys", "Identifier": { "PURL": "pkg:cargo/linux-raw-sys@0.12.1", "UID": "d2c31dbbe12d832d" }, "Version": "0.12.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "litemap@0.8.1", "Name": "litemap", "Identifier": { "PURL": "pkg:cargo/litemap@0.8.1", "UID": "d92b8a496ddd3c7c" }, "Version": "0.8.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lock_api@0.4.14", "Name": "lock_api", "Identifier": { "PURL": "pkg:cargo/lock_api@0.4.14", "UID": "57f8cefd7f81f111" }, "Version": "0.4.14", "DependsOn": [ "scopeguard@1.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "log@0.4.29", "Name": "log", "Identifier": { "PURL": "pkg:cargo/log@0.4.29", "UID": "6aa493bb872fe928" }, "Version": "0.4.29", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lru-slab@0.1.2", "Name": "lru-slab", "Identifier": { "PURL": "pkg:cargo/lru-slab@0.1.2", "UID": "d5e7e1b1c188a0a0" }, "Version": "0.1.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lzma-rust2@0.16.2", "Name": "lzma-rust2", "Identifier": { "PURL": "pkg:cargo/lzma-rust2@0.16.2", "UID": "7793106083000f73" }, "Version": "0.16.2", "DependsOn": [ "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "lzma-sys@0.1.20", "Name": "lzma-sys", "Identifier": { "PURL": "pkg:cargo/lzma-sys@0.1.20", "UID": "b7997dc86c7ec77b" }, "Version": "0.1.20", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "mailparse@0.16.1", "Name": "mailparse", "Identifier": { "PURL": "pkg:cargo/mailparse@0.16.1", "UID": "1f963cdbd326d65a" }, "Version": "0.16.1", "DependsOn": [ "charset@0.1.5", "data-encoding@2.10.0", "quoted_printable@0.5.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "matchers@0.2.0", "Name": "matchers", "Identifier": { "PURL": "pkg:cargo/matchers@0.2.0", "UID": "f5bae6d7facbdf11" }, "Version": "0.2.0", "DependsOn": [ "regex-automata@0.4.14" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "md-5@0.10.6", "Name": "md-5", "Identifier": { "PURL": "pkg:cargo/md-5@0.10.6", "UID": "825c6315e61dfa68" }, "Version": "0.10.6", "DependsOn": [ "cfg-if@1.0.4", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "memchr@2.8.0", "Name": "memchr", "Identifier": { "PURL": "pkg:cargo/memchr@2.8.0", "UID": "3b079a4a8f736c36" }, "Version": "2.8.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "memmap2@0.9.10", "Name": "memmap2", "Identifier": { "PURL": "pkg:cargo/memmap2@0.9.10", "UID": "4db61cf4ae75d0c6" }, "Version": "0.9.10", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "miette@7.6.0", "Name": "miette", "Identifier": { "PURL": "pkg:cargo/miette@7.6.0", "UID": "531152f405002aca" }, "Version": "7.6.0", "DependsOn": [ "cfg-if@1.0.4", "owo-colors@4.3.0", "supports-color@3.0.2", "supports-hyperlinks@3.2.0", "supports-unicode@3.0.0", "terminal_size@0.4.3", "textwrap@0.16.2", "unicode-width@0.1.14" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "mime@0.3.17", "Name": "mime", "Identifier": { "PURL": "pkg:cargo/mime@0.3.17", "UID": "be0a0da897e790a4" }, "Version": "0.3.17", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "mime_guess@2.0.5", "Name": "mime_guess", "Identifier": { "PURL": "pkg:cargo/mime_guess@2.0.5", "UID": "1aa75e1e2a9d5b73" }, "Version": "2.0.5", "DependsOn": [ "mime@0.3.17", "unicase@2.9.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "minimal-lexical@0.2.1", "Name": "minimal-lexical", "Identifier": { "PURL": "pkg:cargo/minimal-lexical@0.2.1", "UID": "db9fa37610cdc93b" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "miniz_oxide@0.8.9", "Name": "miniz_oxide", "Identifier": { "PURL": "pkg:cargo/miniz_oxide@0.8.9", "UID": "210b9bd8bbf8fbd6" }, "Version": "0.8.9", "DependsOn": [ "adler2@2.0.1", "simd-adler32@0.3.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "mio@1.2.0", "Name": "mio", "Identifier": { "PURL": "pkg:cargo/mio@1.2.0", "UID": "d31d73f38b56709e" }, "Version": "1.2.0", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "moxcms@0.8.1", "Name": "moxcms", "Identifier": { "PURL": "pkg:cargo/moxcms@0.8.1", "UID": "a8280013dfd64398" }, "Version": "0.8.1", "DependsOn": [ "num-traits@0.2.19", "pxfm@0.1.28" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "munge@0.4.7", "Name": "munge", "Identifier": { "PURL": "pkg:cargo/munge@0.4.7", "UID": "69d785222832b3b5" }, "Version": "0.4.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nanoid@0.4.0", "Name": "nanoid", "Identifier": { "PURL": "pkg:cargo/nanoid@0.4.0", "UID": "707a5c99e36dc1be" }, "Version": "0.4.0", "DependsOn": [ "rand@0.8.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nix@0.30.1", "Name": "nix", "Identifier": { "PURL": "pkg:cargo/nix@0.30.1", "UID": "b29ef4a30b419fff" }, "Version": "0.30.1", "DependsOn": [ "bitflags@2.11.0", "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nix@0.31.2", "Name": "nix", "Identifier": { "PURL": "pkg:cargo/nix@0.31.2", "UID": "969cd256e94d9ea" }, "Version": "0.31.2", "DependsOn": [ "bitflags@2.11.0", "cfg-if@1.0.4", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nom@7.1.3", "Name": "nom", "Identifier": { "PURL": "pkg:cargo/nom@7.1.3", "UID": "7c4da0fb1e8e65df" }, "Version": "7.1.3", "DependsOn": [ "memchr@2.8.0", "minimal-lexical@0.2.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "normalize-line-endings@0.3.0", "Name": "normalize-line-endings", "Identifier": { "PURL": "pkg:cargo/normalize-line-endings@0.3.0", "UID": "f6ee8f4a8eb779db" }, "Version": "0.3.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "nu-ansi-term@0.50.3", "Name": "nu-ansi-term", "Identifier": { "PURL": "pkg:cargo/nu-ansi-term@0.50.3", "UID": "fa94797dda81d6fd" }, "Version": "0.50.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num@0.4.3", "Name": "num", "Identifier": { "PURL": "pkg:cargo/num@0.4.3", "UID": "f0ed1fa1c5bdafa9" }, "Version": "0.4.3", "DependsOn": [ "num-bigint@0.4.6", "num-complex@0.4.6", "num-integer@0.1.46", "num-iter@0.1.45", "num-rational@0.4.2", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-bigint@0.4.6", "Name": "num-bigint", "Identifier": { "PURL": "pkg:cargo/num-bigint@0.4.6", "UID": "32a23ce4bd69f39c" }, "Version": "0.4.6", "DependsOn": [ "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-bigint-dig@0.8.6", "Name": "num-bigint-dig", "Identifier": { "PURL": "pkg:cargo/num-bigint-dig@0.8.6", "UID": "2a342400cf526709" }, "Version": "0.8.6", "DependsOn": [ "lazy_static@1.5.0", "libm@0.2.16", "num-integer@0.1.46", "num-iter@0.1.45", "num-traits@0.2.19", "rand@0.8.5", "smallvec@1.15.1", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-complex@0.4.6", "Name": "num-complex", "Identifier": { "PURL": "pkg:cargo/num-complex@0.4.6", "UID": "c26b2dbdd0708711" }, "Version": "0.4.6", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-conv@0.2.0", "Name": "num-conv", "Identifier": { "PURL": "pkg:cargo/num-conv@0.2.0", "UID": "7c1741e0375383f" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-integer@0.1.46", "Name": "num-integer", "Identifier": { "PURL": "pkg:cargo/num-integer@0.1.46", "UID": "3ca4bdfd5aaa30b0" }, "Version": "0.1.46", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-iter@0.1.45", "Name": "num-iter", "Identifier": { "PURL": "pkg:cargo/num-iter@0.1.45", "UID": "c5f324024387be8c" }, "Version": "0.1.45", "DependsOn": [ "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-rational@0.4.2", "Name": "num-rational", "Identifier": { "PURL": "pkg:cargo/num-rational@0.4.2", "UID": "2efa228d5a2446b6" }, "Version": "0.4.2", "DependsOn": [ "num-bigint@0.4.6", "num-integer@0.1.46", "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num-traits@0.2.19", "Name": "num-traits", "Identifier": { "PURL": "pkg:cargo/num-traits@0.2.19", "UID": "842e1567459a06b0" }, "Version": "0.2.19", "DependsOn": [ "libm@0.2.16" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "num_cpus@1.17.0", "Name": "num_cpus", "Identifier": { "PURL": "pkg:cargo/num_cpus@1.17.0", "UID": "799057eec9359812" }, "Version": "1.17.0", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "oid-registry@0.8.1", "Name": "oid-registry", "Identifier": { "PURL": "pkg:cargo/oid-registry@0.8.1", "UID": "14ffd0e5655fb3ee" }, "Version": "0.8.1", "DependsOn": [ "asn1-rs@0.7.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "once_cell@1.21.4", "Name": "once_cell", "Identifier": { "PURL": "pkg:cargo/once_cell@1.21.4", "UID": "11df78ec6b01741" }, "Version": "1.21.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "open@5.3.3", "Name": "open", "Identifier": { "PURL": "pkg:cargo/open@5.3.3", "UID": "f48b76b3386c7a21" }, "Version": "5.3.3", "DependsOn": [ "is-wsl@0.4.0", "libc@0.2.183", "pathdiff@0.2.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "openssl-probe@0.2.1", "Name": "openssl-probe", "Identifier": { "PURL": "pkg:cargo/openssl-probe@0.2.1", "UID": "22a7f5cb56db820f" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "option-ext@0.2.0", "Name": "option-ext", "Identifier": { "PURL": "pkg:cargo/option-ext@0.2.0", "UID": "6e349e2eb85f16c8" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-float@4.6.0", "Name": "ordered-float", "Identifier": { "PURL": "pkg:cargo/ordered-float@4.6.0", "UID": "f6deedbc786e9ea2" }, "Version": "4.6.0", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-multimap@0.7.3", "Name": "ordered-multimap", "Identifier": { "PURL": "pkg:cargo/ordered-multimap@0.7.3", "UID": "e30adcb97dcae0de" }, "Version": "0.7.3", "DependsOn": [ "dlv-list@0.5.2", "hashbrown@0.14.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ordered-stream@0.2.0", "Name": "ordered-stream", "Identifier": { "PURL": "pkg:cargo/ordered-stream@0.2.0", "UID": "aecef1790defb4b2" }, "Version": "0.2.0", "DependsOn": [ "futures-core@0.3.32", "pin-project-lite@0.2.17" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "os_str_bytes@6.6.1", "Name": "os_str_bytes", "Identifier": { "PURL": "pkg:cargo/os_str_bytes@6.6.1", "UID": "34c53236129614cf" }, "Version": "6.6.1", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "owo-colors@4.3.0", "Name": "owo-colors", "Identifier": { "PURL": "pkg:cargo/owo-colors@4.3.0", "UID": "877afa30a76f052" }, "Version": "4.3.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking@2.2.1", "Name": "parking", "Identifier": { "PURL": "pkg:cargo/parking@2.2.1", "UID": "f1e4eca75edfdaa7" }, "Version": "2.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking_lot@0.12.5", "Name": "parking_lot", "Identifier": { "PURL": "pkg:cargo/parking_lot@0.12.5", "UID": "6a7a662dae84e82f" }, "Version": "0.12.5", "DependsOn": [ "lock_api@0.4.14", "parking_lot_core@0.9.12" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "parking_lot_core@0.9.12", "Name": "parking_lot_core", "Identifier": { "PURL": "pkg:cargo/parking_lot_core@0.9.12", "UID": "d2792887edff7b03" }, "Version": "0.9.12", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183", "smallvec@1.15.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "path-slash@0.2.1", "Name": "path-slash", "Identifier": { "PURL": "pkg:cargo/path-slash@0.2.1", "UID": "14dad0eddabe4e00" }, "Version": "0.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pathdiff@0.2.3", "Name": "pathdiff", "Identifier": { "PURL": "pkg:cargo/pathdiff@0.2.3", "UID": "83c8cd93c0bd3876" }, "Version": "0.2.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pbkdf2@0.12.2", "Name": "pbkdf2", "Identifier": { "PURL": "pkg:cargo/pbkdf2@0.12.2", "UID": "7aa6b978e504f58c" }, "Version": "0.12.2", "DependsOn": [ "digest@0.10.7", "hmac@0.12.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pem@3.0.6", "Name": "pem", "Identifier": { "PURL": "pkg:cargo/pem@3.0.6", "UID": "7583ca502ff00a4b" }, "Version": "3.0.6", "DependsOn": [ "base64@0.22.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pem-rfc7468@0.7.0", "Name": "pem-rfc7468", "Identifier": { "PURL": "pkg:cargo/pem-rfc7468@0.7.0", "UID": "a85d8504cfc7f29f" }, "Version": "0.7.0", "DependsOn": [ "base64ct@1.8.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "percent-encoding@2.3.2", "Name": "percent-encoding", "Identifier": { "PURL": "pkg:cargo/percent-encoding@2.3.2", "UID": "3265472cbcea9d37" }, "Version": "2.3.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest@2.8.6", "Name": "pest", "Identifier": { "PURL": "pkg:cargo/pest@2.8.6", "UID": "1b29b4d891b65622" }, "Version": "2.8.6", "DependsOn": [ "memchr@2.8.0", "ucd-trie@0.1.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_derive@2.8.6", "Name": "pest_derive", "Identifier": { "PURL": "pkg:cargo/pest_derive@2.8.6", "UID": "6f2b6b9d2e64e0ec" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "pest_generator@2.8.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_generator@2.8.6", "Name": "pest_generator", "Identifier": { "PURL": "pkg:cargo/pest_generator@2.8.6", "UID": "32a7b1f44e923e2a" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "pest_meta@2.8.6", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pest_meta@2.8.6", "Name": "pest_meta", "Identifier": { "PURL": "pkg:cargo/pest_meta@2.8.6", "UID": "4ca99e8bd0dd431b" }, "Version": "2.8.6", "DependsOn": [ "pest@2.8.6", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "petgraph@0.8.3", "Name": "petgraph", "Identifier": { "PURL": "pkg:cargo/petgraph@0.8.3", "UID": "7338fbc3b8030e" }, "Version": "0.8.3", "DependsOn": [ "fixedbitset@0.5.7", "hashbrown@0.15.5", "indexmap@2.13.1", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pin-project@1.1.11", "Name": "pin-project", "Identifier": { "PURL": "pkg:cargo/pin-project@1.1.11", "UID": "3e976884573018a6" }, "Version": "1.1.11", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pin-project-lite@0.2.17", "Name": "pin-project-lite", "Identifier": { "PURL": "pkg:cargo/pin-project-lite@0.2.17", "UID": "2a27f4e9f79d1aac" }, "Version": "0.2.17", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs1@0.7.5", "Name": "pkcs1", "Identifier": { "PURL": "pkg:cargo/pkcs1@0.7.5", "UID": "41098e7b1ca77cff" }, "Version": "0.7.5", "DependsOn": [ "der@0.7.10", "pkcs8@0.10.2", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs5@0.7.1", "Name": "pkcs5", "Identifier": { "PURL": "pkg:cargo/pkcs5@0.7.1", "UID": "6a452bb0064bed06" }, "Version": "0.7.1", "DependsOn": [ "aes@0.8.4", "cbc@0.1.2", "der@0.7.10", "pbkdf2@0.12.2", "scrypt@0.11.0", "sha2@0.10.9", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pkcs8@0.10.2", "Name": "pkcs8", "Identifier": { "PURL": "pkg:cargo/pkcs8@0.10.2", "UID": "6916e69ab7d99a4c" }, "Version": "0.10.2", "DependsOn": [ "der@0.7.10", "pkcs5@0.7.1", "rand_core@0.6.4", "spki@0.7.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "plain@0.2.3", "Name": "plain", "Identifier": { "PURL": "pkg:cargo/plain@0.2.3", "UID": "df678bc33a4f14cd" }, "Version": "0.2.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "portable-atomic@1.13.1", "Name": "portable-atomic", "Identifier": { "PURL": "pkg:cargo/portable-atomic@1.13.1", "UID": "4d39a8f02b0f3a85" }, "Version": "1.13.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "potential_utf@0.1.4", "Name": "potential_utf", "Identifier": { "PURL": "pkg:cargo/potential_utf@0.1.4", "UID": "399ebe747c5d0321" }, "Version": "0.1.4", "DependsOn": [ "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "powerfmt@0.2.0", "Name": "powerfmt", "Identifier": { "PURL": "pkg:cargo/powerfmt@0.2.0", "UID": "34791b752acb1902" }, "Version": "0.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ppv-lite86@0.2.21", "Name": "ppv-lite86", "Identifier": { "PURL": "pkg:cargo/ppv-lite86@0.2.21", "UID": "a1c69327ca911b46" }, "Version": "0.2.21", "DependsOn": [ "zerocopy@0.8.42" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates@3.1.4", "Name": "predicates", "Identifier": { "PURL": "pkg:cargo/predicates@3.1.4", "UID": "d6d8b15d8849a479" }, "Version": "3.1.4", "DependsOn": [ "anstyle@1.0.14", "difflib@0.4.0", "float-cmp@0.10.0", "normalize-line-endings@0.3.0", "predicates-core@1.0.10", "regex@1.12.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates-core@1.0.10", "Name": "predicates-core", "Identifier": { "PURL": "pkg:cargo/predicates-core@1.0.10", "UID": "3223eace27b842e3" }, "Version": "1.0.10", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "predicates-tree@1.0.13", "Name": "predicates-tree", "Identifier": { "PURL": "pkg:cargo/predicates-tree@1.0.13", "UID": "de25cd6caec2792e" }, "Version": "1.0.13", "DependsOn": [ "predicates-core@1.0.10", "termtree@0.5.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "priority-queue@2.7.0", "Name": "priority-queue", "Identifier": { "PURL": "pkg:cargo/priority-queue@2.7.0", "UID": "9fd32f12af909cbd" }, "Version": "2.7.0", "DependsOn": [ "equivalent@1.0.2", "indexmap@2.13.1", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "proc-macro-crate@3.5.0", "Name": "proc-macro-crate", "Identifier": { "PURL": "pkg:cargo/proc-macro-crate@3.5.0", "UID": "f641653c643e1362" }, "Version": "3.5.0", "DependsOn": [ "toml_edit@0.25.4+spec-1.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "proc-macro2@1.0.106", "Name": "proc-macro2", "Identifier": { "PURL": "pkg:cargo/proc-macro2@1.0.106", "UID": "4f8f6eb303de4bfb" }, "Version": "1.0.106", "DependsOn": [ "unicode-ident@1.0.24" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "procfs@0.18.0", "Name": "procfs", "Identifier": { "PURL": "pkg:cargo/procfs@0.18.0", "UID": "8b972cfc7c7ea023" }, "Version": "0.18.0", "DependsOn": [ "bitflags@2.11.0", "flate2@1.1.9", "procfs-core@0.18.0", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "procfs-core@0.18.0", "Name": "procfs-core", "Identifier": { "PURL": "pkg:cargo/procfs-core@0.18.0", "UID": "9c047319ce7e3b86" }, "Version": "0.18.0", "DependsOn": [ "bitflags@2.11.0", "hex@0.4.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ptr_meta@0.3.1", "Name": "ptr_meta", "Identifier": { "PURL": "pkg:cargo/ptr_meta@0.3.1", "UID": "dfc39b66cbfd7fe" }, "Version": "0.3.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "purl@0.1.6", "Name": "purl", "Identifier": { "PURL": "pkg:cargo/purl@0.1.6", "UID": "fae77838a6249c0b" }, "Version": "0.1.6", "DependsOn": [ "hex@0.4.3", "percent-encoding@2.3.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "pxfm@0.1.28", "Name": "pxfm", "Identifier": { "PURL": "pkg:cargo/pxfm@0.1.28", "UID": "9effc3a269e23813" }, "Version": "0.1.28", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quick-xml@0.39.2", "Name": "quick-xml", "Identifier": { "PURL": "pkg:cargo/quick-xml@0.39.2", "UID": "c90fa1332a7f45d2" }, "Version": "0.39.2", "DependsOn": [ "memchr@2.8.0", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn@0.11.9", "Name": "quinn", "Identifier": { "PURL": "pkg:cargo/quinn@0.11.9", "UID": "7c8e5d6426c48d83" }, "Version": "0.11.9", "DependsOn": [ "bytes@1.11.1", "pin-project-lite@0.2.17", "quinn-proto@0.11.14", "quinn-udp@0.5.14", "rustc-hash@2.1.2", "rustls@0.23.37", "socket2@0.6.3", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn-proto@0.11.14", "Name": "quinn-proto", "Identifier": { "PURL": "pkg:cargo/quinn-proto@0.11.14", "UID": "48c483e2eddf93f2" }, "Version": "0.11.14", "DependsOn": [ "aws-lc-rs@1.16.2", "bytes@1.11.1", "lru-slab@0.1.2", "rand@0.9.2", "rustc-hash@2.1.2", "rustls@0.23.37", "slab@0.4.12", "thiserror@2.0.18", "tinyvec@1.11.0", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quinn-udp@0.5.14", "Name": "quinn-udp", "Identifier": { "PURL": "pkg:cargo/quinn-udp@0.5.14", "UID": "86c8650ea5b16263" }, "Version": "0.5.14", "DependsOn": [ "libc@0.2.183", "socket2@0.6.3", "tracing@0.1.44" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quote@1.0.45", "Name": "quote", "Identifier": { "PURL": "pkg:cargo/quote@1.0.45", "UID": "65f39a6b2089139b" }, "Version": "1.0.45", "DependsOn": [ "proc-macro2@1.0.106" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "quoted_printable@0.5.1", "Name": "quoted_printable", "Identifier": { "PURL": "pkg:cargo/quoted_printable@0.5.1", "UID": "37094f3bde7d4f84" }, "Version": "0.5.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rancor@0.1.1", "Name": "rancor", "Identifier": { "PURL": "pkg:cargo/rancor@0.1.1", "UID": "f903dc1066406b75" }, "Version": "0.1.1", "DependsOn": [ "ptr_meta@0.3.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand@0.8.5", "Name": "rand", "Identifier": { "PURL": "pkg:cargo/rand@0.8.5", "UID": "5d010dff6ba2a61b" }, "Version": "0.8.5", "DependsOn": [ "libc@0.2.183", "rand_chacha@0.3.1", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand@0.9.2", "Name": "rand", "Identifier": { "PURL": "pkg:cargo/rand@0.9.2", "UID": "eccc981e45214a61" }, "Version": "0.9.2", "DependsOn": [ "rand_chacha@0.9.0", "rand_core@0.9.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_chacha@0.3.1", "Name": "rand_chacha", "Identifier": { "PURL": "pkg:cargo/rand_chacha@0.3.1", "UID": "957df2805c35e232" }, "Version": "0.3.1", "DependsOn": [ "ppv-lite86@0.2.21", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_chacha@0.9.0", "Name": "rand_chacha", "Identifier": { "PURL": "pkg:cargo/rand_chacha@0.9.0", "UID": "8a10a436e0208c79" }, "Version": "0.9.0", "DependsOn": [ "ppv-lite86@0.2.21", "rand_core@0.9.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_core@0.6.4", "Name": "rand_core", "Identifier": { "PURL": "pkg:cargo/rand_core@0.6.4", "UID": "5dc679594fce9dc8" }, "Version": "0.6.4", "DependsOn": [ "getrandom@0.2.16" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rand_core@0.9.5", "Name": "rand_core", "Identifier": { "PURL": "pkg:cargo/rand_core@0.9.5", "UID": "f8d17d3c2761ac9c" }, "Version": "0.9.5", "DependsOn": [ "getrandom@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rayon@1.11.0", "Name": "rayon", "Identifier": { "PURL": "pkg:cargo/rayon@1.11.0", "UID": "11fe21e805931aa9" }, "Version": "1.11.0", "DependsOn": [ "either@1.15.0", "rayon-core@1.13.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rayon-core@1.13.0", "Name": "rayon-core", "Identifier": { "PURL": "pkg:cargo/rayon-core@1.13.0", "UID": "aa59e967d28fef09" }, "Version": "1.13.0", "DependsOn": [ "crossbeam-deque@0.8.6", "crossbeam-utils@0.8.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ref-cast@1.0.25", "Name": "ref-cast", "Identifier": { "PURL": "pkg:cargo/ref-cast@1.0.25", "UID": "b0df625fa357e3d6" }, "Version": "1.0.25", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reflink-copy@0.1.29", "Name": "reflink-copy", "Identifier": { "PURL": "pkg:cargo/reflink-copy@0.1.29", "UID": "7474562a1e7c068f" }, "Version": "0.1.29", "DependsOn": [ "cfg-if@1.0.4", "libc@0.2.183", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex@1.12.3", "Name": "regex", "Identifier": { "PURL": "pkg:cargo/regex@1.12.3", "UID": "c00d9e48a8ab0a8d" }, "Version": "1.12.3", "DependsOn": [ "aho-corasick@1.1.4", "memchr@2.8.0", "regex-automata@0.4.14", "regex-syntax@0.8.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex-automata@0.4.14", "Name": "regex-automata", "Identifier": { "PURL": "pkg:cargo/regex-automata@0.4.14", "UID": "8fa7e0ebc94f3fa3" }, "Version": "0.4.14", "DependsOn": [ "aho-corasick@1.1.4", "memchr@2.8.0", "regex-syntax@0.8.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "regex-syntax@0.8.10", "Name": "regex-syntax", "Identifier": { "PURL": "pkg:cargo/regex-syntax@0.8.10", "UID": "c7aa396c7c6f1d0c" }, "Version": "0.8.10", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rend@0.5.3", "Name": "rend", "Identifier": { "PURL": "pkg:cargo/rend@0.5.3", "UID": "11bf969ff70cbbf0" }, "Version": "0.5.3", "DependsOn": [ "bytecheck@0.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign@0.20.0", "Name": "reqsign", "Identifier": { "PURL": "pkg:cargo/reqsign@0.20.0", "UID": "ddd30b682dfed60b" }, "Version": "0.20.0", "DependsOn": [ "reqsign-aws-v4@3.0.0", "reqsign-command-execute-tokio@3.0.0", "reqsign-core@3.0.0", "reqsign-file-read-tokio@3.0.0", "reqsign-google@3.0.0", "reqsign-http-send-reqwest@4.0.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-aws-v4@3.0.0", "Name": "reqsign-aws-v4", "Identifier": { "PURL": "pkg:cargo/reqsign-aws-v4@3.0.0", "UID": "da7e8ab99607ceeb" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "bytes@1.11.1", "form_urlencoded@1.2.2", "http@1.4.0", "log@0.4.29", "percent-encoding@2.3.2", "quick-xml@0.39.2", "reqsign-core@3.0.0", "rust-ini@0.21.3", "serde@1.0.228", "serde_json@1.0.149", "serde_urlencoded@0.7.1", "sha1@0.10.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-command-execute-tokio@3.0.0", "Name": "reqsign-command-execute-tokio", "Identifier": { "PURL": "pkg:cargo/reqsign-command-execute-tokio@3.0.0", "UID": "91ae6eeefe3d559c" }, "Version": "3.0.0", "DependsOn": [ "reqsign-core@3.0.0", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-core@3.0.0", "Name": "reqsign-core", "Identifier": { "PURL": "pkg:cargo/reqsign-core@3.0.0", "UID": "dbde4b612f92d417" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "base64@0.22.1", "bytes@1.11.1", "form_urlencoded@1.2.2", "futures@0.3.32", "hex@0.4.3", "hmac@0.12.1", "http@1.4.0", "jiff@0.2.23", "log@0.4.29", "percent-encoding@2.3.2", "sha1@0.10.6", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-file-read-tokio@3.0.0", "Name": "reqsign-file-read-tokio", "Identifier": { "PURL": "pkg:cargo/reqsign-file-read-tokio@3.0.0", "UID": "a20d9d8f407af904" }, "Version": "3.0.0", "DependsOn": [ "anyhow@1.0.102", "reqsign-core@3.0.0", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-google@3.0.0", "Name": "reqsign-google", "Identifier": { "PURL": "pkg:cargo/reqsign-google@3.0.0", "UID": "77d52d991c9cbd87" }, "Version": "3.0.0", "DependsOn": [ "form_urlencoded@1.2.2", "http@1.4.0", "jsonwebtoken@10.3.0", "log@0.4.29", "percent-encoding@2.3.2", "reqsign-aws-v4@3.0.0", "reqsign-core@3.0.0", "rsa@0.9.10", "serde@1.0.228", "serde_json@1.0.149", "sha2@0.10.9", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqsign-http-send-reqwest@4.0.0", "Name": "reqsign-http-send-reqwest", "Identifier": { "PURL": "pkg:cargo/reqsign-http-send-reqwest@4.0.0", "UID": "7852e79ccd1bbd9f" }, "Version": "4.0.0", "DependsOn": [ "anyhow@1.0.102", "bytes@1.11.1", "http@1.4.0", "http-body-util@0.1.3", "reqsign-core@3.0.0", "reqwest@0.13.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "reqwest@0.13.2", "Name": "reqwest", "Identifier": { "PURL": "pkg:cargo/reqwest@0.13.2", "UID": "7533747e43787f6c" }, "Version": "0.13.2", "DependsOn": [ "base64@0.22.1", "bytes@1.11.1", "futures-channel@0.3.32", "futures-core@0.3.32", "futures-util@0.3.32", "h2@0.4.13", "http@1.4.0", "http-body@1.0.1", "http-body-util@0.1.3", "hyper@1.9.0", "hyper-rustls@0.27.7", "hyper-util@0.1.20", "log@0.4.29", "mime_guess@2.0.5", "percent-encoding@2.3.2", "pin-project-lite@0.2.17", "quinn@0.11.9", "rustls@0.23.37", "rustls-pki-types@1.14.0", "rustls-platform-verifier@0.6.2", "serde@1.0.228", "serde_json@1.0.149", "serde_urlencoded@0.7.1", "sync_wrapper@1.0.2", "tokio@1.51.0", "tokio-rustls@0.26.4", "tokio-util@0.7.18", "tower@0.5.3", "tower-http@0.6.8", "tower-service@0.3.3", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "retry-policies@0.5.1", "Name": "retry-policies", "Identifier": { "PURL": "pkg:cargo/retry-policies@0.5.1", "UID": "1dba8e909c54c272" }, "Version": "0.5.1", "DependsOn": [ "rand@0.9.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ring@0.17.14", "Name": "ring", "Identifier": { "PURL": "pkg:cargo/ring@0.17.14", "UID": "338a772b45c23571" }, "Version": "0.17.14", "DependsOn": [ "cfg-if@1.0.4", "getrandom@0.2.16", "untrusted@0.9.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rkyv@0.8.15", "Name": "rkyv", "Identifier": { "PURL": "pkg:cargo/rkyv@0.8.15", "UID": "d96c033ef35f2da" }, "Version": "0.8.15", "DependsOn": [ "bytecheck@0.8.2", "bytes@1.11.1", "hashbrown@0.16.1", "indexmap@2.13.1", "munge@0.4.7", "ptr_meta@0.3.1", "rancor@0.1.1", "rend@0.5.3", "smallvec@1.15.1", "tinyvec@1.11.0", "uuid@1.23.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rmp@0.8.15", "Name": "rmp", "Identifier": { "PURL": "pkg:cargo/rmp@0.8.15", "UID": "208b9a98e7165adb" }, "Version": "0.8.15", "DependsOn": [ "num-traits@0.2.19" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rmp-serde@1.3.1", "Name": "rmp-serde", "Identifier": { "PURL": "pkg:cargo/rmp-serde@1.3.1", "UID": "9f714b5bac3555ed" }, "Version": "1.3.1", "DependsOn": [ "rmp@0.8.15", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rsa@0.9.10", "Name": "rsa", "Identifier": { "PURL": "pkg:cargo/rsa@0.9.10", "UID": "f691de37750f126" }, "Version": "0.9.10", "DependsOn": [ "const-oid@0.9.6", "digest@0.10.7", "num-bigint-dig@0.8.6", "num-integer@0.1.46", "num-traits@0.2.19", "pkcs1@0.7.5", "pkcs8@0.10.2", "rand_core@0.6.4", "sha2@0.10.9", "signature@2.2.0", "spki@0.7.3", "subtle@2.6.1", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rust-ini@0.21.3", "Name": "rust-ini", "Identifier": { "PURL": "pkg:cargo/rust-ini@0.21.3", "UID": "25d08a3d794dbfbc" }, "Version": "0.21.3", "DependsOn": [ "cfg-if@1.0.4", "ordered-multimap@0.7.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rust-netrc@0.1.2", "Name": "rust-netrc", "Identifier": { "PURL": "pkg:cargo/rust-netrc@0.1.2", "UID": "5e75fb7a00e11df3" }, "Version": "0.1.2", "DependsOn": [ "shellexpand@3.1.2", "thiserror@1.0.69" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustc-hash@2.1.2", "Name": "rustc-hash", "Identifier": { "PURL": "pkg:cargo/rustc-hash@2.1.2", "UID": "4de9e8fd36c40ea2" }, "Version": "2.1.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rusticata-macros@4.1.0", "Name": "rusticata-macros", "Identifier": { "PURL": "pkg:cargo/rusticata-macros@4.1.0", "UID": "3b5571065fe12e0b" }, "Version": "4.1.0", "DependsOn": [ "nom@7.1.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustix@1.1.4", "Name": "rustix", "Identifier": { "PURL": "pkg:cargo/rustix@1.1.4", "UID": "c626cdb070dc0021" }, "Version": "1.1.4", "DependsOn": [ "bitflags@2.11.0", "errno@0.3.14", "libc@0.2.183", "linux-raw-sys@0.12.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls@0.23.37", "Name": "rustls", "Identifier": { "PURL": "pkg:cargo/rustls@0.23.37", "UID": "8472fbd6558a97be" }, "Version": "0.23.37", "DependsOn": [ "aws-lc-rs@1.16.2", "once_cell@1.21.4", "rustls-pki-types@1.14.0", "rustls-webpki@0.103.10", "subtle@2.6.1", "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-native-certs@0.8.3", "Name": "rustls-native-certs", "Identifier": { "PURL": "pkg:cargo/rustls-native-certs@0.8.3", "UID": "f5f65911fc23b43" }, "Version": "0.8.3", "DependsOn": [ "openssl-probe@0.2.1", "rustls-pki-types@1.14.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-pki-types@1.14.0", "Name": "rustls-pki-types", "Identifier": { "PURL": "pkg:cargo/rustls-pki-types@1.14.0", "UID": "7c500fafd3a31fb5" }, "Version": "1.14.0", "DependsOn": [ "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-platform-verifier@0.6.2", "Name": "rustls-platform-verifier", "Identifier": { "PURL": "pkg:cargo/rustls-platform-verifier@0.6.2", "UID": "d8490ec74f405417" }, "Version": "0.6.2", "DependsOn": [ "log@0.4.29", "rustls@0.23.37", "rustls-native-certs@0.8.3", "rustls-webpki@0.103.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "rustls-webpki@0.103.10", "Name": "rustls-webpki", "Identifier": { "PURL": "pkg:cargo/rustls-webpki@0.103.10", "UID": "b8737a8fd8bb001d" }, "Version": "0.103.10", "DependsOn": [ "aws-lc-rs@1.16.2", "ring@0.17.14", "rustls-pki-types@1.14.0", "untrusted@0.9.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ryu@1.0.23", "Name": "ryu", "Identifier": { "PURL": "pkg:cargo/ryu@1.0.23", "UID": "d76a03588c12714" }, "Version": "1.0.23", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "salsa20@0.10.2", "Name": "salsa20", "Identifier": { "PURL": "pkg:cargo/salsa20@0.10.2", "UID": "c60c8d043ad059d6" }, "Version": "0.10.2", "DependsOn": [ "cipher@0.4.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "same-file@1.0.6", "Name": "same-file", "Identifier": { "PURL": "pkg:cargo/same-file@1.0.6", "UID": "cc590cd7a0bc10c7" }, "Version": "1.0.6", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "schemars@1.2.1", "Name": "schemars", "Identifier": { "PURL": "pkg:cargo/schemars@1.2.1", "UID": "b7d87fbd1b677dfc" }, "Version": "1.2.1", "DependsOn": [ "dyn-clone@1.0.20", "ref-cast@1.0.25", "serde@1.0.228", "serde_json@1.0.149", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "scopeguard@1.2.0", "Name": "scopeguard", "Identifier": { "PURL": "pkg:cargo/scopeguard@1.2.0", "UID": "c919b69ddd5f3f35" }, "Version": "1.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "scroll@0.13.0", "Name": "scroll", "Identifier": { "PURL": "pkg:cargo/scroll@0.13.0", "UID": "647cd3822cf5027d" }, "Version": "0.13.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "scrypt@0.11.0", "Name": "scrypt", "Identifier": { "PURL": "pkg:cargo/scrypt@0.11.0", "UID": "72a631efc7d468c0" }, "Version": "0.11.0", "DependsOn": [ "pbkdf2@0.12.2", "salsa20@0.10.2", "sha2@0.10.9" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "seahash@4.1.0", "Name": "seahash", "Identifier": { "PURL": "pkg:cargo/seahash@4.1.0", "UID": "bf7ef4f3a94d409f" }, "Version": "4.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "secrecy@0.10.3", "Name": "secrecy", "Identifier": { "PURL": "pkg:cargo/secrecy@0.10.3", "UID": "825ebc5630fa9be9" }, "Version": "0.10.3", "DependsOn": [ "zeroize@1.8.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "secret-service@5.1.0", "Name": "secret-service", "Identifier": { "PURL": "pkg:cargo/secret-service@5.1.0", "UID": "767be5c78a3ac206" }, "Version": "5.1.0", "DependsOn": [ "aes@0.8.4", "cbc@0.1.2", "futures-util@0.3.32", "generic-array@0.14.7", "getrandom@0.2.16", "hkdf@0.12.4", "num@0.4.3", "once_cell@1.21.4", "serde@1.0.228", "sha2@0.10.9", "zbus@5.14.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "semver@1.0.27", "Name": "semver", "Identifier": { "PURL": "pkg:cargo/semver@1.0.27", "UID": "e6823910f6bb75e5" }, "Version": "1.0.27", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde@1.0.228", "Name": "serde", "Identifier": { "PURL": "pkg:cargo/serde@1.0.228", "UID": "151f6280bd41475a" }, "Version": "1.0.228", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde-untagged@0.1.9", "Name": "serde-untagged", "Identifier": { "PURL": "pkg:cargo/serde-untagged@0.1.9", "UID": "c45dc1fe6cc7d77c" }, "Version": "0.1.9", "DependsOn": [ "erased-serde@0.4.10", "serde_core@1.0.228", "typeid@1.0.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_core@1.0.228", "Name": "serde_core", "Identifier": { "PURL": "pkg:cargo/serde_core@1.0.228", "UID": "54264422ac51b4f3" }, "Version": "1.0.228", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_json@1.0.149", "Name": "serde_json", "Identifier": { "PURL": "pkg:cargo/serde_json@1.0.149", "UID": "658499af9e181b35" }, "Version": "1.0.149", "DependsOn": [ "itoa@1.0.17", "memchr@2.8.0", "serde_core@1.0.228", "zmij@1.0.21" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_repr@0.1.20", "Name": "serde_repr", "Identifier": { "PURL": "pkg:cargo/serde_repr@0.1.20", "UID": "3a3df018f039aafd" }, "Version": "0.1.20", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_spanned@1.0.4", "Name": "serde_spanned", "Identifier": { "PURL": "pkg:cargo/serde_spanned@1.0.4", "UID": "27a6bd6571b95445" }, "Version": "1.0.4", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "serde_urlencoded@0.7.1", "Name": "serde_urlencoded", "Identifier": { "PURL": "pkg:cargo/serde_urlencoded@0.7.1", "UID": "701bcef93c26d5e7" }, "Version": "0.7.1", "DependsOn": [ "form_urlencoded@1.2.2", "itoa@1.0.17", "ryu@1.0.23", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "sha1@0.10.6", "Name": "sha1", "Identifier": { "PURL": "pkg:cargo/sha1@0.10.6", "UID": "3e513eef0247b968" }, "Version": "0.10.6", "DependsOn": [ "cfg-if@1.0.4", "cpufeatures@0.2.17", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "sha2@0.10.9", "Name": "sha2", "Identifier": { "PURL": "pkg:cargo/sha2@0.10.9", "UID": "18f5c586d8f9b921" }, "Version": "0.10.9", "DependsOn": [ "cfg-if@1.0.4", "cpufeatures@0.2.17", "digest@0.10.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "sharded-slab@0.1.7", "Name": "sharded-slab", "Identifier": { "PURL": "pkg:cargo/sharded-slab@0.1.7", "UID": "1f213193f5266b94" }, "Version": "0.1.7", "DependsOn": [ "lazy_static@1.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "shell-escape@0.1.5", "Name": "shell-escape", "Identifier": { "PURL": "pkg:cargo/shell-escape@0.1.5", "UID": "6a09917c1028a612" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "shellexpand@3.1.2", "Name": "shellexpand", "Identifier": { "PURL": "pkg:cargo/shellexpand@3.1.2", "UID": "371f3ccda39befce" }, "Version": "3.1.2", "DependsOn": [ "bstr@1.12.1", "dirs@6.0.0", "os_str_bytes@6.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "signal-hook-registry@1.4.8", "Name": "signal-hook-registry", "Identifier": { "PURL": "pkg:cargo/signal-hook-registry@1.4.8", "UID": "9f715acb36526fd" }, "Version": "1.4.8", "DependsOn": [ "errno@0.3.14", "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "signature@2.2.0", "Name": "signature", "Identifier": { "PURL": "pkg:cargo/signature@2.2.0", "UID": "449688455989a98d" }, "Version": "2.2.0", "DependsOn": [ "digest@0.10.7", "rand_core@0.6.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "simd-adler32@0.3.8", "Name": "simd-adler32", "Identifier": { "PURL": "pkg:cargo/simd-adler32@0.3.8", "UID": "d62ed08985b02aa" }, "Version": "0.3.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "simdutf8@0.1.5", "Name": "simdutf8", "Identifier": { "PURL": "pkg:cargo/simdutf8@0.1.5", "UID": "a1c608aeb06f145f" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "similar@2.7.0", "Name": "similar", "Identifier": { "PURL": "pkg:cargo/similar@2.7.0", "UID": "68c7d9c614242d7e" }, "Version": "2.7.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "simple_asn1@0.6.4", "Name": "simple_asn1", "Identifier": { "PURL": "pkg:cargo/simple_asn1@0.6.4", "UID": "226539e2f322677e" }, "Version": "0.6.4", "DependsOn": [ "num-bigint@0.4.6", "num-traits@0.2.19", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "slab@0.4.12", "Name": "slab", "Identifier": { "PURL": "pkg:cargo/slab@0.4.12", "UID": "4c14cd41e34eee4d" }, "Version": "0.4.12", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "smallvec@1.15.1", "Name": "smallvec", "Identifier": { "PURL": "pkg:cargo/smallvec@1.15.1", "UID": "356502cbc0bff8ad" }, "Version": "1.15.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "smawk@0.3.2", "Name": "smawk", "Identifier": { "PURL": "pkg:cargo/smawk@0.3.2", "UID": "ec5ec9fbc87f4e5c" }, "Version": "0.3.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "socket2@0.6.3", "Name": "socket2", "Identifier": { "PURL": "pkg:cargo/socket2@0.6.3", "UID": "aebb5b4bbb3a19ba" }, "Version": "0.6.3", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "spdx@0.10.9", "Name": "spdx", "Identifier": { "PURL": "pkg:cargo/spdx@0.10.9", "UID": "ab2bc8062248fa65" }, "Version": "0.10.9", "DependsOn": [ "smallvec@1.15.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "spdx@0.13.4", "Name": "spdx", "Identifier": { "PURL": "pkg:cargo/spdx@0.13.4", "UID": "9c0b3484df702ca4" }, "Version": "0.13.4", "DependsOn": [ "smallvec@1.15.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "spin@0.9.8", "Name": "spin", "Identifier": { "PURL": "pkg:cargo/spin@0.9.8", "UID": "a958949a957e9515" }, "Version": "0.9.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "spki@0.7.3", "Name": "spki", "Identifier": { "PURL": "pkg:cargo/spki@0.7.3", "UID": "86d401dc84a5484c" }, "Version": "0.7.3", "DependsOn": [ "base64ct@1.8.3", "der@0.7.10" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "stable_deref_trait@1.2.1", "Name": "stable_deref_trait", "Identifier": { "PURL": "pkg:cargo/stable_deref_trait@1.2.1", "UID": "2ab438524c9b621b" }, "Version": "1.2.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "strsim@0.11.1", "Name": "strsim", "Identifier": { "PURL": "pkg:cargo/strsim@0.11.1", "UID": "101e41015409e0f3" }, "Version": "0.11.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "strum@0.26.3", "Name": "strum", "Identifier": { "PURL": "pkg:cargo/strum@0.26.3", "UID": "650659846b4389ac" }, "Version": "0.26.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "subtle@2.6.1", "Name": "subtle", "Identifier": { "PURL": "pkg:cargo/subtle@2.6.1", "UID": "bf8f74678e670341" }, "Version": "2.6.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-color@3.0.2", "Name": "supports-color", "Identifier": { "PURL": "pkg:cargo/supports-color@3.0.2", "UID": "b23784e1a902bbc9" }, "Version": "3.0.2", "DependsOn": [ "is_ci@1.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-hyperlinks@3.2.0", "Name": "supports-hyperlinks", "Identifier": { "PURL": "pkg:cargo/supports-hyperlinks@3.2.0", "UID": "fa78895ea298465" }, "Version": "3.2.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "supports-unicode@3.0.0", "Name": "supports-unicode", "Identifier": { "PURL": "pkg:cargo/supports-unicode@3.0.0", "UID": "51c6258dce8a003c" }, "Version": "3.0.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "syn@2.0.117", "Name": "syn", "Identifier": { "PURL": "pkg:cargo/syn@2.0.117", "UID": "f68aa8f70db5cca" }, "Version": "2.0.117", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "unicode-ident@1.0.24" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "sync_wrapper@1.0.2", "Name": "sync_wrapper", "Identifier": { "PURL": "pkg:cargo/sync_wrapper@1.0.2", "UID": "e5a0370f037f8949" }, "Version": "1.0.2", "DependsOn": [ "futures-core@0.3.32" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "synstructure@0.13.2", "Name": "synstructure", "Identifier": { "PURL": "pkg:cargo/synstructure@0.13.2", "UID": "c8f912925dadc1ab" }, "Version": "0.13.2", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tar@0.4.45", "Name": "tar", "Identifier": { "PURL": "pkg:cargo/tar@0.4.45", "UID": "4e0fec53ff3dcd5f" }, "Version": "0.4.45", "DependsOn": [ "filetime@0.2.27", "libc@0.2.183", "xattr@1.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "target-lexicon@0.13.5", "Name": "target-lexicon", "Identifier": { "PURL": "pkg:cargo/target-lexicon@0.13.5", "UID": "9d72095297646948" }, "Version": "0.13.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "temp-env@0.3.6", "Name": "temp-env", "Identifier": { "PURL": "pkg:cargo/temp-env@0.3.6", "UID": "743f6afec1925c6" }, "Version": "0.3.6", "DependsOn": [ "futures@0.3.32", "parking_lot@0.12.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tempfile@3.27.0", "Name": "tempfile", "Identifier": { "PURL": "pkg:cargo/tempfile@3.27.0", "UID": "2328bd593872136b" }, "Version": "3.27.0", "DependsOn": [ "fastrand@2.3.0", "getrandom@0.4.1", "once_cell@1.21.4", "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "terminal_size@0.4.3", "Name": "terminal_size", "Identifier": { "PURL": "pkg:cargo/terminal_size@0.4.3", "UID": "afe2a06405f7e0d3" }, "Version": "0.4.3", "DependsOn": [ "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "termtree@0.5.1", "Name": "termtree", "Identifier": { "PURL": "pkg:cargo/termtree@0.5.1", "UID": "52f48ea75e270133" }, "Version": "0.5.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "textwrap@0.16.2", "Name": "textwrap", "Identifier": { "PURL": "pkg:cargo/textwrap@0.16.2", "UID": "b25df8bc4b03b869" }, "Version": "0.16.2", "DependsOn": [ "smawk@0.3.2", "unicode-linebreak@0.1.5", "unicode-width@0.2.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "thiserror@1.0.69", "Name": "thiserror", "Identifier": { "PURL": "pkg:cargo/thiserror@1.0.69", "UID": "ebf26ef81cb98068" }, "Version": "1.0.69", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "thiserror@2.0.18", "Name": "thiserror", "Identifier": { "PURL": "pkg:cargo/thiserror@2.0.18", "UID": "89152e4ba54dafe0" }, "Version": "2.0.18", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "thread_local@1.1.9", "Name": "thread_local", "Identifier": { "PURL": "pkg:cargo/thread_local@1.1.9", "UID": "879ae4335ca0a928" }, "Version": "1.1.9", "DependsOn": [ "cfg-if@1.0.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tikv-jemalloc-sys@0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "Name": "tikv-jemalloc-sys", "Identifier": { "PURL": "pkg:cargo/tikv-jemalloc-sys@0.6.1%2B5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "UID": "d0869065a1522ab4" }, "Version": "0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tikv-jemallocator@0.6.1", "Name": "tikv-jemallocator", "Identifier": { "PURL": "pkg:cargo/tikv-jemallocator@0.6.1", "UID": "353ab31d36892d8c" }, "Version": "0.6.1", "DependsOn": [ "libc@0.2.183", "tikv-jemalloc-sys@0.6.1+5.3.0-1-ge13ca993e8ccb9ba9847cc330696e02839f328f7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "time@0.3.47", "Name": "time", "Identifier": { "PURL": "pkg:cargo/time@0.3.47", "UID": "ded696c50050cdef" }, "Version": "0.3.47", "DependsOn": [ "deranged@0.5.8", "itoa@1.0.17", "num-conv@0.2.0", "powerfmt@0.2.0", "serde_core@1.0.228", "time-core@0.1.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "time-core@0.1.8", "Name": "time-core", "Identifier": { "PURL": "pkg:cargo/time-core@0.1.8", "UID": "3e553af771854fe3" }, "Version": "0.1.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinystr@0.8.2", "Name": "tinystr", "Identifier": { "PURL": "pkg:cargo/tinystr@0.8.2", "UID": "87624a76c5449ef0" }, "Version": "0.8.2", "DependsOn": [ "displaydoc@0.2.5", "zerovec@0.11.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinyvec@1.11.0", "Name": "tinyvec", "Identifier": { "PURL": "pkg:cargo/tinyvec@1.11.0", "UID": "95f2af9b56822cc1" }, "Version": "1.11.0", "DependsOn": [ "tinyvec_macros@0.1.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tinyvec_macros@0.1.1", "Name": "tinyvec_macros", "Identifier": { "PURL": "pkg:cargo/tinyvec_macros@0.1.1", "UID": "8d76a197da43072" }, "Version": "0.1.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio@1.51.0", "Name": "tokio", "Identifier": { "PURL": "pkg:cargo/tokio@1.51.0", "UID": "5b863ef265d24d5a" }, "Version": "1.51.0", "DependsOn": [ "bytes@1.11.1", "libc@0.2.183", "mio@1.2.0", "parking_lot@0.12.5", "pin-project-lite@0.2.17", "signal-hook-registry@1.4.8", "socket2@0.6.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-rustls@0.26.4", "Name": "tokio-rustls", "Identifier": { "PURL": "pkg:cargo/tokio-rustls@0.26.4", "UID": "93efd84fbaee5885" }, "Version": "0.26.4", "DependsOn": [ "rustls@0.23.37", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-stream@0.1.18", "Name": "tokio-stream", "Identifier": { "PURL": "pkg:cargo/tokio-stream@0.1.18", "UID": "89adb2ed455a5d" }, "Version": "0.1.18", "DependsOn": [ "futures-core@0.3.32", "pin-project-lite@0.2.17", "tokio@1.51.0", "tokio-util@0.7.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tokio-util@0.7.18", "Name": "tokio-util", "Identifier": { "PURL": "pkg:cargo/tokio-util@0.7.18", "UID": "82d41b399b6a952c" }, "Version": "0.7.18", "DependsOn": [ "bytes@1.11.1", "futures-core@0.3.32", "futures-io@0.3.32", "futures-sink@0.3.32", "pin-project-lite@0.2.17", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml@0.9.10+spec-1.1.0", "Name": "toml", "Identifier": { "PURL": "pkg:cargo/toml@0.9.10%2Bspec-1.1.0", "UID": "3075d8932af99d19" }, "Version": "0.9.10+spec-1.1.0", "DependsOn": [ "foldhash@0.2.0", "indexmap@2.13.1", "serde_core@1.0.228", "serde_spanned@1.0.4", "toml_datetime@0.7.5+spec-1.1.0", "toml_parser@1.0.9+spec-1.1.0", "toml_writer@1.0.6+spec-1.1.0", "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_datetime@0.7.5+spec-1.1.0", "Name": "toml_datetime", "Identifier": { "PURL": "pkg:cargo/toml_datetime@0.7.5%2Bspec-1.1.0", "UID": "77eba1109f208b18" }, "Version": "0.7.5+spec-1.1.0", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_datetime@1.0.0+spec-1.1.0", "Name": "toml_datetime", "Identifier": { "PURL": "pkg:cargo/toml_datetime@1.0.0%2Bspec-1.1.0", "UID": "a577e4547c347005" }, "Version": "1.0.0+spec-1.1.0", "DependsOn": [ "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_edit@0.24.0+spec-1.1.0", "Name": "toml_edit", "Identifier": { "PURL": "pkg:cargo/toml_edit@0.24.0%2Bspec-1.1.0", "UID": "f70d76c22d603e7e" }, "Version": "0.24.0+spec-1.1.0", "DependsOn": [ "indexmap@2.13.1", "serde_core@1.0.228", "serde_spanned@1.0.4", "toml_datetime@0.7.5+spec-1.1.0", "toml_parser@1.0.9+spec-1.1.0", "toml_writer@1.0.6+spec-1.1.0", "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_edit@0.25.4+spec-1.1.0", "Name": "toml_edit", "Identifier": { "PURL": "pkg:cargo/toml_edit@0.25.4%2Bspec-1.1.0", "UID": "4940dd38ef0bd842" }, "Version": "0.25.4+spec-1.1.0", "DependsOn": [ "indexmap@2.13.1", "toml_datetime@1.0.0+spec-1.1.0", "toml_parser@1.0.9+spec-1.1.0", "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_parser@1.0.9+spec-1.1.0", "Name": "toml_parser", "Identifier": { "PURL": "pkg:cargo/toml_parser@1.0.9%2Bspec-1.1.0", "UID": "f09673a458ebabd0" }, "Version": "1.0.9+spec-1.1.0", "DependsOn": [ "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "toml_writer@1.0.6+spec-1.1.0", "Name": "toml_writer", "Identifier": { "PURL": "pkg:cargo/toml_writer@1.0.6%2Bspec-1.1.0", "UID": "6129adc510cacc3c" }, "Version": "1.0.6+spec-1.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower@0.5.3", "Name": "tower", "Identifier": { "PURL": "pkg:cargo/tower@0.5.3", "UID": "da1d0789e08dcadd" }, "Version": "0.5.3", "DependsOn": [ "futures-core@0.3.32", "futures-util@0.3.32", "pin-project-lite@0.2.17", "sync_wrapper@1.0.2", "tokio@1.51.0", "tower-layer@0.3.3", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-http@0.6.8", "Name": "tower-http", "Identifier": { "PURL": "pkg:cargo/tower-http@0.6.8", "UID": "3c248815e59c701d" }, "Version": "0.6.8", "DependsOn": [ "async-compression@0.4.19", "bitflags@2.11.0", "bytes@1.11.1", "futures-core@0.3.32", "futures-util@0.3.32", "http@1.4.0", "http-body@1.0.1", "http-body-util@0.1.3", "iri-string@0.7.10", "pin-project-lite@0.2.17", "tokio@1.51.0", "tokio-util@0.7.18", "tower@0.5.3", "tower-layer@0.3.3", "tower-service@0.3.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-layer@0.3.3", "Name": "tower-layer", "Identifier": { "PURL": "pkg:cargo/tower-layer@0.3.3", "UID": "370f333b72705450" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tower-service@0.3.3", "Name": "tower-service", "Identifier": { "PURL": "pkg:cargo/tower-service@0.3.3", "UID": "7c396f8c586d965c" }, "Version": "0.3.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing@0.1.44", "Name": "tracing", "Identifier": { "PURL": "pkg:cargo/tracing@0.1.44", "UID": "b06e6a69695c9415" }, "Version": "0.1.44", "DependsOn": [ "pin-project-lite@0.2.17", "tracing-attributes@0.1.31", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-attributes@0.1.31", "Name": "tracing-attributes", "Identifier": { "PURL": "pkg:cargo/tracing-attributes@0.1.31", "UID": "8a0bcad7abb601d4" }, "Version": "0.1.31", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-core@0.1.36", "Name": "tracing-core", "Identifier": { "PURL": "pkg:cargo/tracing-core@0.1.36", "UID": "9050af3c3a454dcf" }, "Version": "0.1.36", "DependsOn": [ "once_cell@1.21.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-log@0.2.0", "Name": "tracing-log", "Identifier": { "PURL": "pkg:cargo/tracing-log@0.2.0", "UID": "7efc8c63bf4809de" }, "Version": "0.2.0", "DependsOn": [ "log@0.4.29", "once_cell@1.21.4", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-serde@0.2.0", "Name": "tracing-serde", "Identifier": { "PURL": "pkg:cargo/tracing-serde@0.2.0", "UID": "31a15a626d8dd261" }, "Version": "0.2.0", "DependsOn": [ "serde@1.0.228", "tracing-core@0.1.36" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-subscriber@0.3.23", "Name": "tracing-subscriber", "Identifier": { "PURL": "pkg:cargo/tracing-subscriber@0.3.23", "UID": "57057170b77531a4" }, "Version": "0.3.23", "DependsOn": [ "matchers@0.2.0", "nu-ansi-term@0.50.3", "once_cell@1.21.4", "regex-automata@0.4.14", "serde@1.0.228", "serde_json@1.0.149", "sharded-slab@0.1.7", "smallvec@1.15.1", "thread_local@1.1.9", "tracing@0.1.44", "tracing-core@0.1.36", "tracing-log@0.2.0", "tracing-serde@0.2.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "tracing-tree@0.4.1", "Name": "tracing-tree", "Identifier": { "PURL": "pkg:cargo/tracing-tree@0.4.1", "UID": "8dcce3f729035ca2" }, "Version": "0.4.1", "DependsOn": [ "nu-ansi-term@0.50.3", "tracing-core@0.1.36", "tracing-log@0.2.0", "tracing-subscriber@0.3.23" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "try-lock@0.2.5", "Name": "try-lock", "Identifier": { "PURL": "pkg:cargo/try-lock@0.2.5", "UID": "b8806ea01171f3af" }, "Version": "0.2.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "typed-path@0.12.3", "Name": "typed-path", "Identifier": { "PURL": "pkg:cargo/typed-path@0.12.3", "UID": "1598b9d4c8d6df65" }, "Version": "0.12.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "typeid@1.0.3", "Name": "typeid", "Identifier": { "PURL": "pkg:cargo/typeid@1.0.3", "UID": "3882eb4ad4fa1692" }, "Version": "1.0.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "typenum@1.19.0", "Name": "typenum", "Identifier": { "PURL": "pkg:cargo/typenum@1.19.0", "UID": "100f6c708d64853a" }, "Version": "1.19.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "ucd-trie@0.1.7", "Name": "ucd-trie", "Identifier": { "PURL": "pkg:cargo/ucd-trie@0.1.7", "UID": "e88c14a6da914bdb" }, "Version": "0.1.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicase@2.9.0", "Name": "unicase", "Identifier": { "PURL": "pkg:cargo/unicase@2.9.0", "UID": "a9c8eac7b7049217" }, "Version": "2.9.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-ident@1.0.24", "Name": "unicode-ident", "Identifier": { "PURL": "pkg:cargo/unicode-ident@1.0.24", "UID": "e8b2ff064adb3663" }, "Version": "1.0.24", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-linebreak@0.1.5", "Name": "unicode-linebreak", "Identifier": { "PURL": "pkg:cargo/unicode-linebreak@0.1.5", "UID": "5ef4d9da65c0a1a1" }, "Version": "0.1.5", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-width@0.1.14", "Name": "unicode-width", "Identifier": { "PURL": "pkg:cargo/unicode-width@0.1.14", "UID": "f5db41d50ff2930b" }, "Version": "0.1.14", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unicode-width@0.2.2", "Name": "unicode-width", "Identifier": { "PURL": "pkg:cargo/unicode-width@0.2.2", "UID": "efd4597b9c7ca2c3" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unit-prefix@0.5.2", "Name": "unit-prefix", "Identifier": { "PURL": "pkg:cargo/unit-prefix@0.5.2", "UID": "4c9176855317951a" }, "Version": "0.5.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "unscanny@0.1.0", "Name": "unscanny", "Identifier": { "PURL": "pkg:cargo/unscanny@0.1.0", "UID": "aa35d22dd8859910" }, "Version": "0.1.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "untrusted@0.7.1", "Name": "untrusted", "Identifier": { "PURL": "pkg:cargo/untrusted@0.7.1", "UID": "82fc9c49d0faf4df" }, "Version": "0.7.1", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "untrusted@0.9.0", "Name": "untrusted", "Identifier": { "PURL": "pkg:cargo/untrusted@0.9.0", "UID": "796f8906fb5f686c" }, "Version": "0.9.0", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "url@2.5.8", "Name": "url", "Identifier": { "PURL": "pkg:cargo/url@2.5.8", "UID": "55887120d6ae61d5" }, "Version": "2.5.8", "DependsOn": [ "form_urlencoded@1.2.2", "idna@1.1.0", "percent-encoding@2.3.2", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8-width@0.1.8", "Name": "utf8-width", "Identifier": { "PURL": "pkg:cargo/utf8-width@0.1.8", "UID": "5363d1964e55e150" }, "Version": "0.1.8", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8_iter@1.0.4", "Name": "utf8_iter", "Identifier": { "PURL": "pkg:cargo/utf8_iter@1.0.4", "UID": "47325d29cebd96e9" }, "Version": "1.0.4", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "utf8parse@0.2.2", "Name": "utf8parse", "Identifier": { "PURL": "pkg:cargo/utf8parse@0.2.2", "UID": "cb9f4664a096601d" }, "Version": "0.2.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uuid@1.23.0", "Name": "uuid", "Identifier": { "PURL": "pkg:cargo/uuid@1.23.0", "UID": "8c612f308b2c7319" }, "Version": "1.23.0", "DependsOn": [ "getrandom@0.4.1", "serde_core@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-audit@0.0.40", "Name": "uv-audit", "Identifier": { "PURL": "pkg:cargo/uv-audit@0.0.40", "UID": "ad713a68c8e1d317" }, "Version": "0.0.40", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "clap@4.6.0", "futures@0.3.32", "jiff@0.2.23", "rustc-hash@2.1.2", "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "uv-configuration@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-auth@0.0.40", "Name": "uv-auth", "Identifier": { "PURL": "pkg:cargo/uv-auth@0.0.40", "UID": "d919eca670a03500" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "arcstr@1.2.0", "astral-reqwest-middleware@0.5.1", "async-trait@0.1.89", "base64@0.22.1", "etcetera@0.11.0", "fs-err@3.3.0", "futures@0.3.32", "http@1.4.0", "jiff@0.2.23", "percent-encoding@2.3.2", "reqsign@0.20.0", "reqwest@0.13.2", "rust-netrc@0.1.2", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "tokio@1.51.0", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-fs@0.0.40", "uv-keyring@0.0.40", "uv-once-map@0.0.40", "uv-preview@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40", "uv-state@0.0.40", "uv-static@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-bin-install@0.0.40", "Name": "uv-bin-install", "Identifier": { "PURL": "pkg:cargo/uv-bin-install@0.0.40", "UID": "d6eed0250d6fdc2" }, "Version": "0.0.40", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "fs-err@3.3.0", "futures@0.3.32", "jiff@0.2.23", "reqwest@0.13.2", "serde@1.0.228", "serde_json@1.0.149", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "url@2.5.8", "uv-cache@0.0.40", "uv-client@0.0.40", "uv-distribution-filename@0.0.40", "uv-extract@0.0.40", "uv-pep440@0.0.40", "uv-platform@0.0.40", "uv-redacted@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-build-backend@0.0.40", "Name": "uv-build-backend", "Identifier": { "PURL": "pkg:cargo/uv-build-backend@0.0.40", "UID": "8d50751682880766" }, "Version": "0.0.40", "DependsOn": [ "astral-version-ranges@0.1.4", "base64@0.22.1", "csv@1.4.0", "flate2@1.1.9", "fs-err@3.3.0", "globset@0.4.18", "indexmap@2.13.1", "itertools@0.14.0", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "sha2@0.10.9", "spdx@0.13.4", "tar@0.4.45", "tempfile@3.27.0", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "uv-distribution-filename@0.0.40", "uv-fs@0.0.40", "uv-globfilter@0.0.40", "uv-normalize@0.0.40", "uv-options-metadata@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-warnings@0.0.40", "walkdir@2.5.0", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-build-frontend@0.0.40", "Name": "uv-build-frontend", "Identifier": { "PURL": "pkg:cargo/uv-build-frontend@0.0.40", "UID": "a71e926fc5179d33" }, "Version": "0.0.40", "DependsOn": [ "anstream@1.0.0", "fs-err@3.3.0", "indoc@2.0.7", "itertools@0.14.0", "owo-colors@4.3.0", "regex@1.12.3", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.149", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "uv-auth@0.0.40", "uv-cache-key@0.0.40", "uv-configuration@0.0.40", "uv-distribution@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-static@0.0.40", "uv-types@0.0.40", "uv-virtualenv@0.0.40", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache@0.0.40", "Name": "uv-cache", "Identifier": { "PURL": "pkg:cargo/uv-cache@0.0.40", "UID": "f8742763fa4d5318" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "fs-err@3.3.0", "nanoid@0.4.0", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "same-file@1.0.6", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tracing@0.1.44", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-dirs@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache-info@0.0.40", "Name": "uv-cache-info", "Identifier": { "PURL": "pkg:cargo/uv-cache-info@0.0.40", "UID": "66395e55576ca9c6" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "globwalk@0.9.1", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "uv-fs@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cache-key@0.0.40", "Name": "uv-cache-key", "Identifier": { "PURL": "pkg:cargo/uv-cache-key@0.0.40", "UID": "ac51db0f79efede9" }, "Version": "0.0.40", "DependsOn": [ "hex@0.4.3", "memchr@2.8.0", "percent-encoding@2.3.2", "seahash@4.1.0", "url@2.5.8", "uv-redacted@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-cli@0.0.40", "Name": "uv-cli", "Identifier": { "PURL": "pkg:cargo/uv-cli@0.0.40", "UID": "9d2240584e8e319c" }, "Version": "0.0.40", "DependsOn": [ "anstream@1.0.0", "anyhow@1.0.102", "clap@4.6.0", "clap_complete_command@0.6.1", "fs-err@3.3.0", "serde@1.0.228", "url@2.5.8", "uv-audit@0.0.40", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-configuration@0.0.40", "uv-distribution-types@0.0.40", "uv-install-wheel@0.0.40", "uv-normalize@0.0.40", "uv-pep508@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-resolver@0.0.40", "uv-settings@0.0.40", "uv-static@0.0.40", "uv-torch@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-client@0.0.40", "Name": "uv-client", "Identifier": { "PURL": "pkg:cargo/uv-client@0.0.40", "UID": "d20c329a7ee31c8c" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "astral-tl@0.7.11", "astral_async_http_range_reader@0.11.0", "astral_async_zip@0.0.17", "async-trait@0.1.89", "bytecheck@0.8.2", "fs-err@3.3.0", "futures@0.3.32", "h2@0.4.13", "html-escape@0.2.13", "http@1.4.0", "itertools@0.14.0", "jiff@0.2.23", "percent-encoding@2.3.2", "reqwest@0.13.2", "rkyv@0.8.15", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "rustls-native-certs@0.8.3", "rustls-pki-types@1.14.0", "rustls-webpki@0.103.10", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-cache-key@0.0.40", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-metadata@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40", "uv-static@0.0.40", "uv-torch@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "webpki-root-certs@1.0.6", "x509-parser@0.18.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-configuration@0.0.40", "Name": "uv-configuration", "Identifier": { "PURL": "pkg:cargo/uv-configuration@0.0.40", "UID": "cd2571b9c4ee227d" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "either@1.15.0", "fs-err@3.3.0", "rayon@1.11.0", "reqwest@0.13.2", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-distribution-types@0.0.40", "uv-git@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-console@0.0.40", "Name": "uv-console", "Identifier": { "PURL": "pkg:cargo/uv-console@0.0.40", "UID": "85f316696d7d7dc4" }, "Version": "0.0.40", "DependsOn": [ "console@0.16.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-dirs@0.0.40", "Name": "uv-dirs", "Identifier": { "PURL": "pkg:cargo/uv-dirs@0.0.40", "UID": "e6a558c07db8e555" }, "Version": "0.0.40", "DependsOn": [ "etcetera@0.11.0", "fs-err@3.3.0", "tracing@0.1.44", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-dispatch@0.0.40", "Name": "uv-dispatch", "Identifier": { "PURL": "pkg:cargo/uv-dispatch@0.0.40", "UID": "74ea934486cde164" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "futures@0.3.32", "itertools@0.14.0", "rustc-hash@2.1.2", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "uv-build-backend@0.0.40", "uv-build-frontend@0.0.40", "uv-cache@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-git@0.0.40", "uv-install-wheel@0.0.40", "uv-installer@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-resolver@0.0.40", "uv-types@0.0.40", "uv-version@0.11.7", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution@0.0.40", "Name": "uv-distribution", "Identifier": { "PURL": "pkg:cargo/uv-distribution@0.0.40", "UID": "95ef10c874ae029c" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "either@1.15.0", "fs-err@3.3.0", "futures@0.3.32", "nanoid@0.4.0", "owo-colors@4.3.0", "reqwest@0.13.2", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-extract@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-git@0.0.40", "uv-git-types@0.0.40", "uv-install-wheel@0.0.40", "uv-metadata@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-types@0.0.40", "uv-warnings@0.0.40", "uv-workspace@0.0.40", "walkdir@2.5.0", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution-filename@0.0.40", "Name": "uv-distribution-filename", "Identifier": { "PURL": "pkg:cargo/uv-distribution-filename@0.0.40", "UID": "e4dac7f7070bf54f" }, "Version": "0.0.40", "DependsOn": [ "memchr@2.8.0", "rkyv@0.8.15", "serde@1.0.228", "smallvec@1.15.1", "thiserror@2.0.18", "uv-cache-key@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-platform-tags@0.0.40", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-distribution-types@0.0.40", "Name": "uv-distribution-types", "Identifier": { "PURL": "pkg:cargo/uv-distribution-types@0.0.40", "UID": "358616d7e20f8507" }, "Version": "0.0.40", "DependsOn": [ "arcstr@1.2.0", "astral-version-ranges@0.1.4", "bitflags@2.11.0", "fs-err@3.3.0", "http@1.4.0", "itertools@0.14.0", "jiff@0.2.23", "owo-colors@4.3.0", "percent-encoding@2.3.2", "petgraph@0.8.3", "rkyv@0.8.15", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-distribution-filename@0.0.40", "uv-fs@0.0.40", "uv-git-types@0.0.40", "uv-install-wheel@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-extract@0.0.40", "Name": "uv-extract", "Identifier": { "PURL": "pkg:cargo/uv-extract@0.0.40", "UID": "2fa2e5cb3939d9b0" }, "Version": "0.0.40", "DependsOn": [ "astral-tokio-tar@0.6.0", "astral_async_zip@0.0.17", "async-compression@0.4.19", "blake2@0.10.6", "fs-err@3.3.0", "futures@0.3.32", "md-5@0.10.6", "rayon@1.11.0", "regex@1.12.3", "reqwest@0.13.2", "rustc-hash@2.1.2", "sha2@0.10.9", "tar@0.4.45", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-pypi-types@0.0.40", "uv-static@0.0.40", "uv-warnings@0.0.40", "xz2@0.1.7", "zip@8.1.0", "zstd@0.13.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-flags@0.0.40", "Name": "uv-flags", "Identifier": { "PURL": "pkg:cargo/uv-flags@0.0.40", "UID": "f0dc7780814dd211" }, "Version": "0.0.40", "DependsOn": [ "bitflags@2.11.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-fs@0.0.40", "Name": "uv-fs", "Identifier": { "PURL": "pkg:cargo/uv-fs@0.0.40", "UID": "b90770887015cec3" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "dunce@1.0.5", "either@1.15.0", "encoding_rs_io@0.1.7", "fs-err@3.3.0", "path-slash@0.2.1", "percent-encoding@2.3.2", "reflink-copy@0.1.29", "rustc-hash@2.1.2", "rustix@1.1.4", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "uv-static@0.0.40", "uv-warnings@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-git@0.0.40", "Name": "uv-git", "Identifier": { "PURL": "pkg:cargo/uv-git@0.0.40", "UID": "6ac52c00083c799a" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "cargo-util@0.2.27", "dashmap@6.1.0", "fs-err@3.3.0", "owo-colors@4.3.0", "reqwest@0.13.2", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "uv-auth@0.0.40", "uv-cache-key@0.0.40", "uv-fs@0.0.40", "uv-git-types@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "which@8.0.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-git-types@0.0.40", "Name": "uv-git-types", "Identifier": { "PURL": "pkg:cargo/uv-git-types@0.0.40", "UID": "78e1718febe56a23" }, "Version": "0.0.40", "DependsOn": [ "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-globfilter@0.0.40", "Name": "uv-globfilter", "Identifier": { "PURL": "pkg:cargo/uv-globfilter@0.0.40", "UID": "14452f34474c225f" }, "Version": "0.0.40", "DependsOn": [ "globset@0.4.18", "owo-colors@4.3.0", "regex@1.12.3", "regex-automata@0.4.14", "thiserror@2.0.18", "tracing@0.1.44", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-install-wheel@0.0.40", "Name": "uv-install-wheel", "Identifier": { "PURL": "pkg:cargo/uv-install-wheel@0.0.40", "UID": "81538e9fb5b8a090" }, "Version": "0.0.40", "DependsOn": [ "configparser@3.1.0", "csv@1.4.0", "data-encoding@2.10.0", "fs-err@3.3.0", "itertools@0.14.0", "mailparse@0.16.1", "owo-colors@4.3.0", "pathdiff@0.2.3", "regex@1.12.3", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.149", "sha2@0.10.9", "thiserror@2.0.18", "tracing@0.1.44", "uv-distribution-filename@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-shell@0.0.40", "uv-trampoline-builder@0.0.40", "uv-warnings@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-installer@0.0.40", "Name": "uv-installer", "Identifier": { "PURL": "pkg:cargo/uv-installer@0.0.40", "UID": "e696b4d50a646bc2" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "async-channel@2.5.0", "fs-err@3.3.0", "futures@0.3.32", "owo-colors@4.3.0", "rayon@1.11.0", "rustc-hash@2.1.2", "same-file@1.0.6", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tracing@0.1.44", "url@2.5.8", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-configuration@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-git-types@0.0.40", "uv-install-wheel@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "uv-types@0.0.40", "uv-warnings@0.0.40", "walkdir@2.5.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-keyring@0.0.40", "Name": "uv-keyring", "Identifier": { "PURL": "pkg:cargo/uv-keyring@0.0.40", "UID": "889bf8f7edf9ef0" }, "Version": "0.0.40", "DependsOn": [ "async-trait@0.1.89", "secret-service@5.1.0", "thiserror@2.0.18", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-logging@0.0.40", "Name": "uv-logging", "Identifier": { "PURL": "pkg:cargo/uv-logging@0.0.40", "UID": "253f647ee8070dc" }, "Version": "0.0.40", "DependsOn": [ "jiff@0.2.23", "owo-colors@4.3.0", "tracing@0.1.44", "tracing-subscriber@0.3.23" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-metadata@0.0.40", "Name": "uv-metadata", "Identifier": { "PURL": "pkg:cargo/uv-metadata@0.0.40", "UID": "79955fe01efdc969" }, "Version": "0.0.40", "DependsOn": [ "astral_async_zip@0.0.17", "fs-err@3.3.0", "futures@0.3.32", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "uv-distribution-filename@0.0.40", "uv-normalize@0.0.40", "uv-pypi-types@0.0.40", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-normalize@0.0.40", "Name": "uv-normalize", "Identifier": { "PURL": "pkg:cargo/uv-normalize@0.0.40", "UID": "1e0c90e647d7e642" }, "Version": "0.0.40", "DependsOn": [ "rkyv@0.8.15", "schemars@1.2.1", "serde@1.0.228", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-once-map@0.0.40", "Name": "uv-once-map", "Identifier": { "PURL": "pkg:cargo/uv-once-map@0.0.40", "UID": "e162af0bde32ded2" }, "Version": "0.0.40", "DependsOn": [ "dashmap@6.1.0", "futures@0.3.32", "tokio@1.51.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-options-metadata@0.0.40", "Name": "uv-options-metadata", "Identifier": { "PURL": "pkg:cargo/uv-options-metadata@0.0.40", "UID": "3fbba51fc1e61536" }, "Version": "0.0.40", "DependsOn": [ "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pep440@0.0.40", "Name": "uv-pep440", "Identifier": { "PURL": "pkg:cargo/uv-pep440@0.0.40", "UID": "3f213d21565adf17" }, "Version": "0.0.40", "DependsOn": [ "astral-version-ranges@0.1.4", "rkyv@0.8.15", "serde@1.0.228", "tracing@0.1.44", "unicode-width@0.2.2", "unscanny@0.1.0", "uv-cache-key@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pep508@0.0.40", "Name": "uv-pep508", "Identifier": { "PURL": "pkg:cargo/uv-pep508@0.0.40", "UID": "f65a2b6ea380b828" }, "Version": "0.0.40", "DependsOn": [ "arcstr@1.2.0", "astral-version-ranges@0.1.4", "boxcar@0.2.14", "indexmap@2.13.1", "itertools@0.14.0", "regex@1.12.3", "rkyv@0.8.15", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "smallvec@1.15.1", "temp-env@0.3.6", "thiserror@2.0.18", "unicode-width@0.2.2", "url@2.5.8", "uv-cache-key@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-redacted@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-performance-memory-allocator@0.0.40", "Name": "uv-performance-memory-allocator", "Identifier": { "PURL": "pkg:cargo/uv-performance-memory-allocator@0.0.40", "UID": "a8062f7237b459f7" }, "Version": "0.0.40", "DependsOn": [ "tikv-jemallocator@0.6.1" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-platform@0.0.40", "Name": "uv-platform", "Identifier": { "PURL": "pkg:cargo/uv-platform@0.0.40", "UID": "853760cbb3834a9e" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "goblin@0.10.5", "procfs@0.18.0", "regex@1.12.3", "rustix@1.1.4", "target-lexicon@0.13.5", "thiserror@2.0.18", "tracing@0.1.44", "uv-fs@0.0.40", "uv-platform-tags@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-platform-tags@0.0.40", "Name": "uv-platform-tags", "Identifier": { "PURL": "pkg:cargo/uv-platform-tags@0.0.40", "UID": "e6f56774e8b47ab5" }, "Version": "0.0.40", "DependsOn": [ "bitflags@2.11.0", "memchr@2.8.0", "rkyv@0.8.15", "rustc-hash@2.1.2", "serde@1.0.228", "thiserror@2.0.18", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-preview@0.0.40", "Name": "uv-preview", "Identifier": { "PURL": "pkg:cargo/uv-preview@0.0.40", "UID": "a2ac10f88c8ead12" }, "Version": "0.0.40", "DependsOn": [ "enumflags2@0.7.12", "itertools@0.14.0", "thiserror@2.0.18", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-publish@0.0.40", "Name": "uv-publish", "Identifier": { "PURL": "pkg:cargo/uv-publish@0.0.40", "UID": "6a3589615c55bec2" }, "Version": "0.0.40", "DependsOn": [ "ambient-id@0.0.11", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "astral-tokio-tar@0.6.0", "async-compression@0.4.19", "base64@0.22.1", "fs-err@3.3.0", "futures@0.3.32", "glob@0.3.3", "itertools@0.14.0", "reqwest@0.13.2", "rustc-hash@2.1.2", "serde@1.0.228", "serde_json@1.0.149", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-auth@0.0.40", "uv-cache@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-extract@0.0.40", "uv-fs@0.0.40", "uv-metadata@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "uv-warnings@0.0.40", "wiremock@0.6.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-pypi-types@0.0.40", "Name": "uv-pypi-types", "Identifier": { "PURL": "pkg:cargo/uv-pypi-types@0.0.40", "UID": "27224c4d63317e56" }, "Version": "0.0.40", "DependsOn": [ "hashbrown@0.16.1", "indexmap@2.13.1", "itertools@0.14.0", "jiff@0.2.23", "mailparse@0.16.1", "petgraph@0.8.3", "regex@1.12.3", "rkyv@0.8.15", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "serde-untagged@0.1.9", "thiserror@2.0.18", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-distribution-filename@0.0.40", "uv-git-types@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-redacted@0.0.40", "uv-small-str@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-python@0.0.40", "Name": "uv-python", "Identifier": { "PURL": "pkg:cargo/uv-python@0.0.40", "UID": "d9847f3a23aa1feb" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "astral-reqwest-middleware@0.5.1", "astral-reqwest-retry@0.9.1", "clap@4.6.0", "configparser@3.1.0", "dunce@1.0.5", "fs-err@3.3.0", "futures@0.3.32", "indexmap@2.13.1", "itertools@0.14.0", "owo-colors@4.3.0", "ref-cast@1.0.25", "regex@1.12.3", "reqwest@0.13.2", "rmp-serde@1.3.1", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "target-lexicon@0.13.5", "tempfile@3.27.0", "thiserror@2.0.18", "tokio@1.51.0", "tokio-util@0.7.18", "tracing@0.1.44", "url@2.5.8", "uv-cache@0.0.40", "uv-cache-info@0.0.40", "uv-cache-key@0.0.40", "uv-client@0.0.40", "uv-dirs@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-extract@0.0.40", "uv-fs@0.0.40", "uv-install-wheel@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-state@0.0.40", "uv-static@0.0.40", "uv-trampoline-builder@0.0.40", "uv-warnings@0.0.40", "which@8.0.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-redacted@0.0.40", "Name": "uv-redacted", "Identifier": { "PURL": "pkg:cargo/uv-redacted@0.0.40", "UID": "a9731b3de369b02e" }, "Version": "0.0.40", "DependsOn": [ "ref-cast@1.0.25", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-requirements@0.0.40", "Name": "uv-requirements", "Identifier": { "PURL": "pkg:cargo/uv-requirements@0.0.40", "UID": "732f9f8d75c3a8b0" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "configparser@3.1.0", "console@0.16.3", "fs-err@3.3.0", "futures@0.3.32", "rustc-hash@2.1.2", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-console@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-git@0.0.40", "uv-normalize@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-requirements-txt@0.0.40", "uv-resolver@0.0.40", "uv-scripts@0.0.40", "uv-types@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-requirements-txt@0.0.40", "Name": "uv-requirements-txt", "Identifier": { "PURL": "pkg:cargo/uv-requirements-txt@0.0.40", "UID": "81fd5f71be536eb8" }, "Version": "0.0.40", "DependsOn": [ "astral-reqwest-middleware@0.5.1", "fs-err@3.3.0", "memchr@2.8.0", "reqwest@0.13.2", "rustc-hash@2.1.2", "thiserror@2.0.18", "tracing@0.1.44", "unscanny@0.1.0", "url@2.5.8", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-normalize@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-resolver@0.0.40", "Name": "uv-resolver", "Identifier": { "PURL": "pkg:cargo/uv-resolver@0.0.40", "UID": "b90845641f62e7c0" }, "Version": "0.0.40", "DependsOn": [ "arcstr@1.2.0", "astral-pubgrub@0.3.3", "clap@4.6.0", "cyclonedx-bom@0.8.0", "dashmap@6.1.0", "either@1.15.0", "fs-err@3.3.0", "futures@0.3.32", "hashbrown@0.16.1", "indexmap@2.13.1", "itertools@0.14.0", "jiff@0.2.23", "owo-colors@4.3.0", "percent-encoding@2.3.2", "petgraph@0.8.3", "rkyv@0.8.15", "rustc-hash@2.1.2", "same-file@1.0.6", "schemars@1.2.1", "serde@1.0.228", "serde_json@1.0.149", "smallvec@1.15.1", "textwrap@0.16.2", "thiserror@2.0.18", "tokio@1.51.0", "tokio-stream@0.1.18", "toml@0.9.10+spec-1.1.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-key@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-console@0.0.40", "uv-distribution@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-git@0.0.40", "uv-git-types@0.0.40", "uv-metadata@0.0.40", "uv-normalize@0.0.40", "uv-once-map@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-platform-tags@0.0.40", "uv-preview@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-requirements-txt@0.0.40", "uv-small-str@0.0.40", "uv-static@0.0.40", "uv-torch@0.0.40", "uv-types@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-scripts@0.0.40", "Name": "uv-scripts", "Identifier": { "PURL": "pkg:cargo/uv-scripts@0.0.40", "UID": "d0c8351a2e70a334" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "indoc@2.0.7", "memchr@2.8.0", "regex@1.12.3", "serde@1.0.228", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-configuration@0.0.40", "uv-distribution-types@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-settings@0.0.40", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-settings@0.0.40", "Name": "uv-settings", "Identifier": { "PURL": "pkg:cargo/uv-settings@0.0.40", "UID": "9d99674b3d4e2cf4" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "fs-err@3.3.0", "schemars@1.2.1", "serde@1.0.228", "textwrap@0.16.2", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "tracing@0.1.44", "url@2.5.8", "uv-cache-info@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-dirs@0.0.40", "uv-distribution-types@0.0.40", "uv-flags@0.0.40", "uv-fs@0.0.40", "uv-install-wheel@0.0.40", "uv-normalize@0.0.40", "uv-options-metadata@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-resolver@0.0.40", "uv-static@0.0.40", "uv-torch@0.0.40", "uv-version@0.11.7", "uv-warnings@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-shell@0.0.40", "Name": "uv-shell", "Identifier": { "PURL": "pkg:cargo/uv-shell@0.0.40", "UID": "2153dced64ef5dde" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "fs-err@3.3.0", "nix@0.31.2", "same-file@1.0.6", "tracing@0.1.44", "uv-fs@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-small-str@0.0.40", "Name": "uv-small-str", "Identifier": { "PURL": "pkg:cargo/uv-small-str@0.0.40", "UID": "304b0ac1c150f4b0" }, "Version": "0.0.40", "DependsOn": [ "arcstr@1.2.0", "rkyv@0.8.15", "schemars@1.2.1", "serde@1.0.228" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-state@0.0.40", "Name": "uv-state", "Identifier": { "PURL": "pkg:cargo/uv-state@0.0.40", "UID": "4f9a3b037617601f" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "tempfile@3.27.0", "uv-dirs@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-static@0.0.40", "Name": "uv-static", "Identifier": { "PURL": "pkg:cargo/uv-static@0.0.40", "UID": "3677805e2955a60d" }, "Version": "0.0.40", "DependsOn": [ "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-test@0.0.40", "Name": "uv-test", "Identifier": { "PURL": "pkg:cargo/uv-test@0.0.40", "UID": "6a442aaaf5729f29" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "assert_cmd@2.2.0", "assert_fs@1.1.3", "base64@0.22.1", "fs-err@3.3.0", "futures@0.3.32", "ignore@0.4.25", "indoc@2.0.7", "insta@1.47.2", "itertools@0.14.0", "predicates@3.1.4", "regex@1.12.3", "reqwest@0.13.2", "similar@2.7.0", "tempfile@3.27.0", "tokio@1.51.0", "uv-cache@0.0.40", "uv-client@0.0.40", "uv-configuration@0.0.40", "uv-fs@0.0.40", "uv-preview@0.0.40", "uv-python@0.0.40", "uv-static@0.0.40", "uv-version@0.11.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-tool@0.0.40", "Name": "uv-tool", "Identifier": { "PURL": "pkg:cargo/uv-tool@0.0.40", "UID": "4b6f1358230a34fa" }, "Version": "0.0.40", "DependsOn": [ "fs-err@3.3.0", "owo-colors@4.3.0", "pathdiff@0.2.3", "serde@1.0.228", "thiserror@2.0.18", "toml@0.9.10+spec-1.1.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "uv-cache@0.0.40", "uv-dirs@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-install-wheel@0.0.40", "uv-installer@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-settings@0.0.40", "uv-state@0.0.40", "uv-static@0.0.40", "uv-virtualenv@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-torch@0.0.40", "Name": "uv-torch", "Identifier": { "PURL": "pkg:cargo/uv-torch@0.0.40", "UID": "f19d619c09b1930e" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "either@1.15.0", "fs-err@3.3.0", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "tracing@0.1.44", "url@2.5.8", "uv-distribution-types@0.0.40", "uv-normalize@0.0.40", "uv-pep440@0.0.40", "uv-platform-tags@0.0.40", "uv-static@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-trampoline-builder@0.0.40", "Name": "uv-trampoline-builder", "Identifier": { "PURL": "pkg:cargo/uv-trampoline-builder@0.0.40", "UID": "9a695fb56bd6d466" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "fs-err@3.3.0", "goblin@0.10.5", "tempfile@3.27.0", "thiserror@2.0.18", "uv-fs@0.0.40", "zip@8.1.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-types@0.0.40", "Name": "uv-types", "Identifier": { "PURL": "pkg:cargo/uv-types@0.0.40", "UID": "10ced86e86a58acc" }, "Version": "0.0.40", "DependsOn": [ "anyhow@1.0.102", "dashmap@6.1.0", "rustc-hash@2.1.2", "thiserror@2.0.18", "uv-cache@0.0.40", "uv-configuration@0.0.40", "uv-distribution-filename@0.0.40", "uv-distribution-types@0.0.40", "uv-git@0.0.40", "uv-normalize@0.0.40", "uv-once-map@0.0.40", "uv-pep440@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-redacted@0.0.40", "uv-workspace@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-unix@0.0.40", "Name": "uv-unix", "Identifier": { "PURL": "pkg:cargo/uv-unix@0.0.40", "UID": "fa8518d2010a7c0c" }, "Version": "0.0.40", "DependsOn": [ "nix@0.31.2", "thiserror@2.0.18" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-version@0.11.7", "Name": "uv-version", "Identifier": { "PURL": "pkg:cargo/uv-version@0.11.7", "UID": "5219647793ca6d2b" }, "Version": "0.11.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-virtualenv@0.0.40", "Name": "uv-virtualenv", "Identifier": { "PURL": "pkg:cargo/uv-virtualenv@0.0.40", "UID": "530e99a20f7f159f" }, "Version": "0.0.40", "DependsOn": [ "console@0.16.3", "fs-err@3.3.0", "itertools@0.14.0", "owo-colors@4.3.0", "pathdiff@0.2.3", "thiserror@2.0.18", "tracing@0.1.44", "uv-console@0.0.40", "uv-fs@0.0.40", "uv-platform-tags@0.0.40", "uv-pypi-types@0.0.40", "uv-python@0.0.40", "uv-shell@0.0.40", "uv-version@0.11.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-warnings@0.0.40", "Name": "uv-warnings", "Identifier": { "PURL": "pkg:cargo/uv-warnings@0.0.40", "UID": "5070440b0b0dfe8b" }, "Version": "0.0.40", "DependsOn": [ "anstream@1.0.0", "owo-colors@4.3.0", "rustc-hash@2.1.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "uv-workspace@0.0.40", "Name": "uv-workspace", "Identifier": { "PURL": "pkg:cargo/uv-workspace@0.0.40", "UID": "66dbc188a0d99270" }, "Version": "0.0.40", "DependsOn": [ "clap@4.6.0", "fs-err@3.3.0", "glob@0.3.3", "ignore@0.4.25", "itertools@0.14.0", "owo-colors@4.3.0", "rustc-hash@2.1.2", "schemars@1.2.1", "serde@1.0.228", "thiserror@2.0.18", "tokio@1.51.0", "toml@0.9.10+spec-1.1.0", "toml_edit@0.24.0+spec-1.1.0", "tracing@0.1.44", "uv-build-backend@0.0.40", "uv-cache-key@0.0.40", "uv-configuration@0.0.40", "uv-distribution-types@0.0.40", "uv-fs@0.0.40", "uv-git-types@0.0.40", "uv-normalize@0.0.40", "uv-options-metadata@0.0.40", "uv-pep440@0.0.40", "uv-pep508@0.0.40", "uv-pypi-types@0.0.40", "uv-redacted@0.0.40", "uv-static@0.0.40", "uv-warnings@0.0.40" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "wait-timeout@0.2.1", "Name": "wait-timeout", "Identifier": { "PURL": "pkg:cargo/wait-timeout@0.2.1", "UID": "3aa126c86571a181" }, "Version": "0.2.1", "DependsOn": [ "libc@0.2.183" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "walkdir@2.5.0", "Name": "walkdir", "Identifier": { "PURL": "pkg:cargo/walkdir@2.5.0", "UID": "c27dd902a6be073a" }, "Version": "2.5.0", "DependsOn": [ "same-file@1.0.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "want@0.3.1", "Name": "want", "Identifier": { "PURL": "pkg:cargo/want@0.3.1", "UID": "c826d28e65881823" }, "Version": "0.3.1", "DependsOn": [ "try-lock@0.2.5" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "webpki-root-certs@1.0.6", "Name": "webpki-root-certs", "Identifier": { "PURL": "pkg:cargo/webpki-root-certs@1.0.6", "UID": "3951af4ff6134d0a" }, "Version": "1.0.6", "DependsOn": [ "rustls-pki-types@1.14.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "which@8.0.2", "Name": "which", "Identifier": { "PURL": "pkg:cargo/which@8.0.2", "UID": "3a38d60cdf162c68" }, "Version": "8.0.2", "DependsOn": [ "libc@0.2.183", "regex@1.12.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "winnow@0.7.15", "Name": "winnow", "Identifier": { "PURL": "pkg:cargo/winnow@0.7.15", "UID": "68b8e4d2fd4c3651" }, "Version": "0.7.15", "DependsOn": [ "memchr@2.8.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "wiremock@0.6.5", "Name": "wiremock", "Identifier": { "PURL": "pkg:cargo/wiremock@0.6.5", "UID": "e9916becd0a480cc" }, "Version": "0.6.5", "DependsOn": [ "assert-json-diff@2.0.2", "base64@0.22.1", "deadpool@0.12.3", "futures@0.3.32", "http@1.4.0", "http-body-util@0.1.3", "hyper@1.9.0", "hyper-util@0.1.20", "log@0.4.29", "once_cell@1.21.4", "regex@1.12.3", "serde@1.0.228", "serde_json@1.0.149", "tokio@1.51.0", "url@2.5.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "writeable@0.6.2", "Name": "writeable", "Identifier": { "PURL": "pkg:cargo/writeable@0.6.2", "UID": "84c6ac8e526b6" }, "Version": "0.6.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "x509-parser@0.18.1", "Name": "x509-parser", "Identifier": { "PURL": "pkg:cargo/x509-parser@0.18.1", "UID": "f374197ce56b41b9" }, "Version": "0.18.1", "DependsOn": [ "asn1-rs@0.7.1", "data-encoding@2.10.0", "der-parser@10.0.0", "lazy_static@1.5.0", "nom@7.1.3", "oid-registry@0.8.1", "ring@0.17.14", "rusticata-macros@4.1.0", "thiserror@2.0.18", "time@0.3.47" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "xattr@1.6.1", "Name": "xattr", "Identifier": { "PURL": "pkg:cargo/xattr@1.6.1", "UID": "519dea59b0238d6b" }, "Version": "1.6.1", "DependsOn": [ "rustix@1.1.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "xml-rs@0.8.28", "Name": "xml-rs", "Identifier": { "PURL": "pkg:cargo/xml-rs@0.8.28", "UID": "b82b59e5865ad8a7" }, "Version": "0.8.28", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "xz2@0.1.7", "Name": "xz2", "Identifier": { "PURL": "pkg:cargo/xz2@0.1.7", "UID": "49cba89c68f50617" }, "Version": "0.1.7", "DependsOn": [ "lzma-sys@0.1.20" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "yoke@0.8.1", "Name": "yoke", "Identifier": { "PURL": "pkg:cargo/yoke@0.8.1", "UID": "323b1087b9669e4b" }, "Version": "0.8.1", "DependsOn": [ "stable_deref_trait@1.2.1", "yoke-derive@0.8.1", "zerofrom@0.1.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "yoke-derive@0.8.1", "Name": "yoke-derive", "Identifier": { "PURL": "pkg:cargo/yoke-derive@0.8.1", "UID": "3780b8f7e74ffad9" }, "Version": "0.8.1", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "synstructure@0.13.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus@5.14.0", "Name": "zbus", "Identifier": { "PURL": "pkg:cargo/zbus@5.14.0", "UID": "62980afc41850abd" }, "Version": "5.14.0", "DependsOn": [ "async-broadcast@0.7.2", "async-recursion@1.1.1", "async-trait@0.1.89", "enumflags2@0.7.12", "event-listener@5.4.1", "futures-core@0.3.32", "futures-lite@2.6.1", "hex@0.4.3", "libc@0.2.183", "ordered-stream@0.2.0", "rustix@1.1.4", "serde@1.0.228", "serde_repr@0.1.20", "tokio@1.51.0", "tracing@0.1.44", "uuid@1.23.0", "winnow@0.7.15", "zbus_macros@5.14.0", "zbus_names@4.3.1", "zvariant@5.10.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus_macros@5.14.0", "Name": "zbus_macros", "Identifier": { "PURL": "pkg:cargo/zbus_macros@5.14.0", "UID": "f5516532cfc84f03" }, "Version": "5.14.0", "DependsOn": [ "proc-macro-crate@3.5.0", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "zbus_names@4.3.1", "zvariant@5.10.0", "zvariant_utils@3.3.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zbus_names@4.3.1", "Name": "zbus_names", "Identifier": { "PURL": "pkg:cargo/zbus_names@4.3.1", "UID": "cf2c8e067a013e8d" }, "Version": "4.3.1", "DependsOn": [ "serde@1.0.228", "winnow@0.7.15", "zvariant@5.10.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerocopy@0.8.42", "Name": "zerocopy", "Identifier": { "PURL": "pkg:cargo/zerocopy@0.8.42", "UID": "7f2c41c1d2352bcf" }, "Version": "0.8.42", "DependsOn": [ "zerocopy-derive@0.8.42" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerocopy-derive@0.8.42", "Name": "zerocopy-derive", "Identifier": { "PURL": "pkg:cargo/zerocopy-derive@0.8.42", "UID": "83b937978fc7392a" }, "Version": "0.8.42", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerofrom@0.1.6", "Name": "zerofrom", "Identifier": { "PURL": "pkg:cargo/zerofrom@0.1.6", "UID": "1cc1fb3bd97f71c1" }, "Version": "0.1.6", "DependsOn": [ "zerofrom-derive@0.1.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerofrom-derive@0.1.6", "Name": "zerofrom-derive", "Identifier": { "PURL": "pkg:cargo/zerofrom-derive@0.1.6", "UID": "c926beb8b6ca4907" }, "Version": "0.1.6", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "synstructure@0.13.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zeroize@1.8.2", "Name": "zeroize", "Identifier": { "PURL": "pkg:cargo/zeroize@1.8.2", "UID": "7199e29c515982f3" }, "Version": "1.8.2", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerotrie@0.2.3", "Name": "zerotrie", "Identifier": { "PURL": "pkg:cargo/zerotrie@0.2.3", "UID": "4434fa6e9f9bc226" }, "Version": "0.2.3", "DependsOn": [ "displaydoc@0.2.5", "yoke@0.8.1", "zerofrom@0.1.6" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerovec@0.11.5", "Name": "zerovec", "Identifier": { "PURL": "pkg:cargo/zerovec@0.11.5", "UID": "6305a411884698bb" }, "Version": "0.11.5", "DependsOn": [ "yoke@0.8.1", "zerofrom@0.1.6", "zerovec-derive@0.11.2" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zerovec-derive@0.11.2", "Name": "zerovec-derive", "Identifier": { "PURL": "pkg:cargo/zerovec-derive@0.11.2", "UID": "1c395b37d920d6f9" }, "Version": "0.11.2", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zip@8.1.0", "Name": "zip", "Identifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "ddb05d2712aeda1e" }, "Version": "8.1.0", "DependsOn": [ "bzip2@0.6.1", "crc32fast@1.5.0", "flate2@1.1.9", "indexmap@2.13.1", "lzma-rust2@0.16.2", "memchr@2.8.0", "typed-path@0.12.3", "zopfli@0.8.3", "zstd@0.13.3" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zlib-rs@0.6.3", "Name": "zlib-rs", "Identifier": { "PURL": "pkg:cargo/zlib-rs@0.6.3", "UID": "4fe1425f6756504f" }, "Version": "0.6.3", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zmij@1.0.21", "Name": "zmij", "Identifier": { "PURL": "pkg:cargo/zmij@1.0.21", "UID": "2ef91cc6de41adc8" }, "Version": "1.0.21", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zopfli@0.8.3", "Name": "zopfli", "Identifier": { "PURL": "pkg:cargo/zopfli@0.8.3", "UID": "12f0f0d30c384800" }, "Version": "0.8.3", "DependsOn": [ "bumpalo@3.20.2", "crc32fast@1.5.0", "log@0.4.29", "simd-adler32@0.3.8" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd@0.13.3", "Name": "zstd", "Identifier": { "PURL": "pkg:cargo/zstd@0.13.3", "UID": "64e6e7b2659d62b" }, "Version": "0.13.3", "DependsOn": [ "zstd-safe@7.2.4" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd-safe@7.2.4", "Name": "zstd-safe", "Identifier": { "PURL": "pkg:cargo/zstd-safe@7.2.4", "UID": "d689e4ce512e9529" }, "Version": "7.2.4", "DependsOn": [ "zstd-sys@2.0.16+zstd.1.5.7" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zstd-sys@2.0.16+zstd.1.5.7", "Name": "zstd-sys", "Identifier": { "PURL": "pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7", "UID": "2716bc55f78d01c5" }, "Version": "2.0.16+zstd.1.5.7", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant@5.10.0", "Name": "zvariant", "Identifier": { "PURL": "pkg:cargo/zvariant@5.10.0", "UID": "599289216872e064" }, "Version": "5.10.0", "DependsOn": [ "endi@1.1.1", "enumflags2@0.7.12", "serde@1.0.228", "winnow@0.7.15", "zvariant_derive@5.10.0", "zvariant_utils@3.3.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant_derive@5.10.0", "Name": "zvariant_derive", "Identifier": { "PURL": "pkg:cargo/zvariant_derive@5.10.0", "UID": "b88aed2fca35d207" }, "Version": "5.10.0", "DependsOn": [ "proc-macro-crate@3.5.0", "proc-macro2@1.0.106", "quote@1.0.45", "syn@2.0.117", "zvariant_utils@3.3.0" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" }, { "ID": "zvariant_utils@3.3.0", "Name": "zvariant_utils", "Identifier": { "PURL": "pkg:cargo/zvariant_utils@3.3.0", "UID": "38b42eaad584bf0d" }, "Version": "3.3.0", "DependsOn": [ "proc-macro2@1.0.106", "quote@1.0.45", "serde@1.0.228", "syn@2.0.117", "winnow@0.7.15" ], "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "AnalyzedBy": "rustbinary" } ], "Vulnerabilities": [ { "VulnerabilityID": "GHSA-4w2j-m93h-cj5j", "PkgID": "quinn-proto@0.11.14", "PkgName": "quinn-proto", "PkgIdentifier": { "PURL": "pkg:cargo/quinn-proto@0.11.14", "UID": "48c483e2eddf93f2" }, "InstalledVersion": "0.11.14", "FixedVersion": "0.11.15", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-4w2j-m93h-cj5j", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:508af9de6f53b7d9a355d0a646027082d4899fab2b9835e3354ef81bfdfbc48f", "Title": "Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly", "Description": "## Summary\n\nThe `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/quinn-rs/quinn", "https://github.com/quinn-rs/quinn/commit/fed0321a9a672819662caab37f5662f1ad91308e", "https://github.com/quinn-rs/quinn/pull/2694", "https://github.com/quinn-rs/quinn/releases/tag/quinn-proto-0.11.15", "https://github.com/quinn-rs/quinn/security/advisories/GHSA-4w2j-m93h-cj5j", "https://rustsec.org/advisories/RUSTSEC-2026-0185.html" ], "PublishedDate": "2026-07-24T14:07:54Z", "LastModifiedDate": "2026-07-24T14:07:54Z" }, { "VulnerabilityID": "GHSA-82j2-j2ch-gfr8", "PkgID": "rustls-webpki@0.103.10", "PkgName": "rustls-webpki", "PkgIdentifier": { "PURL": "pkg:cargo/rustls-webpki@0.103.10", "UID": "b8737a8fd8bb001d" }, "InstalledVersion": "0.103.10", "FixedVersion": "0.103.13, 0.104.0-alpha.7", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-82j2-j2ch-gfr8", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:d22108defa5f1a17aa1424e483e2bc154bdc0e9157939b1a53f7d78d9ce1775d", "Title": "rustls-webpki: Denial of service via panic on malformed CRL BIT STRING", "Description": "### Summary\n\n`bit_string_flags()` in `src/der.rs` panics with an index-out-of-bounds when given a BIT STRING whose content is exactly `[0x00]` (one byte: zero padding bits, zero data bytes). This is reachable through the public API `BorrowedCertRevocationList::from_der()` via the `issuingDistributionPoint` CRL extension.\n\n**Precondition**: CRL checking is opt-in in rustls-webpki. This vulnerability affects only applications that explicitly pass `RevocationOptions` to `verify_for_usage()` and load CRL bytes from a source the attacker can influence. The default rustls configuration (no `RevocationOptions`) is not affected.\n\n\u003e **AI disclosure**: This report was prepared with AI assistance (Claude). The vulnerability was discovered by differential fuzzing against a formally-verified Rust oracle. All technical claims have been independently verified against the live source code before submission.\n\n### Details\n`bit_string_flags()` in `src/der.rs` reads the content of named-bit BIT\nSTRINGs (KeyUsage, ReasonFlags, etc.). Its input guard:\n\n```rust\nif padding_bits \u003e 7 || (raw_bits.is_empty() \u0026\u0026 padding_bits != 0) {\n return Err(Error::BadDer);\n}\nlet last_byte = raw_bits[raw_bits.len() - 1]; // ← crash\n```\nmisses the case `padding_bits == 0 \u0026\u0026 raw_bits.is_empty()`.\nWhen a BIT STRING has content `[0x00]` (one padding-bits byte set to zero, no data bytes):\n- padding_bits = 0x00 — passes the \u003e 7 check ✓\n- raw_bits = [] — passes is_empty() \u0026\u0026 != 0 check ✓ (because 0 != 0 is false)\n- raw_bits.len() - 1 = 0usize - 1 = underflow → usize::MAX\n- raw_bits[usize::MAX] → panic\n\n\nDebug: thread 'main' panicked: attempt to subtract with overflow\nRelease: thread 'main' panicked: index out of bounds: the len is 0\n but the index is 18446744073709551615\n\n### PoC\nCargo.toml:\n```\n[dependencies]\nrustls-webpki = \"0.102.8\" # also reproduces on 0.103.12\n```\nsrc/main.rs:\n```\nfn main() {\n let crl: \u0026[u8] = \u0026[\n 0x30, 0x65, 0x30, 0x50, 0x02, 0x01, 0x01, 0x30, 0x0d, 0x06, 0x09,\n 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b, 0x05, 0x00,\n 0x30, 0x0c, 0x31, 0x0a, 0x30, 0x08, 0x06, 0x03, 0x55, 0x04, 0x03,\n 0x13, 0x01, 0x41, 0x17, 0x0d, 0x32, 0x30, 0x30, 0x31, 0x30, 0x31,\n 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a, 0x17, 0x0d, 0x32, 0x31,\n 0x30, 0x31, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x5a,\n 0xa0, 0x10, 0x30, 0x0e, 0x30, 0x0c, 0x06, 0x03, 0x55, 0x1d, 0x1c,\n 0x04, 0x05, 0x30, 0x03, 0x83, 0x01, 0x00, 0x30, 0x0d, 0x06, 0x09,\n 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x0b, 0x05, 0x00,\n 0x03, 0x02, 0x00, 0x00,\n ];\n // Panics — never returns\n let _ = webpki::BorrowedCertRevocationList::from_der(crl);\n}\n```\noutput:\n```\nthread 'main' panicked at src/der.rs:...\nindex out of bounds: the len is 0 but the index is 18446744073709551615\n```\n#### Trigger\n```\na0 10 -- cRLExtensions [0] EXPLICIT\n 30 0e -- SEQUENCE OF Extension\n 30 0c -- Extension SEQUENCE\n 06 03 55 1d 1c -- OID 2.5.29.28 (id-ce-issuingDistributionPoint)\n 04 05 -- OCTET STRING (extnValue)\n 30 03 -- IssuingDistributionPoint SEQUENCE\n 83 01 00 -- [3] onlySomeReasons: BIT STRING, len=1, content=0x00\n -- padding_bits=0, data=[] ← TRIGGER\n```\n\n\n### Impact\n- Who is affected: \nApplications that (1) use rustls-webpki with CRL\nrevocation checking explicitly enabled via RevocationOptions, and (2)\nload CRL bytes from a source an attacker can influence.\n- Attack paths:\n - mTLS server (most realistic): An attacker obtains any certificate from a CA that permits custom CDP URLs — common in enterprise PKI. They set the CDP to a server they control, serve the 103-byte crafted CRL, and connect to the target. The server fetches the attacker's CRL during the handshake and panics. No MITM required.\n - TLS client with server-cert CRL checking: An attacker who can MITM an HTTP CRL distribution point (ARP/DNS poisoning on a local network) serves the crafted CRL in place of the legitimate one.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://github.com/rustls/webpki", "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8", "https://rustsec.org/advisories/RUSTSEC-2026-0104.html" ], "PublishedDate": "2026-04-24T16:20:17Z", "LastModifiedDate": "2026-04-24T16:20:17Z" }, { "VulnerabilityID": "CVE-2026-115905", "VendorIDs": [ "GHSA-m665-v7pm-7grj" ], "PkgID": "zip@8.1.0", "PkgName": "zip", "PkgIdentifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "ddb05d2712aeda1e" }, "InstalledVersion": "8.1.0", "FixedVersion": "9.0.5", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115905", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:ff026e7f974a385e11721546e848d204efd8e03eb4540243daf087951bc24c2a", "Title": "zip2: zip: Critical Parser Differential \u0026 Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite \u0026 RCE", "Description": "zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader extracts using Local File Header filenames without reconciling the duplicate metadata in src/read/stream.rs. A crafted archive can therefore appear benign to a component that inspects the central directory but cause a streaming extractor to write a different attacker-selected path and content, potentially overwriting files used by a downstream service. This issue is fixed in version 9.0.5.", "Severity": "CRITICAL", "CweIDs": [ "CWE-20", "CWE-436" ], "VendorSeverity": { "ghsa": 4, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L", "V40Score": 10 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115905", "https://github.com/zip-rs/zip2", "https://github.com/zip-rs/zip2/commit/8068ab480ccf8daa7411424e365fcdbe6d09443e", "https://github.com/zip-rs/zip2/releases/tag/v9.0.5", "https://github.com/zip-rs/zip2/security/advisories/GHSA-m665-v7pm-7grj", "https://nvd.nist.gov/vuln/detail/CVE-2026-115905", "https://www.cve.org/CVERecord?id=CVE-2026-115905" ], "PublishedDate": "2026-10-26T17:17:17.823Z", "LastModifiedDate": "2026-11-02T18:18:38.683Z" }, { "VulnerabilityID": "CVE-2026-115907", "VendorIDs": [ "GHSA-9hj8-73fh-9963" ], "PkgID": "zip@8.1.0", "PkgName": "zip", "PkgIdentifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "ddb05d2712aeda1e" }, "InstalledVersion": "8.1.0", "FixedVersion": "9.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115907", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:da43dd89fa8597dea45c7426823a46f52d602bc98f5236adda1110b46b3dbd66", "Title": "zip: zip: Denial of Service via unbounded memory preallocation", "Description": "zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can reserve output capacity from an attacker-controlled ZIP64 uncompressed size before validating the compressed stream. The ShrinkDecoder path in src/legacy/shrink.rs can panic with a capacity overflow during ZipArchive::extract, and the Reduce and Implode decoders contain the same unbounded preallocation pattern. An unhandled panic can terminate an archive-processing service. This issue is fixed in version 9.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-789" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115907", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1152227", "https://github.com/cveproject/cvelistv5/tree/main/cves/2026/115xxx/cve-2026-115907.json", "https://github.com/zip-rs/zip2", "https://github.com/zip-rs/zip2/commit/8b4991288b79ad11cce201c2d785d5baa795bd3e", "https://github.com/zip-rs/zip2/pull/991", "https://github.com/zip-rs/zip2/releases/tag/v9.0.0", "https://github.com/zip-rs/zip2/security/advisories/GHSA-9hj8-73fh-9963", "https://github.com/zip-rs/zip2/security/advisories/ghsa-9hj8-73fh-9963", "https://nvd.nist.gov/vuln/detail/CVE-2026-115907", "https://nvd.nist.gov/vuln/detail/cve-2026-115907", "https://security-tracker.debian.org/tracker/cve-2026-115907", "https://www.cve.org/CVERecord?id=CVE-2026-115907" ], "PublishedDate": "2026-10-26T17:17:18.147Z", "LastModifiedDate": "2026-10-30T15:16:45.727Z" }, { "VulnerabilityID": "CVE-2026-115908", "VendorIDs": [ "GHSA-hjqx-j4rw-g7xv" ], "PkgID": "zip@8.1.0", "PkgName": "zip", "PkgIdentifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "ddb05d2712aeda1e" }, "InstalledVersion": "8.1.0", "FixedVersion": "9.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115908", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:bf83b19cf4da883dcdd7f58ffd8a97e8e6f3bdab55856485ac0551901669083c", "Title": "zip: zip: Arbitrary file overwrite via improper symbolic link validation during extraction", "Description": "zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extract_unwrapped_root_dir use safe_prepare_path in src/read/zipfile.rs and simplified_components in src/path.rs to validate symbolic link targets with a lexical prefix comparison rather than resolving each intermediate link. An attacker who knows or can guess the absolute extraction destination can create a chain whose apparent target remains under the destination while an intermediate symlink resolves outside it, allowing attacker-controlled files to be created or overwritten with the extracting process's privileges. On Windows, discarded drive and UNC prefixes can permit a single-link escape when the process has SeCreateSymbolicLinkPrivilege, such as through administrator rights or Developer Mode. This regression is distinct from CVE-2025-29787. This issue is fixed in version 9.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-59", "CWE-61" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115908", "https://github.com/cveproject/cvelistv5/tree/main/cves/2026/115xxx/cve-2026-115908.json", "https://github.com/zip-rs/zip2", "https://github.com/zip-rs/zip2/commit/09c030eab56e8db8fb3c1c33f554407b30bad8fa", "https://github.com/zip-rs/zip2/releases/tag/v9.0.0", "https://github.com/zip-rs/zip2/security/advisories/GHSA-hjqx-j4rw-g7xv", "https://github.com/zip-rs/zip2/security/advisories/ghsa-hjqx-j4rw-g7xv", "https://nvd.nist.gov/vuln/detail/CVE-2026-115908", "https://nvd.nist.gov/vuln/detail/cve-2026-115908", "https://www.cve.org/CVERecord?id=CVE-2026-115908" ], "PublishedDate": "2026-10-26T17:17:18.293Z", "LastModifiedDate": "2026-10-26T20:17:51.557Z" }, { "VulnerabilityID": "CVE-2026-115909", "VendorIDs": [ "GHSA-q7v9-x93c-xqv3" ], "PkgID": "zip@8.1.0", "PkgName": "zip", "PkgIdentifier": { "PURL": "pkg:cargo/zip@8.1.0", "UID": "ddb05d2712aeda1e" }, "InstalledVersion": "8.1.0", "FixedVersion": "9.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:24d88fdc7569ebafbce4467314f99765a5d25d36cad2f6688d2db3a6f6fa39a6" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-115909", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory Rust", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Arust" }, "Fingerprint": "sha256:12b39681f320657f17507772780aa67bf0f21b6e6fc06748995390e207bbd4f8", "Title": "zip: zip: Denial of Service via excessive memory allocation in symbolic link extraction", "Description": "zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipArchive::extract in src/read/mod.rs calls Vec::with_capacity for a symbolic link target using the attacker-controlled ZIP64 uncompressed_size before reading entry data. A small archive can request an impossible capacity, causing the infallible allocation path to abort the process before the entry is validated. The failure cannot be contained with catch_unwind or a worker thread, allowing repeated denial of service in archive-processing applications. This issue is fixed in version 9.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-400", "CWE-789" ], "VendorSeverity": { "ghsa": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-115909", "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1152227", "https://github.com/cveproject/cvelistv5/tree/main/cves/2026/115xxx/cve-2026-115909.json", "https://github.com/zip-rs/zip2", "https://github.com/zip-rs/zip2/commit/a543a1fc8f3f3eef36f27bb137230295284cdb98", "https://github.com/zip-rs/zip2/pull/984", "https://github.com/zip-rs/zip2/releases/tag/v9.0.0", "https://github.com/zip-rs/zip2/security/advisories/GHSA-q7v9-x93c-xqv3", "https://github.com/zip-rs/zip2/security/advisories/ghsa-q7v9-x93c-xqv3", "https://nvd.nist.gov/vuln/detail/CVE-2026-115909", "https://nvd.nist.gov/vuln/detail/cve-2026-115909", "https://security-tracker.debian.org/tracker/cve-2026-115909", "https://www.cve.org/CVERecord?id=CVE-2026-115909" ], "PublishedDate": "2026-10-26T17:17:18.45Z", "LastModifiedDate": "2026-10-26T20:17:51.68Z" } ] } ] }