{
"SchemaVersion": 2,
"Trivy": {
"Version": "0.72.0"
},
"ReportID": "019f9ea9-1ece-7bf0-b6d5-4204f920e86e",
"CreatedAt": "2026-07-26T13:41:51.438804002Z",
"ArtifactID": "sha256:bda7e833e449ca0abeaf325c26af926ffd60a435eeee0e2c705e3b1edb8dbe76",
"ArtifactName": "hiverelay/blind-daemon:1.0.0-rc.1.public-test.1",
"ArtifactType": "container_image",
"Metadata": {
"Size": 276097536,
"OS": {
"Family": "debian",
"Name": "12.14"
},
"ImageID": "sha256:57b7c2b1645b2c728efd761904b40a838b2db6111b0e9957b081d800ccf98f9f",
"DiffIDs": [
"sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197",
"sha256:3ff3df288c5f26f15331c6c4ca499acd6d287497817e62226ff4969eafd5ae80",
"sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48",
"sha256:9cbea61511025738777b634194f928d92f2143b7482bd5be0d1dd682f8d5d0c9",
"sha256:997095c83c6c643e645aab477962ef649c05eac06bd95fe617fe18e6b68f3add",
"sha256:8b6a4a97c2ad1a78a58fb8aabd5fd4dc8c5512685a1c8b744efb24250433b205",
"sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
"sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2",
"sha256:46338bf1fad7a7b537d75cc90258bc87a1550ae25a027cc054eefb3d63fb2942",
"sha256:9780d947e5f423db09cbb8d30b8c4a885b392d68484bed8f5069cc865827ef3a"
],
"RepoTags": [
"hiverelay/blind-daemon:1.0.0-rc.1.public-test.1"
],
"RepoDigests": [
"hiverelay/blind-daemon@sha256:57b7c2b1645b2c728efd761904b40a838b2db6111b0e9957b081d800ccf98f9f"
],
"Reference": "hiverelay/blind-daemon:1.0.0-rc.1.public-test.1",
"ImageConfig": {
"architecture": "arm64",
"created": "2026-07-26T13:27:38Z",
"history": [
{
"created": "2026-06-23T00:00:00Z",
"created_by": "# debian.sh --arch 'arm64' out/ 'bookworm' '@1782172800'",
"comment": "debuerreotype 0.17"
},
{
"created": "2026-06-24T01:49:16Z",
"created_by": "RUN /bin/sh -c groupadd --gid 1000 node \u0026\u0026 useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-06-24T01:49:35Z",
"created_by": "ENV NODE_VERSION=22.23.1",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-06-24T01:49:35Z",
"created_by": "RUN /bin/sh -c ARCH= OPENSSL_ARCH= \u0026\u0026 dpkgArch=\"$(dpkg --print-architecture)\" \u0026\u0026 case \"${dpkgArch##*-}\" in amd64) ARCH='x64' OPENSSL_ARCH='linux-x86_64';; ppc64el) ARCH='ppc64le' OPENSSL_ARCH='linux-ppc64le';; s390x) ARCH='s390x' OPENSSL_ARCH='linux*-s390x';; arm64) ARCH='arm64' OPENSSL_ARCH='linux-aarch64';; armhf) ARCH='armv7l' OPENSSL_ARCH='linux-armv4';; *) echo \"unsupported architecture\"; exit 1 ;; esac \u0026\u0026 set -ex \u0026\u0026 apt-get update \u0026\u0026 apt-get install -y ca-certificates curl wget gnupg dirmngr xz-utils libatomic1 --no-install-recommends \u0026\u0026 rm -rf /var/lib/apt/lists/* \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } ; done \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz\" \u0026\u0026 curl -fsSLO --compressed \"https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc\" \u0026\u0026 gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 grep \" node-v$NODE_VERSION-linux-$ARCH.tar.xz\\$\" SHASUMS256.txt | sha256sum -c - \u0026\u0026 tar -xJf \"node-v$NODE_VERSION-linux-$ARCH.tar.xz\" -C /usr/local --strip-components=1 --no-same-owner \u0026\u0026 rm \"node-v$NODE_VERSION-linux-$ARCH.tar.xz\" SHASUMS256.txt.asc SHASUMS256.txt \u0026\u0026 find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name \"$OPENSSL_ARCH\" -exec rm -rf {} \\; \u0026\u0026 apt-mark auto '.*' \u003e /dev/null \u0026\u0026 find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual \u0026\u0026 apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \u0026\u0026 ln -s /usr/local/bin/node /usr/local/bin/nodejs \u0026\u0026 node --version \u0026\u0026 npm --version \u0026\u0026 rm -rf /tmp/* # buildkit",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-06-24T01:49:35Z",
"created_by": "ENV YARN_VERSION=1.22.22",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-06-24T01:49:48Z",
"created_by": "RUN /bin/sh -c set -ex \u0026\u0026 savedAptMark=\"$(apt-mark showmanual)\" \u0026\u0026 apt-get update \u0026\u0026 apt-get install -y ca-certificates curl wget gnupg dirmngr --no-install-recommends \u0026\u0026 rm -rf /var/lib/apt/lists/* \u0026\u0026 export GNUPGHOME=\"$(mktemp -d)\" \u0026\u0026 for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys \"$key\" \u0026\u0026 gpg --batch --fingerprint \"$key\"; } ; done \u0026\u0026 curl -fsSLO --compressed \"https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz\" \u0026\u0026 curl -fsSLO --compressed \"https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc\" \u0026\u0026 gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \u0026\u0026 gpgconf --kill all \u0026\u0026 rm -rf \"$GNUPGHOME\" \u0026\u0026 mkdir -p /opt \u0026\u0026 tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ \u0026\u0026 ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn \u0026\u0026 ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg \u0026\u0026 rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz \u0026\u0026 apt-mark auto '.*' \u003e /dev/null \u0026\u0026 { [ -z \"$savedAptMark\" ] || apt-mark manual $savedAptMark \u003e /dev/null; } \u0026\u0026 find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual \u0026\u0026 apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false \u0026\u0026 yarn --version \u0026\u0026 rm -rf /tmp/* # buildkit",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-06-24T01:49:48Z",
"created_by": "COPY docker-entrypoint.sh /usr/local/bin/ # buildkit",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-06-24T01:49:48Z",
"created_by": "ENTRYPOINT [\"docker-entrypoint.sh\"]",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-06-24T01:49:48Z",
"created_by": "CMD [\"node\"]",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "ARG HIVERELAY_BLIND_BUNDLE_ID=1.0.0-rc.1.public-test.1",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "ARG HIVERELAY_BLIND_BUILD_ID=1.0.0-rc.1.public-test.1",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "ARG HIVERELAY_BLIND_SOURCE_REVISION=973f25c212553653b65811eacd28ed35b1b54124",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "ARG HIVERELAY_BLIND_SOURCE_TREE=ebd504fa318a90f34fc52e9febb9385db606330d",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "LABEL org.opencontainers.image.title=HiveRelay Blind Daemon org.opencontainers.image.description=Private canonical dispatcher, storage, and signing daemon for the blind app substrate org.opencontainers.image.licenses=Apache-2.0 org.opencontainers.image.version=1.0.0-rc.1.public-test.1 org.opencontainers.image.revision=973f25c212553653b65811eacd28ed35b1b54124 org.opencontainers.image.source=https://github.com/bigdestiny2/p2p-hiverelay org.opencontainers.image.hiverelay.product-mode=BLIND_APPLICATION_SUBSTRATE_V1 org.opencontainers.image.hiverelay.component=daemon org.opencontainers.image.hiverelay.bundle-id=1.0.0-rc.1.public-test.1 org.opencontainers.image.hiverelay.build-id=1.0.0-rc.1.public-test.1 org.opencontainers.image.hiverelay.source-tree=ebd504fa318a90f34fc52e9febb9385db606330d org.opencontainers.image.hiverelay.claim-boundary=LIVE_PUBLIC_TEST_ONLY",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "RUN |4 HIVERELAY_BLIND_BUNDLE_ID=1.0.0-rc.1.public-test.1 HIVERELAY_BLIND_BUILD_ID=1.0.0-rc.1.public-test.1 HIVERELAY_BLIND_SOURCE_REVISION=973f25c212553653b65811eacd28ed35b1b54124 HIVERELAY_BLIND_SOURCE_TREE=ebd504fa318a90f34fc52e9febb9385db606330d /bin/sh -c groupadd --system --gid 997 hiverelay-blind \u0026\u0026 useradd --system --uid 999 --gid hiverelay-blind --home-dir /data/blind --shell /usr/sbin/nologin hiverelay-daemon \u0026\u0026 install -d -o 999 -g 997 -m 0750 /run/hiverelay-blind \u0026\u0026 install -d -o 999 -g 997 -m 0700 /data/blind \u0026\u0026 install -d -o 999 -g 997 -m 0550 /opt/hiverelay/daemon # buildkit",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "WORKDIR /opt/hiverelay/daemon",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "COPY /opt/hiverelay/deploy/blind/daemon/node_modules ./node_modules # buildkit",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "COPY --chown=0:0 --chmod=0444 /opt/hiverelay/peercred-target-architecture ./peercred-target-architecture # buildkit",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "COPY --chown=0:0 --chmod=0444 deploy/blind/daemon/healthcheck.mjs ./healthcheck.mjs # buildkit",
"comment": "buildkit.dockerfile.v0"
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "ENV NODE_ENV=production HIVERELAY_BLIND_RUNTIME_DIR=/run/hiverelay-blind HIVERELAY_BLIND_UNARY_SOCKET=/run/hiverelay-blind/unary.sock HIVERELAY_BLIND_STREAM_SOCKET=/run/hiverelay-blind/stream.sock HIVERELAY_BLIND_DATA=/data/blind HIVERELAY_BLIND_EDGE_UID=998 HIVERELAY_BLIND_DAEMON_UID=999 HIVERELAY_BLIND_DAEMON_GID=997 HIVERELAY_BLIND_SHARED_GID=997",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "VOLUME [/run/hiverelay-blind /data/blind]",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "USER 999:997",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "HEALTHCHECK \u0026{[\"CMD\" \"node\" \"/opt/hiverelay/daemon/healthcheck.mjs\"] \"5s\" \"2s\" \"5s\" \"0s\" '\\f'}",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
},
{
"created": "2026-07-26T13:27:38Z",
"created_by": "ENTRYPOINT [\"node\" \"/opt/hiverelay/daemon/node_modules/@hiverelay/blind-daemon/cli.js\"]",
"comment": "buildkit.dockerfile.v0",
"empty_layer": true
}
],
"os": "linux",
"rootfs": {
"type": "layers",
"diff_ids": [
"sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197",
"sha256:3ff3df288c5f26f15331c6c4ca499acd6d287497817e62226ff4969eafd5ae80",
"sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48",
"sha256:9cbea61511025738777b634194f928d92f2143b7482bd5be0d1dd682f8d5d0c9",
"sha256:997095c83c6c643e645aab477962ef649c05eac06bd95fe617fe18e6b68f3add",
"sha256:8b6a4a97c2ad1a78a58fb8aabd5fd4dc8c5512685a1c8b744efb24250433b205",
"sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
"sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2",
"sha256:46338bf1fad7a7b537d75cc90258bc87a1550ae25a027cc054eefb3d63fb2942",
"sha256:9780d947e5f423db09cbb8d30b8c4a885b392d68484bed8f5069cc865827ef3a"
]
},
"config": {
"Healthcheck": {
"Test": [
"CMD",
"node",
"/opt/hiverelay/daemon/healthcheck.mjs"
],
"Interval": 5000000000,
"Timeout": 2000000000,
"StartPeriod": 5000000000,
"Retries": 12
},
"Entrypoint": [
"node",
"/opt/hiverelay/daemon/node_modules/@hiverelay/blind-daemon/cli.js"
],
"Env": [
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
"NODE_VERSION=22.23.1",
"YARN_VERSION=1.22.22",
"NODE_ENV=production",
"HIVERELAY_BLIND_RUNTIME_DIR=/run/hiverelay-blind",
"HIVERELAY_BLIND_UNARY_SOCKET=/run/hiverelay-blind/unary.sock",
"HIVERELAY_BLIND_STREAM_SOCKET=/run/hiverelay-blind/stream.sock",
"HIVERELAY_BLIND_DATA=/data/blind",
"HIVERELAY_BLIND_EDGE_UID=998",
"HIVERELAY_BLIND_DAEMON_UID=999",
"HIVERELAY_BLIND_DAEMON_GID=997",
"HIVERELAY_BLIND_SHARED_GID=997"
],
"Labels": {
"org.opencontainers.image.description": "Private canonical dispatcher, storage, and signing daemon for the blind app substrate",
"org.opencontainers.image.hiverelay.build-id": "1.0.0-rc.1.public-test.1",
"org.opencontainers.image.hiverelay.bundle-id": "1.0.0-rc.1.public-test.1",
"org.opencontainers.image.hiverelay.claim-boundary": "LIVE_PUBLIC_TEST_ONLY",
"org.opencontainers.image.hiverelay.component": "daemon",
"org.opencontainers.image.hiverelay.product-mode": "BLIND_APPLICATION_SUBSTRATE_V1",
"org.opencontainers.image.hiverelay.source-tree": "ebd504fa318a90f34fc52e9febb9385db606330d",
"org.opencontainers.image.licenses": "Apache-2.0",
"org.opencontainers.image.revision": "973f25c212553653b65811eacd28ed35b1b54124",
"org.opencontainers.image.source": "https://github.com/bigdestiny2/p2p-hiverelay",
"org.opencontainers.image.title": "HiveRelay Blind Daemon",
"org.opencontainers.image.version": "1.0.0-rc.1.public-test.1"
},
"User": "999:997",
"Volumes": {
"/data/blind": {},
"/run/hiverelay-blind": {}
},
"WorkingDir": "/opt/hiverelay/daemon"
}
},
"Layers": [
{
"Size": 100239360,
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
{
"Size": 21504,
"Digest": "sha256:0e832fa8743efe71bf8a2524827700e16ac83b74942073675f4c8f267b866306",
"DiffID": "sha256:3ff3df288c5f26f15331c6c4ca499acd6d287497817e62226ff4969eafd5ae80"
},
{
"Size": 144891904,
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
{
"Size": 7214592,
"Digest": "sha256:4bc834702693a20ef8e6f2b58d80b8e54faf0094e6377ad8464ed4ebb7715ff1",
"DiffID": "sha256:9cbea61511025738777b634194f928d92f2143b7482bd5be0d1dd682f8d5d0c9"
},
{
"Size": 3584,
"Digest": "sha256:1bc538ee50930e70026931c3ae28ad62b53277c37a9bc8c13a816f10e155ca04",
"DiffID": "sha256:997095c83c6c643e645aab477962ef649c05eac06bd95fe617fe18e6b68f3add"
},
{
"Size": 14848,
"Digest": "sha256:3553ffcc007dbf8a10f30e5701c50cffc3f4bfae2cbb62763f363402764020d0",
"DiffID": "sha256:8b6a4a97c2ad1a78a58fb8aabd5fd4dc8c5512685a1c8b744efb24250433b205"
},
{
"Size": 1024,
"Digest": "sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1",
"DiffID": "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
},
{
"Size": 23700480,
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
{
"Size": 3584,
"Digest": "sha256:38481e383988cac56705e21ec6e38b4ee95f2473a08b85efb50a4d36136f5433",
"DiffID": "sha256:46338bf1fad7a7b537d75cc90258bc87a1550ae25a027cc054eefb3d63fb2942"
},
{
"Size": 6656,
"Digest": "sha256:fc604df406583d9cf605fac6fc42769efd2f4abe01fe4b24d7959e9af04fa11d",
"DiffID": "sha256:9780d947e5f423db09cbb8d30b8c4a885b392d68484bed8f5069cc865827ef3a"
}
]
},
"Results": [
{
"Target": "hiverelay/blind-daemon:1.0.0-rc.1.public-test.1 (debian 12.14)",
"Class": "os-pkgs",
"Type": "debian",
"Packages": [
{
"ID": "adduser@3.134",
"Name": "adduser",
"Identifier": {
"PURL": "pkg:deb/debian/adduser@3.134?arch=all\u0026distro=debian-12.14",
"UID": "93cd263bba1f52c7"
},
"Version": "3.134",
"Arch": "all",
"SrcName": "adduser",
"SrcVersion": "3.134",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only"
],
"Maintainer": "Debian Adduser Developers \u003cadduser@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"passwd@1:4.13+dfsg1-1+deb12u2"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/sbin/adduser",
"/usr/sbin/deluser",
"/usr/share/doc/adduser/NEWS.Debian.gz",
"/usr/share/doc/adduser/README.gz",
"/usr/share/doc/adduser/TODO",
"/usr/share/doc/adduser/changelog.gz",
"/usr/share/doc/adduser/copyright",
"/usr/share/doc/adduser/examples/INSTALL",
"/usr/share/doc/adduser/examples/README",
"/usr/share/doc/adduser/examples/adduser.conf",
"/usr/share/doc/adduser/examples/adduser.local",
"/usr/share/doc/adduser/examples/adduser.local.conf",
"/usr/share/doc/adduser/examples/adduser.local.conf.examples/bash.bashrc",
"/usr/share/doc/adduser/examples/adduser.local.conf.examples/profile",
"/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel.other/index.html",
"/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_logout",
"/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_profile",
"/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bashrc",
"/usr/share/doc/adduser/examples/deluser.conf",
"/usr/share/locale/ca/LC_MESSAGES/adduser.mo",
"/usr/share/locale/cs/LC_MESSAGES/adduser.mo",
"/usr/share/locale/da/LC_MESSAGES/adduser.mo",
"/usr/share/locale/de/LC_MESSAGES/adduser.mo",
"/usr/share/locale/es/LC_MESSAGES/adduser.mo",
"/usr/share/locale/eu/LC_MESSAGES/adduser.mo",
"/usr/share/locale/fr/LC_MESSAGES/adduser.mo",
"/usr/share/locale/gl/LC_MESSAGES/adduser.mo",
"/usr/share/locale/hu/LC_MESSAGES/adduser.mo",
"/usr/share/locale/it/LC_MESSAGES/adduser.mo",
"/usr/share/locale/ja/LC_MESSAGES/adduser.mo",
"/usr/share/locale/ko/LC_MESSAGES/adduser.mo",
"/usr/share/locale/nb/LC_MESSAGES/adduser.mo",
"/usr/share/locale/nl/LC_MESSAGES/adduser.mo",
"/usr/share/locale/pl/LC_MESSAGES/adduser.mo",
"/usr/share/locale/pt/LC_MESSAGES/adduser.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/adduser.mo",
"/usr/share/locale/ru/LC_MESSAGES/adduser.mo",
"/usr/share/locale/sk/LC_MESSAGES/adduser.mo",
"/usr/share/locale/sv/LC_MESSAGES/adduser.mo",
"/usr/share/locale/uk/LC_MESSAGES/adduser.mo",
"/usr/share/locale/vi/LC_MESSAGES/adduser.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/adduser.mo",
"/usr/share/man/de/man5/adduser.conf.5.gz",
"/usr/share/man/de/man5/deluser.conf.5.gz",
"/usr/share/man/de/man8/adduser.8.gz",
"/usr/share/man/de/man8/deluser.8.gz",
"/usr/share/man/fr/man5/adduser.conf.5.gz",
"/usr/share/man/fr/man5/deluser.conf.5.gz",
"/usr/share/man/fr/man8/adduser.8.gz",
"/usr/share/man/fr/man8/deluser.8.gz",
"/usr/share/man/man5/adduser.conf.5.gz",
"/usr/share/man/man5/deluser.conf.5.gz",
"/usr/share/man/man8/adduser.8.gz",
"/usr/share/man/man8/adduser.local.8.gz",
"/usr/share/man/man8/deluser.8.gz",
"/usr/share/man/nl/man5/adduser.conf.5.gz",
"/usr/share/man/nl/man5/deluser.conf.5.gz",
"/usr/share/man/nl/man8/adduser.8.gz",
"/usr/share/man/nl/man8/deluser.8.gz",
"/usr/share/man/pt/man5/adduser.conf.5.gz",
"/usr/share/man/pt/man5/deluser.conf.5.gz",
"/usr/share/man/pt/man8/adduser.8.gz",
"/usr/share/man/pt/man8/deluser.8.gz",
"/usr/share/perl5/Debian/AdduserCommon.pm"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "apt@2.6.1",
"Name": "apt",
"Identifier": {
"PURL": "pkg:deb/debian/apt@2.6.1?arch=arm64\u0026distro=debian-12.14",
"UID": "ca5a17d9795b550f"
},
"Version": "2.6.1",
"Arch": "arm64",
"SrcName": "apt",
"SrcVersion": "2.6.1",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"BSD-3-Clause",
"MIT"
],
"Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"adduser@3.134",
"debian-archive-keyring@2023.3+deb12u2",
"gpgv@2.2.40-1.1+deb12u2",
"libapt-pkg6.0@2.6.1",
"libc6@2.36-9+deb12u14",
"libgcc-s1@12.2.0-14+deb12u1",
"libgnutls30@3.7.9-2+deb12u7",
"libseccomp2@2.5.4-1+deb12u1",
"libstdc++6@12.2.0-14+deb12u1",
"libsystemd0@252.39-1~deb12u2"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/systemd/system/apt-daily-upgrade.service",
"/lib/systemd/system/apt-daily-upgrade.timer",
"/lib/systemd/system/apt-daily.service",
"/lib/systemd/system/apt-daily.timer",
"/usr/bin/apt",
"/usr/bin/apt-cache",
"/usr/bin/apt-cdrom",
"/usr/bin/apt-config",
"/usr/bin/apt-get",
"/usr/bin/apt-key",
"/usr/bin/apt-mark",
"/usr/lib/aarch64-linux-gnu/libapt-private.so.0.0.0",
"/usr/lib/apt/apt-helper",
"/usr/lib/apt/apt.systemd.daily",
"/usr/lib/apt/methods/cdrom",
"/usr/lib/apt/methods/copy",
"/usr/lib/apt/methods/file",
"/usr/lib/apt/methods/ftp",
"/usr/lib/apt/methods/gpgv",
"/usr/lib/apt/methods/http",
"/usr/lib/apt/methods/mirror",
"/usr/lib/apt/methods/rred",
"/usr/lib/apt/methods/rsh",
"/usr/lib/apt/methods/store",
"/usr/lib/apt/solvers/dump",
"/usr/lib/dpkg/methods/apt/desc.apt",
"/usr/lib/dpkg/methods/apt/install",
"/usr/lib/dpkg/methods/apt/names",
"/usr/lib/dpkg/methods/apt/setup",
"/usr/lib/dpkg/methods/apt/update",
"/usr/share/bash-completion/completions/apt",
"/usr/share/bug/apt/script",
"/usr/share/doc/apt/NEWS.Debian.gz",
"/usr/share/doc/apt/README.md.gz",
"/usr/share/doc/apt/changelog.gz",
"/usr/share/doc/apt/copyright",
"/usr/share/doc/apt/examples/apt.conf",
"/usr/share/doc/apt/examples/configure-index",
"/usr/share/doc/apt/examples/preferences",
"/usr/share/doc/apt/examples/sources.list",
"/usr/share/lintian/overrides/apt",
"/usr/share/locale/ar/LC_MESSAGES/apt.mo",
"/usr/share/locale/ast/LC_MESSAGES/apt.mo",
"/usr/share/locale/bg/LC_MESSAGES/apt.mo",
"/usr/share/locale/bs/LC_MESSAGES/apt.mo",
"/usr/share/locale/ca/LC_MESSAGES/apt.mo",
"/usr/share/locale/cs/LC_MESSAGES/apt.mo",
"/usr/share/locale/cy/LC_MESSAGES/apt.mo",
"/usr/share/locale/da/LC_MESSAGES/apt.mo",
"/usr/share/locale/de/LC_MESSAGES/apt.mo",
"/usr/share/locale/dz/LC_MESSAGES/apt.mo",
"/usr/share/locale/el/LC_MESSAGES/apt.mo",
"/usr/share/locale/es/LC_MESSAGES/apt.mo",
"/usr/share/locale/eu/LC_MESSAGES/apt.mo",
"/usr/share/locale/fi/LC_MESSAGES/apt.mo",
"/usr/share/locale/fr/LC_MESSAGES/apt.mo",
"/usr/share/locale/gl/LC_MESSAGES/apt.mo",
"/usr/share/locale/hu/LC_MESSAGES/apt.mo",
"/usr/share/locale/it/LC_MESSAGES/apt.mo",
"/usr/share/locale/ja/LC_MESSAGES/apt.mo",
"/usr/share/locale/km/LC_MESSAGES/apt.mo",
"/usr/share/locale/ko/LC_MESSAGES/apt.mo",
"/usr/share/locale/ku/LC_MESSAGES/apt.mo",
"/usr/share/locale/lt/LC_MESSAGES/apt.mo",
"/usr/share/locale/mr/LC_MESSAGES/apt.mo",
"/usr/share/locale/nb/LC_MESSAGES/apt.mo",
"/usr/share/locale/ne/LC_MESSAGES/apt.mo",
"/usr/share/locale/nl/LC_MESSAGES/apt.mo",
"/usr/share/locale/nn/LC_MESSAGES/apt.mo",
"/usr/share/locale/pl/LC_MESSAGES/apt.mo",
"/usr/share/locale/pt/LC_MESSAGES/apt.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/apt.mo",
"/usr/share/locale/ro/LC_MESSAGES/apt.mo",
"/usr/share/locale/ru/LC_MESSAGES/apt.mo",
"/usr/share/locale/sk/LC_MESSAGES/apt.mo",
"/usr/share/locale/sl/LC_MESSAGES/apt.mo",
"/usr/share/locale/sv/LC_MESSAGES/apt.mo",
"/usr/share/locale/th/LC_MESSAGES/apt.mo",
"/usr/share/locale/tl/LC_MESSAGES/apt.mo",
"/usr/share/locale/tr/LC_MESSAGES/apt.mo",
"/usr/share/locale/uk/LC_MESSAGES/apt.mo",
"/usr/share/locale/vi/LC_MESSAGES/apt.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/apt.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/apt.mo",
"/usr/share/man/de/man1/apt-transport-http.1.gz",
"/usr/share/man/de/man1/apt-transport-https.1.gz",
"/usr/share/man/de/man1/apt-transport-mirror.1.gz",
"/usr/share/man/de/man5/apt.conf.5.gz",
"/usr/share/man/de/man5/apt_auth.conf.5.gz",
"/usr/share/man/de/man5/apt_preferences.5.gz",
"/usr/share/man/de/man5/sources.list.5.gz",
"/usr/share/man/de/man7/apt-patterns.7.gz",
"/usr/share/man/de/man8/apt-cache.8.gz",
"/usr/share/man/de/man8/apt-cdrom.8.gz",
"/usr/share/man/de/man8/apt-config.8.gz",
"/usr/share/man/de/man8/apt-get.8.gz",
"/usr/share/man/de/man8/apt-mark.8.gz",
"/usr/share/man/de/man8/apt-secure.8.gz",
"/usr/share/man/de/man8/apt.8.gz",
"/usr/share/man/es/man5/apt_preferences.5.gz",
"/usr/share/man/es/man8/apt-cache.8.gz",
"/usr/share/man/es/man8/apt-cdrom.8.gz",
"/usr/share/man/es/man8/apt-config.8.gz",
"/usr/share/man/fr/man1/apt-transport-http.1.gz",
"/usr/share/man/fr/man1/apt-transport-https.1.gz",
"/usr/share/man/fr/man1/apt-transport-mirror.1.gz",
"/usr/share/man/fr/man5/apt.conf.5.gz",
"/usr/share/man/fr/man5/apt_auth.conf.5.gz",
"/usr/share/man/fr/man5/apt_preferences.5.gz",
"/usr/share/man/fr/man5/sources.list.5.gz",
"/usr/share/man/fr/man8/apt-cache.8.gz",
"/usr/share/man/fr/man8/apt-cdrom.8.gz",
"/usr/share/man/fr/man8/apt-config.8.gz",
"/usr/share/man/fr/man8/apt-get.8.gz",
"/usr/share/man/fr/man8/apt-mark.8.gz",
"/usr/share/man/fr/man8/apt-secure.8.gz",
"/usr/share/man/fr/man8/apt.8.gz",
"/usr/share/man/it/man5/apt.conf.5.gz",
"/usr/share/man/it/man5/apt_preferences.5.gz",
"/usr/share/man/it/man5/sources.list.5.gz",
"/usr/share/man/it/man8/apt-cache.8.gz",
"/usr/share/man/it/man8/apt-cdrom.8.gz",
"/usr/share/man/it/man8/apt-config.8.gz",
"/usr/share/man/it/man8/apt-get.8.gz",
"/usr/share/man/it/man8/apt-mark.8.gz",
"/usr/share/man/it/man8/apt-secure.8.gz",
"/usr/share/man/it/man8/apt.8.gz",
"/usr/share/man/ja/man5/apt.conf.5.gz",
"/usr/share/man/ja/man5/apt_preferences.5.gz",
"/usr/share/man/ja/man5/sources.list.5.gz",
"/usr/share/man/ja/man8/apt-cache.8.gz",
"/usr/share/man/ja/man8/apt-cdrom.8.gz",
"/usr/share/man/ja/man8/apt-config.8.gz",
"/usr/share/man/ja/man8/apt-get.8.gz",
"/usr/share/man/ja/man8/apt-mark.8.gz",
"/usr/share/man/ja/man8/apt-secure.8.gz",
"/usr/share/man/ja/man8/apt.8.gz",
"/usr/share/man/man1/apt-transport-http.1.gz",
"/usr/share/man/man1/apt-transport-https.1.gz",
"/usr/share/man/man1/apt-transport-mirror.1.gz",
"/usr/share/man/man5/apt.conf.5.gz",
"/usr/share/man/man5/apt_auth.conf.5.gz",
"/usr/share/man/man5/apt_preferences.5.gz",
"/usr/share/man/man5/sources.list.5.gz",
"/usr/share/man/man7/apt-patterns.7.gz",
"/usr/share/man/man8/apt-cache.8.gz",
"/usr/share/man/man8/apt-cdrom.8.gz",
"/usr/share/man/man8/apt-config.8.gz",
"/usr/share/man/man8/apt-get.8.gz",
"/usr/share/man/man8/apt-key.8.gz",
"/usr/share/man/man8/apt-mark.8.gz",
"/usr/share/man/man8/apt-secure.8.gz",
"/usr/share/man/man8/apt.8.gz",
"/usr/share/man/nl/man1/apt-transport-http.1.gz",
"/usr/share/man/nl/man1/apt-transport-https.1.gz",
"/usr/share/man/nl/man1/apt-transport-mirror.1.gz",
"/usr/share/man/nl/man5/apt.conf.5.gz",
"/usr/share/man/nl/man5/apt_auth.conf.5.gz",
"/usr/share/man/nl/man5/apt_preferences.5.gz",
"/usr/share/man/nl/man5/sources.list.5.gz",
"/usr/share/man/nl/man7/apt-patterns.7.gz",
"/usr/share/man/nl/man8/apt-cache.8.gz",
"/usr/share/man/nl/man8/apt-cdrom.8.gz",
"/usr/share/man/nl/man8/apt-config.8.gz",
"/usr/share/man/nl/man8/apt-get.8.gz",
"/usr/share/man/nl/man8/apt-key.8.gz",
"/usr/share/man/nl/man8/apt-mark.8.gz",
"/usr/share/man/nl/man8/apt-secure.8.gz",
"/usr/share/man/nl/man8/apt.8.gz",
"/usr/share/man/pl/man5/apt_preferences.5.gz",
"/usr/share/man/pl/man8/apt-cache.8.gz",
"/usr/share/man/pl/man8/apt-cdrom.8.gz",
"/usr/share/man/pl/man8/apt-config.8.gz",
"/usr/share/man/pt/man1/apt-transport-http.1.gz",
"/usr/share/man/pt/man1/apt-transport-https.1.gz",
"/usr/share/man/pt/man1/apt-transport-mirror.1.gz",
"/usr/share/man/pt/man5/apt.conf.5.gz",
"/usr/share/man/pt/man5/apt_auth.conf.5.gz",
"/usr/share/man/pt/man5/apt_preferences.5.gz",
"/usr/share/man/pt/man5/sources.list.5.gz",
"/usr/share/man/pt/man7/apt-patterns.7.gz",
"/usr/share/man/pt/man8/apt-cache.8.gz",
"/usr/share/man/pt/man8/apt-cdrom.8.gz",
"/usr/share/man/pt/man8/apt-config.8.gz",
"/usr/share/man/pt/man8/apt-get.8.gz",
"/usr/share/man/pt/man8/apt-key.8.gz",
"/usr/share/man/pt/man8/apt-mark.8.gz",
"/usr/share/man/pt/man8/apt-secure.8.gz",
"/usr/share/man/pt/man8/apt.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "base-files@12.4+deb12u14",
"Name": "base-files",
"Identifier": {
"PURL": "pkg:deb/debian/base-files@12.4%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "f4a58639bf6b7fd0"
},
"Version": "12.4+deb12u14",
"Arch": "arm64",
"SrcName": "base-files",
"SrcVersion": "12.4+deb12u14",
"Licenses": [
"GPL-2.0-or-later"
],
"Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/os-release",
"/usr/share/base-files/dot.bashrc",
"/usr/share/base-files/dot.profile",
"/usr/share/base-files/dot.profile.md5sums",
"/usr/share/base-files/info.dir",
"/usr/share/base-files/motd",
"/usr/share/base-files/profile",
"/usr/share/base-files/profile.md5sums",
"/usr/share/base-files/staff-group-for-usr-local",
"/usr/share/common-licenses/Apache-2.0",
"/usr/share/common-licenses/Artistic",
"/usr/share/common-licenses/BSD",
"/usr/share/common-licenses/CC0-1.0",
"/usr/share/common-licenses/GFDL-1.2",
"/usr/share/common-licenses/GFDL-1.3",
"/usr/share/common-licenses/GPL-1",
"/usr/share/common-licenses/GPL-2",
"/usr/share/common-licenses/GPL-3",
"/usr/share/common-licenses/LGPL-2",
"/usr/share/common-licenses/LGPL-2.1",
"/usr/share/common-licenses/LGPL-3",
"/usr/share/common-licenses/MPL-1.1",
"/usr/share/common-licenses/MPL-2.0",
"/usr/share/doc/base-files/README",
"/usr/share/doc/base-files/README.FHS",
"/usr/share/doc/base-files/changelog.gz",
"/usr/share/doc/base-files/copyright",
"/usr/share/lintian/overrides/base-files"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "base-passwd@3.6.1",
"Name": "base-passwd",
"Identifier": {
"PURL": "pkg:deb/debian/base-passwd@3.6.1?arch=arm64\u0026distro=debian-12.14",
"UID": "b014a12ea5d93ac3"
},
"Version": "3.6.1",
"Arch": "arm64",
"SrcName": "base-passwd",
"SrcVersion": "3.6.1",
"Licenses": [
"GPL-2.0-only",
"public-domain"
],
"Maintainer": "Colin Watson \u003ccjwatson@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libdebconfclient0@0.270",
"libselinux1@3.4-1+b6"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/sbin/update-passwd",
"/usr/share/base-passwd/group.master",
"/usr/share/base-passwd/passwd.master",
"/usr/share/doc-base/base-passwd.users-and-groups",
"/usr/share/doc/base-passwd/README",
"/usr/share/doc/base-passwd/changelog.gz",
"/usr/share/doc/base-passwd/copyright",
"/usr/share/doc/base-passwd/users-and-groups.html",
"/usr/share/doc/base-passwd/users-and-groups.txt.gz",
"/usr/share/lintian/overrides/base-passwd",
"/usr/share/man/de/man8/update-passwd.8.gz",
"/usr/share/man/es/man8/update-passwd.8.gz",
"/usr/share/man/fr/man8/update-passwd.8.gz",
"/usr/share/man/ja/man8/update-passwd.8.gz",
"/usr/share/man/man8/update-passwd.8.gz",
"/usr/share/man/pl/man8/update-passwd.8.gz",
"/usr/share/man/ru/man8/update-passwd.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "bash@5.2.15-2+b13",
"Name": "bash",
"Identifier": {
"PURL": "pkg:deb/debian/bash@5.2.15-2%2Bb13?arch=arm64\u0026distro=debian-12.14",
"UID": "cec709c8b7538b6f"
},
"Version": "5.2.15",
"Release": "2+b13",
"Arch": "arm64",
"SrcName": "bash",
"SrcVersion": "5.2.15",
"SrcRelease": "2",
"Licenses": [
"GPL-3.0-or-later",
"GPL-3.0-only",
"GPL-3+ with Bison exception",
"GPL-2.0-or-later",
"GPL-2.0-only",
"GFDL-1.3-no-invariants-only",
"GFDL-1.3-only",
"Latex2e",
"BSD-4-Clause-UC",
"MIT",
"permissive"
],
"Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"base-files@12.4+deb12u14",
"debianutils@5.7-0.5~deb12u1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/bash",
"/usr/bin/bashbug",
"/usr/bin/clear_console",
"/usr/share/debianutils/shells.d/bash",
"/usr/share/doc/bash/CHANGES.gz",
"/usr/share/doc/bash/COMPAT.gz",
"/usr/share/doc/bash/INTRO.gz",
"/usr/share/doc/bash/NEWS.gz",
"/usr/share/doc/bash/POSIX.gz",
"/usr/share/doc/bash/RBASH",
"/usr/share/doc/bash/README.Debian.gz",
"/usr/share/doc/bash/README.abs-guide",
"/usr/share/doc/bash/README.commands.gz",
"/usr/share/doc/bash/README.gz",
"/usr/share/doc/bash/changelog.Debian.arm64.gz",
"/usr/share/doc/bash/changelog.Debian.gz",
"/usr/share/doc/bash/changelog.gz",
"/usr/share/doc/bash/copyright",
"/usr/share/doc/bash/inputrc.arrows",
"/usr/share/lintian/overrides/bash",
"/usr/share/locale/af/LC_MESSAGES/bash.mo",
"/usr/share/locale/bg/LC_MESSAGES/bash.mo",
"/usr/share/locale/ca/LC_MESSAGES/bash.mo",
"/usr/share/locale/cs/LC_MESSAGES/bash.mo",
"/usr/share/locale/da/LC_MESSAGES/bash.mo",
"/usr/share/locale/de/LC_MESSAGES/bash.mo",
"/usr/share/locale/el/LC_MESSAGES/bash.mo",
"/usr/share/locale/en@boldquot/LC_MESSAGES/bash.mo",
"/usr/share/locale/en@quot/LC_MESSAGES/bash.mo",
"/usr/share/locale/eo/LC_MESSAGES/bash.mo",
"/usr/share/locale/es/LC_MESSAGES/bash.mo",
"/usr/share/locale/et/LC_MESSAGES/bash.mo",
"/usr/share/locale/fi/LC_MESSAGES/bash.mo",
"/usr/share/locale/fr/LC_MESSAGES/bash.mo",
"/usr/share/locale/ga/LC_MESSAGES/bash.mo",
"/usr/share/locale/gl/LC_MESSAGES/bash.mo",
"/usr/share/locale/hr/LC_MESSAGES/bash.mo",
"/usr/share/locale/hu/LC_MESSAGES/bash.mo",
"/usr/share/locale/id/LC_MESSAGES/bash.mo",
"/usr/share/locale/it/LC_MESSAGES/bash.mo",
"/usr/share/locale/ja/LC_MESSAGES/bash.mo",
"/usr/share/locale/ko/LC_MESSAGES/bash.mo",
"/usr/share/locale/lt/LC_MESSAGES/bash.mo",
"/usr/share/locale/nb/LC_MESSAGES/bash.mo",
"/usr/share/locale/nl/LC_MESSAGES/bash.mo",
"/usr/share/locale/pl/LC_MESSAGES/bash.mo",
"/usr/share/locale/pt/LC_MESSAGES/bash.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/bash.mo",
"/usr/share/locale/ro/LC_MESSAGES/bash.mo",
"/usr/share/locale/ru/LC_MESSAGES/bash.mo",
"/usr/share/locale/sk/LC_MESSAGES/bash.mo",
"/usr/share/locale/sl/LC_MESSAGES/bash.mo",
"/usr/share/locale/sr/LC_MESSAGES/bash.mo",
"/usr/share/locale/sv/LC_MESSAGES/bash.mo",
"/usr/share/locale/tr/LC_MESSAGES/bash.mo",
"/usr/share/locale/uk/LC_MESSAGES/bash.mo",
"/usr/share/locale/vi/LC_MESSAGES/bash.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/bash.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/bash.mo",
"/usr/share/man/man1/bash.1.gz",
"/usr/share/man/man1/bashbug.1.gz",
"/usr/share/man/man1/clear_console.1.gz",
"/usr/share/man/man1/rbash.1.gz",
"/usr/share/man/man7/bash-builtins.7.gz",
"/usr/share/menu/bash"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "bsdutils@1:2.38.1-5+deb12u3",
"Name": "bsdutils",
"Identifier": {
"PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "1ca453e0ebe76d98"
},
"Version": "2.38.1",
"Release": "5+deb12u3",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "util-linux",
"SrcVersion": "2.38.1",
"SrcRelease": "5+deb12u3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-or-later",
"public-domain",
"BSD-4-Clause",
"MIT",
"BSD-3-Clause",
"BSLA",
"LGPL-2.0-or-later",
"LGPL-2.1-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-only",
"LGPL-2.0-only",
"LGPL-2.1-only",
"LGPL-3.0-only"
],
"Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/logger",
"/usr/bin/renice",
"/usr/bin/script",
"/usr/bin/scriptlive",
"/usr/bin/scriptreplay",
"/usr/bin/wall",
"/usr/share/bash-completion/completions/logger",
"/usr/share/bash-completion/completions/renice",
"/usr/share/bash-completion/completions/script",
"/usr/share/bash-completion/completions/scriptlive",
"/usr/share/bash-completion/completions/scriptreplay",
"/usr/share/bash-completion/completions/wall",
"/usr/share/doc/bsdutils/changelog.Debian.gz",
"/usr/share/doc/bsdutils/changelog.gz",
"/usr/share/doc/bsdutils/copyright",
"/usr/share/lintian/overrides/bsdutils",
"/usr/share/man/man1/logger.1.gz",
"/usr/share/man/man1/renice.1.gz",
"/usr/share/man/man1/script.1.gz",
"/usr/share/man/man1/scriptlive.1.gz",
"/usr/share/man/man1/scriptreplay.1.gz",
"/usr/share/man/man1/wall.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "coreutils@9.1-1",
"Name": "coreutils",
"Identifier": {
"PURL": "pkg:deb/debian/coreutils@9.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "3b4b38838bb03aaa"
},
"Version": "9.1",
"Release": "1",
"Arch": "arm64",
"SrcName": "coreutils",
"SrcVersion": "9.1",
"SrcRelease": "1",
"Licenses": [
"GPL-3.0-or-later",
"BSD-4-Clause-UC",
"GPL-3.0-only",
"ISC",
"FSFULLR",
"GFDL-1.3-no-invariants-only",
"GFDL-1.3-only"
],
"Maintainer": "Michael Stone \u003cmstone@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/cat",
"/bin/chgrp",
"/bin/chmod",
"/bin/chown",
"/bin/cp",
"/bin/date",
"/bin/dd",
"/bin/df",
"/bin/dir",
"/bin/echo",
"/bin/false",
"/bin/ln",
"/bin/ls",
"/bin/mkdir",
"/bin/mknod",
"/bin/mktemp",
"/bin/mv",
"/bin/pwd",
"/bin/readlink",
"/bin/rm",
"/bin/rmdir",
"/bin/sleep",
"/bin/stty",
"/bin/sync",
"/bin/touch",
"/bin/true",
"/bin/uname",
"/bin/vdir",
"/usr/bin/[",
"/usr/bin/arch",
"/usr/bin/b2sum",
"/usr/bin/base32",
"/usr/bin/base64",
"/usr/bin/basename",
"/usr/bin/basenc",
"/usr/bin/chcon",
"/usr/bin/cksum",
"/usr/bin/comm",
"/usr/bin/csplit",
"/usr/bin/cut",
"/usr/bin/dircolors",
"/usr/bin/dirname",
"/usr/bin/du",
"/usr/bin/env",
"/usr/bin/expand",
"/usr/bin/expr",
"/usr/bin/factor",
"/usr/bin/fmt",
"/usr/bin/fold",
"/usr/bin/groups",
"/usr/bin/head",
"/usr/bin/hostid",
"/usr/bin/id",
"/usr/bin/install",
"/usr/bin/join",
"/usr/bin/link",
"/usr/bin/logname",
"/usr/bin/md5sum",
"/usr/bin/mkfifo",
"/usr/bin/nice",
"/usr/bin/nl",
"/usr/bin/nohup",
"/usr/bin/nproc",
"/usr/bin/numfmt",
"/usr/bin/od",
"/usr/bin/paste",
"/usr/bin/pathchk",
"/usr/bin/pinky",
"/usr/bin/pr",
"/usr/bin/printenv",
"/usr/bin/printf",
"/usr/bin/ptx",
"/usr/bin/realpath",
"/usr/bin/runcon",
"/usr/bin/seq",
"/usr/bin/sha1sum",
"/usr/bin/sha224sum",
"/usr/bin/sha256sum",
"/usr/bin/sha384sum",
"/usr/bin/sha512sum",
"/usr/bin/shred",
"/usr/bin/shuf",
"/usr/bin/sort",
"/usr/bin/split",
"/usr/bin/stat",
"/usr/bin/stdbuf",
"/usr/bin/sum",
"/usr/bin/tac",
"/usr/bin/tail",
"/usr/bin/tee",
"/usr/bin/test",
"/usr/bin/timeout",
"/usr/bin/tr",
"/usr/bin/truncate",
"/usr/bin/tsort",
"/usr/bin/tty",
"/usr/bin/unexpand",
"/usr/bin/uniq",
"/usr/bin/unlink",
"/usr/bin/users",
"/usr/bin/wc",
"/usr/bin/who",
"/usr/bin/whoami",
"/usr/bin/yes",
"/usr/libexec/coreutils/libstdbuf.so",
"/usr/sbin/chroot",
"/usr/share/doc/coreutils/AUTHORS",
"/usr/share/doc/coreutils/NEWS.Debian.gz",
"/usr/share/doc/coreutils/NEWS.gz",
"/usr/share/doc/coreutils/README.Debian",
"/usr/share/doc/coreutils/README.gz",
"/usr/share/doc/coreutils/THANKS.gz",
"/usr/share/doc/coreutils/TODO.gz",
"/usr/share/doc/coreutils/changelog.Debian.gz",
"/usr/share/doc/coreutils/changelog.gz",
"/usr/share/doc/coreutils/copyright",
"/usr/share/info/coreutils.info.gz",
"/usr/share/locale/af/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/be/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/bg/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/ca/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/cs/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/da/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/de/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/el/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/eo/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/es/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/et/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/eu/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/fi/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/fr/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/ga/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/gl/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/hr/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/hu/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/ia/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/id/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/it/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/ja/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/kk/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/ko/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/lg/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/lt/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/ms/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/nb/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/nl/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/pl/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/pt/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/ro/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/ru/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/sk/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/sl/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/sr/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/sv/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/tr/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/uk/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/vi/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/coreutils.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/coreutils.mo",
"/usr/share/man/man1/arch.1.gz",
"/usr/share/man/man1/b2sum.1.gz",
"/usr/share/man/man1/base32.1.gz",
"/usr/share/man/man1/base64.1.gz",
"/usr/share/man/man1/basename.1.gz",
"/usr/share/man/man1/basenc.1.gz",
"/usr/share/man/man1/cat.1.gz",
"/usr/share/man/man1/chcon.1.gz",
"/usr/share/man/man1/chgrp.1.gz",
"/usr/share/man/man1/chmod.1.gz",
"/usr/share/man/man1/chown.1.gz",
"/usr/share/man/man1/cksum.1.gz",
"/usr/share/man/man1/comm.1.gz",
"/usr/share/man/man1/cp.1.gz",
"/usr/share/man/man1/csplit.1.gz",
"/usr/share/man/man1/cut.1.gz",
"/usr/share/man/man1/date.1.gz",
"/usr/share/man/man1/dd.1.gz",
"/usr/share/man/man1/df.1.gz",
"/usr/share/man/man1/dir.1.gz",
"/usr/share/man/man1/dircolors.1.gz",
"/usr/share/man/man1/dirname.1.gz",
"/usr/share/man/man1/du.1.gz",
"/usr/share/man/man1/echo.1.gz",
"/usr/share/man/man1/env.1.gz",
"/usr/share/man/man1/expand.1.gz",
"/usr/share/man/man1/expr.1.gz",
"/usr/share/man/man1/factor.1.gz",
"/usr/share/man/man1/false.1.gz",
"/usr/share/man/man1/fmt.1.gz",
"/usr/share/man/man1/fold.1.gz",
"/usr/share/man/man1/groups.1.gz",
"/usr/share/man/man1/head.1.gz",
"/usr/share/man/man1/hostid.1.gz",
"/usr/share/man/man1/id.1.gz",
"/usr/share/man/man1/install.1.gz",
"/usr/share/man/man1/join.1.gz",
"/usr/share/man/man1/link.1.gz",
"/usr/share/man/man1/ln.1.gz",
"/usr/share/man/man1/logname.1.gz",
"/usr/share/man/man1/ls.1.gz",
"/usr/share/man/man1/md5sum.1.gz",
"/usr/share/man/man1/mkdir.1.gz",
"/usr/share/man/man1/mkfifo.1.gz",
"/usr/share/man/man1/mknod.1.gz",
"/usr/share/man/man1/mktemp.1.gz",
"/usr/share/man/man1/mv.1.gz",
"/usr/share/man/man1/nice.1.gz",
"/usr/share/man/man1/nl.1.gz",
"/usr/share/man/man1/nohup.1.gz",
"/usr/share/man/man1/nproc.1.gz",
"/usr/share/man/man1/numfmt.1.gz",
"/usr/share/man/man1/od.1.gz",
"/usr/share/man/man1/paste.1.gz",
"/usr/share/man/man1/pathchk.1.gz",
"/usr/share/man/man1/pinky.1.gz",
"/usr/share/man/man1/pr.1.gz",
"/usr/share/man/man1/printenv.1.gz",
"/usr/share/man/man1/printf.1.gz",
"/usr/share/man/man1/ptx.1.gz",
"/usr/share/man/man1/pwd.1.gz",
"/usr/share/man/man1/readlink.1.gz",
"/usr/share/man/man1/realpath.1.gz",
"/usr/share/man/man1/rm.1.gz",
"/usr/share/man/man1/rmdir.1.gz",
"/usr/share/man/man1/runcon.1.gz",
"/usr/share/man/man1/seq.1.gz",
"/usr/share/man/man1/sha1sum.1.gz",
"/usr/share/man/man1/sha224sum.1.gz",
"/usr/share/man/man1/sha256sum.1.gz",
"/usr/share/man/man1/sha384sum.1.gz",
"/usr/share/man/man1/sha512sum.1.gz",
"/usr/share/man/man1/shred.1.gz",
"/usr/share/man/man1/shuf.1.gz",
"/usr/share/man/man1/sleep.1.gz",
"/usr/share/man/man1/sort.1.gz",
"/usr/share/man/man1/split.1.gz",
"/usr/share/man/man1/stat.1.gz",
"/usr/share/man/man1/stdbuf.1.gz",
"/usr/share/man/man1/stty.1.gz",
"/usr/share/man/man1/sum.1.gz",
"/usr/share/man/man1/sync.1.gz",
"/usr/share/man/man1/tac.1.gz",
"/usr/share/man/man1/tail.1.gz",
"/usr/share/man/man1/tee.1.gz",
"/usr/share/man/man1/test.1.gz",
"/usr/share/man/man1/timeout.1.gz",
"/usr/share/man/man1/touch.1.gz",
"/usr/share/man/man1/tr.1.gz",
"/usr/share/man/man1/true.1.gz",
"/usr/share/man/man1/truncate.1.gz",
"/usr/share/man/man1/tsort.1.gz",
"/usr/share/man/man1/tty.1.gz",
"/usr/share/man/man1/uname.1.gz",
"/usr/share/man/man1/unexpand.1.gz",
"/usr/share/man/man1/uniq.1.gz",
"/usr/share/man/man1/unlink.1.gz",
"/usr/share/man/man1/users.1.gz",
"/usr/share/man/man1/vdir.1.gz",
"/usr/share/man/man1/wc.1.gz",
"/usr/share/man/man1/who.1.gz",
"/usr/share/man/man1/whoami.1.gz",
"/usr/share/man/man1/yes.1.gz",
"/usr/share/man/man8/chroot.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "dash@0.5.12-2",
"Name": "dash",
"Identifier": {
"PURL": "pkg:deb/debian/dash@0.5.12-2?arch=arm64\u0026distro=debian-12.14",
"UID": "ea6baa62141833f4"
},
"Version": "0.5.12",
"Release": "2",
"Arch": "arm64",
"SrcName": "dash",
"SrcVersion": "0.5.12",
"SrcRelease": "2",
"Licenses": [
"BSD-3-Clause",
"public-domain",
"GPL-2.0-or-later",
"GPL-2.0-only"
],
"Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"debianutils@5.7-0.5~deb12u1",
"dpkg@1.21.23"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/dash",
"/usr/share/debianutils/shells.d/dash",
"/usr/share/doc/dash/NEWS.Debian.gz",
"/usr/share/doc/dash/README.Debian.diet",
"/usr/share/doc/dash/README.source",
"/usr/share/doc/dash/changelog.Debian.gz",
"/usr/share/doc/dash/changelog.gz",
"/usr/share/doc/dash/copyright",
"/usr/share/lintian/overrides/dash",
"/usr/share/man/man1/dash.1.gz",
"/usr/share/menu/dash"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "debconf@1.5.82",
"Name": "debconf",
"Identifier": {
"PURL": "pkg:deb/debian/debconf@1.5.82?arch=all\u0026distro=debian-12.14",
"UID": "7031db14643b8375"
},
"Version": "1.5.82",
"Arch": "all",
"SrcName": "debconf",
"SrcVersion": "1.5.82",
"Licenses": [
"BSD-2-Clause"
],
"Maintainer": "Debconf Developers \u003cdebconf-devel@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/debconf",
"/usr/bin/debconf-apt-progress",
"/usr/bin/debconf-communicate",
"/usr/bin/debconf-copydb",
"/usr/bin/debconf-escape",
"/usr/bin/debconf-set-selections",
"/usr/bin/debconf-show",
"/usr/sbin/dpkg-preconfigure",
"/usr/sbin/dpkg-reconfigure",
"/usr/share/bash-completion/completions/debconf",
"/usr/share/debconf/confmodule",
"/usr/share/debconf/confmodule.sh",
"/usr/share/debconf/debconf.conf",
"/usr/share/debconf/fix_db.pl",
"/usr/share/debconf/frontend",
"/usr/share/doc/debconf/NEWS.Debian.gz",
"/usr/share/doc/debconf/README.Debian",
"/usr/share/doc/debconf/changelog.gz",
"/usr/share/doc/debconf/copyright",
"/usr/share/lintian/overrides/debconf",
"/usr/share/man/man1/debconf-apt-progress.1.gz",
"/usr/share/man/man1/debconf-communicate.1.gz",
"/usr/share/man/man1/debconf-copydb.1.gz",
"/usr/share/man/man1/debconf-escape.1.gz",
"/usr/share/man/man1/debconf-set-selections.1.gz",
"/usr/share/man/man1/debconf-show.1.gz",
"/usr/share/man/man1/debconf.1.gz",
"/usr/share/man/man8/dpkg-preconfigure.8.gz",
"/usr/share/man/man8/dpkg-reconfigure.8.gz",
"/usr/share/perl5/Debconf/AutoSelect.pm",
"/usr/share/perl5/Debconf/Base.pm",
"/usr/share/perl5/Debconf/Client/ConfModule.pm",
"/usr/share/perl5/Debconf/ConfModule.pm",
"/usr/share/perl5/Debconf/Config.pm",
"/usr/share/perl5/Debconf/Db.pm",
"/usr/share/perl5/Debconf/DbDriver.pm",
"/usr/share/perl5/Debconf/DbDriver/Backup.pm",
"/usr/share/perl5/Debconf/DbDriver/Cache.pm",
"/usr/share/perl5/Debconf/DbDriver/Copy.pm",
"/usr/share/perl5/Debconf/DbDriver/Debug.pm",
"/usr/share/perl5/Debconf/DbDriver/DirTree.pm",
"/usr/share/perl5/Debconf/DbDriver/Directory.pm",
"/usr/share/perl5/Debconf/DbDriver/File.pm",
"/usr/share/perl5/Debconf/DbDriver/LDAP.pm",
"/usr/share/perl5/Debconf/DbDriver/PackageDir.pm",
"/usr/share/perl5/Debconf/DbDriver/Pipe.pm",
"/usr/share/perl5/Debconf/DbDriver/Stack.pm",
"/usr/share/perl5/Debconf/Element.pm",
"/usr/share/perl5/Debconf/Element/Dialog/Boolean.pm",
"/usr/share/perl5/Debconf/Element/Dialog/Error.pm",
"/usr/share/perl5/Debconf/Element/Dialog/Multiselect.pm",
"/usr/share/perl5/Debconf/Element/Dialog/Note.pm",
"/usr/share/perl5/Debconf/Element/Dialog/Password.pm",
"/usr/share/perl5/Debconf/Element/Dialog/Progress.pm",
"/usr/share/perl5/Debconf/Element/Dialog/Select.pm",
"/usr/share/perl5/Debconf/Element/Dialog/String.pm",
"/usr/share/perl5/Debconf/Element/Dialog/Text.pm",
"/usr/share/perl5/Debconf/Element/Editor/Boolean.pm",
"/usr/share/perl5/Debconf/Element/Editor/Error.pm",
"/usr/share/perl5/Debconf/Element/Editor/Multiselect.pm",
"/usr/share/perl5/Debconf/Element/Editor/Note.pm",
"/usr/share/perl5/Debconf/Element/Editor/Password.pm",
"/usr/share/perl5/Debconf/Element/Editor/Progress.pm",
"/usr/share/perl5/Debconf/Element/Editor/Select.pm",
"/usr/share/perl5/Debconf/Element/Editor/String.pm",
"/usr/share/perl5/Debconf/Element/Editor/Text.pm",
"/usr/share/perl5/Debconf/Element/Gnome.pm",
"/usr/share/perl5/Debconf/Element/Gnome/Boolean.pm",
"/usr/share/perl5/Debconf/Element/Gnome/Error.pm",
"/usr/share/perl5/Debconf/Element/Gnome/Multiselect.pm",
"/usr/share/perl5/Debconf/Element/Gnome/Note.pm",
"/usr/share/perl5/Debconf/Element/Gnome/Password.pm",
"/usr/share/perl5/Debconf/Element/Gnome/Progress.pm",
"/usr/share/perl5/Debconf/Element/Gnome/Select.pm",
"/usr/share/perl5/Debconf/Element/Gnome/String.pm",
"/usr/share/perl5/Debconf/Element/Gnome/Text.pm",
"/usr/share/perl5/Debconf/Element/Multiselect.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/Boolean.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/Error.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/Multiselect.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/Note.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/Password.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/Progress.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/Select.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/String.pm",
"/usr/share/perl5/Debconf/Element/Noninteractive/Text.pm",
"/usr/share/perl5/Debconf/Element/Select.pm",
"/usr/share/perl5/Debconf/Element/Teletype/Boolean.pm",
"/usr/share/perl5/Debconf/Element/Teletype/Error.pm",
"/usr/share/perl5/Debconf/Element/Teletype/Multiselect.pm",
"/usr/share/perl5/Debconf/Element/Teletype/Note.pm",
"/usr/share/perl5/Debconf/Element/Teletype/Password.pm",
"/usr/share/perl5/Debconf/Element/Teletype/Progress.pm",
"/usr/share/perl5/Debconf/Element/Teletype/Select.pm",
"/usr/share/perl5/Debconf/Element/Teletype/String.pm",
"/usr/share/perl5/Debconf/Element/Teletype/Text.pm",
"/usr/share/perl5/Debconf/Element/Web/Boolean.pm",
"/usr/share/perl5/Debconf/Element/Web/Error.pm",
"/usr/share/perl5/Debconf/Element/Web/Multiselect.pm",
"/usr/share/perl5/Debconf/Element/Web/Note.pm",
"/usr/share/perl5/Debconf/Element/Web/Password.pm",
"/usr/share/perl5/Debconf/Element/Web/Progress.pm",
"/usr/share/perl5/Debconf/Element/Web/Select.pm",
"/usr/share/perl5/Debconf/Element/Web/String.pm",
"/usr/share/perl5/Debconf/Element/Web/Text.pm",
"/usr/share/perl5/Debconf/Encoding.pm",
"/usr/share/perl5/Debconf/Format.pm",
"/usr/share/perl5/Debconf/Format/822.pm",
"/usr/share/perl5/Debconf/FrontEnd.pm",
"/usr/share/perl5/Debconf/FrontEnd/Dialog.pm",
"/usr/share/perl5/Debconf/FrontEnd/Editor.pm",
"/usr/share/perl5/Debconf/FrontEnd/Gnome.pm",
"/usr/share/perl5/Debconf/FrontEnd/Kde.pm",
"/usr/share/perl5/Debconf/FrontEnd/Noninteractive.pm",
"/usr/share/perl5/Debconf/FrontEnd/Passthrough.pm",
"/usr/share/perl5/Debconf/FrontEnd/Readline.pm",
"/usr/share/perl5/Debconf/FrontEnd/ScreenSize.pm",
"/usr/share/perl5/Debconf/FrontEnd/Teletype.pm",
"/usr/share/perl5/Debconf/FrontEnd/Text.pm",
"/usr/share/perl5/Debconf/FrontEnd/Web.pm",
"/usr/share/perl5/Debconf/Gettext.pm",
"/usr/share/perl5/Debconf/Iterator.pm",
"/usr/share/perl5/Debconf/Log.pm",
"/usr/share/perl5/Debconf/Path.pm",
"/usr/share/perl5/Debconf/Priority.pm",
"/usr/share/perl5/Debconf/Question.pm",
"/usr/share/perl5/Debconf/Template.pm",
"/usr/share/perl5/Debconf/Template/Transient.pm",
"/usr/share/perl5/Debconf/TmpFile.pm",
"/usr/share/perl5/Debian/DebConf/Client/ConfModule.pm",
"/usr/share/pixmaps/debian-logo.png"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "debian-archive-keyring@2023.3+deb12u2",
"Name": "debian-archive-keyring",
"Identifier": {
"PURL": "pkg:deb/debian/debian-archive-keyring@2023.3%2Bdeb12u2?arch=all\u0026distro=debian-12.14",
"UID": "eaf3ce116c1e926d"
},
"Version": "2023.3+deb12u2",
"Arch": "all",
"SrcName": "debian-archive-keyring",
"SrcVersion": "2023.3+deb12u2",
"Licenses": [
"GPL-2.0-or-later"
],
"Maintainer": "Debian Release Team \u003cpackages@release.debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/share/doc/debian-archive-keyring/README",
"/usr/share/doc/debian-archive-keyring/changelog.gz",
"/usr/share/doc/debian-archive-keyring/copyright",
"/usr/share/keyrings/debian-archive-bookworm-automatic.gpg",
"/usr/share/keyrings/debian-archive-bookworm-security-automatic.gpg",
"/usr/share/keyrings/debian-archive-bookworm-stable.gpg",
"/usr/share/keyrings/debian-archive-bullseye-automatic.gpg",
"/usr/share/keyrings/debian-archive-bullseye-security-automatic.gpg",
"/usr/share/keyrings/debian-archive-bullseye-stable.gpg",
"/usr/share/keyrings/debian-archive-keyring.gpg",
"/usr/share/keyrings/debian-archive-removed-keys.gpg",
"/usr/share/keyrings/debian-archive-trixie-automatic.gpg",
"/usr/share/keyrings/debian-archive-trixie-security-automatic.gpg",
"/usr/share/keyrings/debian-archive-trixie-stable.gpg"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "debianutils@5.7-0.5~deb12u1",
"Name": "debianutils",
"Identifier": {
"PURL": "pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "86f54c6d35707a85"
},
"Version": "5.7",
"Release": "0.5~deb12u1",
"Arch": "arm64",
"SrcName": "debianutils",
"SrcVersion": "5.7",
"SrcRelease": "0.5~deb12u1",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"public-domain",
"SMAIL-GPL"
],
"Maintainer": "Clint Adams \u003cclint@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/run-parts",
"/bin/tempfile",
"/sbin/installkernel",
"/usr/bin/ischroot",
"/usr/bin/savelog",
"/usr/bin/which.debianutils",
"/usr/sbin/add-shell",
"/usr/sbin/remove-shell",
"/usr/sbin/update-shells",
"/usr/share/debianutils/shells",
"/usr/share/doc/debianutils/README.shells.gz",
"/usr/share/doc/debianutils/changelog.Debian.gz",
"/usr/share/doc/debianutils/changelog.gz",
"/usr/share/doc/debianutils/copyright",
"/usr/share/man/de/man1/which.debianutils.1.gz",
"/usr/share/man/de/man8/add-shell.8.gz",
"/usr/share/man/de/man8/installkernel.8.gz",
"/usr/share/man/de/man8/remove-shell.8.gz",
"/usr/share/man/de/man8/run-parts.8.gz",
"/usr/share/man/de/man8/savelog.8.gz",
"/usr/share/man/es/man1/which.debianutils.1.gz",
"/usr/share/man/es/man8/add-shell.8.gz",
"/usr/share/man/es/man8/installkernel.8.gz",
"/usr/share/man/es/man8/remove-shell.8.gz",
"/usr/share/man/es/man8/run-parts.8.gz",
"/usr/share/man/es/man8/savelog.8.gz",
"/usr/share/man/fr/man1/which.debianutils.1.gz",
"/usr/share/man/fr/man8/add-shell.8.gz",
"/usr/share/man/fr/man8/installkernel.8.gz",
"/usr/share/man/fr/man8/remove-shell.8.gz",
"/usr/share/man/fr/man8/run-parts.8.gz",
"/usr/share/man/fr/man8/savelog.8.gz",
"/usr/share/man/it/man1/which.debianutils.1.gz",
"/usr/share/man/it/man8/add-shell.8.gz",
"/usr/share/man/it/man8/installkernel.8.gz",
"/usr/share/man/it/man8/remove-shell.8.gz",
"/usr/share/man/it/man8/run-parts.8.gz",
"/usr/share/man/it/man8/savelog.8.gz",
"/usr/share/man/ja/man1/which.debianutils.1.gz",
"/usr/share/man/ja/man8/add-shell.8.gz",
"/usr/share/man/ja/man8/installkernel.8.gz",
"/usr/share/man/ja/man8/remove-shell.8.gz",
"/usr/share/man/ja/man8/run-parts.8.gz",
"/usr/share/man/ja/man8/savelog.8.gz",
"/usr/share/man/man1/ischroot.1.gz",
"/usr/share/man/man1/tempfile.1.gz",
"/usr/share/man/man1/which.debianutils.1.gz",
"/usr/share/man/man8/add-shell.8.gz",
"/usr/share/man/man8/installkernel.8.gz",
"/usr/share/man/man8/remove-shell.8.gz",
"/usr/share/man/man8/run-parts.8.gz",
"/usr/share/man/man8/savelog.8.gz",
"/usr/share/man/man8/update-shells.8.gz",
"/usr/share/man/pl/man1/which.debianutils.1.gz",
"/usr/share/man/pl/man8/add-shell.8.gz",
"/usr/share/man/pl/man8/installkernel.8.gz",
"/usr/share/man/pl/man8/remove-shell.8.gz",
"/usr/share/man/pl/man8/run-parts.8.gz",
"/usr/share/man/pl/man8/savelog.8.gz",
"/usr/share/man/pt/man1/which.1.gz",
"/usr/share/man/pt/man8/add-shell.8.gz",
"/usr/share/man/pt/man8/installkernel.8.gz",
"/usr/share/man/pt/man8/remove-shell.8.gz",
"/usr/share/man/pt/man8/run-parts.8.gz",
"/usr/share/man/pt/man8/savelog.8.gz",
"/usr/share/man/sl/man1/which.debianutils.1.gz",
"/usr/share/man/sl/man8/add-shell.8.gz",
"/usr/share/man/sl/man8/installkernel.8.gz",
"/usr/share/man/sl/man8/remove-shell.8.gz",
"/usr/share/man/sl/man8/run-parts.8.gz",
"/usr/share/man/sl/man8/savelog.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "diffutils@1:3.8-4",
"Name": "diffutils",
"Identifier": {
"PURL": "pkg:deb/debian/diffutils@3.8-4?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "b02381ee68195365"
},
"Version": "3.8",
"Release": "4",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "diffutils",
"SrcVersion": "3.8",
"SrcRelease": "4",
"SrcEpoch": 1,
"Licenses": [
"GPL-3.0-or-later",
"FSFULLR",
"LGPL-2.1-or-later",
"GPL-3.0-with-autoconf-exception+",
"GPL-3.0-only",
"GPL-3+ with texinfo exception",
"LGPL-2.0-or-later",
"GPL-2.0-or-later",
"X11",
"FSFAP",
"GFDL-1.3-no-invariants-only",
"LGPL-3.0-or-later",
"LGPL-3.0-only",
"public-domain",
"LGPL-2.0-only",
"LGPL-2.1-only",
"GPL-2.0-only",
"GFDL-1.3-only"
],
"Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/cmp",
"/usr/bin/diff",
"/usr/bin/diff3",
"/usr/bin/sdiff",
"/usr/share/doc/diffutils/NEWS.gz",
"/usr/share/doc/diffutils/changelog.Debian.gz",
"/usr/share/doc/diffutils/changelog.gz",
"/usr/share/doc/diffutils/copyright",
"/usr/share/info/diffutils.info.gz",
"/usr/share/locale/bg/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/ca/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/cs/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/da/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/de/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/el/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/eo/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/es/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/fi/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/fr/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/ga/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/gl/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/he/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/hr/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/hu/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/id/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/it/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/ja/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/lv/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/ms/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/nb/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/nl/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/pl/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/pt/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/ro/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/ru/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/sr/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/sv/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/tr/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/uk/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/vi/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/diffutils.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo",
"/usr/share/man/man1/cmp.1.gz",
"/usr/share/man/man1/diff.1.gz",
"/usr/share/man/man1/diff3.1.gz",
"/usr/share/man/man1/sdiff.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "dpkg@1.21.23",
"Name": "dpkg",
"Identifier": {
"PURL": "pkg:deb/debian/dpkg@1.21.23?arch=arm64\u0026distro=debian-12.14",
"UID": "296f5aa0cbe1fa8b"
},
"Version": "1.21.23",
"Arch": "arm64",
"SrcName": "dpkg",
"SrcVersion": "1.21.23",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"BSD-2-Clause",
"public-domain-s-s-d"
],
"Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"tar@1.34+dfsg-1.2+deb12u1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/systemd/system/dpkg-db-backup.service",
"/lib/systemd/system/dpkg-db-backup.timer",
"/sbin/start-stop-daemon",
"/usr/bin/dpkg",
"/usr/bin/dpkg-deb",
"/usr/bin/dpkg-divert",
"/usr/bin/dpkg-maintscript-helper",
"/usr/bin/dpkg-query",
"/usr/bin/dpkg-realpath",
"/usr/bin/dpkg-split",
"/usr/bin/dpkg-statoverride",
"/usr/bin/dpkg-trigger",
"/usr/bin/update-alternatives",
"/usr/libexec/dpkg/dpkg-db-backup",
"/usr/sbin/dpkg-fsys-usrunmess",
"/usr/share/bug/dpkg",
"/usr/share/doc/dpkg/AUTHORS",
"/usr/share/doc/dpkg/README.api",
"/usr/share/doc/dpkg/README.bug-usertags.gz",
"/usr/share/doc/dpkg/README.feature-removal-schedule.gz",
"/usr/share/doc/dpkg/THANKS.gz",
"/usr/share/doc/dpkg/changelog.gz",
"/usr/share/doc/dpkg/copyright",
"/usr/share/dpkg/abitable",
"/usr/share/dpkg/cputable",
"/usr/share/dpkg/ostable",
"/usr/share/dpkg/sh/dpkg-error.sh",
"/usr/share/dpkg/tupletable",
"/usr/share/lintian/overrides/dpkg",
"/usr/share/lintian/profiles/dpkg/main.profile",
"/usr/share/locale/ast/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/bs/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/ca/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/cs/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/da/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/de/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/dz/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/el/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/eo/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/es/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/et/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/eu/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/fr/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/gl/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/hu/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/id/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/it/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/ja/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/km/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/ko/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/ku/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/lt/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/mr/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/nb/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/ne/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/nl/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/nn/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/oc/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/pa/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/pl/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/pt/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/ro/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/ru/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/sk/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/sv/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/th/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/tl/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/tr/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/vi/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/dpkg.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/dpkg.mo",
"/usr/share/man/de/man1/dpkg-deb.1.gz",
"/usr/share/man/de/man1/dpkg-divert.1.gz",
"/usr/share/man/de/man1/dpkg-maintscript-helper.1.gz",
"/usr/share/man/de/man1/dpkg-query.1.gz",
"/usr/share/man/de/man1/dpkg-realpath.1.gz",
"/usr/share/man/de/man1/dpkg-split.1.gz",
"/usr/share/man/de/man1/dpkg-statoverride.1.gz",
"/usr/share/man/de/man1/dpkg-trigger.1.gz",
"/usr/share/man/de/man1/dpkg.1.gz",
"/usr/share/man/de/man1/update-alternatives.1.gz",
"/usr/share/man/de/man5/dpkg.cfg.5.gz",
"/usr/share/man/de/man8/dpkg-fsys-usrunmess.8.gz",
"/usr/share/man/de/man8/start-stop-daemon.8.gz",
"/usr/share/man/es/man1/dpkg-split.1.gz",
"/usr/share/man/es/man5/dpkg.cfg.5.gz",
"/usr/share/man/fr/man1/dpkg-deb.1.gz",
"/usr/share/man/fr/man1/dpkg-divert.1.gz",
"/usr/share/man/fr/man1/dpkg-maintscript-helper.1.gz",
"/usr/share/man/fr/man1/dpkg-query.1.gz",
"/usr/share/man/fr/man1/dpkg-realpath.1.gz",
"/usr/share/man/fr/man1/dpkg-split.1.gz",
"/usr/share/man/fr/man1/dpkg-statoverride.1.gz",
"/usr/share/man/fr/man1/dpkg-trigger.1.gz",
"/usr/share/man/fr/man1/dpkg.1.gz",
"/usr/share/man/fr/man1/update-alternatives.1.gz",
"/usr/share/man/fr/man5/dpkg.cfg.5.gz",
"/usr/share/man/fr/man8/dpkg-fsys-usrunmess.8.gz",
"/usr/share/man/fr/man8/start-stop-daemon.8.gz",
"/usr/share/man/hu/man5/dpkg.cfg.5.gz",
"/usr/share/man/it/man1/dpkg-split.1.gz",
"/usr/share/man/it/man5/dpkg.cfg.5.gz",
"/usr/share/man/ja/man1/dpkg-split.1.gz",
"/usr/share/man/ja/man5/dpkg.cfg.5.gz",
"/usr/share/man/man1/dpkg-deb.1.gz",
"/usr/share/man/man1/dpkg-divert.1.gz",
"/usr/share/man/man1/dpkg-maintscript-helper.1.gz",
"/usr/share/man/man1/dpkg-query.1.gz",
"/usr/share/man/man1/dpkg-realpath.1.gz",
"/usr/share/man/man1/dpkg-split.1.gz",
"/usr/share/man/man1/dpkg-statoverride.1.gz",
"/usr/share/man/man1/dpkg-trigger.1.gz",
"/usr/share/man/man1/dpkg.1.gz",
"/usr/share/man/man1/update-alternatives.1.gz",
"/usr/share/man/man5/dpkg.cfg.5.gz",
"/usr/share/man/man8/dpkg-fsys-usrunmess.8.gz",
"/usr/share/man/man8/start-stop-daemon.8.gz",
"/usr/share/man/nl/man1/dpkg-deb.1.gz",
"/usr/share/man/nl/man1/dpkg-divert.1.gz",
"/usr/share/man/nl/man1/dpkg-maintscript-helper.1.gz",
"/usr/share/man/nl/man1/dpkg-query.1.gz",
"/usr/share/man/nl/man1/dpkg-realpath.1.gz",
"/usr/share/man/nl/man1/dpkg-split.1.gz",
"/usr/share/man/nl/man1/dpkg-statoverride.1.gz",
"/usr/share/man/nl/man1/dpkg-trigger.1.gz",
"/usr/share/man/nl/man1/dpkg.1.gz",
"/usr/share/man/nl/man1/update-alternatives.1.gz",
"/usr/share/man/nl/man5/dpkg.cfg.5.gz",
"/usr/share/man/nl/man8/dpkg-fsys-usrunmess.8.gz",
"/usr/share/man/nl/man8/start-stop-daemon.8.gz",
"/usr/share/man/pl/man1/dpkg-split.1.gz",
"/usr/share/man/pl/man5/dpkg.cfg.5.gz",
"/usr/share/man/pt/man1/dpkg-deb.1.gz",
"/usr/share/man/pt/man1/dpkg-divert.1.gz",
"/usr/share/man/pt/man1/dpkg-maintscript-helper.1.gz",
"/usr/share/man/pt/man1/dpkg-query.1.gz",
"/usr/share/man/pt/man1/dpkg-realpath.1.gz",
"/usr/share/man/pt/man1/dpkg-split.1.gz",
"/usr/share/man/pt/man1/dpkg-statoverride.1.gz",
"/usr/share/man/pt/man1/dpkg-trigger.1.gz",
"/usr/share/man/pt/man1/dpkg.1.gz",
"/usr/share/man/pt/man1/update-alternatives.1.gz",
"/usr/share/man/pt/man5/dpkg.cfg.5.gz",
"/usr/share/man/pt/man8/dpkg-fsys-usrunmess.8.gz",
"/usr/share/man/pt/man8/start-stop-daemon.8.gz",
"/usr/share/man/sv/man1/dpkg-deb.1.gz",
"/usr/share/man/sv/man1/dpkg-divert.1.gz",
"/usr/share/man/sv/man1/dpkg-maintscript-helper.1.gz",
"/usr/share/man/sv/man1/dpkg-query.1.gz",
"/usr/share/man/sv/man1/dpkg-realpath.1.gz",
"/usr/share/man/sv/man1/dpkg-split.1.gz",
"/usr/share/man/sv/man1/dpkg-statoverride.1.gz",
"/usr/share/man/sv/man1/dpkg-trigger.1.gz",
"/usr/share/man/sv/man1/dpkg.1.gz",
"/usr/share/man/sv/man1/update-alternatives.1.gz",
"/usr/share/man/sv/man5/dpkg.cfg.5.gz",
"/usr/share/man/sv/man8/dpkg-fsys-usrunmess.8.gz",
"/usr/share/man/sv/man8/start-stop-daemon.8.gz",
"/usr/share/polkit-1/actions/org.dpkg.pkexec.update-alternatives.policy"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "e2fsprogs@1.47.0-2+b2",
"Name": "e2fsprogs",
"Identifier": {
"PURL": "pkg:deb/debian/e2fsprogs@1.47.0-2%2Bb2?arch=arm64\u0026distro=debian-12.14",
"UID": "79cefd238d6c948b"
},
"Version": "1.47.0",
"Release": "2+b2",
"Arch": "arm64",
"SrcName": "e2fsprogs",
"SrcVersion": "1.47.0",
"SrcRelease": "2",
"Licenses": [
"GPL-2.0-only",
"LGPL-2.0-only",
"BSD-3-Clause",
"Apache-2.0",
"ISC",
"GPL-2.0-or-later",
"MIT-US-export",
"Kazlib",
"Latex2e",
"GPL-2+ with Texinfo exception"
],
"Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"logsave@1.47.0-2+b2"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/systemd/system/e2scrub@.service",
"/lib/systemd/system/e2scrub_all.service",
"/lib/systemd/system/e2scrub_all.timer",
"/lib/systemd/system/e2scrub_fail@.service",
"/lib/systemd/system/e2scrub_reap.service",
"/lib/udev/rules.d/96-e2scrub.rules",
"/sbin/badblocks",
"/sbin/debugfs",
"/sbin/dumpe2fs",
"/sbin/e2fsck",
"/sbin/e2image",
"/sbin/e2scrub",
"/sbin/e2scrub_all",
"/sbin/e2undo",
"/sbin/mke2fs",
"/sbin/resize2fs",
"/sbin/tune2fs",
"/usr/bin/chattr",
"/usr/bin/lsattr",
"/usr/lib/aarch64-linux-gnu/e2fsprogs/e2scrub_all_cron",
"/usr/lib/aarch64-linux-gnu/e2fsprogs/e2scrub_fail",
"/usr/sbin/e2freefrag",
"/usr/sbin/e4crypt",
"/usr/sbin/e4defrag",
"/usr/sbin/filefrag",
"/usr/sbin/mklost+found",
"/usr/share/doc/e2fsprogs/NEWS.gz",
"/usr/share/doc/e2fsprogs/README",
"/usr/share/doc/e2fsprogs/changelog.Debian.arm64.gz",
"/usr/share/doc/e2fsprogs/changelog.Debian.gz",
"/usr/share/doc/e2fsprogs/copyright",
"/usr/share/lintian/overrides/e2fsprogs",
"/usr/share/man/man1/chattr.1.gz",
"/usr/share/man/man1/lsattr.1.gz",
"/usr/share/man/man5/e2fsck.conf.5.gz",
"/usr/share/man/man5/ext4.5.gz",
"/usr/share/man/man5/mke2fs.conf.5.gz",
"/usr/share/man/man8/badblocks.8.gz",
"/usr/share/man/man8/debugfs.8.gz",
"/usr/share/man/man8/dumpe2fs.8.gz",
"/usr/share/man/man8/e2freefrag.8.gz",
"/usr/share/man/man8/e2fsck.8.gz",
"/usr/share/man/man8/e2image.8.gz",
"/usr/share/man/man8/e2label.8.gz",
"/usr/share/man/man8/e2mmpstatus.8.gz",
"/usr/share/man/man8/e2scrub.8.gz",
"/usr/share/man/man8/e2scrub_all.8.gz",
"/usr/share/man/man8/e2undo.8.gz",
"/usr/share/man/man8/e4crypt.8.gz",
"/usr/share/man/man8/e4defrag.8.gz",
"/usr/share/man/man8/filefrag.8.gz",
"/usr/share/man/man8/mke2fs.8.gz",
"/usr/share/man/man8/mklost+found.8.gz",
"/usr/share/man/man8/resize2fs.8.gz",
"/usr/share/man/man8/tune2fs.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "findutils@4.9.0-4",
"Name": "findutils",
"Identifier": {
"PURL": "pkg:deb/debian/findutils@4.9.0-4?arch=arm64\u0026distro=debian-12.14",
"UID": "32de162c86a5b42"
},
"Version": "4.9.0",
"Release": "4",
"Arch": "arm64",
"SrcName": "findutils",
"SrcVersion": "4.9.0",
"SrcRelease": "4",
"Licenses": [
"GFDL-1.3-no-invariants-or-later",
"GPL-3.0-or-later",
"FSFAP",
"GPL-3+ with Autoconf-data exception",
"FSFULLR",
"GPL-2+ with Autoconf-data exception",
"GPL-2.0-or-later",
"X11",
"public-domain",
"GPL with automake exception",
"LGPL-2.1-or-later",
"LGPL-2.0-or-later",
"LGPL-3.0-or-later",
"BSD-3-clause and/or GPL-3+",
"GPL-3+ with Bison-2.2 exception",
"LGPL-3.0-only",
"ISC and/or LGPL-2.1+",
"BSD-3-Clause",
"GFDL-1.3-only",
"GPL-2.0-only",
"GPL-3.0-only",
"ISC",
"LGPL-2.0-only",
"LGPL-2.1-only"
],
"Maintainer": "Andreas Metzler \u003cametzler@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/find",
"/usr/bin/xargs",
"/usr/share/doc-base/findutils.findutils",
"/usr/share/doc/findutils/NEWS.Debian.gz",
"/usr/share/doc/findutils/NEWS.gz",
"/usr/share/doc/findutils/README.gz",
"/usr/share/doc/findutils/TODO",
"/usr/share/doc/findutils/changelog.Debian.gz",
"/usr/share/doc/findutils/changelog.gz",
"/usr/share/doc/findutils/copyright",
"/usr/share/info/find-maint.info.gz",
"/usr/share/info/find.info-1.gz",
"/usr/share/info/find.info-2.gz",
"/usr/share/info/find.info.gz",
"/usr/share/locale/be/LC_MESSAGES/findutils.mo",
"/usr/share/locale/bg/LC_MESSAGES/findutils.mo",
"/usr/share/locale/ca/LC_MESSAGES/findutils.mo",
"/usr/share/locale/cs/LC_MESSAGES/findutils.mo",
"/usr/share/locale/da/LC_MESSAGES/findutils.mo",
"/usr/share/locale/de/LC_MESSAGES/findutils.mo",
"/usr/share/locale/el/LC_MESSAGES/findutils.mo",
"/usr/share/locale/eo/LC_MESSAGES/findutils.mo",
"/usr/share/locale/es/LC_MESSAGES/findutils.mo",
"/usr/share/locale/et/LC_MESSAGES/findutils.mo",
"/usr/share/locale/fi/LC_MESSAGES/findutils.mo",
"/usr/share/locale/fr/LC_MESSAGES/findutils.mo",
"/usr/share/locale/ga/LC_MESSAGES/findutils.mo",
"/usr/share/locale/gl/LC_MESSAGES/findutils.mo",
"/usr/share/locale/hr/LC_MESSAGES/findutils.mo",
"/usr/share/locale/hu/LC_MESSAGES/findutils.mo",
"/usr/share/locale/id/LC_MESSAGES/findutils.mo",
"/usr/share/locale/it/LC_MESSAGES/findutils.mo",
"/usr/share/locale/ja/LC_MESSAGES/findutils.mo",
"/usr/share/locale/ko/LC_MESSAGES/findutils.mo",
"/usr/share/locale/lg/LC_MESSAGES/findutils.mo",
"/usr/share/locale/lt/LC_MESSAGES/findutils.mo",
"/usr/share/locale/ms/LC_MESSAGES/findutils.mo",
"/usr/share/locale/nb/LC_MESSAGES/findutils.mo",
"/usr/share/locale/nl/LC_MESSAGES/findutils.mo",
"/usr/share/locale/pl/LC_MESSAGES/findutils.mo",
"/usr/share/locale/pt/LC_MESSAGES/findutils.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/findutils.mo",
"/usr/share/locale/ro/LC_MESSAGES/findutils.mo",
"/usr/share/locale/ru/LC_MESSAGES/findutils.mo",
"/usr/share/locale/sk/LC_MESSAGES/findutils.mo",
"/usr/share/locale/sl/LC_MESSAGES/findutils.mo",
"/usr/share/locale/sr/LC_MESSAGES/findutils.mo",
"/usr/share/locale/sv/LC_MESSAGES/findutils.mo",
"/usr/share/locale/tr/LC_MESSAGES/findutils.mo",
"/usr/share/locale/uk/LC_MESSAGES/findutils.mo",
"/usr/share/locale/vi/LC_MESSAGES/findutils.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/findutils.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/findutils.mo",
"/usr/share/man/man1/find.1.gz",
"/usr/share/man/man1/xargs.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "gcc-12-base@12.2.0-14+deb12u1",
"Name": "gcc-12-base",
"Identifier": {
"PURL": "pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "faf5ab04c4b8df2a"
},
"Version": "12.2.0",
"Release": "14+deb12u1",
"Arch": "arm64",
"SrcName": "gcc-12",
"SrcVersion": "12.2.0",
"SrcRelease": "14+deb12u1",
"Licenses": [
"GPL-2.0-or-later",
"GPL-3.0-only",
"GFDL-1.2-only",
"GPL-2.0-only",
"Artistic-2.0",
"LGPL-2.0-or-later"
],
"Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/share/doc/gcc-12-base/README.Debian.arm64.gz",
"/usr/share/doc/gcc-12-base/TODO.Debian",
"/usr/share/doc/gcc-12-base/changelog.Debian.gz",
"/usr/share/doc/gcc-12-base/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "gpgv@2.2.40-1.1+deb12u2",
"Name": "gpgv",
"Identifier": {
"PURL": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "7602f05bbfc60547"
},
"Version": "2.2.40",
"Release": "1.1+deb12u2",
"Arch": "arm64",
"SrcName": "gnupg2",
"SrcVersion": "2.2.40",
"SrcRelease": "1.1+deb12u2",
"Licenses": [
"GPL-3.0-or-later",
"permissive",
"LGPL-2.1-or-later",
"MIT",
"BSD-3-Clause",
"LGPL-3.0-or-later",
"RFC-Reference",
"TinySCHEME",
"CC0-1.0",
"GPL-3.0-only",
"LGPL-3.0-only",
"LGPL-2.1-only"
],
"Maintainer": "Debian GnuPG Maintainers \u003cpkg-gnupg-maint@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libbz2-1.0@1.0.8-5+b1",
"libc6@2.36-9+deb12u14",
"libgcrypt20@1.10.1-3+deb12u1",
"libgpg-error0@1.46-1",
"zlib1g@1:1.2.13.dfsg-1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/gpgv",
"/usr/share/doc/gpgv/NEWS.Debian.gz",
"/usr/share/doc/gpgv/changelog.Debian.gz",
"/usr/share/doc/gpgv/changelog.gz",
"/usr/share/doc/gpgv/copyright",
"/usr/share/man/man1/gpgv.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "grep@3.8-5",
"Name": "grep",
"Identifier": {
"PURL": "pkg:deb/debian/grep@3.8-5?arch=arm64\u0026distro=debian-12.14",
"UID": "52cb3bb0f4779d5d"
},
"Version": "3.8",
"Release": "5",
"Arch": "arm64",
"SrcName": "grep",
"SrcVersion": "3.8",
"SrcRelease": "5",
"Licenses": [
"GPL-3.0-or-later",
"GPL-3.0-only"
],
"Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"dpkg@1.21.23"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/egrep",
"/bin/fgrep",
"/bin/grep",
"/usr/bin/rgrep",
"/usr/share/doc/grep/AUTHORS",
"/usr/share/doc/grep/NEWS.Debian.gz",
"/usr/share/doc/grep/NEWS.gz",
"/usr/share/doc/grep/README",
"/usr/share/doc/grep/THANKS.gz",
"/usr/share/doc/grep/TODO.gz",
"/usr/share/doc/grep/changelog.Debian.gz",
"/usr/share/doc/grep/changelog.gz",
"/usr/share/doc/grep/copyright",
"/usr/share/info/grep.info.gz",
"/usr/share/locale/af/LC_MESSAGES/grep.mo",
"/usr/share/locale/be/LC_MESSAGES/grep.mo",
"/usr/share/locale/bg/LC_MESSAGES/grep.mo",
"/usr/share/locale/ca/LC_MESSAGES/grep.mo",
"/usr/share/locale/cs/LC_MESSAGES/grep.mo",
"/usr/share/locale/da/LC_MESSAGES/grep.mo",
"/usr/share/locale/de/LC_MESSAGES/grep.mo",
"/usr/share/locale/el/LC_MESSAGES/grep.mo",
"/usr/share/locale/eo/LC_MESSAGES/grep.mo",
"/usr/share/locale/es/LC_MESSAGES/grep.mo",
"/usr/share/locale/et/LC_MESSAGES/grep.mo",
"/usr/share/locale/eu/LC_MESSAGES/grep.mo",
"/usr/share/locale/fi/LC_MESSAGES/grep.mo",
"/usr/share/locale/fr/LC_MESSAGES/grep.mo",
"/usr/share/locale/ga/LC_MESSAGES/grep.mo",
"/usr/share/locale/gl/LC_MESSAGES/grep.mo",
"/usr/share/locale/he/LC_MESSAGES/grep.mo",
"/usr/share/locale/hr/LC_MESSAGES/grep.mo",
"/usr/share/locale/hu/LC_MESSAGES/grep.mo",
"/usr/share/locale/id/LC_MESSAGES/grep.mo",
"/usr/share/locale/it/LC_MESSAGES/grep.mo",
"/usr/share/locale/ja/LC_MESSAGES/grep.mo",
"/usr/share/locale/ka/LC_MESSAGES/grep.mo",
"/usr/share/locale/ko/LC_MESSAGES/grep.mo",
"/usr/share/locale/ky/LC_MESSAGES/grep.mo",
"/usr/share/locale/lt/LC_MESSAGES/grep.mo",
"/usr/share/locale/nb/LC_MESSAGES/grep.mo",
"/usr/share/locale/nl/LC_MESSAGES/grep.mo",
"/usr/share/locale/pa/LC_MESSAGES/grep.mo",
"/usr/share/locale/pl/LC_MESSAGES/grep.mo",
"/usr/share/locale/pt/LC_MESSAGES/grep.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/grep.mo",
"/usr/share/locale/ro/LC_MESSAGES/grep.mo",
"/usr/share/locale/ru/LC_MESSAGES/grep.mo",
"/usr/share/locale/sk/LC_MESSAGES/grep.mo",
"/usr/share/locale/sl/LC_MESSAGES/grep.mo",
"/usr/share/locale/sr/LC_MESSAGES/grep.mo",
"/usr/share/locale/sv/LC_MESSAGES/grep.mo",
"/usr/share/locale/ta/LC_MESSAGES/grep.mo",
"/usr/share/locale/th/LC_MESSAGES/grep.mo",
"/usr/share/locale/tr/LC_MESSAGES/grep.mo",
"/usr/share/locale/uk/LC_MESSAGES/grep.mo",
"/usr/share/locale/vi/LC_MESSAGES/grep.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/grep.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo",
"/usr/share/man/man1/grep.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "gzip@1.12-1",
"Name": "gzip",
"Identifier": {
"PURL": "pkg:deb/debian/gzip@1.12-1?arch=arm64\u0026distro=debian-12.14",
"UID": "f7ff281a72d61f87"
},
"Version": "1.12",
"Release": "1",
"Arch": "arm64",
"SrcName": "gzip",
"SrcVersion": "1.12",
"SrcRelease": "1",
"Licenses": [
"GPL-3.0-or-later",
"GFDL-1.3+-no-invariant",
"FSF-manpages",
"GPL-3.0-only",
"GFDL-3"
],
"Maintainer": "Milan Kupcevic \u003cmilan@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"dpkg@1.21.23"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/gunzip",
"/bin/gzexe",
"/bin/gzip",
"/bin/uncompress",
"/bin/zcat",
"/bin/zcmp",
"/bin/zdiff",
"/bin/zegrep",
"/bin/zfgrep",
"/bin/zforce",
"/bin/zgrep",
"/bin/zless",
"/bin/zmore",
"/bin/znew",
"/usr/share/doc/gzip/NEWS.gz",
"/usr/share/doc/gzip/README.gz",
"/usr/share/doc/gzip/TODO",
"/usr/share/doc/gzip/changelog.Debian.gz",
"/usr/share/doc/gzip/changelog.gz",
"/usr/share/doc/gzip/copyright",
"/usr/share/info/gzip.info.gz",
"/usr/share/man/man1/gzexe.1.gz",
"/usr/share/man/man1/gzip.1.gz",
"/usr/share/man/man1/zdiff.1.gz",
"/usr/share/man/man1/zforce.1.gz",
"/usr/share/man/man1/zgrep.1.gz",
"/usr/share/man/man1/zless.1.gz",
"/usr/share/man/man1/zmore.1.gz",
"/usr/share/man/man1/znew.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "hostname@3.23+nmu1",
"Name": "hostname",
"Identifier": {
"PURL": "pkg:deb/debian/hostname@3.23%2Bnmu1?arch=arm64\u0026distro=debian-12.14",
"UID": "ac9a2a51e9079531"
},
"Version": "3.23+nmu1",
"Arch": "arm64",
"SrcName": "hostname",
"SrcVersion": "3.23+nmu1",
"Licenses": [
"GPL-2.0-only"
],
"Maintainer": "Michael Meskes \u003cmeskes@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/hostname",
"/usr/share/doc/hostname/changelog.gz",
"/usr/share/doc/hostname/copyright",
"/usr/share/man/man1/hostname.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "init-system-helpers@1.65.2+deb12u1",
"Name": "init-system-helpers",
"Identifier": {
"PURL": "pkg:deb/debian/init-system-helpers@1.65.2%2Bdeb12u1?arch=all\u0026distro=debian-12.14",
"UID": "eb19be52d5305b25"
},
"Version": "1.65.2+deb12u1",
"Arch": "all",
"SrcName": "init-system-helpers",
"SrcVersion": "1.65.2+deb12u1",
"Licenses": [
"BSD-3-Clause",
"GPL-2.0-or-later",
"GPL-2.0-only"
],
"Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"usr-is-merged@37~deb12u1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/deb-systemd-helper",
"/usr/bin/deb-systemd-invoke",
"/usr/sbin/invoke-rc.d",
"/usr/sbin/service",
"/usr/sbin/update-rc.d",
"/usr/share/bug/init-system-helpers/control",
"/usr/share/doc/init-system-helpers/README.invoke-rc.d.gz",
"/usr/share/doc/init-system-helpers/README.policy-rc.d.gz",
"/usr/share/doc/init-system-helpers/changelog.gz",
"/usr/share/doc/init-system-helpers/copyright",
"/usr/share/lintian/overrides/init-system-helpers",
"/usr/share/man/man1/deb-systemd-helper.1p.gz",
"/usr/share/man/man1/deb-systemd-invoke.1p.gz",
"/usr/share/man/man8/invoke-rc.d.8.gz",
"/usr/share/man/man8/service.8.gz",
"/usr/share/man/man8/update-rc.d.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libacl1@2.3.1-3",
"Name": "libacl1",
"Identifier": {
"PURL": "pkg:deb/debian/libacl1@2.3.1-3?arch=arm64\u0026distro=debian-12.14",
"UID": "606f59b866cb26"
},
"Version": "2.3.1",
"Release": "3",
"Arch": "arm64",
"SrcName": "acl",
"SrcVersion": "2.3.1",
"SrcRelease": "3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"LGPL-2.0-or-later",
"LGPL-2.1-only"
],
"Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libacl.so.1.1.2301",
"/usr/share/doc/libacl1/changelog.Debian.gz",
"/usr/share/doc/libacl1/changelog.gz",
"/usr/share/doc/libacl1/copyright",
"/usr/share/lintian/overrides/libacl1"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libapt-pkg6.0@2.6.1",
"Name": "libapt-pkg6.0",
"Identifier": {
"PURL": "pkg:deb/debian/libapt-pkg6.0@2.6.1?arch=arm64\u0026distro=debian-12.14",
"UID": "672033d1c406a01e"
},
"Version": "2.6.1",
"Arch": "arm64",
"SrcName": "apt",
"SrcVersion": "2.6.1",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"BSD-3-Clause",
"MIT"
],
"Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libbz2-1.0@1.0.8-5+b1",
"libc6@2.36-9+deb12u14",
"libgcc-s1@12.2.0-14+deb12u1",
"libgcrypt20@1.10.1-3+deb12u1",
"liblz4-1@1.9.4-1",
"liblzma5@5.4.1-1",
"libstdc++6@12.2.0-14+deb12u1",
"libsystemd0@252.39-1~deb12u2",
"libudev1@252.39-1~deb12u2",
"libxxhash0@0.8.1-1",
"libzstd1@1.5.4+dfsg2-5",
"zlib1g@1:1.2.13.dfsg-1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libapt-pkg.so.6.0.0",
"/usr/share/doc/libapt-pkg6.0/NEWS.Debian.gz",
"/usr/share/doc/libapt-pkg6.0/changelog.gz",
"/usr/share/doc/libapt-pkg6.0/copyright",
"/usr/share/locale/ar/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/ast/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/bg/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/bs/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/ca/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/cs/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/cy/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/da/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/de/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/dz/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/el/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/es/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/eu/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/fi/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/fr/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/gl/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/hu/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/it/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/ja/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/km/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/ko/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/ku/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/lt/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/mr/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/nb/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/ne/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/nl/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/nn/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/pl/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/pt/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/ro/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/ru/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/sk/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/sl/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/sv/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/th/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/tl/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/tr/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/uk/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/vi/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/libapt-pkg6.0.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/libapt-pkg6.0.mo"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libattr1@1:2.5.1-4",
"Name": "libattr1",
"Identifier": {
"PURL": "pkg:deb/debian/libattr1@2.5.1-4?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "e92227fb26eefa9a"
},
"Version": "2.5.1",
"Release": "4",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "attr",
"SrcVersion": "2.5.1",
"SrcRelease": "4",
"SrcEpoch": 1,
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"LGPL-2.0-or-later",
"LGPL-2.1-only"
],
"Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libattr.so.1.1.2501",
"/usr/share/doc/libattr1/changelog.Debian.gz",
"/usr/share/doc/libattr1/changelog.gz",
"/usr/share/doc/libattr1/copyright",
"/usr/share/lintian/overrides/libattr1"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libaudit-common@1:3.0.9-1",
"Name": "libaudit-common",
"Identifier": {
"PURL": "pkg:deb/debian/libaudit-common@3.0.9-1?arch=all\u0026distro=debian-12.14\u0026epoch=1",
"UID": "501d3bae9dbba871"
},
"Version": "3.0.9",
"Release": "1",
"Epoch": 1,
"Arch": "all",
"SrcName": "audit",
"SrcVersion": "3.0.9",
"SrcRelease": "1",
"SrcEpoch": 1,
"Licenses": [
"GPL-2.0-only",
"LGPL-2.1-only",
"GPL-1.0-only"
],
"Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/share/doc/libaudit-common/changelog.Debian.gz",
"/usr/share/doc/libaudit-common/changelog.gz",
"/usr/share/doc/libaudit-common/copyright",
"/usr/share/man/man5/libaudit.conf.5.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libaudit1@1:3.0.9-1",
"Name": "libaudit1",
"Identifier": {
"PURL": "pkg:deb/debian/libaudit1@3.0.9-1?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "512959d1505e9264"
},
"Version": "3.0.9",
"Release": "1",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "audit",
"SrcVersion": "3.0.9",
"SrcRelease": "1",
"SrcEpoch": 1,
"Licenses": [
"GPL-2.0-only",
"LGPL-2.1-only",
"GPL-1.0-only"
],
"Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libaudit-common@1:3.0.9-1",
"libc6@2.36-9+deb12u14",
"libcap-ng0@0.8.3-1+b3"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libaudit.so.1.0.0",
"/usr/share/doc/libaudit1/changelog.Debian.gz",
"/usr/share/doc/libaudit1/changelog.gz",
"/usr/share/doc/libaudit1/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libblkid1@2.38.1-5+deb12u3",
"Name": "libblkid1",
"Identifier": {
"PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "64c98e11c870e528"
},
"Version": "2.38.1",
"Release": "5+deb12u3",
"Arch": "arm64",
"SrcName": "util-linux",
"SrcVersion": "2.38.1",
"SrcRelease": "5+deb12u3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-or-later",
"public-domain",
"BSD-4-Clause",
"MIT",
"BSD-3-Clause",
"BSLA",
"LGPL-2.0-or-later",
"LGPL-2.1-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-only",
"LGPL-2.0-only",
"LGPL-2.1-only",
"LGPL-3.0-only"
],
"Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libblkid.so.1.1.0",
"/usr/share/doc/libblkid1/changelog.Debian.gz",
"/usr/share/doc/libblkid1/changelog.gz",
"/usr/share/doc/libblkid1/copyright",
"/usr/share/lintian/overrides/libblkid1"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libbz2-1.0@1.0.8-5+b1",
"Name": "libbz2-1.0",
"Identifier": {
"PURL": "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=arm64\u0026distro=debian-12.14",
"UID": "3824e1be18408114"
},
"Version": "1.0.8",
"Release": "5+b1",
"Arch": "arm64",
"SrcName": "bzip2",
"SrcVersion": "1.0.8",
"SrcRelease": "5",
"Licenses": [
"BSD-3-Clause",
"GPL-2.0-only"
],
"Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libbz2.so.1.0.4",
"/usr/share/doc/libbz2-1.0/changelog.Debian.arm64.gz",
"/usr/share/doc/libbz2-1.0/changelog.Debian.gz",
"/usr/share/doc/libbz2-1.0/changelog.gz",
"/usr/share/doc/libbz2-1.0/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libc-bin@2.36-9+deb12u14",
"Name": "libc-bin",
"Identifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"Version": "2.36",
"Release": "9+deb12u14",
"Arch": "arm64",
"SrcName": "glibc",
"SrcVersion": "2.36",
"SrcRelease": "9+deb12u14",
"Licenses": [
"LGPL-2.1-only",
"GPL-2.0-only"
],
"Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/sbin/ldconfig",
"/usr/bin/getconf",
"/usr/bin/getent",
"/usr/bin/iconv",
"/usr/bin/ldd",
"/usr/bin/locale",
"/usr/bin/localedef",
"/usr/bin/pldd",
"/usr/bin/tzselect",
"/usr/bin/zdump",
"/usr/lib/locale/C.utf8/LC_ADDRESS",
"/usr/lib/locale/C.utf8/LC_COLLATE",
"/usr/lib/locale/C.utf8/LC_CTYPE",
"/usr/lib/locale/C.utf8/LC_IDENTIFICATION",
"/usr/lib/locale/C.utf8/LC_MEASUREMENT",
"/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES",
"/usr/lib/locale/C.utf8/LC_MONETARY",
"/usr/lib/locale/C.utf8/LC_NAME",
"/usr/lib/locale/C.utf8/LC_NUMERIC",
"/usr/lib/locale/C.utf8/LC_PAPER",
"/usr/lib/locale/C.utf8/LC_TELEPHONE",
"/usr/lib/locale/C.utf8/LC_TIME",
"/usr/sbin/iconvconfig",
"/usr/sbin/zic",
"/usr/share/doc/libc-bin/changelog.Debian.gz",
"/usr/share/doc/libc-bin/changelog.gz",
"/usr/share/doc/libc-bin/copyright",
"/usr/share/libc-bin/nsswitch.conf",
"/usr/share/lintian/overrides/libc-bin",
"/usr/share/man/man1/getconf.1.gz",
"/usr/share/man/man1/tzselect.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libc6@2.36-9+deb12u14",
"Name": "libc6",
"Identifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"Version": "2.36",
"Release": "9+deb12u14",
"Arch": "arm64",
"SrcName": "glibc",
"SrcVersion": "2.36",
"SrcRelease": "9+deb12u14",
"Licenses": [
"LGPL-2.1-only",
"GPL-2.0-only"
],
"Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libgcc-s1@12.2.0-14+deb12u1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/ld-linux-aarch64.so.1",
"/lib/aarch64-linux-gnu/libBrokenLocale.so.1",
"/lib/aarch64-linux-gnu/libanl.so.1",
"/lib/aarch64-linux-gnu/libc.so.6",
"/lib/aarch64-linux-gnu/libc_malloc_debug.so.0",
"/lib/aarch64-linux-gnu/libdl.so.2",
"/lib/aarch64-linux-gnu/libm.so.6",
"/lib/aarch64-linux-gnu/libmemusage.so",
"/lib/aarch64-linux-gnu/libnsl.so.1",
"/lib/aarch64-linux-gnu/libnss_compat.so.2",
"/lib/aarch64-linux-gnu/libnss_dns.so.2",
"/lib/aarch64-linux-gnu/libnss_files.so.2",
"/lib/aarch64-linux-gnu/libnss_hesiod.so.2",
"/lib/aarch64-linux-gnu/libpcprofile.so",
"/lib/aarch64-linux-gnu/libpthread.so.0",
"/lib/aarch64-linux-gnu/libresolv.so.2",
"/lib/aarch64-linux-gnu/librt.so.1",
"/lib/aarch64-linux-gnu/libthread_db.so.1",
"/lib/aarch64-linux-gnu/libutil.so.1",
"/usr/lib/aarch64-linux-gnu/gconv/ANSI_X3.110.so",
"/usr/lib/aarch64-linux-gnu/gconv/ARMSCII-8.so",
"/usr/lib/aarch64-linux-gnu/gconv/ASMO_449.so",
"/usr/lib/aarch64-linux-gnu/gconv/BIG5.so",
"/usr/lib/aarch64-linux-gnu/gconv/BIG5HKSCS.so",
"/usr/lib/aarch64-linux-gnu/gconv/BRF.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP10007.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1125.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1250.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1251.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1252.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1253.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1254.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1255.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1256.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1257.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP1258.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP737.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP770.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP771.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP772.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP773.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP774.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP775.so",
"/usr/lib/aarch64-linux-gnu/gconv/CP932.so",
"/usr/lib/aarch64-linux-gnu/gconv/CSN_369103.so",
"/usr/lib/aarch64-linux-gnu/gconv/CWI.so",
"/usr/lib/aarch64-linux-gnu/gconv/DEC-MCS.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-AT-DE-A.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-AT-DE.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-CA-FR.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-DK-NO-A.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-DK-NO.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES-A.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES-S.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FI-SE-A.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FI-SE.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FR.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-IS-FRISS.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-IT.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-PT.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-UK.so",
"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-US.so",
"/usr/lib/aarch64-linux-gnu/gconv/ECMA-CYRILLIC.so",
"/usr/lib/aarch64-linux-gnu/gconv/EUC-CN.so",
"/usr/lib/aarch64-linux-gnu/gconv/EUC-JISX0213.so",
"/usr/lib/aarch64-linux-gnu/gconv/EUC-JP-MS.so",
"/usr/lib/aarch64-linux-gnu/gconv/EUC-JP.so",
"/usr/lib/aarch64-linux-gnu/gconv/EUC-KR.so",
"/usr/lib/aarch64-linux-gnu/gconv/EUC-TW.so",
"/usr/lib/aarch64-linux-gnu/gconv/GB18030.so",
"/usr/lib/aarch64-linux-gnu/gconv/GBBIG5.so",
"/usr/lib/aarch64-linux-gnu/gconv/GBGBK.so",
"/usr/lib/aarch64-linux-gnu/gconv/GBK.so",
"/usr/lib/aarch64-linux-gnu/gconv/GEORGIAN-ACADEMY.so",
"/usr/lib/aarch64-linux-gnu/gconv/GEORGIAN-PS.so",
"/usr/lib/aarch64-linux-gnu/gconv/GOST_19768-74.so",
"/usr/lib/aarch64-linux-gnu/gconv/GREEK-CCITT.so",
"/usr/lib/aarch64-linux-gnu/gconv/GREEK7-OLD.so",
"/usr/lib/aarch64-linux-gnu/gconv/GREEK7.so",
"/usr/lib/aarch64-linux-gnu/gconv/HP-GREEK8.so",
"/usr/lib/aarch64-linux-gnu/gconv/HP-ROMAN8.so",
"/usr/lib/aarch64-linux-gnu/gconv/HP-ROMAN9.so",
"/usr/lib/aarch64-linux-gnu/gconv/HP-THAI8.so",
"/usr/lib/aarch64-linux-gnu/gconv/HP-TURKISH8.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM037.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM038.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1004.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1008.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1008_420.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1025.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1026.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1046.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1047.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1097.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1112.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1122.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1123.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1124.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1129.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1130.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1132.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1133.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1137.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1140.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1141.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1142.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1143.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1144.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1145.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1146.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1147.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1148.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1149.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1153.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1154.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1155.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1156.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1157.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1158.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1160.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1161.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1162.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1163.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1164.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1166.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1167.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM12712.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1364.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1371.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1388.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1390.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM1399.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM16804.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM256.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM273.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM274.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM275.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM277.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM278.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM280.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM281.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM284.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM285.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM290.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM297.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM420.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM423.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM424.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM437.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM4517.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM4899.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM4909.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM4971.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM500.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM5347.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM803.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM850.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM851.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM852.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM855.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM856.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM857.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM858.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM860.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM861.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM862.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM863.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM864.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM865.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM866.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM866NAV.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM868.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM869.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM870.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM871.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM874.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM875.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM880.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM891.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM901.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM902.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM903.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM9030.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM904.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM905.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM9066.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM918.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM921.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM922.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM930.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM932.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM933.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM935.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM937.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM939.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM943.so",
"/usr/lib/aarch64-linux-gnu/gconv/IBM9448.so",
"/usr/lib/aarch64-linux-gnu/gconv/IEC_P27-1.so",
"/usr/lib/aarch64-linux-gnu/gconv/INIS-8.so",
"/usr/lib/aarch64-linux-gnu/gconv/INIS-CYRILLIC.so",
"/usr/lib/aarch64-linux-gnu/gconv/INIS.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISIRI-3342.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-CN-EXT.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-CN.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-JP-3.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-JP.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-KR.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO-IR-197.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO-IR-209.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO646.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-1.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-10.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-11.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-13.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-14.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-15.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-16.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-2.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-3.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-4.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-5.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-6.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-7.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-8.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-9.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-9E.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO_10367-BOX.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO_11548-1.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO_2033.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO_5427-EXT.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO_5427.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO_5428.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO_6937-2.so",
"/usr/lib/aarch64-linux-gnu/gconv/ISO_6937.so",
"/usr/lib/aarch64-linux-gnu/gconv/JOHAB.so",
"/usr/lib/aarch64-linux-gnu/gconv/KOI-8.so",
"/usr/lib/aarch64-linux-gnu/gconv/KOI8-R.so",
"/usr/lib/aarch64-linux-gnu/gconv/KOI8-RU.so",
"/usr/lib/aarch64-linux-gnu/gconv/KOI8-T.so",
"/usr/lib/aarch64-linux-gnu/gconv/KOI8-U.so",
"/usr/lib/aarch64-linux-gnu/gconv/LATIN-GREEK-1.so",
"/usr/lib/aarch64-linux-gnu/gconv/LATIN-GREEK.so",
"/usr/lib/aarch64-linux-gnu/gconv/MAC-CENTRALEUROPE.so",
"/usr/lib/aarch64-linux-gnu/gconv/MAC-IS.so",
"/usr/lib/aarch64-linux-gnu/gconv/MAC-SAMI.so",
"/usr/lib/aarch64-linux-gnu/gconv/MAC-UK.so",
"/usr/lib/aarch64-linux-gnu/gconv/MACINTOSH.so",
"/usr/lib/aarch64-linux-gnu/gconv/MIK.so",
"/usr/lib/aarch64-linux-gnu/gconv/NATS-DANO.so",
"/usr/lib/aarch64-linux-gnu/gconv/NATS-SEFI.so",
"/usr/lib/aarch64-linux-gnu/gconv/PT154.so",
"/usr/lib/aarch64-linux-gnu/gconv/RK1048.so",
"/usr/lib/aarch64-linux-gnu/gconv/SAMI-WS2.so",
"/usr/lib/aarch64-linux-gnu/gconv/SHIFT_JISX0213.so",
"/usr/lib/aarch64-linux-gnu/gconv/SJIS.so",
"/usr/lib/aarch64-linux-gnu/gconv/T.61.so",
"/usr/lib/aarch64-linux-gnu/gconv/TCVN5712-1.so",
"/usr/lib/aarch64-linux-gnu/gconv/TIS-620.so",
"/usr/lib/aarch64-linux-gnu/gconv/TSCII.so",
"/usr/lib/aarch64-linux-gnu/gconv/UHC.so",
"/usr/lib/aarch64-linux-gnu/gconv/UNICODE.so",
"/usr/lib/aarch64-linux-gnu/gconv/UTF-16.so",
"/usr/lib/aarch64-linux-gnu/gconv/UTF-32.so",
"/usr/lib/aarch64-linux-gnu/gconv/UTF-7.so",
"/usr/lib/aarch64-linux-gnu/gconv/VISCII.so",
"/usr/lib/aarch64-linux-gnu/gconv/gconv-modules",
"/usr/lib/aarch64-linux-gnu/gconv/gconv-modules.cache",
"/usr/lib/aarch64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf",
"/usr/lib/aarch64-linux-gnu/gconv/libCNS.so",
"/usr/lib/aarch64-linux-gnu/gconv/libGB.so",
"/usr/lib/aarch64-linux-gnu/gconv/libISOIR165.so",
"/usr/lib/aarch64-linux-gnu/gconv/libJIS.so",
"/usr/lib/aarch64-linux-gnu/gconv/libJISX0213.so",
"/usr/lib/aarch64-linux-gnu/gconv/libKSC.so",
"/usr/share/doc/libc6/NEWS.Debian.gz",
"/usr/share/doc/libc6/NEWS.gz",
"/usr/share/doc/libc6/README.Debian.gz",
"/usr/share/doc/libc6/README.hesiod.gz",
"/usr/share/doc/libc6/changelog.Debian.gz",
"/usr/share/doc/libc6/changelog.gz",
"/usr/share/doc/libc6/copyright",
"/usr/share/lintian/overrides/libc6"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libcap-ng0@0.8.3-1+b3",
"Name": "libcap-ng0",
"Identifier": {
"PURL": "pkg:deb/debian/libcap-ng0@0.8.3-1%2Bb3?arch=arm64\u0026distro=debian-12.14",
"UID": "bb3948d45d19da9a"
},
"Version": "0.8.3",
"Release": "1+b3",
"Arch": "arm64",
"SrcName": "libcap-ng",
"SrcVersion": "0.8.3",
"SrcRelease": "1",
"Licenses": [
"LGPL-2.1-or-later",
"GPL-2.0-or-later",
"GPL-3.0-only",
"LGPL-2.1-only",
"GPL-2.0-only"
],
"Maintainer": "Håvard F. Aasen \u003chavard.f.aasen@pfft.no\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libcap-ng.so.0.0.0",
"/lib/aarch64-linux-gnu/libdrop_ambient.so.0.0.0",
"/usr/share/doc/libcap-ng0/changelog.Debian.arm64.gz",
"/usr/share/doc/libcap-ng0/changelog.Debian.gz",
"/usr/share/doc/libcap-ng0/changelog.gz",
"/usr/share/doc/libcap-ng0/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libcap2@1:2.66-4+deb12u3+b1",
"Name": "libcap2",
"Identifier": {
"PURL": "pkg:deb/debian/libcap2@2.66-4%2Bdeb12u3%2Bb1?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "20480f39b2943e4e"
},
"Version": "2.66",
"Release": "4+deb12u3+b1",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "libcap2",
"SrcVersion": "2.66",
"SrcRelease": "4+deb12u3",
"SrcEpoch": 1,
"Licenses": [
"BSD-3-Clause",
"GPL-2.0-only",
"GPL-2.0-or-later"
],
"Maintainer": "Christian Kastner \u003cckk@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libcap.so.2.66",
"/lib/aarch64-linux-gnu/libpsx.so.2.66",
"/usr/share/doc/libcap2/changelog.Debian.arm64.gz",
"/usr/share/doc/libcap2/changelog.Debian.gz",
"/usr/share/doc/libcap2/changelog.gz",
"/usr/share/doc/libcap2/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libcom-err2@1.47.0-2+b2",
"Name": "libcom-err2",
"Identifier": {
"PURL": "pkg:deb/debian/libcom-err2@1.47.0-2%2Bb2?arch=arm64\u0026distro=debian-12.14",
"UID": "a69c2e037f8a1103"
},
"Version": "1.47.0",
"Release": "2+b2",
"Arch": "arm64",
"SrcName": "e2fsprogs",
"SrcVersion": "1.47.0",
"SrcRelease": "2",
"Licenses": [
"GPL-2.0-only",
"LGPL-2.0-only",
"BSD-3-Clause",
"Apache-2.0",
"ISC",
"GPL-2.0-or-later",
"MIT-US-export",
"Kazlib",
"Latex2e",
"GPL-2+ with Texinfo exception"
],
"Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libcom_err.so.2.1",
"/usr/share/doc/libcom-err2/changelog.Debian.arm64.gz",
"/usr/share/doc/libcom-err2/changelog.Debian.gz",
"/usr/share/doc/libcom-err2/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libcrypt1@1:4.4.33-2",
"Name": "libcrypt1",
"Identifier": {
"PURL": "pkg:deb/debian/libcrypt1@4.4.33-2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "e63d00ed2705f957"
},
"Version": "4.4.33",
"Release": "2",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "libxcrypt",
"SrcVersion": "4.4.33",
"SrcRelease": "2",
"SrcEpoch": 1,
"Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libcrypt.so.1.1.0",
"/usr/share/doc/libcrypt1/changelog.Debian.gz",
"/usr/share/doc/libcrypt1/changelog.gz",
"/usr/share/doc/libcrypt1/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libdb5.3@5.3.28+dfsg2-1",
"Name": "libdb5.3",
"Identifier": {
"PURL": "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg2-1?arch=arm64\u0026distro=debian-12.14",
"UID": "1e97579bc1121a04"
},
"Version": "5.3.28+dfsg2",
"Release": "1",
"Arch": "arm64",
"SrcName": "db5.3",
"SrcVersion": "5.3.28+dfsg2",
"SrcRelease": "1",
"Licenses": [
"Sleepycat",
"BSD-3-Clause",
"MS-PL",
"GPL-2.0-or-later",
"Artistic-2.0",
"X11",
"MIT-old",
"TCL-like",
"BSD-3-clause-fjord",
"GPL-3.0-only",
"Zlib"
],
"Maintainer": "Bastian Germann \u003cbage@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libdb-5.3.so",
"/usr/share/doc/libdb5.3/build_signature_arm64.txt",
"/usr/share/doc/libdb5.3/changelog.Debian.gz",
"/usr/share/doc/libdb5.3/copyright",
"/usr/share/lintian/overrides/libdb5.3"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libdebconfclient0@0.270",
"Name": "libdebconfclient0",
"Identifier": {
"PURL": "pkg:deb/debian/libdebconfclient0@0.270?arch=arm64\u0026distro=debian-12.14",
"UID": "b8843d315db6ca5"
},
"Version": "0.270",
"Arch": "arm64",
"SrcName": "cdebconf",
"SrcVersion": "0.270",
"Licenses": [
"BSD-2-Clause",
"GPL-2.0-or-later",
"GPL-2.0-only"
],
"Maintainer": "Debian Install System Team \u003cdebian-boot@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libdebconfclient.so.0.0.0",
"/usr/share/doc/libdebconfclient0/changelog.gz",
"/usr/share/doc/libdebconfclient0/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libext2fs2@1.47.0-2+b2",
"Name": "libext2fs2",
"Identifier": {
"PURL": "pkg:deb/debian/libext2fs2@1.47.0-2%2Bb2?arch=arm64\u0026distro=debian-12.14",
"UID": "5cdf4fbf43b3f693"
},
"Version": "1.47.0",
"Release": "2+b2",
"Arch": "arm64",
"SrcName": "e2fsprogs",
"SrcVersion": "1.47.0",
"SrcRelease": "2",
"Licenses": [
"GPL-2.0-only",
"LGPL-2.0-only",
"BSD-3-Clause",
"Apache-2.0",
"ISC",
"GPL-2.0-or-later",
"MIT-US-export",
"Kazlib",
"Latex2e",
"GPL-2+ with Texinfo exception"
],
"Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libe2p.so.2.3",
"/lib/aarch64-linux-gnu/libext2fs.so.2.4",
"/usr/share/doc/libext2fs2/changelog.Debian.arm64.gz",
"/usr/share/doc/libext2fs2/changelog.Debian.gz",
"/usr/share/doc/libext2fs2/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libffi8@3.4.4-1",
"Name": "libffi8",
"Identifier": {
"PURL": "pkg:deb/debian/libffi8@3.4.4-1?arch=arm64\u0026distro=debian-12.14",
"UID": "bedcd3e907ab25cb"
},
"Version": "3.4.4",
"Release": "1",
"Arch": "arm64",
"SrcName": "libffi",
"SrcVersion": "3.4.4",
"SrcRelease": "1",
"Licenses": [
"MIT",
"X11",
"GPL-2.0-or-later",
"GPL-3.0-or-later",
"MPL-1.1",
"LGPL-2.1-or-later",
"public-domain"
],
"Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libffi.so.8.1.2",
"/usr/share/doc/libffi8/changelog.Debian.gz",
"/usr/share/doc/libffi8/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libgcc-s1@12.2.0-14+deb12u1",
"Name": "libgcc-s1",
"Identifier": {
"PURL": "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "38f61f89476da007"
},
"Version": "12.2.0",
"Release": "14+deb12u1",
"Arch": "arm64",
"SrcName": "gcc-12",
"SrcVersion": "12.2.0",
"SrcRelease": "14+deb12u1",
"Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"gcc-12-base@12.2.0-14+deb12u1",
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libgcc_s.so.1",
"/usr/share/lintian/overrides/libgcc-s1"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libgcrypt20@1.10.1-3+deb12u1",
"Name": "libgcrypt20",
"Identifier": {
"PURL": "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "ff826f90751028b6"
},
"Version": "1.10.1",
"Release": "3+deb12u1",
"Arch": "arm64",
"SrcName": "libgcrypt20",
"SrcVersion": "1.10.1",
"SrcRelease": "3+deb12u1",
"Licenses": [
"LGPL-2.0-or-later",
"GPL-2.0-only"
],
"Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libgpg-error0@1.46-1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libgcrypt.so.20.4.1",
"/usr/share/doc/libgcrypt20/AUTHORS.gz",
"/usr/share/doc/libgcrypt20/NEWS.gz",
"/usr/share/doc/libgcrypt20/README.gz",
"/usr/share/doc/libgcrypt20/THANKS.gz",
"/usr/share/doc/libgcrypt20/changelog.Debian.gz",
"/usr/share/doc/libgcrypt20/changelog.gz",
"/usr/share/doc/libgcrypt20/copyright",
"/usr/share/libgcrypt20/clean-up-unmanaged-libraries"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libgmp10@2:6.2.1+dfsg1-1.1",
"Name": "libgmp10",
"Identifier": {
"PURL": "pkg:deb/debian/libgmp10@6.2.1%2Bdfsg1-1.1?arch=arm64\u0026distro=debian-12.14\u0026epoch=2",
"UID": "7e52f45725bb56e7"
},
"Version": "6.2.1+dfsg1",
"Release": "1.1",
"Epoch": 2,
"Arch": "arm64",
"SrcName": "gmp",
"SrcVersion": "6.2.1+dfsg1",
"SrcRelease": "1.1",
"SrcEpoch": 2,
"Licenses": [
"GPL-2.0-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-or-later",
"GPL-3+ with Bison exception",
"GPL-2.0-only",
"GPL-3.0-only",
"LGPL-3.0-only"
],
"Maintainer": "Debian Science Team \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libgmp.so.10.4.1",
"/usr/share/doc/libgmp10/README.Debian",
"/usr/share/doc/libgmp10/changelog.Debian.gz",
"/usr/share/doc/libgmp10/changelog.gz",
"/usr/share/doc/libgmp10/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libgnutls30@3.7.9-2+deb12u7",
"Name": "libgnutls30",
"Identifier": {
"PURL": "pkg:deb/debian/libgnutls30@3.7.9-2%2Bdeb12u7?arch=arm64\u0026distro=debian-12.14",
"UID": "5ef30c5bee872030"
},
"Version": "3.7.9",
"Release": "2+deb12u7",
"Arch": "arm64",
"SrcName": "gnutls28",
"SrcVersion": "3.7.9",
"SrcRelease": "2+deb12u7",
"Licenses": [
"LGPL-2.1-only",
"LGPL-2.0-or-later",
"LGPL-3.0-only",
"GPL-2.0-or-later",
"GPL-3.0-only",
"GFDL-1.3-only",
"CC0-1.0",
"MIT",
"Apache-2.0",
"LGPL-3.0-or-later",
"LGPL-2.1-or-later",
"GPL-3.0-or-later",
"BSD-3-Clause"
],
"Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libgmp10@2:6.2.1+dfsg1-1.1",
"libhogweed6@3.8.1-2",
"libidn2-0@2.3.3-1+b1",
"libnettle8@3.8.1-2",
"libp11-kit0@0.24.1-2",
"libtasn1-6@4.19.0-2+deb12u1",
"libunistring2@1.0-2"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libgnutls.so.30.34.3",
"/usr/share/doc/libgnutls30/AUTHORS.gz",
"/usr/share/doc/libgnutls30/NEWS.Debian.gz",
"/usr/share/doc/libgnutls30/NEWS.gz",
"/usr/share/doc/libgnutls30/README.md.gz",
"/usr/share/doc/libgnutls30/THANKS.gz",
"/usr/share/doc/libgnutls30/changelog.Debian.gz",
"/usr/share/doc/libgnutls30/changelog.gz",
"/usr/share/doc/libgnutls30/copyright",
"/usr/share/locale/cs/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/de/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/eo/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/es/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/fi/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/fr/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/it/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/ka/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/ms/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/nl/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/pl/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/ro/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/sr/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/sv/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/uk/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/vi/LC_MESSAGES/gnutls30.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/gnutls30.mo"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libgpg-error0@1.46-1",
"Name": "libgpg-error0",
"Identifier": {
"PURL": "pkg:deb/debian/libgpg-error0@1.46-1?arch=arm64\u0026distro=debian-12.14",
"UID": "2f532b6014156124"
},
"Version": "1.46",
"Release": "1",
"Arch": "arm64",
"SrcName": "libgpg-error",
"SrcVersion": "1.46",
"SrcRelease": "1",
"Licenses": [
"LGPL-2.1-or-later",
"BSD-3-Clause",
"g10-permissive",
"GPL-3.0-or-later",
"LGPL-2.1-only",
"GPL-3.0-only"
],
"Maintainer": "Debian GnuPG Maintainers \u003cpkg-gnupg-maint@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libgpg-error.so.0.33.1",
"/usr/share/doc/libgpg-error0/README.gz",
"/usr/share/doc/libgpg-error0/changelog.Debian.gz",
"/usr/share/doc/libgpg-error0/changelog.gz",
"/usr/share/doc/libgpg-error0/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libhogweed6@3.8.1-2",
"Name": "libhogweed6",
"Identifier": {
"PURL": "pkg:deb/debian/libhogweed6@3.8.1-2?arch=arm64\u0026distro=debian-12.14",
"UID": "487f5c60deca6db1"
},
"Version": "3.8.1",
"Release": "2",
"Arch": "arm64",
"SrcName": "nettle",
"SrcVersion": "3.8.1",
"SrcRelease": "2",
"Licenses": [
"LGPL-3.0-or-later",
"GPL-2.0-or-later",
"LGPL-2.0-or-later",
"LGPL-2.0-only",
"MIT",
"GPL-3.0-or-later",
"GPL-3.0-with-autoconf-exception+",
"public-domain",
"GPL-2.0-only",
"GAP"
],
"Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libgmp10@2:6.2.1+dfsg1-1.1",
"libnettle8@3.8.1-2"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libhogweed.so.6.6",
"/usr/share/doc/libhogweed6/changelog.Debian.gz",
"/usr/share/doc/libhogweed6/changelog.gz",
"/usr/share/doc/libhogweed6/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libidn2-0@2.3.3-1+b1",
"Name": "libidn2-0",
"Identifier": {
"PURL": "pkg:deb/debian/libidn2-0@2.3.3-1%2Bb1?arch=arm64\u0026distro=debian-12.14",
"UID": "98c84b01f6f807a9"
},
"Version": "2.3.3",
"Release": "1+b1",
"Arch": "arm64",
"SrcName": "libidn2",
"SrcVersion": "2.3.3",
"SrcRelease": "1",
"Licenses": [
"GPL-3.0-or-later",
"LGPL-3.0-or-later",
"GPL-2.0-or-later",
"Unicode",
"GPL-3.0-only",
"GPL-2.0-only",
"LGPL-3.0-only"
],
"Maintainer": "Debian Libidn team \u003chelp-libidn@gnu.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libunistring2@1.0-2"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libidn2.so.0.3.8",
"/usr/share/doc/libidn2-0/AUTHORS",
"/usr/share/doc/libidn2-0/NEWS.gz",
"/usr/share/doc/libidn2-0/README.md.gz",
"/usr/share/doc/libidn2-0/changelog.Debian.arm64.gz",
"/usr/share/doc/libidn2-0/changelog.Debian.gz",
"/usr/share/doc/libidn2-0/changelog.gz",
"/usr/share/doc/libidn2-0/copyright",
"/usr/share/lintian/overrides/libidn2-0",
"/usr/share/locale/cs/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/da/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/de/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/eo/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/es/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/fi/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/fr/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/fur/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/hr/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/hu/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/id/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/it/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/ja/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/ka/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/nl/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/pl/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/ro/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/ru/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/sr/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/sv/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/uk/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/vi/LC_MESSAGES/libidn2.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/libidn2.mo"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "liblz4-1@1.9.4-1",
"Name": "liblz4-1",
"Identifier": {
"PURL": "pkg:deb/debian/liblz4-1@1.9.4-1?arch=arm64\u0026distro=debian-12.14",
"UID": "3114357d53d9e0c1"
},
"Version": "1.9.4",
"Release": "1",
"Arch": "arm64",
"SrcName": "lz4",
"SrcVersion": "1.9.4",
"SrcRelease": "1",
"Licenses": [
"BSD-2-Clause",
"GPL-2.0-or-later",
"GPL-2.0-only"
],
"Maintainer": "Nobuhiro Iwamatsu \u003ciwamatsu@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/liblz4.so.1.9.4",
"/usr/share/doc/liblz4-1/changelog.Debian.gz",
"/usr/share/doc/liblz4-1/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "liblzma5@5.4.1-1",
"Name": "liblzma5",
"Identifier": {
"PURL": "pkg:deb/debian/liblzma5@5.4.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "d4579e4f64155338"
},
"Version": "5.4.1",
"Release": "1",
"Arch": "arm64",
"SrcName": "xz-utils",
"SrcVersion": "5.4.1",
"SrcRelease": "1",
"Licenses": [
"PD",
"probably-PD",
"GPL-2.0-or-later",
"LGPL-2.1-or-later",
"permissive-fsf",
"Autoconf",
"permissive-nowarranty",
"GPL-2.0-only",
"none",
"config-h",
"LGPL-2.0-only",
"LGPL-2.1-only",
"noderivs",
"PD-debian",
"GPL-3.0-only"
],
"Maintainer": "Sebastian Andrzej Siewior \u003csebastian@breakpoint.cc\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/liblzma.so.5.4.1",
"/usr/share/doc/liblzma5/AUTHORS",
"/usr/share/doc/liblzma5/NEWS.gz",
"/usr/share/doc/liblzma5/THANKS",
"/usr/share/doc/liblzma5/changelog.Debian.gz",
"/usr/share/doc/liblzma5/changelog.gz",
"/usr/share/doc/liblzma5/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libmd0@1.0.4-2",
"Name": "libmd0",
"Identifier": {
"PURL": "pkg:deb/debian/libmd0@1.0.4-2?arch=arm64\u0026distro=debian-12.14",
"UID": "c3ea3718805d5ada"
},
"Version": "1.0.4",
"Release": "2",
"Arch": "arm64",
"SrcName": "libmd",
"SrcVersion": "1.0.4",
"SrcRelease": "2",
"Licenses": [
"BSD-3-Clause",
"BSD-3-clause-Aaron-D-Gifford",
"BSD-2-Clause",
"BSD-2-Clause-NetBSD",
"ISC",
"Beerware",
"public-domain-md4",
"public-domain-md5",
"public-domain-sha1"
],
"Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libmd.so.0.0.5",
"/usr/share/doc/libmd0/changelog.Debian.gz",
"/usr/share/doc/libmd0/changelog.gz",
"/usr/share/doc/libmd0/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libmount1@2.38.1-5+deb12u3",
"Name": "libmount1",
"Identifier": {
"PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "336ffe99efef805b"
},
"Version": "2.38.1",
"Release": "5+deb12u3",
"Arch": "arm64",
"SrcName": "util-linux",
"SrcVersion": "2.38.1",
"SrcRelease": "5+deb12u3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-or-later",
"public-domain",
"BSD-4-Clause",
"MIT",
"BSD-3-Clause",
"BSLA",
"LGPL-2.0-or-later",
"LGPL-2.1-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-only",
"LGPL-2.0-only",
"LGPL-2.1-only",
"LGPL-3.0-only"
],
"Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libblkid1@2.38.1-5+deb12u3",
"libc6@2.36-9+deb12u14",
"libselinux1@3.4-1+b6"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libmount.so.1.1.0",
"/usr/share/doc/libmount1/changelog.Debian.gz",
"/usr/share/doc/libmount1/changelog.gz",
"/usr/share/doc/libmount1/copyright",
"/usr/share/lintian/overrides/libmount1"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libnettle8@3.8.1-2",
"Name": "libnettle8",
"Identifier": {
"PURL": "pkg:deb/debian/libnettle8@3.8.1-2?arch=arm64\u0026distro=debian-12.14",
"UID": "1f8f68321a231a41"
},
"Version": "3.8.1",
"Release": "2",
"Arch": "arm64",
"SrcName": "nettle",
"SrcVersion": "3.8.1",
"SrcRelease": "2",
"Licenses": [
"LGPL-3.0-or-later",
"GPL-2.0-or-later",
"LGPL-2.0-or-later",
"LGPL-2.0-only",
"MIT",
"GPL-3.0-or-later",
"GPL-3.0-with-autoconf-exception+",
"public-domain",
"GPL-2.0-only",
"GAP"
],
"Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libnettle.so.8.6",
"/usr/share/doc/libnettle8/NEWS.gz",
"/usr/share/doc/libnettle8/README",
"/usr/share/doc/libnettle8/changelog.Debian.gz",
"/usr/share/doc/libnettle8/changelog.gz",
"/usr/share/doc/libnettle8/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libp11-kit0@0.24.1-2",
"Name": "libp11-kit0",
"Identifier": {
"PURL": "pkg:deb/debian/libp11-kit0@0.24.1-2?arch=arm64\u0026distro=debian-12.14",
"UID": "dceebbaaadb25261"
},
"Version": "0.24.1",
"Release": "2",
"Arch": "arm64",
"SrcName": "p11-kit",
"SrcVersion": "0.24.1",
"SrcRelease": "2",
"Licenses": [
"BSD-3-Clause",
"permissive-like-automake-output",
"ISC",
"ISC+IBM",
"LGPL-2.1-or-later",
"Apache-2.0",
"same-as-rest-of-p11kit",
"LGPL-2.1-only"
],
"Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libffi8@3.4.4-1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libp11-kit.so.0.3.0",
"/usr/share/doc/libp11-kit0/changelog.Debian.gz",
"/usr/share/doc/libp11-kit0/changelog.gz",
"/usr/share/doc/libp11-kit0/copyright",
"/usr/share/doc/libp11-kit0/examples/pkcs11.conf.example"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libpam-modules@1.5.2-6+deb12u2",
"Name": "libpam-modules",
"Identifier": {
"PURL": "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "2161dd3791ad29a2"
},
"Version": "1.5.2",
"Release": "6+deb12u2",
"Arch": "arm64",
"SrcName": "pam",
"SrcVersion": "1.5.2",
"SrcRelease": "6+deb12u2",
"Licenses": [
"BSD-3-Clause",
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-only",
"GPL-3+ with Bison exception",
"BSD-tcp_wrappers",
"LGPL-2.0-or-later",
"LGPL-2.0-only",
"public-domain",
"Beerware"
],
"Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/security/pam_access.so",
"/lib/aarch64-linux-gnu/security/pam_debug.so",
"/lib/aarch64-linux-gnu/security/pam_deny.so",
"/lib/aarch64-linux-gnu/security/pam_echo.so",
"/lib/aarch64-linux-gnu/security/pam_env.so",
"/lib/aarch64-linux-gnu/security/pam_exec.so",
"/lib/aarch64-linux-gnu/security/pam_faildelay.so",
"/lib/aarch64-linux-gnu/security/pam_faillock.so",
"/lib/aarch64-linux-gnu/security/pam_filter.so",
"/lib/aarch64-linux-gnu/security/pam_ftp.so",
"/lib/aarch64-linux-gnu/security/pam_group.so",
"/lib/aarch64-linux-gnu/security/pam_issue.so",
"/lib/aarch64-linux-gnu/security/pam_keyinit.so",
"/lib/aarch64-linux-gnu/security/pam_lastlog.so",
"/lib/aarch64-linux-gnu/security/pam_limits.so",
"/lib/aarch64-linux-gnu/security/pam_listfile.so",
"/lib/aarch64-linux-gnu/security/pam_localuser.so",
"/lib/aarch64-linux-gnu/security/pam_loginuid.so",
"/lib/aarch64-linux-gnu/security/pam_mail.so",
"/lib/aarch64-linux-gnu/security/pam_mkhomedir.so",
"/lib/aarch64-linux-gnu/security/pam_motd.so",
"/lib/aarch64-linux-gnu/security/pam_namespace.so",
"/lib/aarch64-linux-gnu/security/pam_nologin.so",
"/lib/aarch64-linux-gnu/security/pam_permit.so",
"/lib/aarch64-linux-gnu/security/pam_pwhistory.so",
"/lib/aarch64-linux-gnu/security/pam_rhosts.so",
"/lib/aarch64-linux-gnu/security/pam_rootok.so",
"/lib/aarch64-linux-gnu/security/pam_securetty.so",
"/lib/aarch64-linux-gnu/security/pam_selinux.so",
"/lib/aarch64-linux-gnu/security/pam_sepermit.so",
"/lib/aarch64-linux-gnu/security/pam_setquota.so",
"/lib/aarch64-linux-gnu/security/pam_shells.so",
"/lib/aarch64-linux-gnu/security/pam_stress.so",
"/lib/aarch64-linux-gnu/security/pam_succeed_if.so",
"/lib/aarch64-linux-gnu/security/pam_time.so",
"/lib/aarch64-linux-gnu/security/pam_timestamp.so",
"/lib/aarch64-linux-gnu/security/pam_tty_audit.so",
"/lib/aarch64-linux-gnu/security/pam_umask.so",
"/lib/aarch64-linux-gnu/security/pam_unix.so",
"/lib/aarch64-linux-gnu/security/pam_userdb.so",
"/lib/aarch64-linux-gnu/security/pam_usertype.so",
"/lib/aarch64-linux-gnu/security/pam_warn.so",
"/lib/aarch64-linux-gnu/security/pam_wheel.so",
"/lib/aarch64-linux-gnu/security/pam_xauth.so",
"/usr/share/doc/libpam-modules/NEWS.Debian.gz",
"/usr/share/doc/libpam-modules/changelog.Debian.gz",
"/usr/share/doc/libpam-modules/changelog.gz",
"/usr/share/doc/libpam-modules/copyright",
"/usr/share/doc/libpam-modules/examples/upperLOWER.c",
"/usr/share/lintian/overrides/libpam-modules",
"/usr/share/man/man5/access.conf.5.gz",
"/usr/share/man/man5/faillock.conf.5.gz",
"/usr/share/man/man5/group.conf.5.gz",
"/usr/share/man/man5/limits.conf.5.gz",
"/usr/share/man/man5/namespace.conf.5.gz",
"/usr/share/man/man5/pam_env.conf.5.gz",
"/usr/share/man/man5/sepermit.conf.5.gz",
"/usr/share/man/man5/time.conf.5.gz",
"/usr/share/man/man7/pam_env.7.gz",
"/usr/share/man/man7/pam_selinux.7.gz",
"/usr/share/man/man8/pam_access.8.gz",
"/usr/share/man/man8/pam_debug.8.gz",
"/usr/share/man/man8/pam_deny.8.gz",
"/usr/share/man/man8/pam_echo.8.gz",
"/usr/share/man/man8/pam_exec.8.gz",
"/usr/share/man/man8/pam_faildelay.8.gz",
"/usr/share/man/man8/pam_faillock.8.gz",
"/usr/share/man/man8/pam_filter.8.gz",
"/usr/share/man/man8/pam_ftp.8.gz",
"/usr/share/man/man8/pam_group.8.gz",
"/usr/share/man/man8/pam_issue.8.gz",
"/usr/share/man/man8/pam_keyinit.8.gz",
"/usr/share/man/man8/pam_lastlog.8.gz",
"/usr/share/man/man8/pam_limits.8.gz",
"/usr/share/man/man8/pam_listfile.8.gz",
"/usr/share/man/man8/pam_localuser.8.gz",
"/usr/share/man/man8/pam_loginuid.8.gz",
"/usr/share/man/man8/pam_mail.8.gz",
"/usr/share/man/man8/pam_mkhomedir.8.gz",
"/usr/share/man/man8/pam_motd.8.gz",
"/usr/share/man/man8/pam_namespace.8.gz",
"/usr/share/man/man8/pam_nologin.8.gz",
"/usr/share/man/man8/pam_permit.8.gz",
"/usr/share/man/man8/pam_pwhistory.8.gz",
"/usr/share/man/man8/pam_rhosts.8.gz",
"/usr/share/man/man8/pam_rootok.8.gz",
"/usr/share/man/man8/pam_securetty.8.gz",
"/usr/share/man/man8/pam_sepermit.8.gz",
"/usr/share/man/man8/pam_setquota.8.gz",
"/usr/share/man/man8/pam_shells.8.gz",
"/usr/share/man/man8/pam_stress.8.gz",
"/usr/share/man/man8/pam_succeed_if.8.gz",
"/usr/share/man/man8/pam_time.8.gz",
"/usr/share/man/man8/pam_timestamp.8.gz",
"/usr/share/man/man8/pam_tty_audit.8.gz",
"/usr/share/man/man8/pam_umask.8.gz",
"/usr/share/man/man8/pam_unix.8.gz",
"/usr/share/man/man8/pam_userdb.8.gz",
"/usr/share/man/man8/pam_usertype.8.gz",
"/usr/share/man/man8/pam_warn.8.gz",
"/usr/share/man/man8/pam_wheel.8.gz",
"/usr/share/man/man8/pam_xauth.8.gz",
"/usr/share/pam-configs/mkhomedir"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libpam-modules-bin@1.5.2-6+deb12u2",
"Name": "libpam-modules-bin",
"Identifier": {
"PURL": "pkg:deb/debian/libpam-modules-bin@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "530508d69ed0643f"
},
"Version": "1.5.2",
"Release": "6+deb12u2",
"Arch": "arm64",
"SrcName": "pam",
"SrcVersion": "1.5.2",
"SrcRelease": "6+deb12u2",
"Licenses": [
"BSD-3-Clause",
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-only",
"GPL-3+ with Bison exception",
"BSD-tcp_wrappers",
"LGPL-2.0-or-later",
"LGPL-2.0-only",
"public-domain",
"Beerware"
],
"Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libaudit1@1:3.0.9-1",
"libc6@2.36-9+deb12u14",
"libcrypt1@1:4.4.33-2",
"libpam0g@1.5.2-6+deb12u2",
"libselinux1@3.4-1+b6"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/sbin/mkhomedir_helper",
"/sbin/pam_namespace_helper",
"/sbin/pwhistory_helper",
"/sbin/unix_chkpwd",
"/sbin/unix_update",
"/usr/lib/systemd/system/pam_namespace.service",
"/usr/sbin/faillock",
"/usr/sbin/pam_timestamp_check",
"/usr/share/doc/libpam-modules-bin/NEWS.Debian.gz",
"/usr/share/doc/libpam-modules-bin/changelog.Debian.gz",
"/usr/share/doc/libpam-modules-bin/changelog.gz",
"/usr/share/doc/libpam-modules-bin/copyright",
"/usr/share/lintian/overrides/libpam-modules-bin",
"/usr/share/man/man5/environment.5.gz",
"/usr/share/man/man8/faillock.8.gz",
"/usr/share/man/man8/mkhomedir_helper.8.gz",
"/usr/share/man/man8/pam_namespace_helper.8.gz",
"/usr/share/man/man8/pam_timestamp_check.8.gz",
"/usr/share/man/man8/pwhistory_helper.8.gz",
"/usr/share/man/man8/unix_chkpwd.8.gz",
"/usr/share/man/man8/unix_update.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libpam-runtime@1.5.2-6+deb12u2",
"Name": "libpam-runtime",
"Identifier": {
"PURL": "pkg:deb/debian/libpam-runtime@1.5.2-6%2Bdeb12u2?arch=all\u0026distro=debian-12.14",
"UID": "47e594e0f52955ae"
},
"Version": "1.5.2",
"Release": "6+deb12u2",
"Arch": "all",
"SrcName": "pam",
"SrcVersion": "1.5.2",
"SrcRelease": "6+deb12u2",
"Licenses": [
"BSD-3-Clause",
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-only",
"GPL-3+ with Bison exception",
"BSD-tcp_wrappers",
"LGPL-2.0-or-later",
"LGPL-2.0-only",
"public-domain",
"Beerware"
],
"Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"debconf@1.5.82",
"libpam-modules@1.5.2-6+deb12u2"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/sbin/pam-auth-update",
"/usr/sbin/pam_getenv",
"/usr/share/doc/libpam-runtime/NEWS.Debian.gz",
"/usr/share/doc/libpam-runtime/changelog.Debian.gz",
"/usr/share/doc/libpam-runtime/changelog.gz",
"/usr/share/doc/libpam-runtime/copyright",
"/usr/share/lintian/overrides/libpam-runtime",
"/usr/share/locale/af/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/am/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ar/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/as/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/az/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/be/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/bg/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/bn/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/bn_IN/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/bs/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ca/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/cs/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/cy/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/da/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/de/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/de_CH/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/el/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/eo/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/es/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/et/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/eu/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/fa/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/fi/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/fr/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ga/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/gl/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/gu/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/he/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/hi/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/hr/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/hu/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ia/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/id/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/is/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/it/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ja/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ka/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/kk/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/km/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/kn/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ko/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/kw_GB/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ky/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/lt/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/lv/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/mk/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ml/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/mn/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/mr/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ms/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/my/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ne/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/nl/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/or/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/pa/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/pl/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/pt/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ro/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ru/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/si/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/sk/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/sl/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/sq/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/sr/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/sv/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ta/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/te/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/tg/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/th/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/tr/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/uk/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/vi/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/yo/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/zh_HK/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/locale/zu/LC_MESSAGES/Linux-PAM.mo",
"/usr/share/man/man5/pam.conf.5.gz",
"/usr/share/man/man7/PAM.7.gz",
"/usr/share/man/man8/pam-auth-update.8.gz",
"/usr/share/man/man8/pam_getenv.8.gz",
"/usr/share/pam-configs/unix",
"/usr/share/pam/common-account",
"/usr/share/pam/common-account.md5sums",
"/usr/share/pam/common-auth",
"/usr/share/pam/common-auth.md5sums",
"/usr/share/pam/common-password",
"/usr/share/pam/common-password.md5sums",
"/usr/share/pam/common-session",
"/usr/share/pam/common-session-noninteractive",
"/usr/share/pam/common-session-noninteractive.md5sums",
"/usr/share/pam/common-session.md5sums"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libpam0g@1.5.2-6+deb12u2",
"Name": "libpam0g",
"Identifier": {
"PURL": "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "e47769452f42222c"
},
"Version": "1.5.2",
"Release": "6+deb12u2",
"Arch": "arm64",
"SrcName": "pam",
"SrcVersion": "1.5.2",
"SrcRelease": "6+deb12u2",
"Licenses": [
"BSD-3-Clause",
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-only",
"GPL-3+ with Bison exception",
"BSD-tcp_wrappers",
"LGPL-2.0-or-later",
"LGPL-2.0-only",
"public-domain",
"Beerware"
],
"Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"debconf@1.5.82",
"libaudit1@1:3.0.9-1",
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libpam.so.0.85.1",
"/lib/aarch64-linux-gnu/libpam_misc.so.0.82.1",
"/lib/aarch64-linux-gnu/libpamc.so.0.82.1",
"/usr/share/doc/libpam0g/Debian-PAM-MiniPolicy.gz",
"/usr/share/doc/libpam0g/NEWS.Debian.gz",
"/usr/share/doc/libpam0g/README",
"/usr/share/doc/libpam0g/README.Debian",
"/usr/share/doc/libpam0g/TODO.Debian",
"/usr/share/doc/libpam0g/changelog.Debian.gz",
"/usr/share/doc/libpam0g/changelog.gz",
"/usr/share/doc/libpam0g/copyright",
"/usr/share/lintian/overrides/libpam0g"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libpcre2-8-0@10.42-1",
"Name": "libpcre2-8-0",
"Identifier": {
"PURL": "pkg:deb/debian/libpcre2-8-0@10.42-1?arch=arm64\u0026distro=debian-12.14",
"UID": "c845a87109d4a3"
},
"Version": "10.42",
"Release": "1",
"Arch": "arm64",
"SrcName": "pcre2",
"SrcVersion": "10.42",
"SrcRelease": "1",
"Licenses": [
"BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception",
"BSD-3-Clause",
"X11",
"BSD-2-Clause",
"public-domain"
],
"Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libpcre2-8.so.0.11.2",
"/usr/share/doc/libpcre2-8-0/README.Debian",
"/usr/share/doc/libpcre2-8-0/changelog.Debian.gz",
"/usr/share/doc/libpcre2-8-0/changelog.gz",
"/usr/share/doc/libpcre2-8-0/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libseccomp2@2.5.4-1+deb12u1",
"Name": "libseccomp2",
"Identifier": {
"PURL": "pkg:deb/debian/libseccomp2@2.5.4-1%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "aceeb454433c00c3"
},
"Version": "2.5.4",
"Release": "1+deb12u1",
"Arch": "arm64",
"SrcName": "libseccomp",
"SrcVersion": "2.5.4",
"SrcRelease": "1+deb12u1",
"Licenses": [
"LGPL-2.1-only"
],
"Maintainer": "Kees Cook \u003ckees@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libseccomp.so.2.5.4",
"/usr/share/doc/libseccomp2/changelog.Debian.gz",
"/usr/share/doc/libseccomp2/changelog.gz",
"/usr/share/doc/libseccomp2/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libselinux1@3.4-1+b6",
"Name": "libselinux1",
"Identifier": {
"PURL": "pkg:deb/debian/libselinux1@3.4-1%2Bb6?arch=arm64\u0026distro=debian-12.14",
"UID": "ee6c2e2f21626a6d"
},
"Version": "3.4",
"Release": "1+b6",
"Arch": "arm64",
"SrcName": "libselinux",
"SrcVersion": "3.4",
"SrcRelease": "1",
"Licenses": [
"LGPL-2.1-only",
"GPL-2.0-only"
],
"Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libpcre2-8-0@10.42-1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libselinux.so.1",
"/usr/share/doc/libselinux1/changelog.Debian.arm64.gz",
"/usr/share/doc/libselinux1/changelog.Debian.gz",
"/usr/share/doc/libselinux1/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libsemanage-common@3.4-1",
"Name": "libsemanage-common",
"Identifier": {
"PURL": "pkg:deb/debian/libsemanage-common@3.4-1?arch=all\u0026distro=debian-12.14",
"UID": "92dad50d9f4fd095"
},
"Version": "3.4",
"Release": "1",
"Arch": "all",
"SrcName": "libsemanage",
"SrcVersion": "3.4",
"SrcRelease": "1",
"Licenses": [
"LGPL-2.0-or-later",
"GPL-2.0-or-later"
],
"Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/share/doc/libsemanage-common/changelog.Debian.gz",
"/usr/share/doc/libsemanage-common/copyright",
"/usr/share/man/man5/semanage.conf.5.gz",
"/usr/share/man/ru/man5/semanage.conf.5.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libsemanage2@3.4-1+b5",
"Name": "libsemanage2",
"Identifier": {
"PURL": "pkg:deb/debian/libsemanage2@3.4-1%2Bb5?arch=arm64\u0026distro=debian-12.14",
"UID": "27446a9d0bd721aa"
},
"Version": "3.4",
"Release": "1+b5",
"Arch": "arm64",
"SrcName": "libsemanage",
"SrcVersion": "3.4",
"SrcRelease": "1",
"Licenses": [
"LGPL-2.0-or-later",
"GPL-2.0-or-later"
],
"Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libaudit1@1:3.0.9-1",
"libbz2-1.0@1.0.8-5+b1",
"libc6@2.36-9+deb12u14",
"libselinux1@3.4-1+b6",
"libsemanage-common@3.4-1",
"libsepol2@3.4-2.1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libsemanage.so.2",
"/usr/share/doc/libsemanage2/changelog.Debian.arm64.gz",
"/usr/share/doc/libsemanage2/changelog.Debian.gz",
"/usr/share/doc/libsemanage2/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libsepol2@3.4-2.1",
"Name": "libsepol2",
"Identifier": {
"PURL": "pkg:deb/debian/libsepol2@3.4-2.1?arch=arm64\u0026distro=debian-12.14",
"UID": "2de5dd0edcc94289"
},
"Version": "3.4",
"Release": "2.1",
"Arch": "arm64",
"SrcName": "libsepol",
"SrcVersion": "3.4",
"SrcRelease": "2.1",
"Licenses": [
"LGPL-2.1-or-later",
"LGPL-2.1-only",
"Zlib",
"GPL-2.0-only",
"GPL-2.0-or-later"
],
"Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libsepol.so.2",
"/usr/share/doc/libsepol2/changelog.Debian.gz",
"/usr/share/doc/libsepol2/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libsmartcols1@2.38.1-5+deb12u3",
"Name": "libsmartcols1",
"Identifier": {
"PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "2ed2d95ea60cf46b"
},
"Version": "2.38.1",
"Release": "5+deb12u3",
"Arch": "arm64",
"SrcName": "util-linux",
"SrcVersion": "2.38.1",
"SrcRelease": "5+deb12u3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-or-later",
"public-domain",
"BSD-4-Clause",
"MIT",
"BSD-3-Clause",
"BSLA",
"LGPL-2.0-or-later",
"LGPL-2.1-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-only",
"LGPL-2.0-only",
"LGPL-2.1-only",
"LGPL-3.0-only"
],
"Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libsmartcols.so.1.1.0",
"/usr/share/doc/libsmartcols1/changelog.Debian.gz",
"/usr/share/doc/libsmartcols1/changelog.gz",
"/usr/share/doc/libsmartcols1/copyright",
"/usr/share/lintian/overrides/libsmartcols1"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libss2@1.47.0-2+b2",
"Name": "libss2",
"Identifier": {
"PURL": "pkg:deb/debian/libss2@1.47.0-2%2Bb2?arch=arm64\u0026distro=debian-12.14",
"UID": "4a27c344550034b0"
},
"Version": "1.47.0",
"Release": "2+b2",
"Arch": "arm64",
"SrcName": "e2fsprogs",
"SrcVersion": "1.47.0",
"SrcRelease": "2",
"Licenses": [
"GPL-2.0-only",
"LGPL-2.0-only",
"BSD-3-Clause",
"Apache-2.0",
"ISC",
"GPL-2.0-or-later",
"MIT-US-export",
"Kazlib",
"Latex2e",
"GPL-2+ with Texinfo exception"
],
"Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libcom-err2@1.47.0-2+b2"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libss.so.2.0",
"/usr/share/doc/libss2/changelog.Debian.arm64.gz",
"/usr/share/doc/libss2/changelog.Debian.gz",
"/usr/share/doc/libss2/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libstdc++6@12.2.0-14+deb12u1",
"Name": "libstdc++6",
"Identifier": {
"PURL": "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "d4cdff858e2aab9"
},
"Version": "12.2.0",
"Release": "14+deb12u1",
"Arch": "arm64",
"SrcName": "gcc-12",
"SrcVersion": "12.2.0",
"SrcRelease": "14+deb12u1",
"Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"gcc-12-base@12.2.0-14+deb12u1",
"libc6@2.36-9+deb12u14",
"libgcc-s1@12.2.0-14+deb12u1"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libstdc++.so.6.0.30",
"/usr/share/gcc/python/libstdcxx/__init__.py",
"/usr/share/gcc/python/libstdcxx/v6/__init__.py",
"/usr/share/gcc/python/libstdcxx/v6/printers.py",
"/usr/share/gcc/python/libstdcxx/v6/xmethods.py",
"/usr/share/gdb/auto-load/usr/lib/aarch64-linux-gnu/libstdc++.so.6.0.30-gdb.py"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libsystemd0@252.39-1~deb12u2",
"Name": "libsystemd0",
"Identifier": {
"PURL": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "a7755f3ea7a54cf9"
},
"Version": "252.39",
"Release": "1~deb12u2",
"Arch": "arm64",
"SrcName": "systemd",
"SrcVersion": "252.39",
"SrcRelease": "1~deb12u2",
"Licenses": [
"LGPL-2.1-or-later",
"CC0-1.0",
"GPL-2 with Linux-syscall-note exception",
"MIT",
"public-domain",
"GPL-2.0-or-later",
"GPL-2.0-only",
"LGPL-2.1-only"
],
"Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14",
"libcap2@1:2.66-4+deb12u3+b1",
"libgcrypt20@1.10.1-3+deb12u1",
"liblz4-1@1.9.4-1",
"liblzma5@5.4.1-1",
"libzstd1@1.5.4+dfsg2-5"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libsystemd.so.0.35.0",
"/usr/share/doc/libsystemd0/NEWS.Debian.gz",
"/usr/share/doc/libsystemd0/changelog.Debian.gz",
"/usr/share/doc/libsystemd0/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libtasn1-6@4.19.0-2+deb12u1",
"Name": "libtasn1-6",
"Identifier": {
"PURL": "pkg:deb/debian/libtasn1-6@4.19.0-2%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "d68d88a5384a3f6d"
},
"Version": "4.19.0",
"Release": "2+deb12u1",
"Arch": "arm64",
"SrcName": "libtasn1-6",
"SrcVersion": "4.19.0",
"SrcRelease": "2+deb12u1",
"Licenses": [
"LGPL-2.0-or-later",
"LGPL-2.1-only",
"GPL-3.0-only",
"GFDL-1.3-only"
],
"Maintainer": "Debian GnuTLS Maintainers \u003cpkg-gnutls-maint@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libtasn1.so.6.6.3",
"/usr/share/doc/libtasn1-6/AUTHORS",
"/usr/share/doc/libtasn1-6/README.md",
"/usr/share/doc/libtasn1-6/THANKS",
"/usr/share/doc/libtasn1-6/changelog.Debian.gz",
"/usr/share/doc/libtasn1-6/changelog.gz",
"/usr/share/doc/libtasn1-6/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libtinfo6@6.4-4",
"Name": "libtinfo6",
"Identifier": {
"PURL": "pkg:deb/debian/libtinfo6@6.4-4?arch=arm64\u0026distro=debian-12.14",
"UID": "c1ee882de1405365"
},
"Version": "6.4",
"Release": "4",
"Arch": "arm64",
"SrcName": "ncurses",
"SrcVersion": "6.4",
"SrcRelease": "4",
"Licenses": [
"MIT/X11",
"X11",
"BSD-3-Clause"
],
"Maintainer": "Craig Small \u003ccsmall@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libtinfo.so.6.4",
"/usr/lib/aarch64-linux-gnu/libtic.so.6.4",
"/usr/share/doc/libtinfo6/changelog.Debian.gz",
"/usr/share/doc/libtinfo6/changelog.gz",
"/usr/share/doc/libtinfo6/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libudev1@252.39-1~deb12u2",
"Name": "libudev1",
"Identifier": {
"PURL": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "1c60548d75d64fbf"
},
"Version": "252.39",
"Release": "1~deb12u2",
"Arch": "arm64",
"SrcName": "systemd",
"SrcVersion": "252.39",
"SrcRelease": "1~deb12u2",
"Licenses": [
"LGPL-2.1-or-later",
"CC0-1.0",
"GPL-2 with Linux-syscall-note exception",
"MIT",
"public-domain",
"GPL-2.0-or-later",
"GPL-2.0-only",
"LGPL-2.1-only"
],
"Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libudev.so.1.7.5",
"/usr/share/doc/libudev1/NEWS.Debian.gz",
"/usr/share/doc/libudev1/changelog.Debian.gz",
"/usr/share/doc/libudev1/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libunistring2@1.0-2",
"Name": "libunistring2",
"Identifier": {
"PURL": "pkg:deb/debian/libunistring2@1.0-2?arch=arm64\u0026distro=debian-12.14",
"UID": "f446dfb806190f85"
},
"Version": "1.0",
"Release": "2",
"Arch": "arm64",
"SrcName": "libunistring",
"SrcVersion": "1.0",
"SrcRelease": "2",
"Licenses": [
"LGPL-3.0-or-later",
"GPL-2.0-or-later",
"FreeSoftware",
"GPL-3.0-or-later",
"GFDL-1.2-or-later",
"GPL-2+ with distribution exception",
"MIT",
"LGPL-3.0-only",
"GPL-3.0-only",
"GPL-2.0-only",
"GFDL-1.2-only"
],
"Maintainer": "Jörg Frings-Fürst \u003cdebian@jff.email\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libunistring.so.2.2.0",
"/usr/share/doc/libunistring2/changelog.Debian.gz",
"/usr/share/doc/libunistring2/changelog.gz",
"/usr/share/doc/libunistring2/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libuuid1@2.38.1-5+deb12u3",
"Name": "libuuid1",
"Identifier": {
"PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "a0a74ba17c2ab1bc"
},
"Version": "2.38.1",
"Release": "5+deb12u3",
"Arch": "arm64",
"SrcName": "util-linux",
"SrcVersion": "2.38.1",
"SrcRelease": "5+deb12u3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-or-later",
"public-domain",
"BSD-4-Clause",
"MIT",
"BSD-3-Clause",
"BSLA",
"LGPL-2.0-or-later",
"LGPL-2.1-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-only",
"LGPL-2.0-only",
"LGPL-2.1-only",
"LGPL-3.0-only"
],
"Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libuuid.so.1.3.0",
"/usr/share/doc/libuuid1/changelog.Debian.gz",
"/usr/share/doc/libuuid1/changelog.gz",
"/usr/share/doc/libuuid1/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libxxhash0@0.8.1-1",
"Name": "libxxhash0",
"Identifier": {
"PURL": "pkg:deb/debian/libxxhash0@0.8.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "2636892fc28ddb27"
},
"Version": "0.8.1",
"Release": "1",
"Arch": "arm64",
"SrcName": "xxhash",
"SrcVersion": "0.8.1",
"SrcRelease": "1",
"Licenses": [
"BSD-2-Clause",
"GPL-2.0-only"
],
"Maintainer": "Josue Ortega \u003cjosue@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libxxhash.so.0.8.1",
"/usr/share/doc/libxxhash0/changelog.Debian.gz",
"/usr/share/doc/libxxhash0/changelog.gz",
"/usr/share/doc/libxxhash0/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "libzstd1@1.5.4+dfsg2-5",
"Name": "libzstd1",
"Identifier": {
"PURL": "pkg:deb/debian/libzstd1@1.5.4%2Bdfsg2-5?arch=arm64\u0026distro=debian-12.14",
"UID": "846b7f8bf8415e35"
},
"Version": "1.5.4+dfsg2",
"Release": "5",
"Arch": "arm64",
"SrcName": "libzstd",
"SrcVersion": "1.5.4+dfsg2",
"SrcRelease": "5",
"Licenses": [
"BSD-3-Clause",
"GPL-2.0-only",
"Zlib",
"MIT"
],
"Maintainer": "RPM packaging team \u003cteam+pkg-rpm@tracker.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/lib/aarch64-linux-gnu/libzstd.so.1.5.4",
"/usr/share/doc/libzstd1/changelog.Debian.gz",
"/usr/share/doc/libzstd1/changelog.gz",
"/usr/share/doc/libzstd1/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "login@1:4.13+dfsg1-1+deb12u2",
"Name": "login",
"Identifier": {
"PURL": "pkg:deb/debian/login@4.13%2Bdfsg1-1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "f506aaa0a9653d73"
},
"Version": "4.13+dfsg1",
"Release": "1+deb12u2",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "shadow",
"SrcVersion": "4.13+dfsg1",
"SrcRelease": "1+deb12u2",
"SrcEpoch": 1,
"Licenses": [
"BSD-3-Clause",
"GPL-1.0-only",
"GPL-2.0-or-later",
"public-domain",
"GPL-2.0-only"
],
"Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/login",
"/usr/bin/faillog",
"/usr/bin/lastlog",
"/usr/bin/newgrp",
"/usr/sbin/nologin",
"/usr/share/doc/login/NEWS.Debian.gz",
"/usr/share/doc/login/changelog.Debian.gz",
"/usr/share/doc/login/changelog.gz",
"/usr/share/doc/login/copyright",
"/usr/share/lintian/overrides/login",
"/usr/share/locale/bs/LC_MESSAGES/shadow.mo",
"/usr/share/locale/ca/LC_MESSAGES/shadow.mo",
"/usr/share/locale/cs/LC_MESSAGES/shadow.mo",
"/usr/share/locale/da/LC_MESSAGES/shadow.mo",
"/usr/share/locale/de/LC_MESSAGES/shadow.mo",
"/usr/share/locale/dz/LC_MESSAGES/shadow.mo",
"/usr/share/locale/el/LC_MESSAGES/shadow.mo",
"/usr/share/locale/es/LC_MESSAGES/shadow.mo",
"/usr/share/locale/eu/LC_MESSAGES/shadow.mo",
"/usr/share/locale/fi/LC_MESSAGES/shadow.mo",
"/usr/share/locale/fr/LC_MESSAGES/shadow.mo",
"/usr/share/locale/gl/LC_MESSAGES/shadow.mo",
"/usr/share/locale/he/LC_MESSAGES/shadow.mo",
"/usr/share/locale/hu/LC_MESSAGES/shadow.mo",
"/usr/share/locale/id/LC_MESSAGES/shadow.mo",
"/usr/share/locale/it/LC_MESSAGES/shadow.mo",
"/usr/share/locale/ja/LC_MESSAGES/shadow.mo",
"/usr/share/locale/ka/LC_MESSAGES/shadow.mo",
"/usr/share/locale/kk/LC_MESSAGES/shadow.mo",
"/usr/share/locale/km/LC_MESSAGES/shadow.mo",
"/usr/share/locale/ko/LC_MESSAGES/shadow.mo",
"/usr/share/locale/nb/LC_MESSAGES/shadow.mo",
"/usr/share/locale/ne/LC_MESSAGES/shadow.mo",
"/usr/share/locale/nl/LC_MESSAGES/shadow.mo",
"/usr/share/locale/nn/LC_MESSAGES/shadow.mo",
"/usr/share/locale/pl/LC_MESSAGES/shadow.mo",
"/usr/share/locale/pt/LC_MESSAGES/shadow.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/shadow.mo",
"/usr/share/locale/ro/LC_MESSAGES/shadow.mo",
"/usr/share/locale/ru/LC_MESSAGES/shadow.mo",
"/usr/share/locale/sk/LC_MESSAGES/shadow.mo",
"/usr/share/locale/sq/LC_MESSAGES/shadow.mo",
"/usr/share/locale/sv/LC_MESSAGES/shadow.mo",
"/usr/share/locale/tl/LC_MESSAGES/shadow.mo",
"/usr/share/locale/tr/LC_MESSAGES/shadow.mo",
"/usr/share/locale/uk/LC_MESSAGES/shadow.mo",
"/usr/share/locale/vi/LC_MESSAGES/shadow.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/shadow.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/shadow.mo",
"/usr/share/man/cs/man5/faillog.5.gz",
"/usr/share/man/cs/man8/faillog.8.gz",
"/usr/share/man/cs/man8/lastlog.8.gz",
"/usr/share/man/cs/man8/nologin.8.gz",
"/usr/share/man/da/man1/newgrp.1.gz",
"/usr/share/man/da/man1/sg.1.gz",
"/usr/share/man/da/man8/nologin.8.gz",
"/usr/share/man/de/man1/login.1.gz",
"/usr/share/man/de/man1/newgrp.1.gz",
"/usr/share/man/de/man1/sg.1.gz",
"/usr/share/man/de/man5/faillog.5.gz",
"/usr/share/man/de/man5/login.defs.5.gz",
"/usr/share/man/de/man8/faillog.8.gz",
"/usr/share/man/de/man8/lastlog.8.gz",
"/usr/share/man/de/man8/nologin.8.gz",
"/usr/share/man/fr/man1/login.1.gz",
"/usr/share/man/fr/man1/newgrp.1.gz",
"/usr/share/man/fr/man1/sg.1.gz",
"/usr/share/man/fr/man5/faillog.5.gz",
"/usr/share/man/fr/man5/login.defs.5.gz",
"/usr/share/man/fr/man8/faillog.8.gz",
"/usr/share/man/fr/man8/lastlog.8.gz",
"/usr/share/man/fr/man8/nologin.8.gz",
"/usr/share/man/hu/man1/login.1.gz",
"/usr/share/man/hu/man1/newgrp.1.gz",
"/usr/share/man/hu/man8/lastlog.8.gz",
"/usr/share/man/id/man1/login.1.gz",
"/usr/share/man/it/man1/login.1.gz",
"/usr/share/man/it/man1/newgrp.1.gz",
"/usr/share/man/it/man1/sg.1.gz",
"/usr/share/man/it/man5/faillog.5.gz",
"/usr/share/man/it/man5/login.defs.5.gz",
"/usr/share/man/it/man8/faillog.8.gz",
"/usr/share/man/it/man8/lastlog.8.gz",
"/usr/share/man/it/man8/nologin.8.gz",
"/usr/share/man/ja/man1/login.1.gz",
"/usr/share/man/ja/man1/newgrp.1.gz",
"/usr/share/man/ja/man5/faillog.5.gz",
"/usr/share/man/ja/man5/login.defs.5.gz",
"/usr/share/man/ja/man8/faillog.8.gz",
"/usr/share/man/ja/man8/lastlog.8.gz",
"/usr/share/man/ko/man1/login.1.gz",
"/usr/share/man/man1/login.1.gz",
"/usr/share/man/man1/newgrp.1.gz",
"/usr/share/man/man1/sg.1.gz",
"/usr/share/man/man5/faillog.5.gz",
"/usr/share/man/man5/login.defs.5.gz",
"/usr/share/man/man8/faillog.8.gz",
"/usr/share/man/man8/lastlog.8.gz",
"/usr/share/man/man8/nologin.8.gz",
"/usr/share/man/pl/man1/newgrp.1.gz",
"/usr/share/man/pl/man1/sg.1.gz",
"/usr/share/man/pl/man5/faillog.5.gz",
"/usr/share/man/pl/man8/faillog.8.gz",
"/usr/share/man/pl/man8/lastlog.8.gz",
"/usr/share/man/ru/man1/login.1.gz",
"/usr/share/man/ru/man1/newgrp.1.gz",
"/usr/share/man/ru/man1/sg.1.gz",
"/usr/share/man/ru/man5/faillog.5.gz",
"/usr/share/man/ru/man5/login.defs.5.gz",
"/usr/share/man/ru/man8/faillog.8.gz",
"/usr/share/man/ru/man8/lastlog.8.gz",
"/usr/share/man/ru/man8/nologin.8.gz",
"/usr/share/man/sv/man1/newgrp.1.gz",
"/usr/share/man/sv/man1/sg.1.gz",
"/usr/share/man/sv/man5/faillog.5.gz",
"/usr/share/man/sv/man8/faillog.8.gz",
"/usr/share/man/sv/man8/lastlog.8.gz",
"/usr/share/man/sv/man8/nologin.8.gz",
"/usr/share/man/tr/man1/login.1.gz",
"/usr/share/man/uk/man1/login.1.gz",
"/usr/share/man/uk/man1/newgrp.1.gz",
"/usr/share/man/uk/man1/sg.1.gz",
"/usr/share/man/uk/man5/faillog.5.gz",
"/usr/share/man/uk/man5/login.defs.5.gz",
"/usr/share/man/uk/man8/faillog.8.gz",
"/usr/share/man/uk/man8/lastlog.8.gz",
"/usr/share/man/uk/man8/nologin.8.gz",
"/usr/share/man/zh_CN/man1/login.1.gz",
"/usr/share/man/zh_CN/man1/newgrp.1.gz",
"/usr/share/man/zh_CN/man1/sg.1.gz",
"/usr/share/man/zh_CN/man5/faillog.5.gz",
"/usr/share/man/zh_CN/man5/login.defs.5.gz",
"/usr/share/man/zh_CN/man8/faillog.8.gz",
"/usr/share/man/zh_CN/man8/lastlog.8.gz",
"/usr/share/man/zh_CN/man8/nologin.8.gz",
"/usr/share/man/zh_TW/man1/newgrp.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "logsave@1.47.0-2+b2",
"Name": "logsave",
"Identifier": {
"PURL": "pkg:deb/debian/logsave@1.47.0-2%2Bb2?arch=arm64\u0026distro=debian-12.14",
"UID": "90c750d67c62e099"
},
"Version": "1.47.0",
"Release": "2+b2",
"Arch": "arm64",
"SrcName": "e2fsprogs",
"SrcVersion": "1.47.0",
"SrcRelease": "2",
"Licenses": [
"GPL-2.0-only",
"LGPL-2.0-only",
"BSD-3-Clause",
"Apache-2.0",
"ISC",
"GPL-2.0-or-later",
"MIT-US-export",
"Kazlib",
"Latex2e",
"GPL-2+ with Texinfo exception"
],
"Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/sbin/logsave",
"/usr/share/doc/logsave/changelog.Debian.arm64.gz",
"/usr/share/doc/logsave/changelog.Debian.gz",
"/usr/share/doc/logsave/copyright",
"/usr/share/man/man8/logsave.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "mawk@1.3.4.20200120-3.1",
"Name": "mawk",
"Identifier": {
"PURL": "pkg:deb/debian/mawk@1.3.4.20200120-3.1?arch=arm64\u0026distro=debian-12.14",
"UID": "5d6f28bdfd1cb07b"
},
"Version": "1.3.4.20200120",
"Release": "3.1",
"Arch": "arm64",
"SrcName": "mawk",
"SrcVersion": "1.3.4.20200120",
"SrcRelease": "3.1",
"Licenses": [
"GPL-2.0-only",
"X11",
"CC-BY-3.0"
],
"Maintainer": "Boyuan Yang \u003cbyang@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/mawk",
"/usr/share/doc/mawk/ACKNOWLEDGMENT",
"/usr/share/doc/mawk/README",
"/usr/share/doc/mawk/changelog.Debian.gz",
"/usr/share/doc/mawk/changelog.gz",
"/usr/share/doc/mawk/copyright",
"/usr/share/doc/mawk/examples/ct_length.awk",
"/usr/share/doc/mawk/examples/decl.awk",
"/usr/share/doc/mawk/examples/deps.awk",
"/usr/share/doc/mawk/examples/eatc.awk",
"/usr/share/doc/mawk/examples/gdecl.awk",
"/usr/share/doc/mawk/examples/hcal",
"/usr/share/doc/mawk/examples/hical",
"/usr/share/doc/mawk/examples/nocomment.awk",
"/usr/share/doc/mawk/examples/primes.awk",
"/usr/share/doc/mawk/examples/qsort.awk",
"/usr/share/man/man1/mawk.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "mount@2.38.1-5+deb12u3",
"Name": "mount",
"Identifier": {
"PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "420d8a646a297157"
},
"Version": "2.38.1",
"Release": "5+deb12u3",
"Arch": "arm64",
"SrcName": "util-linux",
"SrcVersion": "2.38.1",
"SrcRelease": "5+deb12u3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-or-later",
"public-domain",
"BSD-4-Clause",
"MIT",
"BSD-3-Clause",
"BSLA",
"LGPL-2.0-or-later",
"LGPL-2.1-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-only",
"LGPL-2.0-only",
"LGPL-2.1-only",
"LGPL-3.0-only"
],
"Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/mount",
"/bin/umount",
"/sbin/losetup",
"/sbin/swapoff",
"/sbin/swapon",
"/usr/share/bash-completion/completions/losetup",
"/usr/share/bash-completion/completions/mount",
"/usr/share/bash-completion/completions/swapoff",
"/usr/share/bash-completion/completions/swapon",
"/usr/share/bash-completion/completions/umount",
"/usr/share/doc/mount/changelog.Debian.gz",
"/usr/share/doc/mount/changelog.gz",
"/usr/share/doc/mount/copyright",
"/usr/share/doc/mount/examples/filesystems",
"/usr/share/doc/mount/examples/fstab",
"/usr/share/doc/mount/examples/mount.fstab",
"/usr/share/doc/mount/mount.txt",
"/usr/share/lintian/overrides/mount",
"/usr/share/man/man5/fstab.5.gz",
"/usr/share/man/man8/losetup.8.gz",
"/usr/share/man/man8/mount.8.gz",
"/usr/share/man/man8/swapon.8.gz",
"/usr/share/man/man8/umount.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "ncurses-base@6.4-4",
"Name": "ncurses-base",
"Identifier": {
"PURL": "pkg:deb/debian/ncurses-base@6.4-4?arch=all\u0026distro=debian-12.14",
"UID": "8e69deb4f19b17b3"
},
"Version": "6.4",
"Release": "4",
"Arch": "all",
"SrcName": "ncurses",
"SrcVersion": "6.4",
"SrcRelease": "4",
"Licenses": [
"MIT/X11",
"X11",
"BSD-3-Clause"
],
"Maintainer": "Craig Small \u003ccsmall@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/terminfo/E/Eterm",
"/lib/terminfo/a/ansi",
"/lib/terminfo/c/cons25",
"/lib/terminfo/c/cons25-debian",
"/lib/terminfo/c/cygwin",
"/lib/terminfo/d/dumb",
"/lib/terminfo/h/hurd",
"/lib/terminfo/l/linux",
"/lib/terminfo/m/mach",
"/lib/terminfo/m/mach-bold",
"/lib/terminfo/m/mach-color",
"/lib/terminfo/m/mach-gnu",
"/lib/terminfo/m/mach-gnu-color",
"/lib/terminfo/p/pcansi",
"/lib/terminfo/r/rxvt",
"/lib/terminfo/r/rxvt-basic",
"/lib/terminfo/r/rxvt-unicode",
"/lib/terminfo/r/rxvt-unicode-256color",
"/lib/terminfo/s/screen",
"/lib/terminfo/s/screen-256color",
"/lib/terminfo/s/screen-256color-bce",
"/lib/terminfo/s/screen-bce",
"/lib/terminfo/s/screen-s",
"/lib/terminfo/s/screen-w",
"/lib/terminfo/s/screen.xterm-256color",
"/lib/terminfo/s/sun",
"/lib/terminfo/t/tmux",
"/lib/terminfo/t/tmux-256color",
"/lib/terminfo/v/vt100",
"/lib/terminfo/v/vt102",
"/lib/terminfo/v/vt220",
"/lib/terminfo/v/vt52",
"/lib/terminfo/w/wsvt25",
"/lib/terminfo/w/wsvt25m",
"/lib/terminfo/x/xterm",
"/lib/terminfo/x/xterm-256color",
"/lib/terminfo/x/xterm-color",
"/lib/terminfo/x/xterm-mono",
"/lib/terminfo/x/xterm-r5",
"/lib/terminfo/x/xterm-r6",
"/lib/terminfo/x/xterm-vt220",
"/lib/terminfo/x/xterm-xfree86",
"/usr/share/doc/ncurses-base/FAQ",
"/usr/share/doc/ncurses-base/TODO.Debian",
"/usr/share/doc/ncurses-base/changelog.Debian.gz",
"/usr/share/doc/ncurses-base/changelog.gz",
"/usr/share/doc/ncurses-base/copyright",
"/usr/share/lintian/overrides/ncurses-base",
"/usr/share/tabset/std",
"/usr/share/tabset/stdcrt",
"/usr/share/tabset/vt100",
"/usr/share/tabset/vt300"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "ncurses-bin@6.4-4",
"Name": "ncurses-bin",
"Identifier": {
"PURL": "pkg:deb/debian/ncurses-bin@6.4-4?arch=arm64\u0026distro=debian-12.14",
"UID": "1418b34f273972a0"
},
"Version": "6.4",
"Release": "4",
"Arch": "arm64",
"SrcName": "ncurses",
"SrcVersion": "6.4",
"SrcRelease": "4",
"Licenses": [
"MIT/X11",
"X11",
"BSD-3-Clause"
],
"Maintainer": "Craig Small \u003ccsmall@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/clear",
"/usr/bin/infocmp",
"/usr/bin/tabs",
"/usr/bin/tic",
"/usr/bin/toe",
"/usr/bin/tput",
"/usr/bin/tset",
"/usr/share/doc/ncurses-bin/changelog.Debian.gz",
"/usr/share/doc/ncurses-bin/changelog.gz",
"/usr/share/doc/ncurses-bin/copyright",
"/usr/share/man/man1/captoinfo.1.gz",
"/usr/share/man/man1/clear.1.gz",
"/usr/share/man/man1/infocmp.1.gz",
"/usr/share/man/man1/infotocap.1.gz",
"/usr/share/man/man1/tabs.1.gz",
"/usr/share/man/man1/tic.1.gz",
"/usr/share/man/man1/toe.1.gz",
"/usr/share/man/man1/tput.1.gz",
"/usr/share/man/man1/tset.1.gz",
"/usr/share/man/man5/scr_dump.5.gz",
"/usr/share/man/man5/term.5.gz",
"/usr/share/man/man5/terminfo.5.gz",
"/usr/share/man/man5/user_caps.5.gz",
"/usr/share/man/man7/term.7.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "passwd@1:4.13+dfsg1-1+deb12u2",
"Name": "passwd",
"Identifier": {
"PURL": "pkg:deb/debian/passwd@4.13%2Bdfsg1-1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "d17b237f13a8f0e3"
},
"Version": "4.13+dfsg1",
"Release": "1+deb12u2",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "shadow",
"SrcVersion": "4.13+dfsg1",
"SrcRelease": "1+deb12u2",
"SrcEpoch": 1,
"Licenses": [
"BSD-3-Clause",
"GPL-1.0-only",
"GPL-2.0-or-later",
"public-domain",
"GPL-2.0-only"
],
"Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libaudit1@1:3.0.9-1",
"libc6@2.36-9+deb12u14",
"libcrypt1@1:4.4.33-2",
"libpam-modules@1.5.2-6+deb12u2",
"libpam0g@1.5.2-6+deb12u2",
"libselinux1@3.4-1+b6",
"libsemanage2@3.4-1+b5"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/sbin/shadowconfig",
"/usr/bin/chage",
"/usr/bin/chfn",
"/usr/bin/chsh",
"/usr/bin/expiry",
"/usr/bin/gpasswd",
"/usr/bin/passwd",
"/usr/lib/tmpfiles.d/passwd.conf",
"/usr/sbin/chgpasswd",
"/usr/sbin/chpasswd",
"/usr/sbin/cppw",
"/usr/sbin/groupadd",
"/usr/sbin/groupdel",
"/usr/sbin/groupmems",
"/usr/sbin/groupmod",
"/usr/sbin/grpck",
"/usr/sbin/grpconv",
"/usr/sbin/grpunconv",
"/usr/sbin/newusers",
"/usr/sbin/pwck",
"/usr/sbin/pwconv",
"/usr/sbin/pwunconv",
"/usr/sbin/useradd",
"/usr/sbin/userdel",
"/usr/sbin/usermod",
"/usr/sbin/vipw",
"/usr/share/doc/passwd/NEWS.Debian.gz",
"/usr/share/doc/passwd/README.Debian",
"/usr/share/doc/passwd/TODO.Debian",
"/usr/share/doc/passwd/changelog.Debian.gz",
"/usr/share/doc/passwd/changelog.gz",
"/usr/share/doc/passwd/copyright",
"/usr/share/doc/passwd/examples/passwd.expire.cron",
"/usr/share/lintian/overrides/passwd",
"/usr/share/man/cs/man1/expiry.1.gz",
"/usr/share/man/cs/man1/gpasswd.1.gz",
"/usr/share/man/cs/man5/gshadow.5.gz",
"/usr/share/man/cs/man5/passwd.5.gz",
"/usr/share/man/cs/man5/shadow.5.gz",
"/usr/share/man/cs/man8/groupadd.8.gz",
"/usr/share/man/cs/man8/groupdel.8.gz",
"/usr/share/man/cs/man8/groupmod.8.gz",
"/usr/share/man/cs/man8/grpck.8.gz",
"/usr/share/man/cs/man8/vipw.8.gz",
"/usr/share/man/da/man1/chfn.1.gz",
"/usr/share/man/da/man5/gshadow.5.gz",
"/usr/share/man/da/man8/groupdel.8.gz",
"/usr/share/man/da/man8/vipw.8.gz",
"/usr/share/man/de/man1/chage.1.gz",
"/usr/share/man/de/man1/chfn.1.gz",
"/usr/share/man/de/man1/chsh.1.gz",
"/usr/share/man/de/man1/expiry.1.gz",
"/usr/share/man/de/man1/gpasswd.1.gz",
"/usr/share/man/de/man1/passwd.1.gz",
"/usr/share/man/de/man5/gshadow.5.gz",
"/usr/share/man/de/man5/passwd.5.gz",
"/usr/share/man/de/man5/shadow.5.gz",
"/usr/share/man/de/man8/chgpasswd.8.gz",
"/usr/share/man/de/man8/chpasswd.8.gz",
"/usr/share/man/de/man8/groupadd.8.gz",
"/usr/share/man/de/man8/groupdel.8.gz",
"/usr/share/man/de/man8/groupmems.8.gz",
"/usr/share/man/de/man8/groupmod.8.gz",
"/usr/share/man/de/man8/grpck.8.gz",
"/usr/share/man/de/man8/newusers.8.gz",
"/usr/share/man/de/man8/pwck.8.gz",
"/usr/share/man/de/man8/pwconv.8.gz",
"/usr/share/man/de/man8/useradd.8.gz",
"/usr/share/man/de/man8/userdel.8.gz",
"/usr/share/man/de/man8/usermod.8.gz",
"/usr/share/man/de/man8/vipw.8.gz",
"/usr/share/man/fi/man1/chfn.1.gz",
"/usr/share/man/fi/man1/chsh.1.gz",
"/usr/share/man/fr/man1/chage.1.gz",
"/usr/share/man/fr/man1/chfn.1.gz",
"/usr/share/man/fr/man1/chsh.1.gz",
"/usr/share/man/fr/man1/expiry.1.gz",
"/usr/share/man/fr/man1/gpasswd.1.gz",
"/usr/share/man/fr/man1/passwd.1.gz",
"/usr/share/man/fr/man5/gshadow.5.gz",
"/usr/share/man/fr/man5/passwd.5.gz",
"/usr/share/man/fr/man5/shadow.5.gz",
"/usr/share/man/fr/man5/subgid.5.gz",
"/usr/share/man/fr/man5/subuid.5.gz",
"/usr/share/man/fr/man8/chgpasswd.8.gz",
"/usr/share/man/fr/man8/chpasswd.8.gz",
"/usr/share/man/fr/man8/groupadd.8.gz",
"/usr/share/man/fr/man8/groupdel.8.gz",
"/usr/share/man/fr/man8/groupmems.8.gz",
"/usr/share/man/fr/man8/groupmod.8.gz",
"/usr/share/man/fr/man8/grpck.8.gz",
"/usr/share/man/fr/man8/newusers.8.gz",
"/usr/share/man/fr/man8/pwck.8.gz",
"/usr/share/man/fr/man8/pwconv.8.gz",
"/usr/share/man/fr/man8/useradd.8.gz",
"/usr/share/man/fr/man8/userdel.8.gz",
"/usr/share/man/fr/man8/usermod.8.gz",
"/usr/share/man/fr/man8/vipw.8.gz",
"/usr/share/man/hu/man1/chsh.1.gz",
"/usr/share/man/hu/man1/gpasswd.1.gz",
"/usr/share/man/hu/man1/passwd.1.gz",
"/usr/share/man/hu/man5/passwd.5.gz",
"/usr/share/man/id/man1/chsh.1.gz",
"/usr/share/man/id/man8/useradd.8.gz",
"/usr/share/man/it/man1/chage.1.gz",
"/usr/share/man/it/man1/chfn.1.gz",
"/usr/share/man/it/man1/chsh.1.gz",
"/usr/share/man/it/man1/expiry.1.gz",
"/usr/share/man/it/man1/gpasswd.1.gz",
"/usr/share/man/it/man1/passwd.1.gz",
"/usr/share/man/it/man5/gshadow.5.gz",
"/usr/share/man/it/man5/passwd.5.gz",
"/usr/share/man/it/man5/shadow.5.gz",
"/usr/share/man/it/man8/chgpasswd.8.gz",
"/usr/share/man/it/man8/chpasswd.8.gz",
"/usr/share/man/it/man8/groupadd.8.gz",
"/usr/share/man/it/man8/groupdel.8.gz",
"/usr/share/man/it/man8/groupmems.8.gz",
"/usr/share/man/it/man8/groupmod.8.gz",
"/usr/share/man/it/man8/grpck.8.gz",
"/usr/share/man/it/man8/newusers.8.gz",
"/usr/share/man/it/man8/pwck.8.gz",
"/usr/share/man/it/man8/pwconv.8.gz",
"/usr/share/man/it/man8/useradd.8.gz",
"/usr/share/man/it/man8/userdel.8.gz",
"/usr/share/man/it/man8/usermod.8.gz",
"/usr/share/man/it/man8/vipw.8.gz",
"/usr/share/man/ja/man1/chage.1.gz",
"/usr/share/man/ja/man1/chfn.1.gz",
"/usr/share/man/ja/man1/chsh.1.gz",
"/usr/share/man/ja/man1/expiry.1.gz",
"/usr/share/man/ja/man1/gpasswd.1.gz",
"/usr/share/man/ja/man1/passwd.1.gz",
"/usr/share/man/ja/man5/passwd.5.gz",
"/usr/share/man/ja/man5/shadow.5.gz",
"/usr/share/man/ja/man8/chpasswd.8.gz",
"/usr/share/man/ja/man8/groupadd.8.gz",
"/usr/share/man/ja/man8/groupdel.8.gz",
"/usr/share/man/ja/man8/groupmod.8.gz",
"/usr/share/man/ja/man8/grpck.8.gz",
"/usr/share/man/ja/man8/newusers.8.gz",
"/usr/share/man/ja/man8/pwck.8.gz",
"/usr/share/man/ja/man8/pwconv.8.gz",
"/usr/share/man/ja/man8/useradd.8.gz",
"/usr/share/man/ja/man8/userdel.8.gz",
"/usr/share/man/ja/man8/usermod.8.gz",
"/usr/share/man/ja/man8/vipw.8.gz",
"/usr/share/man/ko/man1/chfn.1.gz",
"/usr/share/man/ko/man1/chsh.1.gz",
"/usr/share/man/ko/man5/passwd.5.gz",
"/usr/share/man/ko/man8/vipw.8.gz",
"/usr/share/man/man1/chage.1.gz",
"/usr/share/man/man1/chfn.1.gz",
"/usr/share/man/man1/chsh.1.gz",
"/usr/share/man/man1/expiry.1.gz",
"/usr/share/man/man1/gpasswd.1.gz",
"/usr/share/man/man1/passwd.1.gz",
"/usr/share/man/man5/gshadow.5.gz",
"/usr/share/man/man5/passwd.5.gz",
"/usr/share/man/man5/shadow.5.gz",
"/usr/share/man/man5/subgid.5.gz",
"/usr/share/man/man5/subuid.5.gz",
"/usr/share/man/man8/chgpasswd.8.gz",
"/usr/share/man/man8/chpasswd.8.gz",
"/usr/share/man/man8/cppw.8.gz",
"/usr/share/man/man8/groupadd.8.gz",
"/usr/share/man/man8/groupdel.8.gz",
"/usr/share/man/man8/groupmems.8.gz",
"/usr/share/man/man8/groupmod.8.gz",
"/usr/share/man/man8/grpck.8.gz",
"/usr/share/man/man8/newusers.8.gz",
"/usr/share/man/man8/pwck.8.gz",
"/usr/share/man/man8/pwconv.8.gz",
"/usr/share/man/man8/useradd.8.gz",
"/usr/share/man/man8/userdel.8.gz",
"/usr/share/man/man8/usermod.8.gz",
"/usr/share/man/man8/vipw.8.gz",
"/usr/share/man/pl/man1/chage.1.gz",
"/usr/share/man/pl/man1/chsh.1.gz",
"/usr/share/man/pl/man1/expiry.1.gz",
"/usr/share/man/pl/man8/groupadd.8.gz",
"/usr/share/man/pl/man8/groupdel.8.gz",
"/usr/share/man/pl/man8/groupmems.8.gz",
"/usr/share/man/pl/man8/groupmod.8.gz",
"/usr/share/man/pl/man8/grpck.8.gz",
"/usr/share/man/pl/man8/userdel.8.gz",
"/usr/share/man/pl/man8/usermod.8.gz",
"/usr/share/man/pl/man8/vipw.8.gz",
"/usr/share/man/pt_BR/man1/gpasswd.1.gz",
"/usr/share/man/pt_BR/man5/passwd.5.gz",
"/usr/share/man/pt_BR/man5/shadow.5.gz",
"/usr/share/man/pt_BR/man8/groupadd.8.gz",
"/usr/share/man/pt_BR/man8/groupdel.8.gz",
"/usr/share/man/pt_BR/man8/groupmod.8.gz",
"/usr/share/man/ru/man1/chage.1.gz",
"/usr/share/man/ru/man1/chfn.1.gz",
"/usr/share/man/ru/man1/chsh.1.gz",
"/usr/share/man/ru/man1/expiry.1.gz",
"/usr/share/man/ru/man1/gpasswd.1.gz",
"/usr/share/man/ru/man1/passwd.1.gz",
"/usr/share/man/ru/man5/gshadow.5.gz",
"/usr/share/man/ru/man5/passwd.5.gz",
"/usr/share/man/ru/man5/shadow.5.gz",
"/usr/share/man/ru/man8/chgpasswd.8.gz",
"/usr/share/man/ru/man8/chpasswd.8.gz",
"/usr/share/man/ru/man8/groupadd.8.gz",
"/usr/share/man/ru/man8/groupdel.8.gz",
"/usr/share/man/ru/man8/groupmems.8.gz",
"/usr/share/man/ru/man8/groupmod.8.gz",
"/usr/share/man/ru/man8/grpck.8.gz",
"/usr/share/man/ru/man8/newusers.8.gz",
"/usr/share/man/ru/man8/pwck.8.gz",
"/usr/share/man/ru/man8/pwconv.8.gz",
"/usr/share/man/ru/man8/useradd.8.gz",
"/usr/share/man/ru/man8/userdel.8.gz",
"/usr/share/man/ru/man8/usermod.8.gz",
"/usr/share/man/ru/man8/vipw.8.gz",
"/usr/share/man/sv/man1/chage.1.gz",
"/usr/share/man/sv/man1/chsh.1.gz",
"/usr/share/man/sv/man1/expiry.1.gz",
"/usr/share/man/sv/man1/passwd.1.gz",
"/usr/share/man/sv/man5/gshadow.5.gz",
"/usr/share/man/sv/man5/passwd.5.gz",
"/usr/share/man/sv/man8/groupadd.8.gz",
"/usr/share/man/sv/man8/groupdel.8.gz",
"/usr/share/man/sv/man8/groupmems.8.gz",
"/usr/share/man/sv/man8/groupmod.8.gz",
"/usr/share/man/sv/man8/grpck.8.gz",
"/usr/share/man/sv/man8/pwck.8.gz",
"/usr/share/man/sv/man8/userdel.8.gz",
"/usr/share/man/sv/man8/vipw.8.gz",
"/usr/share/man/tr/man1/chage.1.gz",
"/usr/share/man/tr/man1/chfn.1.gz",
"/usr/share/man/tr/man1/passwd.1.gz",
"/usr/share/man/tr/man5/passwd.5.gz",
"/usr/share/man/tr/man5/shadow.5.gz",
"/usr/share/man/tr/man8/groupadd.8.gz",
"/usr/share/man/tr/man8/groupdel.8.gz",
"/usr/share/man/tr/man8/groupmod.8.gz",
"/usr/share/man/tr/man8/useradd.8.gz",
"/usr/share/man/tr/man8/userdel.8.gz",
"/usr/share/man/tr/man8/usermod.8.gz",
"/usr/share/man/uk/man1/chage.1.gz",
"/usr/share/man/uk/man1/chfn.1.gz",
"/usr/share/man/uk/man1/chsh.1.gz",
"/usr/share/man/uk/man1/expiry.1.gz",
"/usr/share/man/uk/man1/gpasswd.1.gz",
"/usr/share/man/uk/man1/passwd.1.gz",
"/usr/share/man/uk/man5/gshadow.5.gz",
"/usr/share/man/uk/man5/passwd.5.gz",
"/usr/share/man/uk/man5/shadow.5.gz",
"/usr/share/man/uk/man8/chgpasswd.8.gz",
"/usr/share/man/uk/man8/chpasswd.8.gz",
"/usr/share/man/uk/man8/groupadd.8.gz",
"/usr/share/man/uk/man8/groupdel.8.gz",
"/usr/share/man/uk/man8/groupmems.8.gz",
"/usr/share/man/uk/man8/groupmod.8.gz",
"/usr/share/man/uk/man8/grpck.8.gz",
"/usr/share/man/uk/man8/newusers.8.gz",
"/usr/share/man/uk/man8/pwck.8.gz",
"/usr/share/man/uk/man8/pwconv.8.gz",
"/usr/share/man/uk/man8/useradd.8.gz",
"/usr/share/man/uk/man8/userdel.8.gz",
"/usr/share/man/uk/man8/usermod.8.gz",
"/usr/share/man/uk/man8/vipw.8.gz",
"/usr/share/man/zh_CN/man1/chage.1.gz",
"/usr/share/man/zh_CN/man1/chfn.1.gz",
"/usr/share/man/zh_CN/man1/chsh.1.gz",
"/usr/share/man/zh_CN/man1/expiry.1.gz",
"/usr/share/man/zh_CN/man1/gpasswd.1.gz",
"/usr/share/man/zh_CN/man1/passwd.1.gz",
"/usr/share/man/zh_CN/man5/gshadow.5.gz",
"/usr/share/man/zh_CN/man5/passwd.5.gz",
"/usr/share/man/zh_CN/man5/shadow.5.gz",
"/usr/share/man/zh_CN/man8/chgpasswd.8.gz",
"/usr/share/man/zh_CN/man8/chpasswd.8.gz",
"/usr/share/man/zh_CN/man8/groupadd.8.gz",
"/usr/share/man/zh_CN/man8/groupdel.8.gz",
"/usr/share/man/zh_CN/man8/groupmems.8.gz",
"/usr/share/man/zh_CN/man8/groupmod.8.gz",
"/usr/share/man/zh_CN/man8/grpck.8.gz",
"/usr/share/man/zh_CN/man8/newusers.8.gz",
"/usr/share/man/zh_CN/man8/pwck.8.gz",
"/usr/share/man/zh_CN/man8/pwconv.8.gz",
"/usr/share/man/zh_CN/man8/useradd.8.gz",
"/usr/share/man/zh_CN/man8/userdel.8.gz",
"/usr/share/man/zh_CN/man8/usermod.8.gz",
"/usr/share/man/zh_CN/man8/vipw.8.gz",
"/usr/share/man/zh_TW/man1/chfn.1.gz",
"/usr/share/man/zh_TW/man1/chsh.1.gz",
"/usr/share/man/zh_TW/man5/passwd.5.gz",
"/usr/share/man/zh_TW/man8/chpasswd.8.gz",
"/usr/share/man/zh_TW/man8/groupadd.8.gz",
"/usr/share/man/zh_TW/man8/groupdel.8.gz",
"/usr/share/man/zh_TW/man8/groupmod.8.gz",
"/usr/share/man/zh_TW/man8/useradd.8.gz",
"/usr/share/man/zh_TW/man8/userdel.8.gz",
"/usr/share/man/zh_TW/man8/usermod.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "perl-base@5.36.0-7+deb12u3",
"Name": "perl-base",
"Identifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"Version": "5.36.0",
"Release": "7+deb12u3",
"Arch": "arm64",
"SrcName": "perl",
"SrcVersion": "5.36.0",
"SrcRelease": "7+deb12u3",
"Licenses": [
"GPL-1.0-or-later",
"Artistic-2.0",
"MIT",
"REGCOMP",
"GPL-2.0-with-bison-exception+",
"Unicode",
"BZIP",
"Zlib",
"GPL-2.0-or-later",
"RRA-KEEP-THIS-NOTICE",
"BSD-3-clause-with-weird-numbering",
"CC0-1.0",
"TEXT-TABS",
"BSD-4-clause-POWERDOG",
"BSD-3-clause-GENERIC",
"BSD-3-Clause",
"SDBM-PUBLIC-DOMAIN",
"DONT-CHANGE-THE-GPL",
"Artistic-dist",
"LGPL-2.1-only",
"GPL-1.0-only",
"GPL-2.0-only",
"Artistic-2",
"HSIEH-DERIVATIVE",
"HSIEH-BSD"
],
"Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/bin/perl",
"/usr/bin/perl5.36.0",
"/usr/lib/aarch64-linux-gnu/perl-base/AutoLoader.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Carp.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Carp/Heavy.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Config.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Config_git.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/Config_heavy.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/Cwd.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/DynaLoader.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Errno.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Exporter.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Exporter/Heavy.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Fcntl.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/File/Basename.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/File/Glob.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/File/Path.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/File/Spec.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/File/Spec/Unix.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/File/Temp.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/FileHandle.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Getopt/Long.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Hash/Util.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/File.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/Handle.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/Pipe.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/Seekable.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/Select.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/Socket.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/Socket/INET.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/Socket/IP.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IO/Socket/UNIX.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IPC/Open2.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/IPC/Open3.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/List/Util.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/POSIX.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Scalar/Util.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/SelectSaver.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Socket.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Symbol.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Text/ParseWords.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Text/Tabs.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Text/Wrap.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/Tie/Hash.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/XSLoader.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/attributes.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/Cwd/Cwd.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/Fcntl/Fcntl.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/File/Glob/Glob.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/Hash/Util/Util.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/IO/IO.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/List/Util/Util.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/POSIX/POSIX.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/Socket/Socket.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/attributes/attributes.so",
"/usr/lib/aarch64-linux-gnu/perl-base/auto/re/re.so",
"/usr/lib/aarch64-linux-gnu/perl-base/base.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/builtin.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/bytes.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/bytes_heavy.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/constant.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/feature.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/fields.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/integer.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/lib.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/locale.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/overload.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/overloading.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/parent.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/re.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/strict.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Age.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Bc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Bmg.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Bpb.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Bpt.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Cf.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Ea.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/EqUIdeo.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/GCB.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Gc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Hst.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Identif2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Identifi.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/InPC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/InSC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Isc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Jg.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Jt.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Lb.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Lc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/NFCQC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/NFDQC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/NFKCCF.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/NFKCQC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/NFKDQC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Na1.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/NameAlia.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Nt.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Nv.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/PerlDeci.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/SB.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Sc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Scx.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Tc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Uc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/Vo.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/WB.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/_PerlLB.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/To/_PerlSCX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/NA.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V100.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V11.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V110.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V120.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V130.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V140.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V20.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V30.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V31.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V32.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V40.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V41.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V50.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V51.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V52.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V60.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V61.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V70.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V80.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Age/V90.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Alpha/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/AL.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/AN.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/B.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/BN.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/CS.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/EN.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/ES.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/ET.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/L.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/NSM.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/ON.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/R.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bc/WS.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/BidiC/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/BidiM/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Blk/NB.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bpt/C.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bpt/N.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Bpt/O.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CE/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CI/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CWCF/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CWCM/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CWKCF/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CWL/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CWT/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CWU/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Cased/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/A.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/AL.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/AR.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/ATAR.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/B.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/BR.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/DB.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/NK.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/NR.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/OV.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ccc/VR.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/CompEx/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/DI/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dash/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dep/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dia/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Com.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Enc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Fin.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Font.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Init.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Iso.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Med.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Nar.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Nb.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/NonCanon.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Sqr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Sub.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Sup.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Dt/Vert.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/EBase/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/EComp/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/EPres/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ea/A.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ea/H.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ea/N.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ea/Na.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ea/W.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Emoji/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ext/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/ExtPict/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GCB/CN.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GCB/EX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GCB/LV.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GCB/LVT.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GCB/PP.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GCB/SM.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GCB/XX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/C.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Cf.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Cn.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/L.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/LC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Ll.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Lm.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Lo.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Lu.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/M.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Mc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Me.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Mn.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/N.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Nd.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Nl.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/No.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/P.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Pc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Pd.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Pe.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Pf.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Pi.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Po.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Ps.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/S.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Sc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Sk.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Sm.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/So.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Z.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Gc/Zs.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GrBase/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/GrExt/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Hex/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Hst/NA.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Hyphen/T.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IDC/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IDS/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdStatus/Allowed.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdStatus/Restrict.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/DefaultI.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/Exclusio.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/Inclusio.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/LimitedU.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/NotChara.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/NotNFKC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/NotXID.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/Obsolete.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/Recommen.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/Technica.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/IdType/Uncommon.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Ideo/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/10_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/11_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/12_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/12_1.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/13_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/14_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/2_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/2_1.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/3_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/3_1.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/3_2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/4_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/4_1.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/5_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/5_1.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/5_2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/6_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/6_1.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/6_2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/6_3.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/7_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/8_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/In/9_0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/Bottom.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/BottomAn.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/Left.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/LeftAndR.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/NA.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/Overstru.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/Right.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/Top.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/TopAndBo.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/TopAndL2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/TopAndLe.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/TopAndRi.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InPC/VisualOr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Avagraha.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Bindu.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Cantilla.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Consona2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Consona3.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Consona4.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Consona5.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Consona6.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Consona7.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Consona8.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Consonan.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Invisibl.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Nukta.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Number.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Other.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/PureKill.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Syllable.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/ToneMark.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Virama.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Visarga.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/Vowel.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/VowelDep.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/InSC/VowelInd.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Ain.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Alef.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Beh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Dal.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/FarsiYeh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Feh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Gaf.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Hah.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/HanifiRo.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Kaf.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Lam.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/NoJoinin.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Noon.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Qaf.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Reh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Sad.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Seen.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Tah.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Waw.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jg/Yeh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jt/C.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jt/D.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jt/L.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jt/R.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jt/T.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Jt/U.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/AI.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/AL.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/BA.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/BB.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/CJ.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/CL.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/CM.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/EX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/GL.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/ID.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/IN.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/IS.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/NS.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/NU.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/OP.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/PO.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/PR.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/QU.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/SA.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lb/XX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Lower/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Math/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/NFCQC/M.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/NFCQC/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/NFDQC/N.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/NFDQC/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/NFKCQC/N.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/NFKCQC/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/NFKDQC/N.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/NFKDQC/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nt/Di.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nt/None.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nt/Nu.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/0.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/1.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/10.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/100.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/1000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/10000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/100000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/11.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/12.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/13.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/14.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/15.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/16.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/17.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/18.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/19.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/1_16.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/1_2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/1_3.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/1_4.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/1_6.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/1_8.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/20.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/200.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/2000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/20000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/2_3.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/3.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/30.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/300.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/3000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/30000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/3_16.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/3_4.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/4.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/40.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/400.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/4000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/40000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/5.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/50.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/500.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/5000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/50000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/6.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/60.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/600.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/6000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/60000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/7.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/70.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/700.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/7000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/70000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/8.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/80.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/800.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/8000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/80000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/9.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/90.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/900.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/9000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Nv/90000.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/PCM/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/PatSyn/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/Alnum.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/Assigned.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/Blank.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/Graph.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/PerlWord.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/PosixPun.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/Print.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/SpacePer.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/Title.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/Word.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/XPosixPu.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlAny.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCh2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCha.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlFol.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDS.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIsI.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlNch.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPat.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPr2.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPro.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Perl/_PerlQuo.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/QMark/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/AT.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/CL.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/EX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/FO.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/LE.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/LO.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/NU.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/SC.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/ST.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/Sp.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/UP.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SB/XX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/SD/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/STerm/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Arab.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Beng.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Cprt.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Cyrl.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Deva.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Dupl.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Geor.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Glag.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Gong.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Gonm.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Gran.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Grek.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Gujr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Guru.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Han.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Hang.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Hira.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Kana.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Knda.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Latn.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Limb.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Linb.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Mlym.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Mong.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Mult.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Orya.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Sinh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Syrc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Taml.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Telu.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Zinh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Sc/Zyyy.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Adlm.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Arab.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Armn.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Beng.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Bhks.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Bopo.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Cakm.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Cham.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Copt.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Cprt.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Cyrl.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Deva.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Diak.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Dupl.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Ethi.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Geor.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Glag.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Gong.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Gonm.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Gran.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Grek.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Gujr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Guru.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Han.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Hang.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Hebr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Hira.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Hmng.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Hmnp.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Kana.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Khar.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Khmr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Khoj.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Knda.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Kthi.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Lana.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Lao.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Latn.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Limb.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Lina.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Linb.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Mlym.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Mong.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Mult.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Mymr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Nand.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Nko.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Orya.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Phlp.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Rohg.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Shrd.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Sind.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Sinh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Syrc.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Tagb.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Takr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Talu.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Taml.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Tang.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Telu.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Thaa.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Tibt.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Tirh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Vith.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Xsux.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Yezi.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Yi.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Zinh.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Zyyy.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Scx/Zzzz.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Term/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/UIdeo/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Upper/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/VS/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Vo/R.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Vo/Tr.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Vo/Tu.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/Vo/U.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/EX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/Extend.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/FO.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/HL.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/KA.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/LE.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/MB.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/ML.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/MN.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/NU.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/WSegSpac.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/WB/XX.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/XIDC/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/unicore/lib/XIDS/Y.pl",
"/usr/lib/aarch64-linux-gnu/perl-base/utf8.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/vars.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/warnings.pm",
"/usr/lib/aarch64-linux-gnu/perl-base/warnings/register.pm",
"/usr/share/doc/perl-base/changelog.Debian.gz",
"/usr/share/doc/perl-base/changelog.gz",
"/usr/share/doc/perl-base/copyright",
"/usr/share/doc/perl/AUTHORS.gz",
"/usr/share/doc/perl/Documentation",
"/usr/share/lintian/overrides/perl-base",
"/usr/share/man/man1/perl.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "sed@4.9-1+deb12u1",
"Name": "sed",
"Identifier": {
"PURL": "pkg:deb/debian/sed@4.9-1%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "32c9b55c9f5ee4ff"
},
"Version": "4.9",
"Release": "1+deb12u1",
"Arch": "arm64",
"SrcName": "sed",
"SrcVersion": "4.9",
"SrcRelease": "1+deb12u1",
"Licenses": [
"GPL-3.0-or-later",
"GPL-3.0-only",
"X11",
"GFDL-1.3-no-invariants-or-later",
"GFDL-1.3-only",
"ISC",
"BSD-4-Clause-UC",
"BSL-1",
"pcre"
],
"Maintainer": "Clint Adams \u003cclint@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/sed",
"/usr/share/doc/sed/AUTHORS",
"/usr/share/doc/sed/BUGS.gz",
"/usr/share/doc/sed/NEWS.gz",
"/usr/share/doc/sed/README",
"/usr/share/doc/sed/THANKS.gz",
"/usr/share/doc/sed/changelog.Debian.gz",
"/usr/share/doc/sed/changelog.gz",
"/usr/share/doc/sed/copyright",
"/usr/share/doc/sed/examples/dc.sed",
"/usr/share/doc/sed/sedfaq.txt.gz",
"/usr/share/info/sed.info.gz",
"/usr/share/locale/af/LC_MESSAGES/sed.mo",
"/usr/share/locale/ast/LC_MESSAGES/sed.mo",
"/usr/share/locale/bg/LC_MESSAGES/sed.mo",
"/usr/share/locale/ca/LC_MESSAGES/sed.mo",
"/usr/share/locale/cs/LC_MESSAGES/sed.mo",
"/usr/share/locale/da/LC_MESSAGES/sed.mo",
"/usr/share/locale/de/LC_MESSAGES/sed.mo",
"/usr/share/locale/el/LC_MESSAGES/sed.mo",
"/usr/share/locale/eo/LC_MESSAGES/sed.mo",
"/usr/share/locale/es/LC_MESSAGES/sed.mo",
"/usr/share/locale/et/LC_MESSAGES/sed.mo",
"/usr/share/locale/eu/LC_MESSAGES/sed.mo",
"/usr/share/locale/fi/LC_MESSAGES/sed.mo",
"/usr/share/locale/fr/LC_MESSAGES/sed.mo",
"/usr/share/locale/ga/LC_MESSAGES/sed.mo",
"/usr/share/locale/gl/LC_MESSAGES/sed.mo",
"/usr/share/locale/he/LC_MESSAGES/sed.mo",
"/usr/share/locale/hr/LC_MESSAGES/sed.mo",
"/usr/share/locale/hu/LC_MESSAGES/sed.mo",
"/usr/share/locale/id/LC_MESSAGES/sed.mo",
"/usr/share/locale/it/LC_MESSAGES/sed.mo",
"/usr/share/locale/ja/LC_MESSAGES/sed.mo",
"/usr/share/locale/ka/LC_MESSAGES/sed.mo",
"/usr/share/locale/ko/LC_MESSAGES/sed.mo",
"/usr/share/locale/nb/LC_MESSAGES/sed.mo",
"/usr/share/locale/nl/LC_MESSAGES/sed.mo",
"/usr/share/locale/pl/LC_MESSAGES/sed.mo",
"/usr/share/locale/pt/LC_MESSAGES/sed.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/sed.mo",
"/usr/share/locale/ro/LC_MESSAGES/sed.mo",
"/usr/share/locale/ru/LC_MESSAGES/sed.mo",
"/usr/share/locale/sk/LC_MESSAGES/sed.mo",
"/usr/share/locale/sl/LC_MESSAGES/sed.mo",
"/usr/share/locale/sr/LC_MESSAGES/sed.mo",
"/usr/share/locale/sv/LC_MESSAGES/sed.mo",
"/usr/share/locale/tr/LC_MESSAGES/sed.mo",
"/usr/share/locale/uk/LC_MESSAGES/sed.mo",
"/usr/share/locale/vi/LC_MESSAGES/sed.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/sed.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo",
"/usr/share/man/man1/sed.1.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "sysvinit-utils@3.06-4",
"Name": "sysvinit-utils",
"Identifier": {
"PURL": "pkg:deb/debian/sysvinit-utils@3.06-4?arch=arm64\u0026distro=debian-12.14",
"UID": "d048edf3ca47548e"
},
"Version": "3.06",
"Release": "4",
"Arch": "arm64",
"SrcName": "sysvinit",
"SrcVersion": "3.06",
"SrcRelease": "4",
"Licenses": [
"GPL-2.0-or-later",
"GPL-3.0-only",
"GPL-2.0-only"
],
"Maintainer": "Debian sysvinit maintainers \u003cdebian-init-diversity@chiark.greenend.org.uk\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/init/init-d-script",
"/lib/init/vars.sh",
"/lib/lsb/init-functions",
"/lib/lsb/init-functions.d/00-verbose",
"/sbin/fstab-decode",
"/sbin/killall5",
"/usr/share/doc/sysvinit-utils/changelog.Debian.gz",
"/usr/share/doc/sysvinit-utils/copyright",
"/usr/share/man/man5/init-d-script.5.gz",
"/usr/share/man/man8/fstab-decode.8.gz",
"/usr/share/man/man8/killall5.8.gz",
"/usr/share/man/man8/pidof.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "tar@1.34+dfsg-1.2+deb12u1",
"Name": "tar",
"Identifier": {
"PURL": "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "91f4d59d9c1afa40"
},
"Version": "1.34+dfsg",
"Release": "1.2+deb12u1",
"Arch": "arm64",
"SrcName": "tar",
"SrcVersion": "1.34+dfsg",
"SrcRelease": "1.2+deb12u1",
"Licenses": [
"GPL-3.0-or-later",
"GPL-3.0-only",
"GPL-3+ with Bison exception",
"LGPL-3.0-or-later",
"LGPL-3.0-only",
"GPL-2.0-or-later",
"GPL-2.0-only"
],
"Maintainer": "Janos Lenart \u003cocsi@debian.org\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/tar",
"/usr/lib/mime/packages/tar",
"/usr/sbin/rmt-tar",
"/usr/sbin/tarcat",
"/usr/share/doc/tar/AUTHORS",
"/usr/share/doc/tar/NEWS.gz",
"/usr/share/doc/tar/README.Debian",
"/usr/share/doc/tar/THANKS.gz",
"/usr/share/doc/tar/changelog.1.gz",
"/usr/share/doc/tar/changelog.Debian.gz",
"/usr/share/doc/tar/changelog.gz",
"/usr/share/doc/tar/copyright",
"/usr/share/locale/bg/LC_MESSAGES/tar.mo",
"/usr/share/locale/ca/LC_MESSAGES/tar.mo",
"/usr/share/locale/cs/LC_MESSAGES/tar.mo",
"/usr/share/locale/da/LC_MESSAGES/tar.mo",
"/usr/share/locale/de/LC_MESSAGES/tar.mo",
"/usr/share/locale/el/LC_MESSAGES/tar.mo",
"/usr/share/locale/eo/LC_MESSAGES/tar.mo",
"/usr/share/locale/es/LC_MESSAGES/tar.mo",
"/usr/share/locale/et/LC_MESSAGES/tar.mo",
"/usr/share/locale/eu/LC_MESSAGES/tar.mo",
"/usr/share/locale/fi/LC_MESSAGES/tar.mo",
"/usr/share/locale/fr/LC_MESSAGES/tar.mo",
"/usr/share/locale/ga/LC_MESSAGES/tar.mo",
"/usr/share/locale/gl/LC_MESSAGES/tar.mo",
"/usr/share/locale/hr/LC_MESSAGES/tar.mo",
"/usr/share/locale/hu/LC_MESSAGES/tar.mo",
"/usr/share/locale/id/LC_MESSAGES/tar.mo",
"/usr/share/locale/it/LC_MESSAGES/tar.mo",
"/usr/share/locale/ja/LC_MESSAGES/tar.mo",
"/usr/share/locale/ko/LC_MESSAGES/tar.mo",
"/usr/share/locale/ky/LC_MESSAGES/tar.mo",
"/usr/share/locale/ms/LC_MESSAGES/tar.mo",
"/usr/share/locale/nb/LC_MESSAGES/tar.mo",
"/usr/share/locale/nl/LC_MESSAGES/tar.mo",
"/usr/share/locale/pl/LC_MESSAGES/tar.mo",
"/usr/share/locale/pt/LC_MESSAGES/tar.mo",
"/usr/share/locale/pt_BR/LC_MESSAGES/tar.mo",
"/usr/share/locale/ro/LC_MESSAGES/tar.mo",
"/usr/share/locale/ru/LC_MESSAGES/tar.mo",
"/usr/share/locale/sk/LC_MESSAGES/tar.mo",
"/usr/share/locale/sl/LC_MESSAGES/tar.mo",
"/usr/share/locale/sr/LC_MESSAGES/tar.mo",
"/usr/share/locale/sv/LC_MESSAGES/tar.mo",
"/usr/share/locale/tr/LC_MESSAGES/tar.mo",
"/usr/share/locale/uk/LC_MESSAGES/tar.mo",
"/usr/share/locale/vi/LC_MESSAGES/tar.mo",
"/usr/share/locale/zh_CN/LC_MESSAGES/tar.mo",
"/usr/share/locale/zh_TW/LC_MESSAGES/tar.mo",
"/usr/share/man/man1/tar.1.gz",
"/usr/share/man/man1/tarcat.1.gz",
"/usr/share/man/man8/rmt-tar.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "tzdata@2026b-0+deb12u1",
"Name": "tzdata",
"Identifier": {
"PURL": "pkg:deb/debian/tzdata@2026b-0%2Bdeb12u1?arch=all\u0026distro=debian-12.14",
"UID": "9c044d6d00a3a61d"
},
"Version": "2026b",
"Release": "0+deb12u1",
"Arch": "all",
"SrcName": "tzdata",
"SrcVersion": "2026b",
"SrcRelease": "0+deb12u1",
"Licenses": [
"public-domain"
],
"Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"debconf@1.5.82"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/share/doc/tzdata/README.Debian",
"/usr/share/doc/tzdata/changelog.Debian.gz",
"/usr/share/doc/tzdata/changelog.gz",
"/usr/share/doc/tzdata/copyright",
"/usr/share/lintian/overrides/tzdata",
"/usr/share/zoneinfo/Africa/Abidjan",
"/usr/share/zoneinfo/Africa/Accra",
"/usr/share/zoneinfo/Africa/Addis_Ababa",
"/usr/share/zoneinfo/Africa/Algiers",
"/usr/share/zoneinfo/Africa/Asmara",
"/usr/share/zoneinfo/Africa/Bamako",
"/usr/share/zoneinfo/Africa/Bangui",
"/usr/share/zoneinfo/Africa/Banjul",
"/usr/share/zoneinfo/Africa/Bissau",
"/usr/share/zoneinfo/Africa/Blantyre",
"/usr/share/zoneinfo/Africa/Brazzaville",
"/usr/share/zoneinfo/Africa/Bujumbura",
"/usr/share/zoneinfo/Africa/Cairo",
"/usr/share/zoneinfo/Africa/Casablanca",
"/usr/share/zoneinfo/Africa/Ceuta",
"/usr/share/zoneinfo/Africa/Conakry",
"/usr/share/zoneinfo/Africa/Dakar",
"/usr/share/zoneinfo/Africa/Dar_es_Salaam",
"/usr/share/zoneinfo/Africa/Djibouti",
"/usr/share/zoneinfo/Africa/Douala",
"/usr/share/zoneinfo/Africa/El_Aaiun",
"/usr/share/zoneinfo/Africa/Freetown",
"/usr/share/zoneinfo/Africa/Gaborone",
"/usr/share/zoneinfo/Africa/Harare",
"/usr/share/zoneinfo/Africa/Johannesburg",
"/usr/share/zoneinfo/Africa/Juba",
"/usr/share/zoneinfo/Africa/Kampala",
"/usr/share/zoneinfo/Africa/Khartoum",
"/usr/share/zoneinfo/Africa/Kigali",
"/usr/share/zoneinfo/Africa/Kinshasa",
"/usr/share/zoneinfo/Africa/Lagos",
"/usr/share/zoneinfo/Africa/Libreville",
"/usr/share/zoneinfo/Africa/Lome",
"/usr/share/zoneinfo/Africa/Luanda",
"/usr/share/zoneinfo/Africa/Lubumbashi",
"/usr/share/zoneinfo/Africa/Lusaka",
"/usr/share/zoneinfo/Africa/Malabo",
"/usr/share/zoneinfo/Africa/Maputo",
"/usr/share/zoneinfo/Africa/Maseru",
"/usr/share/zoneinfo/Africa/Mbabane",
"/usr/share/zoneinfo/Africa/Mogadishu",
"/usr/share/zoneinfo/Africa/Monrovia",
"/usr/share/zoneinfo/Africa/Nairobi",
"/usr/share/zoneinfo/Africa/Ndjamena",
"/usr/share/zoneinfo/Africa/Niamey",
"/usr/share/zoneinfo/Africa/Nouakchott",
"/usr/share/zoneinfo/Africa/Ouagadougou",
"/usr/share/zoneinfo/Africa/Porto-Novo",
"/usr/share/zoneinfo/Africa/Sao_Tome",
"/usr/share/zoneinfo/Africa/Tripoli",
"/usr/share/zoneinfo/Africa/Tunis",
"/usr/share/zoneinfo/Africa/Windhoek",
"/usr/share/zoneinfo/America/Adak",
"/usr/share/zoneinfo/America/Anchorage",
"/usr/share/zoneinfo/America/Anguilla",
"/usr/share/zoneinfo/America/Antigua",
"/usr/share/zoneinfo/America/Araguaina",
"/usr/share/zoneinfo/America/Argentina/Buenos_Aires",
"/usr/share/zoneinfo/America/Argentina/Catamarca",
"/usr/share/zoneinfo/America/Argentina/Cordoba",
"/usr/share/zoneinfo/America/Argentina/Jujuy",
"/usr/share/zoneinfo/America/Argentina/La_Rioja",
"/usr/share/zoneinfo/America/Argentina/Mendoza",
"/usr/share/zoneinfo/America/Argentina/Rio_Gallegos",
"/usr/share/zoneinfo/America/Argentina/Salta",
"/usr/share/zoneinfo/America/Argentina/San_Juan",
"/usr/share/zoneinfo/America/Argentina/San_Luis",
"/usr/share/zoneinfo/America/Argentina/Tucuman",
"/usr/share/zoneinfo/America/Argentina/Ushuaia",
"/usr/share/zoneinfo/America/Aruba",
"/usr/share/zoneinfo/America/Asuncion",
"/usr/share/zoneinfo/America/Atikokan",
"/usr/share/zoneinfo/America/Bahia",
"/usr/share/zoneinfo/America/Bahia_Banderas",
"/usr/share/zoneinfo/America/Barbados",
"/usr/share/zoneinfo/America/Belem",
"/usr/share/zoneinfo/America/Belize",
"/usr/share/zoneinfo/America/Blanc-Sablon",
"/usr/share/zoneinfo/America/Boa_Vista",
"/usr/share/zoneinfo/America/Bogota",
"/usr/share/zoneinfo/America/Boise",
"/usr/share/zoneinfo/America/Cambridge_Bay",
"/usr/share/zoneinfo/America/Campo_Grande",
"/usr/share/zoneinfo/America/Cancun",
"/usr/share/zoneinfo/America/Caracas",
"/usr/share/zoneinfo/America/Cayenne",
"/usr/share/zoneinfo/America/Cayman",
"/usr/share/zoneinfo/America/Chicago",
"/usr/share/zoneinfo/America/Chihuahua",
"/usr/share/zoneinfo/America/Ciudad_Juarez",
"/usr/share/zoneinfo/America/Costa_Rica",
"/usr/share/zoneinfo/America/Coyhaique",
"/usr/share/zoneinfo/America/Creston",
"/usr/share/zoneinfo/America/Cuiaba",
"/usr/share/zoneinfo/America/Curacao",
"/usr/share/zoneinfo/America/Danmarkshavn",
"/usr/share/zoneinfo/America/Dawson",
"/usr/share/zoneinfo/America/Dawson_Creek",
"/usr/share/zoneinfo/America/Denver",
"/usr/share/zoneinfo/America/Detroit",
"/usr/share/zoneinfo/America/Dominica",
"/usr/share/zoneinfo/America/Edmonton",
"/usr/share/zoneinfo/America/Eirunepe",
"/usr/share/zoneinfo/America/El_Salvador",
"/usr/share/zoneinfo/America/Fort_Nelson",
"/usr/share/zoneinfo/America/Fortaleza",
"/usr/share/zoneinfo/America/Glace_Bay",
"/usr/share/zoneinfo/America/Goose_Bay",
"/usr/share/zoneinfo/America/Grand_Turk",
"/usr/share/zoneinfo/America/Grenada",
"/usr/share/zoneinfo/America/Guadeloupe",
"/usr/share/zoneinfo/America/Guatemala",
"/usr/share/zoneinfo/America/Guayaquil",
"/usr/share/zoneinfo/America/Guyana",
"/usr/share/zoneinfo/America/Halifax",
"/usr/share/zoneinfo/America/Havana",
"/usr/share/zoneinfo/America/Hermosillo",
"/usr/share/zoneinfo/America/Indiana/Indianapolis",
"/usr/share/zoneinfo/America/Indiana/Knox",
"/usr/share/zoneinfo/America/Indiana/Marengo",
"/usr/share/zoneinfo/America/Indiana/Petersburg",
"/usr/share/zoneinfo/America/Indiana/Tell_City",
"/usr/share/zoneinfo/America/Indiana/Vevay",
"/usr/share/zoneinfo/America/Indiana/Vincennes",
"/usr/share/zoneinfo/America/Indiana/Winamac",
"/usr/share/zoneinfo/America/Inuvik",
"/usr/share/zoneinfo/America/Iqaluit",
"/usr/share/zoneinfo/America/Jamaica",
"/usr/share/zoneinfo/America/Juneau",
"/usr/share/zoneinfo/America/Kentucky/Louisville",
"/usr/share/zoneinfo/America/Kentucky/Monticello",
"/usr/share/zoneinfo/America/La_Paz",
"/usr/share/zoneinfo/America/Lima",
"/usr/share/zoneinfo/America/Los_Angeles",
"/usr/share/zoneinfo/America/Maceio",
"/usr/share/zoneinfo/America/Managua",
"/usr/share/zoneinfo/America/Manaus",
"/usr/share/zoneinfo/America/Martinique",
"/usr/share/zoneinfo/America/Matamoros",
"/usr/share/zoneinfo/America/Mazatlan",
"/usr/share/zoneinfo/America/Menominee",
"/usr/share/zoneinfo/America/Merida",
"/usr/share/zoneinfo/America/Metlakatla",
"/usr/share/zoneinfo/America/Mexico_City",
"/usr/share/zoneinfo/America/Miquelon",
"/usr/share/zoneinfo/America/Moncton",
"/usr/share/zoneinfo/America/Monterrey",
"/usr/share/zoneinfo/America/Montevideo",
"/usr/share/zoneinfo/America/Montserrat",
"/usr/share/zoneinfo/America/Nassau",
"/usr/share/zoneinfo/America/New_York",
"/usr/share/zoneinfo/America/Nome",
"/usr/share/zoneinfo/America/Noronha",
"/usr/share/zoneinfo/America/North_Dakota/Beulah",
"/usr/share/zoneinfo/America/North_Dakota/Center",
"/usr/share/zoneinfo/America/North_Dakota/New_Salem",
"/usr/share/zoneinfo/America/Nuuk",
"/usr/share/zoneinfo/America/Ojinaga",
"/usr/share/zoneinfo/America/Panama",
"/usr/share/zoneinfo/America/Paramaribo",
"/usr/share/zoneinfo/America/Phoenix",
"/usr/share/zoneinfo/America/Port-au-Prince",
"/usr/share/zoneinfo/America/Port_of_Spain",
"/usr/share/zoneinfo/America/Porto_Velho",
"/usr/share/zoneinfo/America/Puerto_Rico",
"/usr/share/zoneinfo/America/Punta_Arenas",
"/usr/share/zoneinfo/America/Rankin_Inlet",
"/usr/share/zoneinfo/America/Recife",
"/usr/share/zoneinfo/America/Regina",
"/usr/share/zoneinfo/America/Resolute",
"/usr/share/zoneinfo/America/Rio_Branco",
"/usr/share/zoneinfo/America/Santarem",
"/usr/share/zoneinfo/America/Santiago",
"/usr/share/zoneinfo/America/Santo_Domingo",
"/usr/share/zoneinfo/America/Sao_Paulo",
"/usr/share/zoneinfo/America/Scoresbysund",
"/usr/share/zoneinfo/America/Sitka",
"/usr/share/zoneinfo/America/St_Johns",
"/usr/share/zoneinfo/America/St_Kitts",
"/usr/share/zoneinfo/America/St_Lucia",
"/usr/share/zoneinfo/America/St_Thomas",
"/usr/share/zoneinfo/America/St_Vincent",
"/usr/share/zoneinfo/America/Swift_Current",
"/usr/share/zoneinfo/America/Tegucigalpa",
"/usr/share/zoneinfo/America/Thule",
"/usr/share/zoneinfo/America/Tijuana",
"/usr/share/zoneinfo/America/Toronto",
"/usr/share/zoneinfo/America/Tortola",
"/usr/share/zoneinfo/America/Vancouver",
"/usr/share/zoneinfo/America/Whitehorse",
"/usr/share/zoneinfo/America/Winnipeg",
"/usr/share/zoneinfo/America/Yakutat",
"/usr/share/zoneinfo/Antarctica/Casey",
"/usr/share/zoneinfo/Antarctica/Davis",
"/usr/share/zoneinfo/Antarctica/DumontDUrville",
"/usr/share/zoneinfo/Antarctica/Macquarie",
"/usr/share/zoneinfo/Antarctica/Mawson",
"/usr/share/zoneinfo/Antarctica/McMurdo",
"/usr/share/zoneinfo/Antarctica/Palmer",
"/usr/share/zoneinfo/Antarctica/Rothera",
"/usr/share/zoneinfo/Antarctica/Syowa",
"/usr/share/zoneinfo/Antarctica/Troll",
"/usr/share/zoneinfo/Antarctica/Vostok",
"/usr/share/zoneinfo/Asia/Aden",
"/usr/share/zoneinfo/Asia/Almaty",
"/usr/share/zoneinfo/Asia/Amman",
"/usr/share/zoneinfo/Asia/Anadyr",
"/usr/share/zoneinfo/Asia/Aqtau",
"/usr/share/zoneinfo/Asia/Aqtobe",
"/usr/share/zoneinfo/Asia/Ashgabat",
"/usr/share/zoneinfo/Asia/Atyrau",
"/usr/share/zoneinfo/Asia/Baghdad",
"/usr/share/zoneinfo/Asia/Bahrain",
"/usr/share/zoneinfo/Asia/Baku",
"/usr/share/zoneinfo/Asia/Bangkok",
"/usr/share/zoneinfo/Asia/Barnaul",
"/usr/share/zoneinfo/Asia/Beirut",
"/usr/share/zoneinfo/Asia/Bishkek",
"/usr/share/zoneinfo/Asia/Brunei",
"/usr/share/zoneinfo/Asia/Chita",
"/usr/share/zoneinfo/Asia/Colombo",
"/usr/share/zoneinfo/Asia/Damascus",
"/usr/share/zoneinfo/Asia/Dhaka",
"/usr/share/zoneinfo/Asia/Dili",
"/usr/share/zoneinfo/Asia/Dubai",
"/usr/share/zoneinfo/Asia/Dushanbe",
"/usr/share/zoneinfo/Asia/Famagusta",
"/usr/share/zoneinfo/Asia/Gaza",
"/usr/share/zoneinfo/Asia/Hebron",
"/usr/share/zoneinfo/Asia/Ho_Chi_Minh",
"/usr/share/zoneinfo/Asia/Hong_Kong",
"/usr/share/zoneinfo/Asia/Hovd",
"/usr/share/zoneinfo/Asia/Irkutsk",
"/usr/share/zoneinfo/Asia/Jakarta",
"/usr/share/zoneinfo/Asia/Jayapura",
"/usr/share/zoneinfo/Asia/Jerusalem",
"/usr/share/zoneinfo/Asia/Kabul",
"/usr/share/zoneinfo/Asia/Kamchatka",
"/usr/share/zoneinfo/Asia/Karachi",
"/usr/share/zoneinfo/Asia/Kathmandu",
"/usr/share/zoneinfo/Asia/Khandyga",
"/usr/share/zoneinfo/Asia/Kolkata",
"/usr/share/zoneinfo/Asia/Krasnoyarsk",
"/usr/share/zoneinfo/Asia/Kuala_Lumpur",
"/usr/share/zoneinfo/Asia/Kuching",
"/usr/share/zoneinfo/Asia/Kuwait",
"/usr/share/zoneinfo/Asia/Macau",
"/usr/share/zoneinfo/Asia/Magadan",
"/usr/share/zoneinfo/Asia/Makassar",
"/usr/share/zoneinfo/Asia/Manila",
"/usr/share/zoneinfo/Asia/Muscat",
"/usr/share/zoneinfo/Asia/Nicosia",
"/usr/share/zoneinfo/Asia/Novokuznetsk",
"/usr/share/zoneinfo/Asia/Novosibirsk",
"/usr/share/zoneinfo/Asia/Omsk",
"/usr/share/zoneinfo/Asia/Oral",
"/usr/share/zoneinfo/Asia/Phnom_Penh",
"/usr/share/zoneinfo/Asia/Pontianak",
"/usr/share/zoneinfo/Asia/Pyongyang",
"/usr/share/zoneinfo/Asia/Qatar",
"/usr/share/zoneinfo/Asia/Qostanay",
"/usr/share/zoneinfo/Asia/Qyzylorda",
"/usr/share/zoneinfo/Asia/Riyadh",
"/usr/share/zoneinfo/Asia/Sakhalin",
"/usr/share/zoneinfo/Asia/Samarkand",
"/usr/share/zoneinfo/Asia/Seoul",
"/usr/share/zoneinfo/Asia/Shanghai",
"/usr/share/zoneinfo/Asia/Singapore",
"/usr/share/zoneinfo/Asia/Srednekolymsk",
"/usr/share/zoneinfo/Asia/Taipei",
"/usr/share/zoneinfo/Asia/Tashkent",
"/usr/share/zoneinfo/Asia/Tbilisi",
"/usr/share/zoneinfo/Asia/Tehran",
"/usr/share/zoneinfo/Asia/Thimphu",
"/usr/share/zoneinfo/Asia/Tokyo",
"/usr/share/zoneinfo/Asia/Tomsk",
"/usr/share/zoneinfo/Asia/Ulaanbaatar",
"/usr/share/zoneinfo/Asia/Urumqi",
"/usr/share/zoneinfo/Asia/Ust-Nera",
"/usr/share/zoneinfo/Asia/Vientiane",
"/usr/share/zoneinfo/Asia/Vladivostok",
"/usr/share/zoneinfo/Asia/Yakutsk",
"/usr/share/zoneinfo/Asia/Yangon",
"/usr/share/zoneinfo/Asia/Yekaterinburg",
"/usr/share/zoneinfo/Asia/Yerevan",
"/usr/share/zoneinfo/Atlantic/Azores",
"/usr/share/zoneinfo/Atlantic/Bermuda",
"/usr/share/zoneinfo/Atlantic/Canary",
"/usr/share/zoneinfo/Atlantic/Cape_Verde",
"/usr/share/zoneinfo/Atlantic/Faroe",
"/usr/share/zoneinfo/Atlantic/Madeira",
"/usr/share/zoneinfo/Atlantic/Reykjavik",
"/usr/share/zoneinfo/Atlantic/South_Georgia",
"/usr/share/zoneinfo/Atlantic/St_Helena",
"/usr/share/zoneinfo/Atlantic/Stanley",
"/usr/share/zoneinfo/Australia/Adelaide",
"/usr/share/zoneinfo/Australia/Brisbane",
"/usr/share/zoneinfo/Australia/Broken_Hill",
"/usr/share/zoneinfo/Australia/Darwin",
"/usr/share/zoneinfo/Australia/Eucla",
"/usr/share/zoneinfo/Australia/Hobart",
"/usr/share/zoneinfo/Australia/Lindeman",
"/usr/share/zoneinfo/Australia/Lord_Howe",
"/usr/share/zoneinfo/Australia/Melbourne",
"/usr/share/zoneinfo/Australia/Perth",
"/usr/share/zoneinfo/Australia/Sydney",
"/usr/share/zoneinfo/CET",
"/usr/share/zoneinfo/CST6CDT",
"/usr/share/zoneinfo/EET",
"/usr/share/zoneinfo/EST",
"/usr/share/zoneinfo/EST5EDT",
"/usr/share/zoneinfo/Etc/GMT",
"/usr/share/zoneinfo/Etc/GMT+1",
"/usr/share/zoneinfo/Etc/GMT+10",
"/usr/share/zoneinfo/Etc/GMT+11",
"/usr/share/zoneinfo/Etc/GMT+12",
"/usr/share/zoneinfo/Etc/GMT+2",
"/usr/share/zoneinfo/Etc/GMT+3",
"/usr/share/zoneinfo/Etc/GMT+4",
"/usr/share/zoneinfo/Etc/GMT+5",
"/usr/share/zoneinfo/Etc/GMT+6",
"/usr/share/zoneinfo/Etc/GMT+7",
"/usr/share/zoneinfo/Etc/GMT+8",
"/usr/share/zoneinfo/Etc/GMT+9",
"/usr/share/zoneinfo/Etc/GMT-1",
"/usr/share/zoneinfo/Etc/GMT-10",
"/usr/share/zoneinfo/Etc/GMT-11",
"/usr/share/zoneinfo/Etc/GMT-12",
"/usr/share/zoneinfo/Etc/GMT-13",
"/usr/share/zoneinfo/Etc/GMT-14",
"/usr/share/zoneinfo/Etc/GMT-2",
"/usr/share/zoneinfo/Etc/GMT-3",
"/usr/share/zoneinfo/Etc/GMT-4",
"/usr/share/zoneinfo/Etc/GMT-5",
"/usr/share/zoneinfo/Etc/GMT-6",
"/usr/share/zoneinfo/Etc/GMT-7",
"/usr/share/zoneinfo/Etc/GMT-8",
"/usr/share/zoneinfo/Etc/GMT-9",
"/usr/share/zoneinfo/Etc/UTC",
"/usr/share/zoneinfo/Europe/Amsterdam",
"/usr/share/zoneinfo/Europe/Andorra",
"/usr/share/zoneinfo/Europe/Astrakhan",
"/usr/share/zoneinfo/Europe/Athens",
"/usr/share/zoneinfo/Europe/Belgrade",
"/usr/share/zoneinfo/Europe/Berlin",
"/usr/share/zoneinfo/Europe/Brussels",
"/usr/share/zoneinfo/Europe/Bucharest",
"/usr/share/zoneinfo/Europe/Budapest",
"/usr/share/zoneinfo/Europe/Chisinau",
"/usr/share/zoneinfo/Europe/Copenhagen",
"/usr/share/zoneinfo/Europe/Dublin",
"/usr/share/zoneinfo/Europe/Gibraltar",
"/usr/share/zoneinfo/Europe/Guernsey",
"/usr/share/zoneinfo/Europe/Helsinki",
"/usr/share/zoneinfo/Europe/Isle_of_Man",
"/usr/share/zoneinfo/Europe/Istanbul",
"/usr/share/zoneinfo/Europe/Jersey",
"/usr/share/zoneinfo/Europe/Kaliningrad",
"/usr/share/zoneinfo/Europe/Kirov",
"/usr/share/zoneinfo/Europe/Kyiv",
"/usr/share/zoneinfo/Europe/Lisbon",
"/usr/share/zoneinfo/Europe/Ljubljana",
"/usr/share/zoneinfo/Europe/London",
"/usr/share/zoneinfo/Europe/Luxembourg",
"/usr/share/zoneinfo/Europe/Madrid",
"/usr/share/zoneinfo/Europe/Malta",
"/usr/share/zoneinfo/Europe/Minsk",
"/usr/share/zoneinfo/Europe/Monaco",
"/usr/share/zoneinfo/Europe/Moscow",
"/usr/share/zoneinfo/Europe/Oslo",
"/usr/share/zoneinfo/Europe/Paris",
"/usr/share/zoneinfo/Europe/Prague",
"/usr/share/zoneinfo/Europe/Riga",
"/usr/share/zoneinfo/Europe/Rome",
"/usr/share/zoneinfo/Europe/Samara",
"/usr/share/zoneinfo/Europe/Sarajevo",
"/usr/share/zoneinfo/Europe/Saratov",
"/usr/share/zoneinfo/Europe/Simferopol",
"/usr/share/zoneinfo/Europe/Skopje",
"/usr/share/zoneinfo/Europe/Sofia",
"/usr/share/zoneinfo/Europe/Stockholm",
"/usr/share/zoneinfo/Europe/Tallinn",
"/usr/share/zoneinfo/Europe/Tirane",
"/usr/share/zoneinfo/Europe/Ulyanovsk",
"/usr/share/zoneinfo/Europe/Vaduz",
"/usr/share/zoneinfo/Europe/Vienna",
"/usr/share/zoneinfo/Europe/Vilnius",
"/usr/share/zoneinfo/Europe/Volgograd",
"/usr/share/zoneinfo/Europe/Warsaw",
"/usr/share/zoneinfo/Europe/Zagreb",
"/usr/share/zoneinfo/Europe/Zurich",
"/usr/share/zoneinfo/Factory",
"/usr/share/zoneinfo/HST",
"/usr/share/zoneinfo/Indian/Antananarivo",
"/usr/share/zoneinfo/Indian/Chagos",
"/usr/share/zoneinfo/Indian/Christmas",
"/usr/share/zoneinfo/Indian/Cocos",
"/usr/share/zoneinfo/Indian/Comoro",
"/usr/share/zoneinfo/Indian/Kerguelen",
"/usr/share/zoneinfo/Indian/Mahe",
"/usr/share/zoneinfo/Indian/Maldives",
"/usr/share/zoneinfo/Indian/Mauritius",
"/usr/share/zoneinfo/Indian/Mayotte",
"/usr/share/zoneinfo/Indian/Reunion",
"/usr/share/zoneinfo/MET",
"/usr/share/zoneinfo/MST",
"/usr/share/zoneinfo/MST7MDT",
"/usr/share/zoneinfo/PST8PDT",
"/usr/share/zoneinfo/Pacific/Apia",
"/usr/share/zoneinfo/Pacific/Auckland",
"/usr/share/zoneinfo/Pacific/Bougainville",
"/usr/share/zoneinfo/Pacific/Chatham",
"/usr/share/zoneinfo/Pacific/Chuuk",
"/usr/share/zoneinfo/Pacific/Easter",
"/usr/share/zoneinfo/Pacific/Efate",
"/usr/share/zoneinfo/Pacific/Fakaofo",
"/usr/share/zoneinfo/Pacific/Fiji",
"/usr/share/zoneinfo/Pacific/Funafuti",
"/usr/share/zoneinfo/Pacific/Galapagos",
"/usr/share/zoneinfo/Pacific/Gambier",
"/usr/share/zoneinfo/Pacific/Guadalcanal",
"/usr/share/zoneinfo/Pacific/Guam",
"/usr/share/zoneinfo/Pacific/Honolulu",
"/usr/share/zoneinfo/Pacific/Kanton",
"/usr/share/zoneinfo/Pacific/Kiritimati",
"/usr/share/zoneinfo/Pacific/Kosrae",
"/usr/share/zoneinfo/Pacific/Kwajalein",
"/usr/share/zoneinfo/Pacific/Majuro",
"/usr/share/zoneinfo/Pacific/Marquesas",
"/usr/share/zoneinfo/Pacific/Midway",
"/usr/share/zoneinfo/Pacific/Nauru",
"/usr/share/zoneinfo/Pacific/Niue",
"/usr/share/zoneinfo/Pacific/Norfolk",
"/usr/share/zoneinfo/Pacific/Noumea",
"/usr/share/zoneinfo/Pacific/Pago_Pago",
"/usr/share/zoneinfo/Pacific/Palau",
"/usr/share/zoneinfo/Pacific/Pitcairn",
"/usr/share/zoneinfo/Pacific/Pohnpei",
"/usr/share/zoneinfo/Pacific/Port_Moresby",
"/usr/share/zoneinfo/Pacific/Rarotonga",
"/usr/share/zoneinfo/Pacific/Saipan",
"/usr/share/zoneinfo/Pacific/Tahiti",
"/usr/share/zoneinfo/Pacific/Tarawa",
"/usr/share/zoneinfo/Pacific/Tongatapu",
"/usr/share/zoneinfo/Pacific/Wake",
"/usr/share/zoneinfo/Pacific/Wallis",
"/usr/share/zoneinfo/WET",
"/usr/share/zoneinfo/iso3166.tab",
"/usr/share/zoneinfo/leap-seconds.list",
"/usr/share/zoneinfo/leapseconds",
"/usr/share/zoneinfo/right/Africa/Abidjan",
"/usr/share/zoneinfo/right/Africa/Accra",
"/usr/share/zoneinfo/right/Africa/Addis_Ababa",
"/usr/share/zoneinfo/right/Africa/Algiers",
"/usr/share/zoneinfo/right/Africa/Asmara",
"/usr/share/zoneinfo/right/Africa/Bamako",
"/usr/share/zoneinfo/right/Africa/Bangui",
"/usr/share/zoneinfo/right/Africa/Banjul",
"/usr/share/zoneinfo/right/Africa/Bissau",
"/usr/share/zoneinfo/right/Africa/Blantyre",
"/usr/share/zoneinfo/right/Africa/Brazzaville",
"/usr/share/zoneinfo/right/Africa/Bujumbura",
"/usr/share/zoneinfo/right/Africa/Cairo",
"/usr/share/zoneinfo/right/Africa/Casablanca",
"/usr/share/zoneinfo/right/Africa/Ceuta",
"/usr/share/zoneinfo/right/Africa/Conakry",
"/usr/share/zoneinfo/right/Africa/Dakar",
"/usr/share/zoneinfo/right/Africa/Dar_es_Salaam",
"/usr/share/zoneinfo/right/Africa/Djibouti",
"/usr/share/zoneinfo/right/Africa/Douala",
"/usr/share/zoneinfo/right/Africa/El_Aaiun",
"/usr/share/zoneinfo/right/Africa/Freetown",
"/usr/share/zoneinfo/right/Africa/Gaborone",
"/usr/share/zoneinfo/right/Africa/Harare",
"/usr/share/zoneinfo/right/Africa/Johannesburg",
"/usr/share/zoneinfo/right/Africa/Juba",
"/usr/share/zoneinfo/right/Africa/Kampala",
"/usr/share/zoneinfo/right/Africa/Khartoum",
"/usr/share/zoneinfo/right/Africa/Kigali",
"/usr/share/zoneinfo/right/Africa/Kinshasa",
"/usr/share/zoneinfo/right/Africa/Lagos",
"/usr/share/zoneinfo/right/Africa/Libreville",
"/usr/share/zoneinfo/right/Africa/Lome",
"/usr/share/zoneinfo/right/Africa/Luanda",
"/usr/share/zoneinfo/right/Africa/Lubumbashi",
"/usr/share/zoneinfo/right/Africa/Lusaka",
"/usr/share/zoneinfo/right/Africa/Malabo",
"/usr/share/zoneinfo/right/Africa/Maputo",
"/usr/share/zoneinfo/right/Africa/Maseru",
"/usr/share/zoneinfo/right/Africa/Mbabane",
"/usr/share/zoneinfo/right/Africa/Mogadishu",
"/usr/share/zoneinfo/right/Africa/Monrovia",
"/usr/share/zoneinfo/right/Africa/Nairobi",
"/usr/share/zoneinfo/right/Africa/Ndjamena",
"/usr/share/zoneinfo/right/Africa/Niamey",
"/usr/share/zoneinfo/right/Africa/Nouakchott",
"/usr/share/zoneinfo/right/Africa/Ouagadougou",
"/usr/share/zoneinfo/right/Africa/Porto-Novo",
"/usr/share/zoneinfo/right/Africa/Sao_Tome",
"/usr/share/zoneinfo/right/Africa/Tripoli",
"/usr/share/zoneinfo/right/Africa/Tunis",
"/usr/share/zoneinfo/right/Africa/Windhoek",
"/usr/share/zoneinfo/right/America/Adak",
"/usr/share/zoneinfo/right/America/Anchorage",
"/usr/share/zoneinfo/right/America/Anguilla",
"/usr/share/zoneinfo/right/America/Antigua",
"/usr/share/zoneinfo/right/America/Araguaina",
"/usr/share/zoneinfo/right/America/Argentina/Buenos_Aires",
"/usr/share/zoneinfo/right/America/Argentina/Catamarca",
"/usr/share/zoneinfo/right/America/Argentina/Cordoba",
"/usr/share/zoneinfo/right/America/Argentina/Jujuy",
"/usr/share/zoneinfo/right/America/Argentina/La_Rioja",
"/usr/share/zoneinfo/right/America/Argentina/Mendoza",
"/usr/share/zoneinfo/right/America/Argentina/Rio_Gallegos",
"/usr/share/zoneinfo/right/America/Argentina/Salta",
"/usr/share/zoneinfo/right/America/Argentina/San_Juan",
"/usr/share/zoneinfo/right/America/Argentina/San_Luis",
"/usr/share/zoneinfo/right/America/Argentina/Tucuman",
"/usr/share/zoneinfo/right/America/Argentina/Ushuaia",
"/usr/share/zoneinfo/right/America/Aruba",
"/usr/share/zoneinfo/right/America/Asuncion",
"/usr/share/zoneinfo/right/America/Atikokan",
"/usr/share/zoneinfo/right/America/Bahia",
"/usr/share/zoneinfo/right/America/Bahia_Banderas",
"/usr/share/zoneinfo/right/America/Barbados",
"/usr/share/zoneinfo/right/America/Belem",
"/usr/share/zoneinfo/right/America/Belize",
"/usr/share/zoneinfo/right/America/Blanc-Sablon",
"/usr/share/zoneinfo/right/America/Boa_Vista",
"/usr/share/zoneinfo/right/America/Bogota",
"/usr/share/zoneinfo/right/America/Boise",
"/usr/share/zoneinfo/right/America/Cambridge_Bay",
"/usr/share/zoneinfo/right/America/Campo_Grande",
"/usr/share/zoneinfo/right/America/Cancun",
"/usr/share/zoneinfo/right/America/Caracas",
"/usr/share/zoneinfo/right/America/Cayenne",
"/usr/share/zoneinfo/right/America/Cayman",
"/usr/share/zoneinfo/right/America/Chicago",
"/usr/share/zoneinfo/right/America/Chihuahua",
"/usr/share/zoneinfo/right/America/Ciudad_Juarez",
"/usr/share/zoneinfo/right/America/Costa_Rica",
"/usr/share/zoneinfo/right/America/Coyhaique",
"/usr/share/zoneinfo/right/America/Creston",
"/usr/share/zoneinfo/right/America/Cuiaba",
"/usr/share/zoneinfo/right/America/Curacao",
"/usr/share/zoneinfo/right/America/Danmarkshavn",
"/usr/share/zoneinfo/right/America/Dawson",
"/usr/share/zoneinfo/right/America/Dawson_Creek",
"/usr/share/zoneinfo/right/America/Denver",
"/usr/share/zoneinfo/right/America/Detroit",
"/usr/share/zoneinfo/right/America/Dominica",
"/usr/share/zoneinfo/right/America/Edmonton",
"/usr/share/zoneinfo/right/America/Eirunepe",
"/usr/share/zoneinfo/right/America/El_Salvador",
"/usr/share/zoneinfo/right/America/Fort_Nelson",
"/usr/share/zoneinfo/right/America/Fortaleza",
"/usr/share/zoneinfo/right/America/Glace_Bay",
"/usr/share/zoneinfo/right/America/Goose_Bay",
"/usr/share/zoneinfo/right/America/Grand_Turk",
"/usr/share/zoneinfo/right/America/Grenada",
"/usr/share/zoneinfo/right/America/Guadeloupe",
"/usr/share/zoneinfo/right/America/Guatemala",
"/usr/share/zoneinfo/right/America/Guayaquil",
"/usr/share/zoneinfo/right/America/Guyana",
"/usr/share/zoneinfo/right/America/Halifax",
"/usr/share/zoneinfo/right/America/Havana",
"/usr/share/zoneinfo/right/America/Hermosillo",
"/usr/share/zoneinfo/right/America/Indiana/Indianapolis",
"/usr/share/zoneinfo/right/America/Indiana/Knox",
"/usr/share/zoneinfo/right/America/Indiana/Marengo",
"/usr/share/zoneinfo/right/America/Indiana/Petersburg",
"/usr/share/zoneinfo/right/America/Indiana/Tell_City",
"/usr/share/zoneinfo/right/America/Indiana/Vevay",
"/usr/share/zoneinfo/right/America/Indiana/Vincennes",
"/usr/share/zoneinfo/right/America/Indiana/Winamac",
"/usr/share/zoneinfo/right/America/Inuvik",
"/usr/share/zoneinfo/right/America/Iqaluit",
"/usr/share/zoneinfo/right/America/Jamaica",
"/usr/share/zoneinfo/right/America/Juneau",
"/usr/share/zoneinfo/right/America/Kentucky/Louisville",
"/usr/share/zoneinfo/right/America/Kentucky/Monticello",
"/usr/share/zoneinfo/right/America/La_Paz",
"/usr/share/zoneinfo/right/America/Lima",
"/usr/share/zoneinfo/right/America/Los_Angeles",
"/usr/share/zoneinfo/right/America/Maceio",
"/usr/share/zoneinfo/right/America/Managua",
"/usr/share/zoneinfo/right/America/Manaus",
"/usr/share/zoneinfo/right/America/Martinique",
"/usr/share/zoneinfo/right/America/Matamoros",
"/usr/share/zoneinfo/right/America/Mazatlan",
"/usr/share/zoneinfo/right/America/Menominee",
"/usr/share/zoneinfo/right/America/Merida",
"/usr/share/zoneinfo/right/America/Metlakatla",
"/usr/share/zoneinfo/right/America/Mexico_City",
"/usr/share/zoneinfo/right/America/Miquelon",
"/usr/share/zoneinfo/right/America/Moncton",
"/usr/share/zoneinfo/right/America/Monterrey",
"/usr/share/zoneinfo/right/America/Montevideo",
"/usr/share/zoneinfo/right/America/Montserrat",
"/usr/share/zoneinfo/right/America/Nassau",
"/usr/share/zoneinfo/right/America/New_York",
"/usr/share/zoneinfo/right/America/Nome",
"/usr/share/zoneinfo/right/America/Noronha",
"/usr/share/zoneinfo/right/America/North_Dakota/Beulah",
"/usr/share/zoneinfo/right/America/North_Dakota/Center",
"/usr/share/zoneinfo/right/America/North_Dakota/New_Salem",
"/usr/share/zoneinfo/right/America/Nuuk",
"/usr/share/zoneinfo/right/America/Ojinaga",
"/usr/share/zoneinfo/right/America/Panama",
"/usr/share/zoneinfo/right/America/Paramaribo",
"/usr/share/zoneinfo/right/America/Phoenix",
"/usr/share/zoneinfo/right/America/Port-au-Prince",
"/usr/share/zoneinfo/right/America/Port_of_Spain",
"/usr/share/zoneinfo/right/America/Porto_Velho",
"/usr/share/zoneinfo/right/America/Puerto_Rico",
"/usr/share/zoneinfo/right/America/Punta_Arenas",
"/usr/share/zoneinfo/right/America/Rankin_Inlet",
"/usr/share/zoneinfo/right/America/Recife",
"/usr/share/zoneinfo/right/America/Regina",
"/usr/share/zoneinfo/right/America/Resolute",
"/usr/share/zoneinfo/right/America/Rio_Branco",
"/usr/share/zoneinfo/right/America/Santarem",
"/usr/share/zoneinfo/right/America/Santiago",
"/usr/share/zoneinfo/right/America/Santo_Domingo",
"/usr/share/zoneinfo/right/America/Sao_Paulo",
"/usr/share/zoneinfo/right/America/Scoresbysund",
"/usr/share/zoneinfo/right/America/Sitka",
"/usr/share/zoneinfo/right/America/St_Johns",
"/usr/share/zoneinfo/right/America/St_Kitts",
"/usr/share/zoneinfo/right/America/St_Lucia",
"/usr/share/zoneinfo/right/America/St_Thomas",
"/usr/share/zoneinfo/right/America/St_Vincent",
"/usr/share/zoneinfo/right/America/Swift_Current",
"/usr/share/zoneinfo/right/America/Tegucigalpa",
"/usr/share/zoneinfo/right/America/Thule",
"/usr/share/zoneinfo/right/America/Tijuana",
"/usr/share/zoneinfo/right/America/Toronto",
"/usr/share/zoneinfo/right/America/Tortola",
"/usr/share/zoneinfo/right/America/Vancouver",
"/usr/share/zoneinfo/right/America/Whitehorse",
"/usr/share/zoneinfo/right/America/Winnipeg",
"/usr/share/zoneinfo/right/America/Yakutat",
"/usr/share/zoneinfo/right/Antarctica/Casey",
"/usr/share/zoneinfo/right/Antarctica/Davis",
"/usr/share/zoneinfo/right/Antarctica/DumontDUrville",
"/usr/share/zoneinfo/right/Antarctica/Macquarie",
"/usr/share/zoneinfo/right/Antarctica/Mawson",
"/usr/share/zoneinfo/right/Antarctica/McMurdo",
"/usr/share/zoneinfo/right/Antarctica/Palmer",
"/usr/share/zoneinfo/right/Antarctica/Rothera",
"/usr/share/zoneinfo/right/Antarctica/Syowa",
"/usr/share/zoneinfo/right/Antarctica/Troll",
"/usr/share/zoneinfo/right/Antarctica/Vostok",
"/usr/share/zoneinfo/right/Asia/Aden",
"/usr/share/zoneinfo/right/Asia/Almaty",
"/usr/share/zoneinfo/right/Asia/Amman",
"/usr/share/zoneinfo/right/Asia/Anadyr",
"/usr/share/zoneinfo/right/Asia/Aqtau",
"/usr/share/zoneinfo/right/Asia/Aqtobe",
"/usr/share/zoneinfo/right/Asia/Ashgabat",
"/usr/share/zoneinfo/right/Asia/Atyrau",
"/usr/share/zoneinfo/right/Asia/Baghdad",
"/usr/share/zoneinfo/right/Asia/Bahrain",
"/usr/share/zoneinfo/right/Asia/Baku",
"/usr/share/zoneinfo/right/Asia/Bangkok",
"/usr/share/zoneinfo/right/Asia/Barnaul",
"/usr/share/zoneinfo/right/Asia/Beirut",
"/usr/share/zoneinfo/right/Asia/Bishkek",
"/usr/share/zoneinfo/right/Asia/Brunei",
"/usr/share/zoneinfo/right/Asia/Chita",
"/usr/share/zoneinfo/right/Asia/Colombo",
"/usr/share/zoneinfo/right/Asia/Damascus",
"/usr/share/zoneinfo/right/Asia/Dhaka",
"/usr/share/zoneinfo/right/Asia/Dili",
"/usr/share/zoneinfo/right/Asia/Dubai",
"/usr/share/zoneinfo/right/Asia/Dushanbe",
"/usr/share/zoneinfo/right/Asia/Famagusta",
"/usr/share/zoneinfo/right/Asia/Gaza",
"/usr/share/zoneinfo/right/Asia/Hebron",
"/usr/share/zoneinfo/right/Asia/Ho_Chi_Minh",
"/usr/share/zoneinfo/right/Asia/Hong_Kong",
"/usr/share/zoneinfo/right/Asia/Hovd",
"/usr/share/zoneinfo/right/Asia/Irkutsk",
"/usr/share/zoneinfo/right/Asia/Jakarta",
"/usr/share/zoneinfo/right/Asia/Jayapura",
"/usr/share/zoneinfo/right/Asia/Jerusalem",
"/usr/share/zoneinfo/right/Asia/Kabul",
"/usr/share/zoneinfo/right/Asia/Kamchatka",
"/usr/share/zoneinfo/right/Asia/Karachi",
"/usr/share/zoneinfo/right/Asia/Kathmandu",
"/usr/share/zoneinfo/right/Asia/Khandyga",
"/usr/share/zoneinfo/right/Asia/Kolkata",
"/usr/share/zoneinfo/right/Asia/Krasnoyarsk",
"/usr/share/zoneinfo/right/Asia/Kuala_Lumpur",
"/usr/share/zoneinfo/right/Asia/Kuching",
"/usr/share/zoneinfo/right/Asia/Kuwait",
"/usr/share/zoneinfo/right/Asia/Macau",
"/usr/share/zoneinfo/right/Asia/Magadan",
"/usr/share/zoneinfo/right/Asia/Makassar",
"/usr/share/zoneinfo/right/Asia/Manila",
"/usr/share/zoneinfo/right/Asia/Muscat",
"/usr/share/zoneinfo/right/Asia/Nicosia",
"/usr/share/zoneinfo/right/Asia/Novokuznetsk",
"/usr/share/zoneinfo/right/Asia/Novosibirsk",
"/usr/share/zoneinfo/right/Asia/Omsk",
"/usr/share/zoneinfo/right/Asia/Oral",
"/usr/share/zoneinfo/right/Asia/Phnom_Penh",
"/usr/share/zoneinfo/right/Asia/Pontianak",
"/usr/share/zoneinfo/right/Asia/Pyongyang",
"/usr/share/zoneinfo/right/Asia/Qatar",
"/usr/share/zoneinfo/right/Asia/Qostanay",
"/usr/share/zoneinfo/right/Asia/Qyzylorda",
"/usr/share/zoneinfo/right/Asia/Riyadh",
"/usr/share/zoneinfo/right/Asia/Sakhalin",
"/usr/share/zoneinfo/right/Asia/Samarkand",
"/usr/share/zoneinfo/right/Asia/Seoul",
"/usr/share/zoneinfo/right/Asia/Shanghai",
"/usr/share/zoneinfo/right/Asia/Singapore",
"/usr/share/zoneinfo/right/Asia/Srednekolymsk",
"/usr/share/zoneinfo/right/Asia/Taipei",
"/usr/share/zoneinfo/right/Asia/Tashkent",
"/usr/share/zoneinfo/right/Asia/Tbilisi",
"/usr/share/zoneinfo/right/Asia/Tehran",
"/usr/share/zoneinfo/right/Asia/Thimphu",
"/usr/share/zoneinfo/right/Asia/Tokyo",
"/usr/share/zoneinfo/right/Asia/Tomsk",
"/usr/share/zoneinfo/right/Asia/Ulaanbaatar",
"/usr/share/zoneinfo/right/Asia/Urumqi",
"/usr/share/zoneinfo/right/Asia/Ust-Nera",
"/usr/share/zoneinfo/right/Asia/Vientiane",
"/usr/share/zoneinfo/right/Asia/Vladivostok",
"/usr/share/zoneinfo/right/Asia/Yakutsk",
"/usr/share/zoneinfo/right/Asia/Yangon",
"/usr/share/zoneinfo/right/Asia/Yekaterinburg",
"/usr/share/zoneinfo/right/Asia/Yerevan",
"/usr/share/zoneinfo/right/Atlantic/Azores",
"/usr/share/zoneinfo/right/Atlantic/Bermuda",
"/usr/share/zoneinfo/right/Atlantic/Canary",
"/usr/share/zoneinfo/right/Atlantic/Cape_Verde",
"/usr/share/zoneinfo/right/Atlantic/Faroe",
"/usr/share/zoneinfo/right/Atlantic/Madeira",
"/usr/share/zoneinfo/right/Atlantic/Reykjavik",
"/usr/share/zoneinfo/right/Atlantic/South_Georgia",
"/usr/share/zoneinfo/right/Atlantic/St_Helena",
"/usr/share/zoneinfo/right/Atlantic/Stanley",
"/usr/share/zoneinfo/right/Australia/Adelaide",
"/usr/share/zoneinfo/right/Australia/Brisbane",
"/usr/share/zoneinfo/right/Australia/Broken_Hill",
"/usr/share/zoneinfo/right/Australia/Darwin",
"/usr/share/zoneinfo/right/Australia/Eucla",
"/usr/share/zoneinfo/right/Australia/Hobart",
"/usr/share/zoneinfo/right/Australia/Lindeman",
"/usr/share/zoneinfo/right/Australia/Lord_Howe",
"/usr/share/zoneinfo/right/Australia/Melbourne",
"/usr/share/zoneinfo/right/Australia/Perth",
"/usr/share/zoneinfo/right/Australia/Sydney",
"/usr/share/zoneinfo/right/CET",
"/usr/share/zoneinfo/right/CST6CDT",
"/usr/share/zoneinfo/right/EET",
"/usr/share/zoneinfo/right/EST",
"/usr/share/zoneinfo/right/EST5EDT",
"/usr/share/zoneinfo/right/Etc/GMT",
"/usr/share/zoneinfo/right/Etc/GMT+1",
"/usr/share/zoneinfo/right/Etc/GMT+10",
"/usr/share/zoneinfo/right/Etc/GMT+11",
"/usr/share/zoneinfo/right/Etc/GMT+12",
"/usr/share/zoneinfo/right/Etc/GMT+2",
"/usr/share/zoneinfo/right/Etc/GMT+3",
"/usr/share/zoneinfo/right/Etc/GMT+4",
"/usr/share/zoneinfo/right/Etc/GMT+5",
"/usr/share/zoneinfo/right/Etc/GMT+6",
"/usr/share/zoneinfo/right/Etc/GMT+7",
"/usr/share/zoneinfo/right/Etc/GMT+8",
"/usr/share/zoneinfo/right/Etc/GMT+9",
"/usr/share/zoneinfo/right/Etc/GMT-1",
"/usr/share/zoneinfo/right/Etc/GMT-10",
"/usr/share/zoneinfo/right/Etc/GMT-11",
"/usr/share/zoneinfo/right/Etc/GMT-12",
"/usr/share/zoneinfo/right/Etc/GMT-13",
"/usr/share/zoneinfo/right/Etc/GMT-14",
"/usr/share/zoneinfo/right/Etc/GMT-2",
"/usr/share/zoneinfo/right/Etc/GMT-3",
"/usr/share/zoneinfo/right/Etc/GMT-4",
"/usr/share/zoneinfo/right/Etc/GMT-5",
"/usr/share/zoneinfo/right/Etc/GMT-6",
"/usr/share/zoneinfo/right/Etc/GMT-7",
"/usr/share/zoneinfo/right/Etc/GMT-8",
"/usr/share/zoneinfo/right/Etc/GMT-9",
"/usr/share/zoneinfo/right/Etc/UTC",
"/usr/share/zoneinfo/right/Europe/Amsterdam",
"/usr/share/zoneinfo/right/Europe/Andorra",
"/usr/share/zoneinfo/right/Europe/Astrakhan",
"/usr/share/zoneinfo/right/Europe/Athens",
"/usr/share/zoneinfo/right/Europe/Belgrade",
"/usr/share/zoneinfo/right/Europe/Berlin",
"/usr/share/zoneinfo/right/Europe/Brussels",
"/usr/share/zoneinfo/right/Europe/Bucharest",
"/usr/share/zoneinfo/right/Europe/Budapest",
"/usr/share/zoneinfo/right/Europe/Chisinau",
"/usr/share/zoneinfo/right/Europe/Copenhagen",
"/usr/share/zoneinfo/right/Europe/Dublin",
"/usr/share/zoneinfo/right/Europe/Gibraltar",
"/usr/share/zoneinfo/right/Europe/Guernsey",
"/usr/share/zoneinfo/right/Europe/Helsinki",
"/usr/share/zoneinfo/right/Europe/Isle_of_Man",
"/usr/share/zoneinfo/right/Europe/Istanbul",
"/usr/share/zoneinfo/right/Europe/Jersey",
"/usr/share/zoneinfo/right/Europe/Kaliningrad",
"/usr/share/zoneinfo/right/Europe/Kirov",
"/usr/share/zoneinfo/right/Europe/Kyiv",
"/usr/share/zoneinfo/right/Europe/Lisbon",
"/usr/share/zoneinfo/right/Europe/Ljubljana",
"/usr/share/zoneinfo/right/Europe/London",
"/usr/share/zoneinfo/right/Europe/Luxembourg",
"/usr/share/zoneinfo/right/Europe/Madrid",
"/usr/share/zoneinfo/right/Europe/Malta",
"/usr/share/zoneinfo/right/Europe/Minsk",
"/usr/share/zoneinfo/right/Europe/Monaco",
"/usr/share/zoneinfo/right/Europe/Moscow",
"/usr/share/zoneinfo/right/Europe/Oslo",
"/usr/share/zoneinfo/right/Europe/Paris",
"/usr/share/zoneinfo/right/Europe/Prague",
"/usr/share/zoneinfo/right/Europe/Riga",
"/usr/share/zoneinfo/right/Europe/Rome",
"/usr/share/zoneinfo/right/Europe/Samara",
"/usr/share/zoneinfo/right/Europe/Sarajevo",
"/usr/share/zoneinfo/right/Europe/Saratov",
"/usr/share/zoneinfo/right/Europe/Simferopol",
"/usr/share/zoneinfo/right/Europe/Skopje",
"/usr/share/zoneinfo/right/Europe/Sofia",
"/usr/share/zoneinfo/right/Europe/Stockholm",
"/usr/share/zoneinfo/right/Europe/Tallinn",
"/usr/share/zoneinfo/right/Europe/Tirane",
"/usr/share/zoneinfo/right/Europe/Ulyanovsk",
"/usr/share/zoneinfo/right/Europe/Vaduz",
"/usr/share/zoneinfo/right/Europe/Vienna",
"/usr/share/zoneinfo/right/Europe/Vilnius",
"/usr/share/zoneinfo/right/Europe/Volgograd",
"/usr/share/zoneinfo/right/Europe/Warsaw",
"/usr/share/zoneinfo/right/Europe/Zagreb",
"/usr/share/zoneinfo/right/Europe/Zurich",
"/usr/share/zoneinfo/right/Factory",
"/usr/share/zoneinfo/right/HST",
"/usr/share/zoneinfo/right/Indian/Antananarivo",
"/usr/share/zoneinfo/right/Indian/Chagos",
"/usr/share/zoneinfo/right/Indian/Christmas",
"/usr/share/zoneinfo/right/Indian/Cocos",
"/usr/share/zoneinfo/right/Indian/Comoro",
"/usr/share/zoneinfo/right/Indian/Kerguelen",
"/usr/share/zoneinfo/right/Indian/Mahe",
"/usr/share/zoneinfo/right/Indian/Maldives",
"/usr/share/zoneinfo/right/Indian/Mauritius",
"/usr/share/zoneinfo/right/Indian/Mayotte",
"/usr/share/zoneinfo/right/Indian/Reunion",
"/usr/share/zoneinfo/right/MET",
"/usr/share/zoneinfo/right/MST",
"/usr/share/zoneinfo/right/MST7MDT",
"/usr/share/zoneinfo/right/PST8PDT",
"/usr/share/zoneinfo/right/Pacific/Apia",
"/usr/share/zoneinfo/right/Pacific/Auckland",
"/usr/share/zoneinfo/right/Pacific/Bougainville",
"/usr/share/zoneinfo/right/Pacific/Chatham",
"/usr/share/zoneinfo/right/Pacific/Chuuk",
"/usr/share/zoneinfo/right/Pacific/Easter",
"/usr/share/zoneinfo/right/Pacific/Efate",
"/usr/share/zoneinfo/right/Pacific/Fakaofo",
"/usr/share/zoneinfo/right/Pacific/Fiji",
"/usr/share/zoneinfo/right/Pacific/Funafuti",
"/usr/share/zoneinfo/right/Pacific/Galapagos",
"/usr/share/zoneinfo/right/Pacific/Gambier",
"/usr/share/zoneinfo/right/Pacific/Guadalcanal",
"/usr/share/zoneinfo/right/Pacific/Guam",
"/usr/share/zoneinfo/right/Pacific/Honolulu",
"/usr/share/zoneinfo/right/Pacific/Kanton",
"/usr/share/zoneinfo/right/Pacific/Kiritimati",
"/usr/share/zoneinfo/right/Pacific/Kosrae",
"/usr/share/zoneinfo/right/Pacific/Kwajalein",
"/usr/share/zoneinfo/right/Pacific/Majuro",
"/usr/share/zoneinfo/right/Pacific/Marquesas",
"/usr/share/zoneinfo/right/Pacific/Midway",
"/usr/share/zoneinfo/right/Pacific/Nauru",
"/usr/share/zoneinfo/right/Pacific/Niue",
"/usr/share/zoneinfo/right/Pacific/Norfolk",
"/usr/share/zoneinfo/right/Pacific/Noumea",
"/usr/share/zoneinfo/right/Pacific/Pago_Pago",
"/usr/share/zoneinfo/right/Pacific/Palau",
"/usr/share/zoneinfo/right/Pacific/Pitcairn",
"/usr/share/zoneinfo/right/Pacific/Pohnpei",
"/usr/share/zoneinfo/right/Pacific/Port_Moresby",
"/usr/share/zoneinfo/right/Pacific/Rarotonga",
"/usr/share/zoneinfo/right/Pacific/Saipan",
"/usr/share/zoneinfo/right/Pacific/Tahiti",
"/usr/share/zoneinfo/right/Pacific/Tarawa",
"/usr/share/zoneinfo/right/Pacific/Tongatapu",
"/usr/share/zoneinfo/right/Pacific/Wake",
"/usr/share/zoneinfo/right/Pacific/Wallis",
"/usr/share/zoneinfo/right/WET",
"/usr/share/zoneinfo/tzdata.zi",
"/usr/share/zoneinfo/zone.tab",
"/usr/share/zoneinfo/zone1970.tab"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "usr-is-merged@37~deb12u1",
"Name": "usr-is-merged",
"Identifier": {
"PURL": "pkg:deb/debian/usr-is-merged@37~deb12u1?arch=all\u0026distro=debian-12.14",
"UID": "e8bc76467481d3cd"
},
"Version": "37~deb12u1",
"Arch": "all",
"SrcName": "usrmerge",
"SrcVersion": "37~deb12u1",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only"
],
"Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e",
"Repository": {
"Class": "official"
},
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/usr/share/doc/usr-is-merged/changelog.gz",
"/usr/share/doc/usr-is-merged/copyright"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "util-linux@2.38.1-5+deb12u3",
"Name": "util-linux",
"Identifier": {
"PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "192d0e9306a19f41"
},
"Version": "2.38.1",
"Release": "5+deb12u3",
"Arch": "arm64",
"SrcName": "util-linux",
"SrcVersion": "2.38.1",
"SrcRelease": "5+deb12u3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-or-later",
"public-domain",
"BSD-4-Clause",
"MIT",
"BSD-3-Clause",
"BSLA",
"LGPL-2.0-or-later",
"LGPL-2.1-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-only",
"LGPL-2.0-only",
"LGPL-2.1-only",
"LGPL-3.0-only"
],
"Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"util-linux-extra@2.38.1-5+deb12u3"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/bin/dmesg",
"/bin/findmnt",
"/bin/lsblk",
"/bin/more",
"/bin/mountpoint",
"/bin/su",
"/bin/wdctl",
"/lib/systemd/system/fstrim.service",
"/lib/systemd/system/fstrim.timer",
"/sbin/agetty",
"/sbin/blkdiscard",
"/sbin/blkid",
"/sbin/blkzone",
"/sbin/blockdev",
"/sbin/chcpu",
"/sbin/ctrlaltdel",
"/sbin/findfs",
"/sbin/fsck",
"/sbin/fsck.cramfs",
"/sbin/fsck.minix",
"/sbin/fsfreeze",
"/sbin/fstrim",
"/sbin/isosize",
"/sbin/mkfs",
"/sbin/mkfs.bfs",
"/sbin/mkfs.cramfs",
"/sbin/mkfs.minix",
"/sbin/mkswap",
"/sbin/pivot_root",
"/sbin/runuser",
"/sbin/sulogin",
"/sbin/swaplabel",
"/sbin/switch_root",
"/sbin/wipefs",
"/sbin/zramctl",
"/usr/bin/addpart",
"/usr/bin/choom",
"/usr/bin/chrt",
"/usr/bin/delpart",
"/usr/bin/fallocate",
"/usr/bin/flock",
"/usr/bin/getopt",
"/usr/bin/hardlink",
"/usr/bin/ionice",
"/usr/bin/ipcmk",
"/usr/bin/ipcrm",
"/usr/bin/ipcs",
"/usr/bin/last",
"/usr/bin/lscpu",
"/usr/bin/lsipc",
"/usr/bin/lslocks",
"/usr/bin/lslogins",
"/usr/bin/lsmem",
"/usr/bin/lsns",
"/usr/bin/mcookie",
"/usr/bin/mesg",
"/usr/bin/namei",
"/usr/bin/nsenter",
"/usr/bin/partx",
"/usr/bin/prlimit",
"/usr/bin/rename.ul",
"/usr/bin/resizepart",
"/usr/bin/rev",
"/usr/bin/setarch",
"/usr/bin/setpriv",
"/usr/bin/setsid",
"/usr/bin/setterm",
"/usr/bin/taskset",
"/usr/bin/uclampset",
"/usr/bin/unshare",
"/usr/bin/utmpdump",
"/usr/bin/whereis",
"/usr/lib/mime/packages/util-linux",
"/usr/sbin/chmem",
"/usr/sbin/ldattach",
"/usr/sbin/readprofile",
"/usr/sbin/rtcwake",
"/usr/share/bash-completion/completions/addpart",
"/usr/share/bash-completion/completions/blkdiscard",
"/usr/share/bash-completion/completions/blkid",
"/usr/share/bash-completion/completions/blkzone",
"/usr/share/bash-completion/completions/blockdev",
"/usr/share/bash-completion/completions/chcpu",
"/usr/share/bash-completion/completions/chmem",
"/usr/share/bash-completion/completions/chrt",
"/usr/share/bash-completion/completions/ctrlaltdel",
"/usr/share/bash-completion/completions/delpart",
"/usr/share/bash-completion/completions/dmesg",
"/usr/share/bash-completion/completions/fallocate",
"/usr/share/bash-completion/completions/findfs",
"/usr/share/bash-completion/completions/findmnt",
"/usr/share/bash-completion/completions/flock",
"/usr/share/bash-completion/completions/fsck",
"/usr/share/bash-completion/completions/fsck.cramfs",
"/usr/share/bash-completion/completions/fsck.minix",
"/usr/share/bash-completion/completions/fsfreeze",
"/usr/share/bash-completion/completions/fstrim",
"/usr/share/bash-completion/completions/getopt",
"/usr/share/bash-completion/completions/hardlink",
"/usr/share/bash-completion/completions/ionice",
"/usr/share/bash-completion/completions/ipcmk",
"/usr/share/bash-completion/completions/ipcrm",
"/usr/share/bash-completion/completions/ipcs",
"/usr/share/bash-completion/completions/isosize",
"/usr/share/bash-completion/completions/last",
"/usr/share/bash-completion/completions/ldattach",
"/usr/share/bash-completion/completions/lsblk",
"/usr/share/bash-completion/completions/lscpu",
"/usr/share/bash-completion/completions/lsipc",
"/usr/share/bash-completion/completions/lslocks",
"/usr/share/bash-completion/completions/lslogins",
"/usr/share/bash-completion/completions/lsmem",
"/usr/share/bash-completion/completions/lsns",
"/usr/share/bash-completion/completions/mcookie",
"/usr/share/bash-completion/completions/mesg",
"/usr/share/bash-completion/completions/mkfs",
"/usr/share/bash-completion/completions/mkfs.bfs",
"/usr/share/bash-completion/completions/mkfs.cramfs",
"/usr/share/bash-completion/completions/mkfs.minix",
"/usr/share/bash-completion/completions/mkswap",
"/usr/share/bash-completion/completions/more",
"/usr/share/bash-completion/completions/mountpoint",
"/usr/share/bash-completion/completions/namei",
"/usr/share/bash-completion/completions/nsenter",
"/usr/share/bash-completion/completions/partx",
"/usr/share/bash-completion/completions/pivot_root",
"/usr/share/bash-completion/completions/prlimit",
"/usr/share/bash-completion/completions/readprofile",
"/usr/share/bash-completion/completions/resizepart",
"/usr/share/bash-completion/completions/rev",
"/usr/share/bash-completion/completions/rtcwake",
"/usr/share/bash-completion/completions/setarch",
"/usr/share/bash-completion/completions/setpriv",
"/usr/share/bash-completion/completions/setsid",
"/usr/share/bash-completion/completions/setterm",
"/usr/share/bash-completion/completions/su",
"/usr/share/bash-completion/completions/swaplabel",
"/usr/share/bash-completion/completions/taskset",
"/usr/share/bash-completion/completions/uclampset",
"/usr/share/bash-completion/completions/unshare",
"/usr/share/bash-completion/completions/utmpdump",
"/usr/share/bash-completion/completions/wdctl",
"/usr/share/bash-completion/completions/whereis",
"/usr/share/bash-completion/completions/wipefs",
"/usr/share/bash-completion/completions/zramctl",
"/usr/share/doc/util-linux/00-about-docs.txt",
"/usr/share/doc/util-linux/AUTHORS.gz",
"/usr/share/doc/util-linux/PAM-configuration.txt",
"/usr/share/doc/util-linux/README.Debian",
"/usr/share/doc/util-linux/blkid.txt",
"/usr/share/doc/util-linux/cal.txt",
"/usr/share/doc/util-linux/changelog.Debian.gz",
"/usr/share/doc/util-linux/changelog.gz",
"/usr/share/doc/util-linux/col.txt",
"/usr/share/doc/util-linux/copyright",
"/usr/share/doc/util-linux/deprecated.txt",
"/usr/share/doc/util-linux/examples/getopt-example.bash",
"/usr/share/doc/util-linux/examples/getopt-example.tcsh",
"/usr/share/doc/util-linux/getopt.txt",
"/usr/share/doc/util-linux/getopt_changelog.txt",
"/usr/share/doc/util-linux/howto-build-sys.txt",
"/usr/share/doc/util-linux/howto-compilation.txt",
"/usr/share/doc/util-linux/howto-contribute.txt.gz",
"/usr/share/doc/util-linux/howto-debug.txt",
"/usr/share/doc/util-linux/howto-man-page.txt",
"/usr/share/doc/util-linux/howto-pull-request.txt.gz",
"/usr/share/doc/util-linux/howto-tests.txt",
"/usr/share/doc/util-linux/howto-usage-function.txt.gz",
"/usr/share/doc/util-linux/hwclock.txt",
"/usr/share/doc/util-linux/modems-with-agetty.txt",
"/usr/share/doc/util-linux/mount.txt",
"/usr/share/doc/util-linux/parse-date.txt.gz",
"/usr/share/doc/util-linux/pg.txt",
"/usr/share/doc/util-linux/poeigl.txt.gz",
"/usr/share/doc/util-linux/release-schedule.txt",
"/usr/share/doc/util-linux/releases/v2.13-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.14-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.15-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.16-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.17-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.18-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.19-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.20-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.21-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.22-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.23-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.24-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.25-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.26-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.27-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.28-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.29-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.30-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.31-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.32-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.33-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.34-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.35-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.36-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.37-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.38-ReleaseNotes.gz",
"/usr/share/doc/util-linux/releases/v2.38.1-ReleaseNotes.gz",
"/usr/share/lintian/overrides/util-linux",
"/usr/share/man/man1/choom.1.gz",
"/usr/share/man/man1/chrt.1.gz",
"/usr/share/man/man1/dmesg.1.gz",
"/usr/share/man/man1/fallocate.1.gz",
"/usr/share/man/man1/flock.1.gz",
"/usr/share/man/man1/getopt.1.gz",
"/usr/share/man/man1/hardlink.1.gz",
"/usr/share/man/man1/ionice.1.gz",
"/usr/share/man/man1/ipcmk.1.gz",
"/usr/share/man/man1/ipcrm.1.gz",
"/usr/share/man/man1/ipcs.1.gz",
"/usr/share/man/man1/last.1.gz",
"/usr/share/man/man1/lscpu.1.gz",
"/usr/share/man/man1/lsipc.1.gz",
"/usr/share/man/man1/lslogins.1.gz",
"/usr/share/man/man1/lsmem.1.gz",
"/usr/share/man/man1/mcookie.1.gz",
"/usr/share/man/man1/mesg.1.gz",
"/usr/share/man/man1/more.1.gz",
"/usr/share/man/man1/mountpoint.1.gz",
"/usr/share/man/man1/namei.1.gz",
"/usr/share/man/man1/nsenter.1.gz",
"/usr/share/man/man1/prlimit.1.gz",
"/usr/share/man/man1/rename.ul.1.gz",
"/usr/share/man/man1/rev.1.gz",
"/usr/share/man/man1/runuser.1.gz",
"/usr/share/man/man1/setpriv.1.gz",
"/usr/share/man/man1/setsid.1.gz",
"/usr/share/man/man1/setterm.1.gz",
"/usr/share/man/man1/su.1.gz",
"/usr/share/man/man1/taskset.1.gz",
"/usr/share/man/man1/uclampset.1.gz",
"/usr/share/man/man1/unshare.1.gz",
"/usr/share/man/man1/utmpdump.1.gz",
"/usr/share/man/man1/whereis.1.gz",
"/usr/share/man/man5/adjtime_config.5.gz",
"/usr/share/man/man5/terminal-colors.d.5.gz",
"/usr/share/man/man8/addpart.8.gz",
"/usr/share/man/man8/agetty.8.gz",
"/usr/share/man/man8/blkdiscard.8.gz",
"/usr/share/man/man8/blkid.8.gz",
"/usr/share/man/man8/blkzone.8.gz",
"/usr/share/man/man8/blockdev.8.gz",
"/usr/share/man/man8/chcpu.8.gz",
"/usr/share/man/man8/chmem.8.gz",
"/usr/share/man/man8/ctrlaltdel.8.gz",
"/usr/share/man/man8/delpart.8.gz",
"/usr/share/man/man8/findfs.8.gz",
"/usr/share/man/man8/findmnt.8.gz",
"/usr/share/man/man8/fsck.8.gz",
"/usr/share/man/man8/fsck.cramfs.8.gz",
"/usr/share/man/man8/fsck.minix.8.gz",
"/usr/share/man/man8/fsfreeze.8.gz",
"/usr/share/man/man8/fstrim.8.gz",
"/usr/share/man/man8/isosize.8.gz",
"/usr/share/man/man8/ldattach.8.gz",
"/usr/share/man/man8/lsblk.8.gz",
"/usr/share/man/man8/lslocks.8.gz",
"/usr/share/man/man8/lsns.8.gz",
"/usr/share/man/man8/mkfs.8.gz",
"/usr/share/man/man8/mkfs.bfs.8.gz",
"/usr/share/man/man8/mkfs.cramfs.8.gz",
"/usr/share/man/man8/mkfs.minix.8.gz",
"/usr/share/man/man8/mkswap.8.gz",
"/usr/share/man/man8/partx.8.gz",
"/usr/share/man/man8/pivot_root.8.gz",
"/usr/share/man/man8/readprofile.8.gz",
"/usr/share/man/man8/resizepart.8.gz",
"/usr/share/man/man8/rtcwake.8.gz",
"/usr/share/man/man8/setarch.8.gz",
"/usr/share/man/man8/sulogin.8.gz",
"/usr/share/man/man8/swaplabel.8.gz",
"/usr/share/man/man8/switch_root.8.gz",
"/usr/share/man/man8/wdctl.8.gz",
"/usr/share/man/man8/wipefs.8.gz",
"/usr/share/man/man8/zramctl.8.gz",
"/usr/share/util-linux/logcheck/ignore.d.server/util-linux"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "util-linux-extra@2.38.1-5+deb12u3",
"Name": "util-linux-extra",
"Identifier": {
"PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "ab8a783e8d77ff59"
},
"Version": "2.38.1",
"Release": "5+deb12u3",
"Arch": "arm64",
"SrcName": "util-linux",
"SrcVersion": "2.38.1",
"SrcRelease": "5+deb12u3",
"Licenses": [
"GPL-2.0-or-later",
"GPL-2.0-only",
"GPL-3.0-or-later",
"public-domain",
"BSD-4-Clause",
"MIT",
"BSD-3-Clause",
"BSLA",
"LGPL-2.0-or-later",
"LGPL-2.1-or-later",
"LGPL-3.0-or-later",
"GPL-3.0-only",
"LGPL-2.0-only",
"LGPL-2.1-only",
"LGPL-3.0-only"
],
"Maintainer": "util-linux packagers \u003cutil-linux@packages.debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libaudit1@1:3.0.9-1",
"libc6@2.36-9+deb12u14",
"libsmartcols1@2.38.1-5+deb12u3"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/sbin/hwclock",
"/usr/bin/fincore",
"/usr/bin/lsfd",
"/usr/bin/lsirq",
"/usr/lib/udev/hwclock-set",
"/usr/lib/udev/rules.d/85-hwclock.rules",
"/usr/share/bash-completion/completions/fincore",
"/usr/share/bash-completion/completions/hwclock",
"/usr/share/bash-completion/completions/lsirq",
"/usr/share/doc/util-linux-extra/changelog.Debian.gz",
"/usr/share/doc/util-linux-extra/changelog.gz",
"/usr/share/doc/util-linux-extra/copyright",
"/usr/share/man/man1/fincore.1.gz",
"/usr/share/man/man1/lsfd.1.gz",
"/usr/share/man/man1/lsirq.1.gz",
"/usr/share/man/man5/hwclock.5.gz",
"/usr/share/man/man8/hwclock.8.gz"
],
"AnalyzedBy": "dpkg"
},
{
"ID": "zlib1g@1:1.2.13.dfsg-1",
"Name": "zlib1g",
"Identifier": {
"PURL": "pkg:deb/debian/zlib1g@1.2.13.dfsg-1?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "9cee98a6d3479b11"
},
"Version": "1.2.13.dfsg",
"Release": "1",
"Epoch": 1,
"Arch": "arm64",
"SrcName": "zlib",
"SrcVersion": "1.2.13.dfsg",
"SrcRelease": "1",
"SrcEpoch": 1,
"Licenses": [
"Zlib"
],
"Maintainer": "Mark Brown \u003cbroonie@debian.org\u003e",
"Repository": {
"Class": "official"
},
"DependsOn": [
"libc6@2.36-9+deb12u14"
],
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"InstalledFiles": [
"/lib/aarch64-linux-gnu/libz.so.1.2.13",
"/usr/share/doc/zlib1g/changelog.Debian.gz",
"/usr/share/doc/zlib1g/changelog.gz",
"/usr/share/doc/zlib1g/copyright"
],
"AnalyzedBy": "dpkg"
}
],
"Vulnerabilities": [
{
"VulnerabilityID": "CVE-2011-3374",
"PkgID": "apt@2.6.1",
"PkgName": "apt",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/apt@2.6.1?arch=arm64\u0026distro=debian-12.14",
"UID": "ca5a17d9795b550f"
},
"InstalledVersion": "2.6.1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2011-3374",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:a8b94f84f1f55e1df94f3088e75eee819dac06b80c3bdfa1b0f119e3c5f3f6fb",
"Title": "It was found that apt-key in apt, all versions, do not correctly valid ...",
"Description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.",
"Severity": "LOW",
"CweIDs": [
"CWE-347"
],
"VendorSeverity": {
"debian": 1,
"nvd": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V2Score": 4.3,
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/security/cve/cve-2011-3374",
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480",
"https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html",
"https://seclists.org/fulldisclosure/2011/Sep/221",
"https://security-tracker.debian.org/tracker/CVE-2011-3374",
"https://snyk.io/vuln/SNYK-LINUX-APT-116518",
"https://ubuntu.com/security/CVE-2011-3374"
],
"PublishedDate": "2019-11-26T00:15:11.03Z",
"LastModifiedDate": "2024-11-21T01:30:22.61Z"
},
{
"VulnerabilityID": "TEMP-0841856-B18BAF",
"PkgID": "bash@5.2.15-2+b13",
"PkgName": "bash",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/bash@5.2.15-2%2Bb13?arch=arm64\u0026distro=debian-12.14",
"UID": "cec709c8b7538b6f"
},
"InstalledVersion": "5.2.15-2+b13",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c7b5ea926df82986d19d4180c7f8a40fbff626b1ece7006cfb24d2fe894e154f",
"Title": "[Privilege escalation possible to other user than root]",
"Severity": "LOW",
"VendorSeverity": {
"debian": 1
}
},
{
"VulnerabilityID": "CVE-2026-53615",
"PkgID": "bsdutils@1:2.38.1-5+deb12u3",
"PkgName": "bsdutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "1ca453e0ebe76d98"
},
"InstalledVersion": "1:2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c35ac93775a9533e12fbdddc554e79420ea54f95ab48ddff9432cc59b6c1f4a1",
"Title": "[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]",
"Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-53615:\n\tInteger Overflow or Wraparound in libblkid/src/partitions/dos.c\n",
"Severity": "HIGH",
"VendorSeverity": {
"amazon": 3
}
},
{
"VulnerabilityID": "CVE-2026-13595",
"PkgID": "bsdutils@1:2.38.1-5+deb12u3",
"PkgName": "bsdutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "1ca453e0ebe76d98"
},
"InstalledVersion": "1:2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13595",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:0cec55f1c8d48d003e4b51e97b7b273ccf0d23a72d7b4c6823f0520dfa882043",
"Title": "util-linux: util-linux: heap use-after-free in libblkid nested partition probing",
"Description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-416"
],
"VendorSeverity": {
"azure": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:26573",
"https://access.redhat.com/security/cve/CVE-2026-13595",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
"https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13595",
"https://www.cve.org/CVERecord?id=CVE-2026-13595"
],
"PublishedDate": "2026-06-29T09:16:28.303Z",
"LastModifiedDate": "2026-07-08T03:37:21.637Z"
},
{
"VulnerabilityID": "CVE-2026-27456",
"PkgID": "bsdutils@1:2.38.1-5+deb12u3",
"PkgName": "bsdutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "1ca453e0ebe76d98"
},
"InstalledVersion": "1:2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27456",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:336ff41c01d88e4df86da99854aad850b6833e749215346a8df1585277127e63",
"Title": "util-linux: TOCTOU in the mount program when setting up loop devices",
"Description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59",
"CWE-269",
"CWE-367"
],
"VendorSeverity": {
"azure": 2,
"bottlerocket": 2,
"julia": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
"https://access.redhat.com/security/cve/CVE-2026-27456",
"https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml",
"https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4",
"https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
"https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27456",
"https://www.cve.org/CVERecord?id=CVE-2026-27456"
],
"PublishedDate": "2026-04-03T22:16:25.4Z",
"LastModifiedDate": "2026-07-24T22:10:00.14Z"
},
{
"VulnerabilityID": "CVE-2026-3184",
"PkgID": "bsdutils@1:2.38.1-5+deb12u3",
"PkgName": "bsdutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "1ca453e0ebe76d98"
},
"InstalledVersion": "1:2.38.1-5+deb12u3",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-3184",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:70ad9d83481796376c95926cf2e8483626d7625cc5b33913ad01fa44f581a137",
"Title": "util-linux: util-linux: Access control bypass due to improper hostname canonicalization",
"Description": "A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-289"
],
"VendorSeverity": {
"azure": 1,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2026-3184",
"https://bugzilla.redhat.com/show_bug.cgi?id=2442570",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3184",
"https://www.cve.org/CVERecord?id=CVE-2026-3184"
],
"PublishedDate": "2026-04-03T19:17:23.377Z",
"LastModifiedDate": "2026-07-21T19:10:00.107Z"
},
{
"VulnerabilityID": "CVE-2022-0563",
"PkgID": "bsdutils@1:2.38.1-5+deb12u3",
"PkgName": "bsdutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "1ca453e0ebe76d98"
},
"InstalledVersion": "1:2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:13ef17b1e771a0923c029c9e86713611e788e49e7fa0486d736ecd3674b1e723",
"Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline",
"Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"Severity": "LOW",
"CweIDs": [
"CWE-209"
],
"VendorSeverity": {
"amazon": 2,
"bottlerocket": 2,
"cbl-mariner": 2,
"debian": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
},
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 1.9,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563",
"https://access.redhat.com/security/cve/CVE-2022-0563",
"https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-mv4q-wq4c-5xmg",
"https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
"https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
"https://security.gentoo.org/glsa/202401-08",
"https://security.netapp.com/advisory/ntap-20220331-0002/",
"https://www.cve.org/CVERecord?id=CVE-2022-0563"
],
"PublishedDate": "2022-02-21T19:15:08.393Z",
"LastModifiedDate": "2026-06-17T04:20:51.053Z"
},
{
"VulnerabilityID": "CVE-2025-14104",
"PkgID": "bsdutils@1:2.38.1-5+deb12u3",
"PkgName": "bsdutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "1ca453e0ebe76d98"
},
"InstalledVersion": "1:2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14104",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c9c9a265f00139a9685315279971bdebcc9e3d11b5ca8fcb16933e65837a3fe0",
"Title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames",
"Description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
"Severity": "LOW",
"CweIDs": [
"CWE-125"
],
"VendorSeverity": {
"alma": 2,
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:1696",
"https://access.redhat.com/errata/RHSA-2026:1852",
"https://access.redhat.com/errata/RHSA-2026:1913",
"https://access.redhat.com/errata/RHSA-2026:2485",
"https://access.redhat.com/errata/RHSA-2026:2563",
"https://access.redhat.com/errata/RHSA-2026:2737",
"https://access.redhat.com/errata/RHSA-2026:2800",
"https://access.redhat.com/errata/RHSA-2026:3406",
"https://access.redhat.com/errata/RHSA-2026:4943",
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2025-14104",
"https://bugzilla.redhat.com/2419369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
"https://errata.almalinux.org/9/ALSA-2026-1913.html",
"https://errata.rockylinux.org/RLSA-2026:1913",
"https://linux.oracle.com/cve/CVE-2025-14104.html",
"https://linux.oracle.com/errata/ELSA-2026-1913.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
"https://www.cve.org/CVERecord?id=CVE-2025-14104"
],
"PublishedDate": "2025-12-05T17:16:03.117Z",
"LastModifiedDate": "2026-06-30T00:16:53.04Z"
},
{
"VulnerabilityID": "CVE-2026-53613",
"PkgID": "bsdutils@1:2.38.1-5+deb12u3",
"PkgName": "bsdutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/bsdutils@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "1ca453e0ebe76d98"
},
"InstalledVersion": "1:2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:04fc1a6e3b5381c2ad1f2411e62e7cf3144bc7c08490c84322ead782911ada1a",
"Title": "[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]",
"Severity": "UNKNOWN"
},
{
"VulnerabilityID": "CVE-2026-56392",
"PkgID": "coreutils@9.1-1",
"PkgName": "coreutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/coreutils@9.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "3b4b38838bb03aaa"
},
"InstalledVersion": "9.1-1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56392",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:7934fef0bf44dfebc385c4983a013c9ab7ec2bf8861c1a84ed079da9af81213a",
"Title": "coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values",
"Description": "GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-122"
],
"VendorSeverity": {
"redhat": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
"V3Score": 4.4
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-56392",
"https://cert.pl/en/posts/2026/07/CVE-2026-56391",
"https://git.savannah.gnu.org/cgit/coreutils.git/",
"https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d",
"https://nvd.nist.gov/vuln/detail/CVE-2026-56392",
"https://www.cve.org/CVERecord?id=CVE-2026-56392"
],
"PublishedDate": "2026-07-24T09:16:25.147Z",
"LastModifiedDate": "2026-07-24T13:18:27.907Z"
},
{
"VulnerabilityID": "CVE-2016-2781",
"PkgID": "coreutils@9.1-1",
"PkgName": "coreutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/coreutils@9.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "3b4b38838bb03aaa"
},
"InstalledVersion": "9.1-1",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2016-2781",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:22c11be914f35e1075a94f263d15fe87df20bdab14efe788995b206e5bbdf4e0",
"Title": "coreutils: Non-privileged session can escape to the parent session in chroot",
"Description": "chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.",
"Severity": "LOW",
"CweIDs": [
"CWE-20"
],
"VendorSeverity": {
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"V3Vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
"V2Score": 2.1,
"V3Score": 6.5
},
"redhat": {
"V2Vector": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
"V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"V2Score": 6.2,
"V3Score": 8.6
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2016/02/28/2",
"http://www.openwall.com/lists/oss-security/2016/02/28/3",
"https://access.redhat.com/security/cve/CVE-2016-2781",
"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E",
"https://nvd.nist.gov/vuln/detail/CVE-2016-2781",
"https://www.cve.org/CVERecord?id=CVE-2016-2781"
],
"PublishedDate": "2017-02-07T15:59:00.333Z",
"LastModifiedDate": "2026-06-17T00:44:23.16Z"
},
{
"VulnerabilityID": "CVE-2017-18018",
"PkgID": "coreutils@9.1-1",
"PkgName": "coreutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/coreutils@9.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "3b4b38838bb03aaa"
},
"InstalledVersion": "9.1-1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2017-18018",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:d28bb1dc8cceee880188242623a37fc898397d35f9462e5472fba2b82d884003",
"Title": "coreutils: race condition vulnerability in chown and chgrp",
"Description": "In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX \"-R -L\" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.",
"Severity": "LOW",
"CweIDs": [
"CWE-362"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:N/I:P/A:N",
"V3Vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"V2Score": 1.9,
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
"V3Score": 4.2
}
},
"References": [
"http://lists.gnu.org/archive/html/coreutils/2017-12/msg00045.html",
"https://access.redhat.com/security/cve/CVE-2017-18018",
"https://nvd.nist.gov/vuln/detail/CVE-2017-18018",
"https://www.cve.org/CVERecord?id=CVE-2017-18018"
],
"PublishedDate": "2018-01-04T04:29:00.19Z",
"LastModifiedDate": "2026-06-17T01:12:02.94Z"
},
{
"VulnerabilityID": "CVE-2025-5278",
"PkgID": "coreutils@9.1-1",
"PkgName": "coreutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/coreutils@9.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "3b4b38838bb03aaa"
},
"InstalledVersion": "9.1-1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-5278",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:19fd664711125a85d64af7058023d844c8fd8d11341b8318f7f2e4526d1ac165",
"Title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification",
"Description": "A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
"Severity": "LOW",
"CweIDs": [
"CWE-121"
],
"VendorSeverity": {
"alma": 2,
"amazon": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"V3Score": 4.4
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2025/05/27/2",
"http://www.openwall.com/lists/oss-security/2025/05/29/1",
"http://www.openwall.com/lists/oss-security/2025/05/29/2",
"https://access.redhat.com/errata/RHSA-2026:28911",
"https://access.redhat.com/errata/RHSA-2026:33124",
"https://access.redhat.com/errata/RHSA-2026:33313",
"https://access.redhat.com/errata/RHSA-2026:33612",
"https://access.redhat.com/errata/RHSA-2026:34102",
"https://access.redhat.com/errata/RHSA-2026:39981",
"https://access.redhat.com/errata/RHSA-2026:44481",
"https://access.redhat.com/security/cve/CVE-2025-5278",
"https://bugzilla.redhat.com/2368764",
"https://bugzilla.redhat.com/show_bug.cgi?id=2368764",
"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
"https://cgit.git.savannah.gnu.org/cgit/coreutils.git/tree/NEWS?id=8c9602e3a145e9596dc1a63c6ed67865814b6633#n14",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-5278",
"https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507",
"https://errata.almalinux.org/9/ALSA-2026-28911.html",
"https://errata.rockylinux.org/RLSA-2026:28911",
"https://linux.oracle.com/cve/CVE-2025-5278.html",
"https://linux.oracle.com/errata/ELSA-2026-33124.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
"https://security-tracker.debian.org/tracker/CVE-2025-5278",
"https://www.cve.org/CVERecord?id=CVE-2025-5278"
],
"PublishedDate": "2025-05-27T21:15:23.197Z",
"LastModifiedDate": "2026-07-26T00:16:45.953Z"
},
{
"VulnerabilityID": "CVE-2026-56391",
"PkgID": "coreutils@9.1-1",
"PkgName": "coreutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/coreutils@9.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "3b4b38838bb03aaa"
},
"InstalledVersion": "9.1-1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-56391",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:47b86edae8f0ba3d22e7fc17f6af8d21e27f25897bea486f551990c1fb685c44",
"Title": "GNU coreutils uniq is vulnerable to an out\\u2011of\\u2011bounds read du ...",
"Description": "GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371.",
"Severity": "UNKNOWN",
"CweIDs": [
"CWE-125"
],
"References": [
"https://cert.pl/en/posts/2026/07/CVE-2026-56391",
"https://git.savannah.gnu.org/cgit/coreutils.git/",
"https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"
],
"PublishedDate": "2026-07-24T09:16:25.003Z",
"LastModifiedDate": "2026-07-24T13:18:27.743Z"
},
{
"VulnerabilityID": "CVE-2026-53910",
"PkgID": "diffutils@1:3.8-4",
"PkgName": "diffutils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/diffutils@3.8-4?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "b02381ee68195365"
},
"InstalledVersion": "1:3.8-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53910",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:4536b32a9e2c392a9a8bf7e01c3c05af0bb424ee8ace730c8930d3d9e42a4503",
"Title": "diff3tool from GNU diffutilsis vulnerable to a heap\\u2011based buffer ...",
"Description": "diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping line ranges can result in corrupted values being used for memory allocation and loop bounds.\nWhen processing crafted diff output, these overflows may cause the application to allocate insufficient memory and subsequently perform out‑of‑bounds writes during internal processing. \nAn attacker who can control the output of the diff program used by diff3 (e.g. via --diff-program pointing to a malicious script) can trigger out-of-bounds writes, resulting in a crash and potentially remote code execution depending on the environment.\n\n\nThis issue has been fixed in commit 9ff04d5b84743e331e80b589335a52c5480d1815",
"Severity": "LOW",
"CweIDs": [
"CWE-190"
],
"VendorSeverity": {
"debian": 1
},
"References": [
"https://cert.pl/en/posts/2026/07/CVE-2026-53910",
"https://cgit.git.savannah.gnu.org/cgit/diffutils.git/commit/?id=73ed7ce85cc78effb94daf028c9af6b4e5252e50",
"https://cgit.git.savannah.gnu.org/cgit/diffutils.git/commit/?id=9ff04d5b84743e331e80b589335a52c5480d1815",
"https://git.savannah.gnu.org/cgit/diffutils.git/"
],
"PublishedDate": "2026-07-22T14:17:21.03Z",
"LastModifiedDate": "2026-07-22T20:54:15.757Z"
},
{
"VulnerabilityID": "CVE-2022-27943",
"PkgID": "gcc-12-base@12.2.0-14+deb12u1",
"PkgName": "gcc-12-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/gcc-12-base@12.2.0-14%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "faf5ab04c4b8df2a"
},
"InstalledVersion": "12.2.0-14+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-27943",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:286f4b7574bb27172b82caadf2ef6cefac31012ff06aa992b5ea810d5ca01e2a",
"Title": "binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const",
"Description": "libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.",
"Severity": "LOW",
"CweIDs": [
"CWE-674"
],
"VendorSeverity": {
"amazon": 1,
"debian": 1,
"nvd": 2,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V2Score": 4.3,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 5.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2022-27943",
"https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=1a770b01ef415e114164b6151d1e55acdee09371",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=9234cdca6ee88badfc00297e72f13dac4e540c79",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=fc968115a742d9e4674d9725ce9c2106b91b6ead",
"https://gcc.gnu.org/pipermail/gcc-patches/2022-March/592244.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/",
"https://nvd.nist.gov/vuln/detail/CVE-2022-27943",
"https://sourceware.org/bugzilla/show_bug.cgi?id=28995",
"https://www.cve.org/CVERecord?id=CVE-2022-27943"
],
"PublishedDate": "2022-03-26T13:15:07.9Z",
"LastModifiedDate": "2026-06-17T04:37:46.95Z"
},
{
"VulnerabilityID": "CVE-2025-30258",
"PkgID": "gpgv@2.2.40-1.1+deb12u2",
"PkgName": "gpgv",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "7602f05bbfc60547"
},
"InstalledVersion": "2.2.40-1.1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-30258",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:85d52a48253f2c4844cffee8d357acfecced1599c23a9e43ad7bd7a6062e9463",
"Title": "gnupg: verification DoS due to a malicious subkey in the keyring",
"Description": "In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a \"verification DoS.\"",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-754"
],
"VendorSeverity": {
"amazon": 1,
"azure": 1,
"julia": 2,
"nvd": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 4.7
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L",
"V3Score": 2.7
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2025-30258",
"https://dev.gnupg.org/T7527",
"https://dev.gnupg.org/rG48978ccb4e20866472ef18436a32744350a65158",
"https://lists.gnupg.org/pipermail/gnupg-announce/2025q1/000491.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-30258",
"https://ubuntu.com/security/notices/USN-7412-1",
"https://ubuntu.com/security/notices/USN-7412-3",
"https://www.cve.org/CVERecord?id=CVE-2025-30258"
],
"PublishedDate": "2025-03-19T20:15:20.14Z",
"LastModifiedDate": "2026-06-17T09:08:24.79Z"
},
{
"VulnerabilityID": "CVE-2025-68972",
"PkgID": "gpgv@2.2.40-1.1+deb12u2",
"PkgName": "gpgv",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "7602f05bbfc60547"
},
"InstalledVersion": "2.2.40-1.1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68972",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:49a0254e8a698a3c53d62352a9e9e7cf04bec426f840be0c92c5f00057335b8a",
"Title": "gnupg: GnuPG: Signature bypass via form feed character in signed messages",
"Description": "In GnuPG through 2.4.8, if a signed message has \\f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds (although an \"invalid armor\" message is printed during verification). This is related to use of \\f as a marker to denote truncation of a long plaintext line.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-347"
],
"VendorSeverity": {
"azure": 2,
"julia": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"V3Score": 4.7
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
"V3Score": 5.9
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2025-68972",
"https://github.com/advisories/GHSA-w789-3q45-984r",
"https://gpg.fail/formfeed",
"https://media.ccc.de/v/39c3-to-sign-or-not-to-sign-practical-vulnerabilities-i",
"https://news.ycombinator.com/item?id=46404339",
"https://nvd.nist.gov/vuln/detail/CVE-2025-68972",
"https://www.cve.org/CVERecord?id=CVE-2025-68972"
],
"PublishedDate": "2025-12-27T23:15:40.9Z",
"LastModifiedDate": "2026-06-17T09:59:55.373Z"
},
{
"VulnerabilityID": "CVE-2022-3219",
"PkgID": "gpgv@2.2.40-1.1+deb12u2",
"PkgName": "gpgv",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "7602f05bbfc60547"
},
"InstalledVersion": "2.2.40-1.1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-3219",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:94aa117fb4636970d6a797d766f6860b178a2b7d8922e6a06034b0bc486f5517",
"Title": "gnupg: denial of service issue (resource consumption) using compressed packets",
"Description": "GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.",
"Severity": "LOW",
"CweIDs": [
"CWE-787"
],
"VendorSeverity": {
"debian": 1,
"nvd": 1,
"redhat": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 3.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 6.2
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2022-3219",
"https://bugzilla.redhat.com/show_bug.cgi?id=2127010",
"https://dev.gnupg.org/D556",
"https://dev.gnupg.org/T5993",
"https://marc.info/?l=oss-security\u0026m=165696590211434\u0026w=4",
"https://nvd.nist.gov/vuln/detail/CVE-2022-3219",
"https://security.netapp.com/advisory/ntap-20230324-0001/",
"https://www.cve.org/CVERecord?id=CVE-2022-3219"
],
"PublishedDate": "2023-02-23T20:15:12.393Z",
"LastModifiedDate": "2026-06-17T04:59:05.937Z"
},
{
"VulnerabilityID": "CVE-2026-57062",
"PkgID": "gpgv@2.2.40-1.1+deb12u2",
"PkgName": "gpgv",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/gpgv@2.2.40-1.1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "7602f05bbfc60547"
},
"InstalledVersion": "2.2.40-1.1+deb12u2",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57062",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:f07d143456850b0410a2971c2c35b8905b76344a839621f8040ca4777bbb697c",
"Title": "GnuPG: Incorrect cryptographic message parsing",
"Description": "CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.",
"Severity": "LOW",
"CweIDs": [
"CWE-1284"
],
"VendorSeverity": {
"amazon": 1,
"azure": 1,
"photon": 1,
"redhat": 1
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 2.9
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-57062",
"https://blog.calif.io/p/how-to-format-a-ciphertext",
"https://nvd.nist.gov/vuln/detail/CVE-2026-57062",
"https://www.cve.org/CVERecord?id=CVE-2026-57062",
"https://www.gnupg.org/download/"
],
"PublishedDate": "2026-06-23T18:18:10.973Z",
"LastModifiedDate": "2026-06-25T20:16:05.473Z"
},
{
"VulnerabilityID": "CVE-2026-41992",
"PkgID": "gzip@1.12-1",
"PkgName": "gzip",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/gzip@1.12-1?arch=arm64\u0026distro=debian-12.14",
"UID": "f7ff281a72d61f87"
},
"InstalledVersion": "1.12-1",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41992",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:e3301653fb8890bfe226a7daa8a25a4caec9a73d5f9c343e19b08f9317d947c0",
"Title": "GNU gzip contains a global buffer overflow vulnerability in the LZH de ...",
"Description": "GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.\nBy decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.\n\nThis issue has been fixed in the commit 63dbf6b3b9e6e781df1a6a64e609b10e23969681",
"Severity": "HIGH",
"CweIDs": [
"CWE-126"
],
"VendorSeverity": {
"azure": 2,
"nvd": 3,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 7.5
}
},
"References": [
"https://cert.pl/en/posts/2026/04/CVE-2026-41991/",
"https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681",
"https://nvd.nist.gov/vuln/detail/CVE-2026-41992",
"https://ubuntu.com/security/notices/USN-8512-1",
"https://www.cve.org/CVERecord?id=CVE-2026-41992",
"https://www.gnu.org/software/gzip/"
],
"PublishedDate": "2026-06-29T12:16:29.94Z",
"LastModifiedDate": "2026-07-01T14:02:20.173Z"
},
{
"VulnerabilityID": "CVE-2026-41991",
"PkgID": "gzip@1.12-1",
"PkgName": "gzip",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/gzip@1.12-1?arch=arm64\u0026distro=debian-12.14",
"UID": "f7ff281a72d61f87"
},
"InstalledVersion": "1.12-1",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41991",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:9380a435f1ffccbed958da7ed4ed07c4ffc279f7eed13e5b2e0c3b8b00e9e082",
"Title": "gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility",
"Description": "GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID (PID). This predictable filename is created without exclusive access or existence checks.\nA local attacker can pre‑create the predicted temporary file path as a symbolic link pointing to an arbitrary file writable by the victim. When gzexe runs, it follows the symlink and overwrites the target file, resulting in a time‑of‑check to time‑of‑use (TOCTOU) condition that allows arbitrary file overwrite.\n\nThis issue has been fixed in the commit 4e6f8b24ab823146ab8776f0b7fe486ab34d4269",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-377"
],
"VendorSeverity": {
"nvd": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H",
"V3Score": 6
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-41991",
"https://cert.pl/en/posts/2026/04/CVE-2026-41991/",
"https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=4e6f8b24ab823146ab8776f0b7fe486ab34d4269",
"https://nvd.nist.gov/vuln/detail/CVE-2026-41991",
"https://ubuntu.com/security/notices/USN-8512-1",
"https://www.cve.org/CVERecord?id=CVE-2026-41991",
"https://www.gnu.org/software/gzip/"
],
"PublishedDate": "2026-06-29T12:16:29.77Z",
"LastModifiedDate": "2026-07-01T14:02:24.45Z"
},
{
"VulnerabilityID": "CVE-2026-54369",
"PkgID": "libacl1@2.3.1-3",
"PkgName": "libacl1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libacl1@2.3.1-3?arch=arm64\u0026distro=debian-12.14",
"UID": "606f59b866cb26"
},
"InstalledVersion": "2.3.1-3",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54369",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:f969a62420d6e675e43aae283c6f6439f3e7c985692e4dea4e4f887b84feb4bd",
"Title": "acl: Symlink traversal privilege escalation via libacl functions",
"Description": "acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.",
"Severity": "HIGH",
"CweIDs": [
"CWE-59"
],
"VendorSeverity": {
"alma": 3,
"amazon": 3,
"oracle-oval": 3,
"redhat": 3,
"rocky": 3
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"V3Score": 7.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:34351",
"https://access.redhat.com/errata/RHSA-2026:42736",
"https://access.redhat.com/errata/RHSA-2026:42739",
"https://access.redhat.com/errata/RHSA-2026:43420",
"https://access.redhat.com/errata/RHSA-2026:44481",
"https://access.redhat.com/security/cve/CVE-2026-54369",
"https://bugzilla.redhat.com/2490277",
"https://bugzilla.redhat.com/2490279",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490279",
"https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
"https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370",
"https://errata.almalinux.org/9/ALSA-2026-42736.html",
"https://errata.rockylinux.org/RLSA-2026:42736",
"https://linux.oracle.com/cve/CVE-2026-54369.html",
"https://linux.oracle.com/errata/ELSA-2026-43420.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54369",
"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json",
"https://www.cve.org/CVERecord?id=CVE-2026-54369",
"https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions"
],
"PublishedDate": "2026-06-29T14:16:57.487Z",
"LastModifiedDate": "2026-07-24T13:18:27.353Z"
},
{
"VulnerabilityID": "CVE-2026-54370",
"PkgID": "libacl1@2.3.1-3",
"PkgName": "libacl1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libacl1@2.3.1-3?arch=arm64\u0026distro=debian-12.14",
"UID": "606f59b866cb26"
},
"InstalledVersion": "2.3.1-3",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54370",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ffd72b48bb3e3547e0b7ed40c67ff8c98281ff7559909c319aabd197ace1a255",
"Title": "acl: TOCTOU Symlink Traversal via getfacl/setfacl",
"Description": "acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat() check and subsequent symlink-following operations such as stat(), chown(), chmod(), acl_get_file(), and acl_set_file(). Attackers who control a pathname component can redirect file access control list operations to arbitrary files when getfacl, setfacl, or chacl is invoked by a privileged process over an attacker-controlled path, resulting in local privilege escalation.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-367"
],
"VendorSeverity": {
"alma": 3,
"amazon": 3,
"oracle-oval": 3,
"redhat": 2,
"rocky": 3
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"V3Score": 6.3
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:42736",
"https://access.redhat.com/security/cve/CVE-2026-54370",
"https://bugzilla.redhat.com/2490277",
"https://bugzilla.redhat.com/2490279",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490277",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490279",
"https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5",
"https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370",
"https://errata.almalinux.org/9/ALSA-2026-42736.html",
"https://errata.rockylinux.org/RLSA-2026:42736",
"https://linux.oracle.com/cve/CVE-2026-54370.html",
"https://linux.oracle.com/errata/ELSA-2026-43420.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54370",
"https://www.cve.org/CVERecord?id=CVE-2026-54370",
"https://www.vulncheck.com/advisories/acl-toctou-symlink-traversal-via-getfacl-setfacl-chacl"
],
"PublishedDate": "2026-06-29T14:16:57.67Z",
"LastModifiedDate": "2026-06-29T19:22:57.46Z"
},
{
"VulnerabilityID": "CVE-2011-3374",
"PkgID": "libapt-pkg6.0@2.6.1",
"PkgName": "libapt-pkg6.0",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libapt-pkg6.0@2.6.1?arch=arm64\u0026distro=debian-12.14",
"UID": "672033d1c406a01e"
},
"InstalledVersion": "2.6.1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2011-3374",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:54d0e01c9a796775b4c3081f033d74cd2077648f3adfee0ae4b02508165191c9",
"Title": "It was found that apt-key in apt, all versions, do not correctly valid ...",
"Description": "It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack.",
"Severity": "LOW",
"CweIDs": [
"CWE-347"
],
"VendorSeverity": {
"debian": 1,
"nvd": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V2Score": 4.3,
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/security/cve/cve-2011-3374",
"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=642480",
"https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-3374.html",
"https://seclists.org/fulldisclosure/2011/Sep/221",
"https://security-tracker.debian.org/tracker/CVE-2011-3374",
"https://snyk.io/vuln/SNYK-LINUX-APT-116518",
"https://ubuntu.com/security/CVE-2011-3374"
],
"PublishedDate": "2019-11-26T00:15:11.03Z",
"LastModifiedDate": "2024-11-21T01:30:22.61Z"
},
{
"VulnerabilityID": "CVE-2026-54371",
"PkgID": "libattr1@1:2.5.1-4",
"PkgName": "libattr1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libattr1@2.5.1-4?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "e92227fb26eefa9a"
},
"InstalledVersion": "1:2.5.1-4",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54371",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c6b9334bc2334efb3c48fc48cdf17253b867ce8fa72b506dac8f08ca235eb84b",
"Title": "attr: Symlink Traversal Privilege Escalation via getfattr and setfattr",
"Description": "attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59"
],
"VendorSeverity": {
"azure": 2,
"redhat": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"V3Score": 6.3
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:34889",
"https://access.redhat.com/security/cve/CVE-2026-54371",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490283",
"https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=49f79e947270f06940b9100fa638f85dddc4aa7f",
"https://cgit.git.savannah.nongnu.org/cgit/attr.git/commit/?id=c440855d6b33446edf4b5eb1a2d892281f15a99b",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54371",
"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54371.json",
"https://www.cve.org/CVERecord?id=CVE-2026-54371",
"https://www.vulncheck.com/advisories/attr-symlink-traversal-privilege-escalation-via-getfattr-setfattr"
],
"PublishedDate": "2026-06-29T14:16:57.823Z",
"LastModifiedDate": "2026-07-15T01:16:35.507Z"
},
{
"VulnerabilityID": "CVE-2026-53615",
"PkgID": "libblkid1@2.38.1-5+deb12u3",
"PkgName": "libblkid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "64c98e11c870e528"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:86d462a359120077acdec3da6225f52231d0c786548a1a4ffc6135904986dd1b",
"Title": "[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]",
"Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-53615:\n\tInteger Overflow or Wraparound in libblkid/src/partitions/dos.c\n",
"Severity": "HIGH",
"VendorSeverity": {
"amazon": 3
}
},
{
"VulnerabilityID": "CVE-2026-13595",
"PkgID": "libblkid1@2.38.1-5+deb12u3",
"PkgName": "libblkid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "64c98e11c870e528"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13595",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:7b608276c43ef145d4396dddfbb0ee6f86319bfa6a81fdb2d42185e5467444ae",
"Title": "util-linux: util-linux: heap use-after-free in libblkid nested partition probing",
"Description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-416"
],
"VendorSeverity": {
"azure": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:26573",
"https://access.redhat.com/security/cve/CVE-2026-13595",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
"https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13595",
"https://www.cve.org/CVERecord?id=CVE-2026-13595"
],
"PublishedDate": "2026-06-29T09:16:28.303Z",
"LastModifiedDate": "2026-07-08T03:37:21.637Z"
},
{
"VulnerabilityID": "CVE-2026-27456",
"PkgID": "libblkid1@2.38.1-5+deb12u3",
"PkgName": "libblkid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "64c98e11c870e528"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27456",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:2dd924b4dd1e0b6c66b9c30dfc92343493cb85e69c337d3e6c93c530d2c3e7c3",
"Title": "util-linux: TOCTOU in the mount program when setting up loop devices",
"Description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59",
"CWE-269",
"CWE-367"
],
"VendorSeverity": {
"azure": 2,
"bottlerocket": 2,
"julia": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
"https://access.redhat.com/security/cve/CVE-2026-27456",
"https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml",
"https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4",
"https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
"https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27456",
"https://www.cve.org/CVERecord?id=CVE-2026-27456"
],
"PublishedDate": "2026-04-03T22:16:25.4Z",
"LastModifiedDate": "2026-07-24T22:10:00.14Z"
},
{
"VulnerabilityID": "CVE-2026-3184",
"PkgID": "libblkid1@2.38.1-5+deb12u3",
"PkgName": "libblkid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "64c98e11c870e528"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-3184",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:bce0488b9f07144c6de0360b1f5903e6a98e6cad5f318ae2530363239ed94543",
"Title": "util-linux: util-linux: Access control bypass due to improper hostname canonicalization",
"Description": "A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-289"
],
"VendorSeverity": {
"azure": 1,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2026-3184",
"https://bugzilla.redhat.com/show_bug.cgi?id=2442570",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3184",
"https://www.cve.org/CVERecord?id=CVE-2026-3184"
],
"PublishedDate": "2026-04-03T19:17:23.377Z",
"LastModifiedDate": "2026-07-21T19:10:00.107Z"
},
{
"VulnerabilityID": "CVE-2022-0563",
"PkgID": "libblkid1@2.38.1-5+deb12u3",
"PkgName": "libblkid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "64c98e11c870e528"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:01460b2532f85daab07379a0afaa01133dee196d4c9c158d664e8a9944657f18",
"Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline",
"Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"Severity": "LOW",
"CweIDs": [
"CWE-209"
],
"VendorSeverity": {
"amazon": 2,
"bottlerocket": 2,
"cbl-mariner": 2,
"debian": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
},
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 1.9,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563",
"https://access.redhat.com/security/cve/CVE-2022-0563",
"https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-mv4q-wq4c-5xmg",
"https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
"https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
"https://security.gentoo.org/glsa/202401-08",
"https://security.netapp.com/advisory/ntap-20220331-0002/",
"https://www.cve.org/CVERecord?id=CVE-2022-0563"
],
"PublishedDate": "2022-02-21T19:15:08.393Z",
"LastModifiedDate": "2026-06-17T04:20:51.053Z"
},
{
"VulnerabilityID": "CVE-2025-14104",
"PkgID": "libblkid1@2.38.1-5+deb12u3",
"PkgName": "libblkid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "64c98e11c870e528"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14104",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:386010754adb0b0a0cacee422676e8da55e15b30656de0c3c5529f86058aaaf8",
"Title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames",
"Description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
"Severity": "LOW",
"CweIDs": [
"CWE-125"
],
"VendorSeverity": {
"alma": 2,
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:1696",
"https://access.redhat.com/errata/RHSA-2026:1852",
"https://access.redhat.com/errata/RHSA-2026:1913",
"https://access.redhat.com/errata/RHSA-2026:2485",
"https://access.redhat.com/errata/RHSA-2026:2563",
"https://access.redhat.com/errata/RHSA-2026:2737",
"https://access.redhat.com/errata/RHSA-2026:2800",
"https://access.redhat.com/errata/RHSA-2026:3406",
"https://access.redhat.com/errata/RHSA-2026:4943",
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2025-14104",
"https://bugzilla.redhat.com/2419369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
"https://errata.almalinux.org/9/ALSA-2026-1913.html",
"https://errata.rockylinux.org/RLSA-2026:1913",
"https://linux.oracle.com/cve/CVE-2025-14104.html",
"https://linux.oracle.com/errata/ELSA-2026-1913.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
"https://www.cve.org/CVERecord?id=CVE-2025-14104"
],
"PublishedDate": "2025-12-05T17:16:03.117Z",
"LastModifiedDate": "2026-06-30T00:16:53.04Z"
},
{
"VulnerabilityID": "CVE-2026-53613",
"PkgID": "libblkid1@2.38.1-5+deb12u3",
"PkgName": "libblkid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libblkid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "64c98e11c870e528"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:7fcb9677bd9c85b3524a22e6678ffbefb1cd76c46a287424a92a05767dbd9de2",
"Title": "[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]",
"Severity": "UNKNOWN"
},
{
"VulnerabilityID": "CVE-2026-42250",
"PkgID": "libbz2-1.0@1.0.8-5+b1",
"PkgName": "libbz2-1.0",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libbz2-1.0@1.0.8-5%2Bb1?arch=arm64\u0026distro=debian-12.14",
"UID": "3824e1be18408114"
},
"InstalledVersion": "1.0.8-5+b1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42250",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:b3a403c4dcd18d022c8d84deca1dd60f51a51a636fc539025698319f84a0e00b",
"Title": "bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file",
"Description": "bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out‑of‑bounds write to a global buffer, resulting in memory corruption and a crash (denial of service).\n\nThis issue was fixed in bzip2 patch 35d122a3df8b0cc4082a4d89fdc6ee99f375fe67",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-787"
],
"VendorSeverity": {
"azure": 2,
"redhat": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-42250",
"https://cert.pl/en/posts/2026/05/CVE-2026-42250/",
"https://inbox.sourceware.org/bzip2-devel/20260528145407.293768-1-mark@klomp.org/",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42250",
"https://sourceware.org/bzip2/",
"https://sourceware.org/cgit/bzip2/commit/?id=35d122a3df8b0cc4082a4d89fdc6ee99f375fe67",
"https://www.cve.org/CVERecord?id=CVE-2026-42250"
],
"PublishedDate": "2026-05-28T14:16:19.89Z",
"LastModifiedDate": "2026-06-17T10:47:34.687Z"
},
{
"VulnerabilityID": "CVE-2026-5435",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-5435",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:75a188700a6e46495d13904aff54ca9299113949ee8c5a9b7478e7ff7a6e256c",
"Title": "glibc: glibc: Out-of-bounds write via TSIG record processing",
"Description": "The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-787"
],
"VendorSeverity": {
"alma": 2,
"oracle-oval": 2,
"redhat": 2,
"rocky": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
"V3Score": 5.9
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:42952",
"https://access.redhat.com/security/cve/CVE-2026-5435",
"https://bugzilla.redhat.com/2459854",
"https://bugzilla.redhat.com/2463465",
"https://bugzilla.redhat.com/2463539",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459854",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463465",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463539",
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238",
"https://errata.almalinux.org/9/ALSA-2026-42952.html",
"https://errata.rockylinux.org/RLSA-2026:42733",
"https://inbox.sourceware.org/libc-alpha/cover.1777546194.git.fweimer@redhat.com/",
"https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
"https://linux.oracle.com/cve/CVE-2026-5435.html",
"https://linux.oracle.com/errata/ELSA-2026-42952.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5435",
"https://sourceware.org/bugzilla/show_bug.cgi?id=34033",
"https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0011",
"https://www.cve.org/CVERecord?id=CVE-2026-5435"
],
"PublishedDate": "2026-04-28T13:19:22.29Z",
"LastModifiedDate": "2026-07-14T13:19:01.36Z"
},
{
"VulnerabilityID": "CVE-2026-5450",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-5450",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:67dcf598706596fe26ed8786f7f3e4cf61d81894ce06f3e856b53280a8ca6132",
"Title": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width",
"Description": "Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-122",
"CWE-787"
],
"VendorSeverity": {
"alma": 2,
"oracle-oval": 2,
"photon": 4,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H",
"V3Score": 5
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:33226",
"https://access.redhat.com/security/cve/CVE-2026-5450",
"https://bugzilla.redhat.com/2459853",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459853",
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5450",
"https://errata.almalinux.org/9/ALSA-2026-33226.html",
"https://errata.rockylinux.org/RLSA-2026:33226",
"https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u",
"https://linux.oracle.com/cve/CVE-2026-5450.html",
"https://linux.oracle.com/errata/ELSA-2026-50370.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5450",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997",
"https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450",
"https://www.cve.org/CVERecord?id=CVE-2026-5450"
],
"PublishedDate": "2026-04-20T21:16:36.85Z",
"LastModifiedDate": "2026-07-14T13:19:01.52Z"
},
{
"VulnerabilityID": "CVE-2026-5928",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-5928",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c446b12e64bb60e23962ad3dc7b5d9e493117f102a47aa521b298d7e9e211393",
"Title": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings",
"Description": "Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.\n\nA bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp-\u003e_IO_read_ptr) instead of the actual wide-stream read pointer (fp-\u003e_wide_data-\u003e_IO_read_ptr). The program crash may happen in cases where fp-\u003e_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-127"
],
"VendorSeverity": {
"alma": 2,
"oracle-oval": 2,
"photon": 3,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
"V3Score": 5
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:42952",
"https://access.redhat.com/security/cve/CVE-2026-5928",
"https://bugzilla.redhat.com/2459854",
"https://bugzilla.redhat.com/2463465",
"https://bugzilla.redhat.com/2463539",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459854",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463465",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463539",
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238",
"https://errata.almalinux.org/9/ALSA-2026-42952.html",
"https://errata.rockylinux.org/RLSA-2026:42733",
"https://linux.oracle.com/cve/CVE-2026-5928.html",
"https://linux.oracle.com/errata/ELSA-2026-42952.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5928",
"https://sourceware.org/bugzilla/show_bug.cgi?id=33998",
"https://www.cve.org/CVERecord?id=CVE-2026-5928"
],
"PublishedDate": "2026-04-20T21:16:36.963Z",
"LastModifiedDate": "2026-07-14T13:19:01.69Z"
},
{
"VulnerabilityID": "CVE-2026-6238",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6238",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:b0dccb92f85372cadee7a8e27a9b8844af41b7b5de650b8debdadb51c1c20a47",
"Title": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response",
"Description": "The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory.\n\nThese functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-126"
],
"VendorSeverity": {
"alma": 2,
"oracle-oval": 2,
"redhat": 2,
"rocky": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.5
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:42952",
"https://access.redhat.com/security/cve/CVE-2026-6238",
"https://bugzilla.redhat.com/2459854",
"https://bugzilla.redhat.com/2463465",
"https://bugzilla.redhat.com/2463539",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459854",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463465",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463539",
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238",
"https://errata.almalinux.org/9/ALSA-2026-42952.html",
"https://errata.rockylinux.org/RLSA-2026:42733",
"https://inbox.sourceware.org/libc-alpha/cover.1777546194.git.fweimer@redhat.com/",
"https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
"https://linux.oracle.com/cve/CVE-2026-6238.html",
"https://linux.oracle.com/errata/ELSA-2026-42952.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-6238",
"https://sourceware.org/bugzilla/show_bug.cgi?id=34069",
"https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0012",
"https://www.cve.org/CVERecord?id=CVE-2026-6238"
],
"PublishedDate": "2026-04-28T19:37:47.523Z",
"LastModifiedDate": "2026-07-14T13:19:09.2Z"
},
{
"VulnerabilityID": "CVE-2010-4756",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2010-4756",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:82b9b93881c39abe9a4cd1fde1b65ee233636b9ed8b8e76bde4373aec53c1405",
"Title": "glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions",
"Description": "The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.",
"Severity": "LOW",
"CweIDs": [
"CWE-399"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"V2Score": 4
},
"redhat": {
"V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"V2Score": 5
}
},
"References": [
"http://cxib.net/stuff/glob-0day.c",
"http://securityreason.com/achievement_securityalert/89",
"http://securityreason.com/exploitalert/9223",
"https://access.redhat.com/security/cve/CVE-2010-4756",
"https://bugzilla.redhat.com/show_bug.cgi?id=681681",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756",
"https://nvd.nist.gov/vuln/detail/CVE-2010-4756",
"https://security.netapp.com/advisory/ntap-20241108-0002/",
"https://www.cve.org/CVERecord?id=CVE-2010-4756"
],
"PublishedDate": "2011-03-02T20:00:01.037Z",
"LastModifiedDate": "2026-04-29T01:13:23.04Z"
},
{
"VulnerabilityID": "CVE-2018-20796",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-20796",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:0c9bddca2dc1139bff76c906d3212a9fcffc534d3f76251b56cc53f7b695bf6c",
"Title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c",
"Description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep.",
"Severity": "LOW",
"CweIDs": [
"CWE-674"
],
"VendorSeverity": {
"cbl-mariner": 3,
"debian": 1,
"nvd": 3,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V2Score": 5,
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
}
},
"References": [
"http://www.securityfocus.com/bid/107160",
"https://access.redhat.com/security/cve/CVE-2018-20796",
"https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141",
"https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html",
"https://nvd.nist.gov/vuln/detail/CVE-2018-20796",
"https://security.netapp.com/advisory/ntap-20190315-0002/",
"https://support.f5.com/csp/article/K26346590?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://www.cve.org/CVERecord?id=CVE-2018-20796"
],
"PublishedDate": "2019-02-26T02:29:00.45Z",
"LastModifiedDate": "2026-06-17T01:53:29.553Z"
},
{
"VulnerabilityID": "CVE-2019-1010022",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010022",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:aeca68fbeb4920b0474a215a9e866ba0d3adc38439423304a60a2d3ba88345d8",
"Title": "glibc: stack guard protection bypass",
"Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
"Severity": "LOW",
"CweIDs": [
"CWE-119"
],
"VendorSeverity": {
"debian": 1,
"nvd": 4
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V2Score": 7.5,
"V3Score": 9.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2019-1010022",
"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022",
"https://security-tracker.debian.org/tracker/CVE-2019-1010022",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22850",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3",
"https://ubuntu.com/security/CVE-2019-1010022",
"https://www.cve.org/CVERecord?id=CVE-2019-1010022"
],
"PublishedDate": "2019-07-15T04:15:13.317Z",
"LastModifiedDate": "2026-06-17T02:09:43.957Z"
},
{
"VulnerabilityID": "CVE-2019-1010023",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010023",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:e092ac79511027b1f2f26d5f4a098e76f701ed8beb4454d4637e83f0253fcdf2",
"Title": "glibc: running ldd on malicious ELF leads to code execution because of wrong size computation",
"Description": "GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
"Severity": "LOW",
"VendorSeverity": {
"debian": 1,
"nvd": 3,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"V2Score": 6.8,
"V3Score": 8.8
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"V3Score": 7.8
}
},
"References": [
"http://www.securityfocus.com/bid/109167",
"https://access.redhat.com/security/cve/CVE-2019-1010023",
"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023",
"https://security-tracker.debian.org/tracker/CVE-2019-1010023",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22851",
"https://support.f5.com/csp/article/K11932200?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://ubuntu.com/security/CVE-2019-1010023",
"https://www.cve.org/CVERecord?id=CVE-2019-1010023"
],
"PublishedDate": "2019-07-15T04:15:13.397Z",
"LastModifiedDate": "2026-06-17T02:09:44.09Z"
},
{
"VulnerabilityID": "CVE-2019-1010024",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010024",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:b3d50ed8fd57514d7abb7ea1b18ffad6550cc31abf15a0df1546b7fef7e500fa",
"Title": "glibc: ASLR bypass using cache of thread stack and heap",
"Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
"Severity": "LOW",
"CweIDs": [
"CWE-200"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V2Score": 5,
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V3Score": 5.3
}
},
"References": [
"http://www.securityfocus.com/bid/109162",
"https://access.redhat.com/security/cve/CVE-2019-1010024",
"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024",
"https://security-tracker.debian.org/tracker/CVE-2019-1010024",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22852",
"https://support.f5.com/csp/article/K06046097",
"https://support.f5.com/csp/article/K06046097?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://ubuntu.com/security/CVE-2019-1010024",
"https://www.cve.org/CVERecord?id=CVE-2019-1010024"
],
"PublishedDate": "2019-07-15T04:15:13.473Z",
"LastModifiedDate": "2026-06-17T02:09:44.273Z"
},
{
"VulnerabilityID": "CVE-2019-1010025",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010025",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:e6807b88b4de12dd1f70edd8b198199fed16e24cec7e372a557e0fd567148aee",
"Title": "glibc: information disclosure of heap addresses of pthread_created thread",
"Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability.",
"Severity": "LOW",
"CweIDs": [
"CWE-330"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V2Score": 5,
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V3Score": 2.9
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2019-1010025",
"https://nvd.nist.gov/vuln/detail/CVE-2019-1010025",
"https://security-tracker.debian.org/tracker/CVE-2019-1010025",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22853",
"https://support.f5.com/csp/article/K06046097",
"https://support.f5.com/csp/article/K06046097?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://ubuntu.com/security/CVE-2019-1010025",
"https://www.cve.org/CVERecord?id=CVE-2019-1010025"
],
"PublishedDate": "2019-07-15T04:15:13.537Z",
"LastModifiedDate": "2026-06-17T02:09:44.397Z"
},
{
"VulnerabilityID": "CVE-2019-9192",
"PkgID": "libc-bin@2.36-9+deb12u14",
"PkgName": "libc-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc-bin@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "6513c93aa9c6b338"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-9192",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:718a8476f559309a1fdb353f3b837a3e7cb44e7a7badfc3a071ca0bd8677fc24",
"Title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c",
"Description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\\\1\\\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern",
"Severity": "LOW",
"CweIDs": [
"CWE-674"
],
"VendorSeverity": {
"cbl-mariner": 3,
"debian": 1,
"nvd": 3,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V2Score": 5,
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"V3Score": 2.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2019-9192",
"https://nvd.nist.gov/vuln/detail/CVE-2019-9192",
"https://sourceware.org/bugzilla/show_bug.cgi?id=24269",
"https://support.f5.com/csp/article/K26346590?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://www.cve.org/CVERecord?id=CVE-2019-9192"
],
"PublishedDate": "2019-02-26T18:29:00.34Z",
"LastModifiedDate": "2026-06-17T02:43:19.643Z"
},
{
"VulnerabilityID": "CVE-2026-5435",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-5435",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:82094f698570b99362a7028d71e9da879961e20780b9d1a082f58def8d6fc95a",
"Title": "glibc: glibc: Out-of-bounds write via TSIG record processing",
"Description": "The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-787"
],
"VendorSeverity": {
"alma": 2,
"oracle-oval": 2,
"redhat": 2,
"rocky": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H",
"V3Score": 5.9
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:42952",
"https://access.redhat.com/security/cve/CVE-2026-5435",
"https://bugzilla.redhat.com/2459854",
"https://bugzilla.redhat.com/2463465",
"https://bugzilla.redhat.com/2463539",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459854",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463465",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463539",
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238",
"https://errata.almalinux.org/9/ALSA-2026-42952.html",
"https://errata.rockylinux.org/RLSA-2026:42733",
"https://inbox.sourceware.org/libc-alpha/cover.1777546194.git.fweimer@redhat.com/",
"https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
"https://linux.oracle.com/cve/CVE-2026-5435.html",
"https://linux.oracle.com/errata/ELSA-2026-42952.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5435",
"https://sourceware.org/bugzilla/show_bug.cgi?id=34033",
"https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0011",
"https://www.cve.org/CVERecord?id=CVE-2026-5435"
],
"PublishedDate": "2026-04-28T13:19:22.29Z",
"LastModifiedDate": "2026-07-14T13:19:01.36Z"
},
{
"VulnerabilityID": "CVE-2026-5450",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-5450",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:68aed0444755f358e6cae6e484f69138df14aa64f2c7b297306acb621dd15360",
"Title": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width",
"Description": "Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-122",
"CWE-787"
],
"VendorSeverity": {
"alma": 2,
"oracle-oval": 2,
"photon": 4,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H",
"V3Score": 5
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:33226",
"https://access.redhat.com/security/cve/CVE-2026-5450",
"https://bugzilla.redhat.com/2459853",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459853",
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5450",
"https://errata.almalinux.org/9/ALSA-2026-33226.html",
"https://errata.rockylinux.org/RLSA-2026:33226",
"https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u",
"https://linux.oracle.com/cve/CVE-2026-5450.html",
"https://linux.oracle.com/errata/ELSA-2026-50370.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5450",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997",
"https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450",
"https://www.cve.org/CVERecord?id=CVE-2026-5450"
],
"PublishedDate": "2026-04-20T21:16:36.85Z",
"LastModifiedDate": "2026-07-14T13:19:01.52Z"
},
{
"VulnerabilityID": "CVE-2026-5928",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-5928",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:82802fa07f72a0144713c2d970f0559b5af4e7f939e0a140509fb708553e0e1b",
"Title": "glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings",
"Description": "Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially resulting in unintentional disclosure of neighboring data in the heap, or a program crash.\n\nA bug in the wide character pushback implementation (_IO_wdefault_pbackfail in libio/wgenops.c) causes ungetwc() to operate on the regular character buffer (fp-\u003e_IO_read_ptr) instead of the actual wide-stream read pointer (fp-\u003e_wide_data-\u003e_IO_read_ptr). The program crash may happen in cases where fp-\u003e_IO_read_ptr is not initialized and hence points to NULL. The buffer under-read requires a special situation where the input character encoding is such that there are overlaps between single byte representations and multibyte representations in that encoding, resulting in spurious matches. The spurious match case is not possible in the standard Unicode character sets.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-127"
],
"VendorSeverity": {
"alma": 2,
"oracle-oval": 2,
"photon": 3,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H",
"V3Score": 5
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:42952",
"https://access.redhat.com/security/cve/CVE-2026-5928",
"https://bugzilla.redhat.com/2459854",
"https://bugzilla.redhat.com/2463465",
"https://bugzilla.redhat.com/2463539",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459854",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463465",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463539",
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238",
"https://errata.almalinux.org/9/ALSA-2026-42952.html",
"https://errata.rockylinux.org/RLSA-2026:42733",
"https://linux.oracle.com/cve/CVE-2026-5928.html",
"https://linux.oracle.com/errata/ELSA-2026-42952.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5928",
"https://sourceware.org/bugzilla/show_bug.cgi?id=33998",
"https://www.cve.org/CVERecord?id=CVE-2026-5928"
],
"PublishedDate": "2026-04-20T21:16:36.963Z",
"LastModifiedDate": "2026-07-14T13:19:01.69Z"
},
{
"VulnerabilityID": "CVE-2026-6238",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6238",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:41b096c229fc73ef3cf5b254bd79b622add192d21e2ef7205002d5f3f6150649",
"Title": "glibc: glibc: Application crash or uninitialized memory read via crafted DNS response",
"Description": "The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory.\n\nThese functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-126"
],
"VendorSeverity": {
"alma": 2,
"oracle-oval": 2,
"redhat": 2,
"rocky": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.5
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:42952",
"https://access.redhat.com/security/cve/CVE-2026-6238",
"https://bugzilla.redhat.com/2459854",
"https://bugzilla.redhat.com/2463465",
"https://bugzilla.redhat.com/2463539",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459854",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463465",
"https://bugzilla.redhat.com/show_bug.cgi?id=2463539",
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5435",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5928",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6238",
"https://errata.almalinux.org/9/ALSA-2026-42952.html",
"https://errata.rockylinux.org/RLSA-2026:42733",
"https://inbox.sourceware.org/libc-alpha/cover.1777546194.git.fweimer@redhat.com/",
"https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u",
"https://linux.oracle.com/cve/CVE-2026-6238.html",
"https://linux.oracle.com/errata/ELSA-2026-42952.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-6238",
"https://sourceware.org/bugzilla/show_bug.cgi?id=34069",
"https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0012",
"https://www.cve.org/CVERecord?id=CVE-2026-6238"
],
"PublishedDate": "2026-04-28T19:37:47.523Z",
"LastModifiedDate": "2026-07-14T13:19:09.2Z"
},
{
"VulnerabilityID": "CVE-2010-4756",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2010-4756",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:e7009cce2877fe942d081d932fb7d511766083c903a0cec10ecd49fbee16699b",
"Title": "glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions",
"Description": "The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.",
"Severity": "LOW",
"CweIDs": [
"CWE-399"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
"V2Score": 4
},
"redhat": {
"V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"V2Score": 5
}
},
"References": [
"http://cxib.net/stuff/glob-0day.c",
"http://securityreason.com/achievement_securityalert/89",
"http://securityreason.com/exploitalert/9223",
"https://access.redhat.com/security/cve/CVE-2010-4756",
"https://bugzilla.redhat.com/show_bug.cgi?id=681681",
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756",
"https://nvd.nist.gov/vuln/detail/CVE-2010-4756",
"https://security.netapp.com/advisory/ntap-20241108-0002/",
"https://www.cve.org/CVERecord?id=CVE-2010-4756"
],
"PublishedDate": "2011-03-02T20:00:01.037Z",
"LastModifiedDate": "2026-04-29T01:13:23.04Z"
},
{
"VulnerabilityID": "CVE-2018-20796",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-20796",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:4c72019ef0af22ddf0b57f0d99188ee3e2f2b93d42e5878033fce41ab5fe8bf1",
"Title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c",
"Description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep.",
"Severity": "LOW",
"CweIDs": [
"CWE-674"
],
"VendorSeverity": {
"cbl-mariner": 3,
"debian": 1,
"nvd": 3,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V2Score": 5,
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
}
},
"References": [
"http://www.securityfocus.com/bid/107160",
"https://access.redhat.com/security/cve/CVE-2018-20796",
"https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141",
"https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html",
"https://nvd.nist.gov/vuln/detail/CVE-2018-20796",
"https://security.netapp.com/advisory/ntap-20190315-0002/",
"https://support.f5.com/csp/article/K26346590?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://www.cve.org/CVERecord?id=CVE-2018-20796"
],
"PublishedDate": "2019-02-26T02:29:00.45Z",
"LastModifiedDate": "2026-06-17T01:53:29.553Z"
},
{
"VulnerabilityID": "CVE-2019-1010022",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010022",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:1cacb75621607f7fe5dbdf9bd23c9fa78553a1bc42e5dc837497bc299890b55f",
"Title": "glibc: stack guard protection bypass",
"Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
"Severity": "LOW",
"CweIDs": [
"CWE-119"
],
"VendorSeverity": {
"debian": 1,
"nvd": 4
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V2Score": 7.5,
"V3Score": 9.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2019-1010022",
"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022",
"https://security-tracker.debian.org/tracker/CVE-2019-1010022",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22850",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3",
"https://ubuntu.com/security/CVE-2019-1010022",
"https://www.cve.org/CVERecord?id=CVE-2019-1010022"
],
"PublishedDate": "2019-07-15T04:15:13.317Z",
"LastModifiedDate": "2026-06-17T02:09:43.957Z"
},
{
"VulnerabilityID": "CVE-2019-1010023",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010023",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:fff4492279603035f3718bfdc8d749bb527136aaed56620d0b77ab61fef3dd70",
"Title": "glibc: running ldd on malicious ELF leads to code execution because of wrong size computation",
"Description": "GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
"Severity": "LOW",
"VendorSeverity": {
"debian": 1,
"nvd": 3,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"V2Score": 6.8,
"V3Score": 8.8
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"V3Score": 7.8
}
},
"References": [
"http://www.securityfocus.com/bid/109167",
"https://access.redhat.com/security/cve/CVE-2019-1010023",
"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023",
"https://security-tracker.debian.org/tracker/CVE-2019-1010023",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22851",
"https://support.f5.com/csp/article/K11932200?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://ubuntu.com/security/CVE-2019-1010023",
"https://www.cve.org/CVERecord?id=CVE-2019-1010023"
],
"PublishedDate": "2019-07-15T04:15:13.397Z",
"LastModifiedDate": "2026-06-17T02:09:44.09Z"
},
{
"VulnerabilityID": "CVE-2019-1010024",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010024",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:7783fca6b81b6d127c29dd435778e796093384b47cf494521a0eef9b38c7d21e",
"Title": "glibc: ASLR bypass using cache of thread stack and heap",
"Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.",
"Severity": "LOW",
"CweIDs": [
"CWE-200"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V2Score": 5,
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V3Score": 5.3
}
},
"References": [
"http://www.securityfocus.com/bid/109162",
"https://access.redhat.com/security/cve/CVE-2019-1010024",
"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024",
"https://security-tracker.debian.org/tracker/CVE-2019-1010024",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22852",
"https://support.f5.com/csp/article/K06046097",
"https://support.f5.com/csp/article/K06046097?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://ubuntu.com/security/CVE-2019-1010024",
"https://www.cve.org/CVERecord?id=CVE-2019-1010024"
],
"PublishedDate": "2019-07-15T04:15:13.473Z",
"LastModifiedDate": "2026-06-17T02:09:44.273Z"
},
{
"VulnerabilityID": "CVE-2019-1010025",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-1010025",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:fceb75ad3109c921fcc3346f28cf20ebf2041b9ee36b79b2769a95a0c850eee7",
"Title": "glibc: information disclosure of heap addresses of pthread_created thread",
"Description": "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability.",
"Severity": "LOW",
"CweIDs": [
"CWE-330"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V2Score": 5,
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V3Score": 2.9
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2019-1010025",
"https://nvd.nist.gov/vuln/detail/CVE-2019-1010025",
"https://security-tracker.debian.org/tracker/CVE-2019-1010025",
"https://sourceware.org/bugzilla/show_bug.cgi?id=22853",
"https://support.f5.com/csp/article/K06046097",
"https://support.f5.com/csp/article/K06046097?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://ubuntu.com/security/CVE-2019-1010025",
"https://www.cve.org/CVERecord?id=CVE-2019-1010025"
],
"PublishedDate": "2019-07-15T04:15:13.537Z",
"LastModifiedDate": "2026-06-17T02:09:44.397Z"
},
{
"VulnerabilityID": "CVE-2019-9192",
"PkgID": "libc6@2.36-9+deb12u14",
"PkgName": "libc6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libc6@2.36-9%2Bdeb12u14?arch=arm64\u0026distro=debian-12.14",
"UID": "9295605578596c27"
},
"InstalledVersion": "2.36-9+deb12u14",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-9192",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:8376fa4a6485793ac2fdfc6e07901dc82e41686e17415c5242e5130100a12dce",
"Title": "glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c",
"Description": "In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(|)(\\\\1\\\\1)*' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs only with a crafted pattern",
"Severity": "LOW",
"CweIDs": [
"CWE-674"
],
"VendorSeverity": {
"cbl-mariner": 3,
"debian": 1,
"nvd": 3,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V2Score": 5,
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
"V3Score": 2.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2019-9192",
"https://nvd.nist.gov/vuln/detail/CVE-2019-9192",
"https://sourceware.org/bugzilla/show_bug.cgi?id=24269",
"https://support.f5.com/csp/article/K26346590?utm_source=f5support\u0026amp%3Butm_medium=RSS",
"https://www.cve.org/CVERecord?id=CVE-2019-9192"
],
"PublishedDate": "2019-02-26T18:29:00.34Z",
"LastModifiedDate": "2026-06-17T02:43:19.643Z"
},
{
"VulnerabilityID": "CVE-2022-27943",
"PkgID": "libgcc-s1@12.2.0-14+deb12u1",
"PkgName": "libgcc-s1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "38f61f89476da007"
},
"InstalledVersion": "12.2.0-14+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-27943",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:4481d37b4567ce097a9a3feb8c35d3073795b48216d2567bcafe1033c76b4548",
"Title": "binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const",
"Description": "libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.",
"Severity": "LOW",
"CweIDs": [
"CWE-674"
],
"VendorSeverity": {
"amazon": 1,
"debian": 1,
"nvd": 2,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V2Score": 4.3,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 5.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2022-27943",
"https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=1a770b01ef415e114164b6151d1e55acdee09371",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=9234cdca6ee88badfc00297e72f13dac4e540c79",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=fc968115a742d9e4674d9725ce9c2106b91b6ead",
"https://gcc.gnu.org/pipermail/gcc-patches/2022-March/592244.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/",
"https://nvd.nist.gov/vuln/detail/CVE-2022-27943",
"https://sourceware.org/bugzilla/show_bug.cgi?id=28995",
"https://www.cve.org/CVERecord?id=CVE-2022-27943"
],
"PublishedDate": "2022-03-26T13:15:07.9Z",
"LastModifiedDate": "2026-06-17T04:37:46.95Z"
},
{
"VulnerabilityID": "CVE-2018-6829",
"PkgID": "libgcrypt20@1.10.1-3+deb12u1",
"PkgName": "libgcrypt20",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "ff826f90751028b6"
},
"InstalledVersion": "1.10.1-3+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2018-6829",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:b8ad8eee0adc8ed1879a2500068fda631f0f1fc310b5e5905571d5230ff47bd1",
"Title": "libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information",
"Description": "cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.",
"Severity": "LOW",
"CweIDs": [
"CWE-327"
],
"VendorSeverity": {
"debian": 1,
"nvd": 3,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 5,
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V3Score": 5.3
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2018-6829",
"https://github.com/weikengchen/attack-on-libgcrypt-elgamal",
"https://github.com/weikengchen/attack-on-libgcrypt-elgamal/wiki",
"https://lists.gnupg.org/pipermail/gcrypt-devel/2018-February/004394.html",
"https://nvd.nist.gov/vuln/detail/CVE-2018-6829",
"https://www.cve.org/CVERecord?id=CVE-2018-6829",
"https://www.oracle.com/security-alerts/cpujan2020.html"
],
"PublishedDate": "2018-02-07T23:29:01.703Z",
"LastModifiedDate": "2026-06-17T02:02:19.757Z"
},
{
"VulnerabilityID": "CVE-2024-2236",
"PkgID": "libgcrypt20@1.10.1-3+deb12u1",
"PkgName": "libgcrypt20",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libgcrypt20@1.10.1-3%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "ff826f90751028b6"
},
"InstalledVersion": "1.10.1-3+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-2236",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ff4d4bfc09ce1dec54ca2049be1790d2c96f7b4deab0d2481e770c56f76cfed2",
"Title": "libgcrypt: vulnerable to Marvin Attack",
"Description": "A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.",
"Severity": "LOW",
"CweIDs": [
"CWE-385"
],
"VendorSeverity": {
"alma": 2,
"amazon": 2,
"debian": 1,
"oracle-oval": 2,
"redhat": 2,
"rocky": 2,
"ubuntu": 1
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.9
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2024:9404",
"https://access.redhat.com/errata/RHSA-2025:3530",
"https://access.redhat.com/errata/RHSA-2025:3534",
"https://access.redhat.com/security/cve/CVE-2024-2236",
"https://bugzilla.redhat.com/2245218",
"https://bugzilla.redhat.com/show_bug.cgi?id=2245218",
"https://bugzilla.redhat.com/show_bug.cgi?id=2268268",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2236",
"https://dev.gnupg.org/T7136",
"https://errata.almalinux.org/9/ALSA-2024-9404.html",
"https://errata.rockylinux.org/RLSA-2024:9404",
"https://github.com/tomato42/marvin-toolkit/tree/master/example/libgcrypt",
"https://gitlab.com/redhat-crypto/libgcrypt/libgcrypt-mirror/-/merge_requests/17",
"https://linux.oracle.com/cve/CVE-2024-2236.html",
"https://linux.oracle.com/errata/ELSA-2024-9404.html",
"https://lists.gnupg.org/pipermail/gcrypt-devel/2024-March/005607.html",
"https://nvd.nist.gov/vuln/detail/CVE-2024-2236",
"https://www.cve.org/CVERecord?id=CVE-2024-2236"
],
"PublishedDate": "2024-03-06T22:15:57.977Z",
"LastModifiedDate": "2026-06-17T07:24:06.083Z"
},
{
"VulnerabilityID": "CVE-2011-3389",
"PkgID": "libgnutls30@3.7.9-2+deb12u7",
"PkgName": "libgnutls30",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libgnutls30@3.7.9-2%2Bdeb12u7?arch=arm64\u0026distro=debian-12.14",
"UID": "5ef30c5bee872030"
},
"InstalledVersion": "3.7.9-2+deb12u7",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2011-3389",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:0440b962f90df38b74efe269eab7c24e49a5726654c10bf0804970c3ff7b1dc2",
"Title": "HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)",
"Description": "The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack.",
"Severity": "LOW",
"CweIDs": [
"CWE-326"
],
"VendorSeverity": {
"amazon": 4,
"debian": 1,
"nvd": 2,
"oracle-oval": 4,
"redhat": 2,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"V2Score": 4.3
},
"redhat": {
"V2Vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"V2Score": 4.3
}
},
"References": [
"http://arcticdog.wordpress.com/2012/08/29/beast-openssl-and-apache/",
"http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/",
"http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx",
"http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx",
"http://curl.haxx.se/docs/adv_20120124B.html",
"http://downloads.asterisk.org/pub/security/AST-2016-001.html",
"http://ekoparty.org/2011/juliano-rizzo.php",
"http://eprint.iacr.org/2004/111",
"http://eprint.iacr.org/2006/136",
"http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html",
"http://isc.sans.edu/diary/SSL+TLS+part+3+/11635",
"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html",
"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html",
"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html",
"http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html",
"http://lists.apple.com/archives/security-announce/2012/May/msg00001.html",
"http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html",
"http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html",
"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html",
"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html",
"http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html",
"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html",
"http://marc.info/?l=bugtraq\u0026m=132750579901589\u0026w=2",
"http://marc.info/?l=bugtraq\u0026m=132872385320240\u0026w=2",
"http://marc.info/?l=bugtraq\u0026m=133365109612558\u0026w=2",
"http://marc.info/?l=bugtraq\u0026m=133728004526190\u0026w=2",
"http://marc.info/?l=bugtraq\u0026m=134254866602253\u0026w=2",
"http://marc.info/?l=bugtraq\u0026m=134254957702612\u0026w=2",
"http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue",
"http://osvdb.org/74829",
"http://rhn.redhat.com/errata/RHSA-2012-0508.html",
"http://rhn.redhat.com/errata/RHSA-2013-1455.html",
"http://secunia.com/advisories/45791",
"http://secunia.com/advisories/47998",
"http://secunia.com/advisories/48256",
"http://secunia.com/advisories/48692",
"http://secunia.com/advisories/48915",
"http://secunia.com/advisories/48948",
"http://secunia.com/advisories/49198",
"http://secunia.com/advisories/55322",
"http://secunia.com/advisories/55350",
"http://secunia.com/advisories/55351",
"http://security.gentoo.org/glsa/glsa-201203-02.xml",
"http://security.gentoo.org/glsa/glsa-201406-32.xml",
"http://support.apple.com/kb/HT4999",
"http://support.apple.com/kb/HT5001",
"http://support.apple.com/kb/HT5130",
"http://support.apple.com/kb/HT5281",
"http://support.apple.com/kb/HT5501",
"http://support.apple.com/kb/HT6150",
"http://technet.microsoft.com/security/advisory/2588513",
"http://vnhacker.blogspot.com/2011/09/beast.html",
"http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf",
"http://www.debian.org/security/2012/dsa-2398",
"http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html",
"http://www.ibm.com/developerworks/java/jdk/alerts/",
"http://www.imperialviolet.org/2011/09/23/chromeandbeast.html",
"http://www.insecure.cl/Beast-SSL.rar",
"http://www.kb.cert.org/vuls/id/864643",
"http://www.mandriva.com/security/advisories?name=MDVSA-2012:058",
"http://www.opera.com/docs/changelogs/mac/1151/",
"http://www.opera.com/docs/changelogs/mac/1160/",
"http://www.opera.com/docs/changelogs/unix/1151/",
"http://www.opera.com/docs/changelogs/unix/1160/",
"http://www.opera.com/docs/changelogs/windows/1151/",
"http://www.opera.com/docs/changelogs/windows/1160/",
"http://www.opera.com/support/kb/view/1004/",
"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html",
"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html",
"http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html",
"http://www.redhat.com/support/errata/RHSA-2011-1384.html",
"http://www.redhat.com/support/errata/RHSA-2012-0006.html",
"http://www.securityfocus.com/bid/49388",
"http://www.securityfocus.com/bid/49778",
"http://www.securitytracker.com/id/1029190",
"http://www.securitytracker.com/id?1025997",
"http://www.securitytracker.com/id?1026103",
"http://www.securitytracker.com/id?1026704",
"http://www.ubuntu.com/usn/USN-1263-1",
"http://www.us-cert.gov/cas/techalerts/TA12-010A.html",
"https://access.redhat.com/security/cve/CVE-2011-3389",
"https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail",
"https://bugzilla.novell.com/show_bug.cgi?id=719047",
"https://bugzilla.redhat.com/show_bug.cgi?id=737506",
"https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf",
"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006",
"https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862",
"https://hermes.opensuse.org/messages/13154861",
"https://hermes.opensuse.org/messages/13155432",
"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02",
"https://linux.oracle.com/cve/CVE-2011-3389.html",
"https://linux.oracle.com/errata/ELSA-2011-1380.html",
"https://nvd.nist.gov/vuln/detail/CVE-2011-3389",
"https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:14752",
"https://ubuntu.com/security/notices/USN-1263-1",
"https://www.cve.org/CVERecord?id=CVE-2011-3389"
],
"PublishedDate": "2011-09-06T19:55:03.197Z",
"LastModifiedDate": "2026-04-29T01:13:23.04Z"
},
{
"VulnerabilityID": "CVE-2026-34743",
"PkgID": "liblzma5@5.4.1-1",
"PkgName": "liblzma5",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/liblzma5@5.4.1-1?arch=arm64\u0026distro=debian-12.14",
"UID": "d4579e4f64155338"
},
"InstalledVersion": "5.4.1-1",
"FixedVersion": "5.4.1-1+deb12u1",
"Status": "fixed",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-34743",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:86aebaf78ab307151669a3fdc2a6845a7740f048659dfe253204e96c97b1cd52",
"Title": "xz: XZ Utils: Denial of Service via buffer overflow in index decoding",
"Description": "XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzma_index_decoder() was used to decode an Index that contained no Records, the resulting lzma_index was left in a state where where a subsequent lzma_index_append() would allocate too little memory, and a buffer overflow would occur. This issue has been patched in version 5.8.3.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-122"
],
"VendorSeverity": {
"azure": 1,
"julia": 1,
"nvd": 2,
"photon": 2,
"redhat": 2,
"ubuntu": 1
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U",
"V3Score": 5.3,
"V40Score": 1.7
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/03/31/13",
"https://access.redhat.com/security/cve/CVE-2026-34743",
"https://github.com/tukaani-project/xz/commit/c8c22869e780ff57c96b46939c3d79ff99395f87",
"https://github.com/tukaani-project/xz/releases/tag/v5.8.3",
"https://github.com/tukaani-project/xz/security/advisories/GHSA-x872-m794-cxhv",
"https://lists.debian.org/debian-lts-announce/2026/07/msg00034.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-34743",
"https://tukaani.org/xz/index-append-overflow.html",
"https://ubuntu.com/security/notices/USN-8362-1",
"https://www.cve.org/CVERecord?id=CVE-2026-34743"
],
"PublishedDate": "2026-04-02T19:21:33.187Z",
"LastModifiedDate": "2026-07-24T21:10:00.143Z"
},
{
"VulnerabilityID": "CVE-2026-53615",
"PkgID": "libmount1@2.38.1-5+deb12u3",
"PkgName": "libmount1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "336ffe99efef805b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:88f265f049d73eae16190957cd19a296688872332b29ca50f1e412531c937cb4",
"Title": "[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]",
"Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-53615:\n\tInteger Overflow or Wraparound in libblkid/src/partitions/dos.c\n",
"Severity": "HIGH",
"VendorSeverity": {
"amazon": 3
}
},
{
"VulnerabilityID": "CVE-2026-13595",
"PkgID": "libmount1@2.38.1-5+deb12u3",
"PkgName": "libmount1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "336ffe99efef805b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13595",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:cd6ee0cc9b6cbe4b9466e6da85be0544dd31b3cc6f20297f872c4ce49c94c709",
"Title": "util-linux: util-linux: heap use-after-free in libblkid nested partition probing",
"Description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-416"
],
"VendorSeverity": {
"azure": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:26573",
"https://access.redhat.com/security/cve/CVE-2026-13595",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
"https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13595",
"https://www.cve.org/CVERecord?id=CVE-2026-13595"
],
"PublishedDate": "2026-06-29T09:16:28.303Z",
"LastModifiedDate": "2026-07-08T03:37:21.637Z"
},
{
"VulnerabilityID": "CVE-2026-27456",
"PkgID": "libmount1@2.38.1-5+deb12u3",
"PkgName": "libmount1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "336ffe99efef805b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27456",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c368458ed5e64face6f57a8b5f3425647c8ca52766733f380c7a557c5bbe3143",
"Title": "util-linux: TOCTOU in the mount program when setting up loop devices",
"Description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59",
"CWE-269",
"CWE-367"
],
"VendorSeverity": {
"azure": 2,
"bottlerocket": 2,
"julia": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
"https://access.redhat.com/security/cve/CVE-2026-27456",
"https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml",
"https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4",
"https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
"https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27456",
"https://www.cve.org/CVERecord?id=CVE-2026-27456"
],
"PublishedDate": "2026-04-03T22:16:25.4Z",
"LastModifiedDate": "2026-07-24T22:10:00.14Z"
},
{
"VulnerabilityID": "CVE-2026-3184",
"PkgID": "libmount1@2.38.1-5+deb12u3",
"PkgName": "libmount1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "336ffe99efef805b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-3184",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:07b020cbcad7806fe4e12358b86d35d7d9c74a5e111b528beb850d2926d5372b",
"Title": "util-linux: util-linux: Access control bypass due to improper hostname canonicalization",
"Description": "A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-289"
],
"VendorSeverity": {
"azure": 1,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2026-3184",
"https://bugzilla.redhat.com/show_bug.cgi?id=2442570",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3184",
"https://www.cve.org/CVERecord?id=CVE-2026-3184"
],
"PublishedDate": "2026-04-03T19:17:23.377Z",
"LastModifiedDate": "2026-07-21T19:10:00.107Z"
},
{
"VulnerabilityID": "CVE-2022-0563",
"PkgID": "libmount1@2.38.1-5+deb12u3",
"PkgName": "libmount1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "336ffe99efef805b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:5b1ab964c8d9bfc1cb701527dc7f9d3dd61c2ef60a9700d5465b1d613eb0e23c",
"Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline",
"Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"Severity": "LOW",
"CweIDs": [
"CWE-209"
],
"VendorSeverity": {
"amazon": 2,
"bottlerocket": 2,
"cbl-mariner": 2,
"debian": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
},
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 1.9,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563",
"https://access.redhat.com/security/cve/CVE-2022-0563",
"https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-mv4q-wq4c-5xmg",
"https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
"https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
"https://security.gentoo.org/glsa/202401-08",
"https://security.netapp.com/advisory/ntap-20220331-0002/",
"https://www.cve.org/CVERecord?id=CVE-2022-0563"
],
"PublishedDate": "2022-02-21T19:15:08.393Z",
"LastModifiedDate": "2026-06-17T04:20:51.053Z"
},
{
"VulnerabilityID": "CVE-2025-14104",
"PkgID": "libmount1@2.38.1-5+deb12u3",
"PkgName": "libmount1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "336ffe99efef805b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14104",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:49b8b773efd2b43edd39b4ff73eae4719501dde735672e336c4aa0f899c0c2be",
"Title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames",
"Description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
"Severity": "LOW",
"CweIDs": [
"CWE-125"
],
"VendorSeverity": {
"alma": 2,
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:1696",
"https://access.redhat.com/errata/RHSA-2026:1852",
"https://access.redhat.com/errata/RHSA-2026:1913",
"https://access.redhat.com/errata/RHSA-2026:2485",
"https://access.redhat.com/errata/RHSA-2026:2563",
"https://access.redhat.com/errata/RHSA-2026:2737",
"https://access.redhat.com/errata/RHSA-2026:2800",
"https://access.redhat.com/errata/RHSA-2026:3406",
"https://access.redhat.com/errata/RHSA-2026:4943",
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2025-14104",
"https://bugzilla.redhat.com/2419369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
"https://errata.almalinux.org/9/ALSA-2026-1913.html",
"https://errata.rockylinux.org/RLSA-2026:1913",
"https://linux.oracle.com/cve/CVE-2025-14104.html",
"https://linux.oracle.com/errata/ELSA-2026-1913.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
"https://www.cve.org/CVERecord?id=CVE-2025-14104"
],
"PublishedDate": "2025-12-05T17:16:03.117Z",
"LastModifiedDate": "2026-06-30T00:16:53.04Z"
},
{
"VulnerabilityID": "CVE-2026-53613",
"PkgID": "libmount1@2.38.1-5+deb12u3",
"PkgName": "libmount1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libmount1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "336ffe99efef805b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:b49d9072d98586f9f3bd055bd3abc992bd608cbdb475f2796843f0a03735e03b",
"Title": "[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]",
"Severity": "UNKNOWN"
},
{
"VulnerabilityID": "CVE-2026-13757",
"PkgID": "libp11-kit0@0.24.1-2",
"PkgName": "libp11-kit0",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libp11-kit0@0.24.1-2?arch=arm64\u0026distro=debian-12.14",
"UID": "dceebbaaadb25261"
},
"InstalledVersion": "0.24.1-2",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13757",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:48a929b04a18edaea16a5e744e3becd5c77c128087566b971eee3704f0bfa15b",
"Title": "p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing",
"Description": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-674"
],
"VendorSeverity": {
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 6.2
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:37469",
"https://access.redhat.com/errata/RHSA-2026:38342",
"https://access.redhat.com/security/cve/CVE-2026-13757",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494556",
"https://github.com/advisories/GHSA-p2wm-69qx-x25w",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13757",
"https://www.cve.org/CVERecord?id=CVE-2026-13757"
],
"PublishedDate": "2026-06-29T19:16:40.907Z",
"LastModifiedDate": "2026-07-13T06:16:24.863Z"
},
{
"VulnerabilityID": "CVE-2024-10041",
"PkgID": "libpam-modules@1.5.2-6+deb12u2",
"PkgName": "libpam-modules",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "2161dd3791ad29a2"
},
"InstalledVersion": "1.5.2-6+deb12u2",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-10041",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:86dd9a5d218a5452ee96aa112bc8a8e30e4d1923b0f6b01d90afb9af5ac9e851",
"Title": "pam: libpam: Libpam vulnerable to read hashed password",
"Description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-922"
],
"VendorSeverity": {
"alma": 2,
"amazon": 2,
"azure": 2,
"cbl-mariner": 2,
"oracle-oval": 2,
"redhat": 2,
"rocky": 3
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2024:10379",
"https://access.redhat.com/errata/RHSA-2024:11250",
"https://access.redhat.com/errata/RHSA-2024:9941",
"https://access.redhat.com/security/cve/CVE-2024-10041",
"https://bugzilla.redhat.com/2319212",
"https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
"https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
"https://errata.almalinux.org/9/ALSA-2024-11250.html",
"https://errata.rockylinux.org/RLSA-2024:10379",
"https://linux.oracle.com/cve/CVE-2024-10041.html",
"https://linux.oracle.com/errata/ELSA-2024-11250.html",
"https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
"https://www.cve.org/CVERecord?id=CVE-2024-10041"
],
"PublishedDate": "2024-10-23T14:15:03.97Z",
"LastModifiedDate": "2026-06-30T00:16:47.39Z"
},
{
"VulnerabilityID": "CVE-2026-54411",
"PkgID": "libpam-modules@1.5.2-6+deb12u2",
"PkgName": "libpam-modules",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libpam-modules@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "2161dd3791ad29a2"
},
"InstalledVersion": "1.5.2-6+deb12u2",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54411",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:fb9cfdd9b736d57720ea5d1f7408003f22e64cd8ff0c44263bf614259f23a83f",
"Title": "linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module",
"Description": "Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-208"
],
"VendorSeverity": {
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-54411",
"https://cwe.mitre.org/data/definitions/208.html",
"https://github.com/linux-pam/linux-pam",
"https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h",
"https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54411",
"https://ubuntu.com/security/notices/USN-8601-1",
"https://www.cve.org/CVERecord?id=CVE-2026-54411"
],
"PublishedDate": "2026-06-14T18:17:20.587Z",
"LastModifiedDate": "2026-07-24T12:10:00.21Z"
},
{
"VulnerabilityID": "CVE-2024-10041",
"PkgID": "libpam-modules-bin@1.5.2-6+deb12u2",
"PkgName": "libpam-modules-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libpam-modules-bin@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "530508d69ed0643f"
},
"InstalledVersion": "1.5.2-6+deb12u2",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-10041",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:5b67a8fa75518eba1117f6cbc416cf46f171c4b30b427f9b4601b53ee6806507",
"Title": "pam: libpam: Libpam vulnerable to read hashed password",
"Description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-922"
],
"VendorSeverity": {
"alma": 2,
"amazon": 2,
"azure": 2,
"cbl-mariner": 2,
"oracle-oval": 2,
"redhat": 2,
"rocky": 3
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2024:10379",
"https://access.redhat.com/errata/RHSA-2024:11250",
"https://access.redhat.com/errata/RHSA-2024:9941",
"https://access.redhat.com/security/cve/CVE-2024-10041",
"https://bugzilla.redhat.com/2319212",
"https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
"https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
"https://errata.almalinux.org/9/ALSA-2024-11250.html",
"https://errata.rockylinux.org/RLSA-2024:10379",
"https://linux.oracle.com/cve/CVE-2024-10041.html",
"https://linux.oracle.com/errata/ELSA-2024-11250.html",
"https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
"https://www.cve.org/CVERecord?id=CVE-2024-10041"
],
"PublishedDate": "2024-10-23T14:15:03.97Z",
"LastModifiedDate": "2026-06-30T00:16:47.39Z"
},
{
"VulnerabilityID": "CVE-2026-54411",
"PkgID": "libpam-modules-bin@1.5.2-6+deb12u2",
"PkgName": "libpam-modules-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libpam-modules-bin@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "530508d69ed0643f"
},
"InstalledVersion": "1.5.2-6+deb12u2",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54411",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:76e7e26ef2c062fae55a695dde62d36581fa9bbfd898dc22a156e62285b32f95",
"Title": "linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module",
"Description": "Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-208"
],
"VendorSeverity": {
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-54411",
"https://cwe.mitre.org/data/definitions/208.html",
"https://github.com/linux-pam/linux-pam",
"https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h",
"https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54411",
"https://ubuntu.com/security/notices/USN-8601-1",
"https://www.cve.org/CVERecord?id=CVE-2026-54411"
],
"PublishedDate": "2026-06-14T18:17:20.587Z",
"LastModifiedDate": "2026-07-24T12:10:00.21Z"
},
{
"VulnerabilityID": "CVE-2024-10041",
"PkgID": "libpam-runtime@1.5.2-6+deb12u2",
"PkgName": "libpam-runtime",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libpam-runtime@1.5.2-6%2Bdeb12u2?arch=all\u0026distro=debian-12.14",
"UID": "47e594e0f52955ae"
},
"InstalledVersion": "1.5.2-6+deb12u2",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-10041",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:b1802c98a30b321b8cf5a3db956c1c8091b8bf1fbcaa43e05728699ec4f5b6bf",
"Title": "pam: libpam: Libpam vulnerable to read hashed password",
"Description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-922"
],
"VendorSeverity": {
"alma": 2,
"amazon": 2,
"azure": 2,
"cbl-mariner": 2,
"oracle-oval": 2,
"redhat": 2,
"rocky": 3
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2024:10379",
"https://access.redhat.com/errata/RHSA-2024:11250",
"https://access.redhat.com/errata/RHSA-2024:9941",
"https://access.redhat.com/security/cve/CVE-2024-10041",
"https://bugzilla.redhat.com/2319212",
"https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
"https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
"https://errata.almalinux.org/9/ALSA-2024-11250.html",
"https://errata.rockylinux.org/RLSA-2024:10379",
"https://linux.oracle.com/cve/CVE-2024-10041.html",
"https://linux.oracle.com/errata/ELSA-2024-11250.html",
"https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
"https://www.cve.org/CVERecord?id=CVE-2024-10041"
],
"PublishedDate": "2024-10-23T14:15:03.97Z",
"LastModifiedDate": "2026-06-30T00:16:47.39Z"
},
{
"VulnerabilityID": "CVE-2026-54411",
"PkgID": "libpam-runtime@1.5.2-6+deb12u2",
"PkgName": "libpam-runtime",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libpam-runtime@1.5.2-6%2Bdeb12u2?arch=all\u0026distro=debian-12.14",
"UID": "47e594e0f52955ae"
},
"InstalledVersion": "1.5.2-6+deb12u2",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54411",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:37b942bef33d31824ac26dae70b851274cc3746e77d5e6bce98f8e9008fd81e2",
"Title": "linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module",
"Description": "Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-208"
],
"VendorSeverity": {
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-54411",
"https://cwe.mitre.org/data/definitions/208.html",
"https://github.com/linux-pam/linux-pam",
"https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h",
"https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54411",
"https://ubuntu.com/security/notices/USN-8601-1",
"https://www.cve.org/CVERecord?id=CVE-2026-54411"
],
"PublishedDate": "2026-06-14T18:17:20.587Z",
"LastModifiedDate": "2026-07-24T12:10:00.21Z"
},
{
"VulnerabilityID": "CVE-2024-10041",
"PkgID": "libpam0g@1.5.2-6+deb12u2",
"PkgName": "libpam0g",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "e47769452f42222c"
},
"InstalledVersion": "1.5.2-6+deb12u2",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-10041",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:bcd6104a40b6781f75fb6386327064b829750399f7ffc7f9694391855b31c3df",
"Title": "pam: libpam: Libpam vulnerable to read hashed password",
"Description": "A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs, the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result in leaked passwords, such as those found in /etc/shadow while performing authentications.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-922"
],
"VendorSeverity": {
"alma": 2,
"amazon": 2,
"azure": 2,
"cbl-mariner": 2,
"oracle-oval": 2,
"redhat": 2,
"rocky": 3
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2024:10379",
"https://access.redhat.com/errata/RHSA-2024:11250",
"https://access.redhat.com/errata/RHSA-2024:9941",
"https://access.redhat.com/security/cve/CVE-2024-10041",
"https://bugzilla.redhat.com/2319212",
"https://bugzilla.redhat.com/show_bug.cgi?id=2319212",
"https://bugzilla.redhat.com/show_bug.cgi?id=2324291",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10041",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10963",
"https://errata.almalinux.org/9/ALSA-2024-11250.html",
"https://errata.rockylinux.org/RLSA-2024:10379",
"https://linux.oracle.com/cve/CVE-2024-10041.html",
"https://linux.oracle.com/errata/ELSA-2024-11250.html",
"https://nvd.nist.gov/vuln/detail/CVE-2024-10041",
"https://www.cve.org/CVERecord?id=CVE-2024-10041"
],
"PublishedDate": "2024-10-23T14:15:03.97Z",
"LastModifiedDate": "2026-06-30T00:16:47.39Z"
},
{
"VulnerabilityID": "CVE-2026-54411",
"PkgID": "libpam0g@1.5.2-6+deb12u2",
"PkgName": "libpam0g",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libpam0g@1.5.2-6%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "e47769452f42222c"
},
"InstalledVersion": "1.5.2-6+deb12u2",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54411",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:a4d34a2ac3c67251aa224823f5d84ab419bf58ed18fd8f3584d593a807d6f3f7",
"Title": "linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module",
"Description": "Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences. The comparison uses strncmp() (or strncasecmp() when PAM_ICASE_ARG is set) preceded by a length-equality check, so the time to reject a candidate depends on the index of the first differing byte and on whether the candidate's length matches the stored password, leaking the password length and individual prefix bytes. The vulnerable path is reached when the administrator configures pam_userdb with crypt=none, with an unrecognized crypt method, or without a crypt= argument, causing the module to store and compare credentials in plaintext.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-208"
],
"VendorSeverity": {
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-54411",
"https://cwe.mitre.org/data/definitions/208.html",
"https://github.com/linux-pam/linux-pam",
"https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h",
"https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54411",
"https://ubuntu.com/security/notices/USN-8601-1",
"https://www.cve.org/CVERecord?id=CVE-2026-54411"
],
"PublishedDate": "2026-06-14T18:17:20.587Z",
"LastModifiedDate": "2026-07-24T12:10:00.21Z"
},
{
"VulnerabilityID": "CVE-2026-53615",
"PkgID": "libsmartcols1@2.38.1-5+deb12u3",
"PkgName": "libsmartcols1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "2ed2d95ea60cf46b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:e9e0ee1e2b56793868204144db31930ba5ae71670e6e4b9df60be262ce7c2c02",
"Title": "[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]",
"Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-53615:\n\tInteger Overflow or Wraparound in libblkid/src/partitions/dos.c\n",
"Severity": "HIGH",
"VendorSeverity": {
"amazon": 3
}
},
{
"VulnerabilityID": "CVE-2026-13595",
"PkgID": "libsmartcols1@2.38.1-5+deb12u3",
"PkgName": "libsmartcols1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "2ed2d95ea60cf46b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13595",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:82ce216d6a075af6f088935553191a768fafb31213b96b0cd1a2a3fae3c9eb94",
"Title": "util-linux: util-linux: heap use-after-free in libblkid nested partition probing",
"Description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-416"
],
"VendorSeverity": {
"azure": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:26573",
"https://access.redhat.com/security/cve/CVE-2026-13595",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
"https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13595",
"https://www.cve.org/CVERecord?id=CVE-2026-13595"
],
"PublishedDate": "2026-06-29T09:16:28.303Z",
"LastModifiedDate": "2026-07-08T03:37:21.637Z"
},
{
"VulnerabilityID": "CVE-2026-27456",
"PkgID": "libsmartcols1@2.38.1-5+deb12u3",
"PkgName": "libsmartcols1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "2ed2d95ea60cf46b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27456",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:999a31fcb4da5ef109742220d8852e4301a1a36a7c7729776016f27b9240daed",
"Title": "util-linux: TOCTOU in the mount program when setting up loop devices",
"Description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59",
"CWE-269",
"CWE-367"
],
"VendorSeverity": {
"azure": 2,
"bottlerocket": 2,
"julia": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
"https://access.redhat.com/security/cve/CVE-2026-27456",
"https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml",
"https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4",
"https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
"https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27456",
"https://www.cve.org/CVERecord?id=CVE-2026-27456"
],
"PublishedDate": "2026-04-03T22:16:25.4Z",
"LastModifiedDate": "2026-07-24T22:10:00.14Z"
},
{
"VulnerabilityID": "CVE-2026-3184",
"PkgID": "libsmartcols1@2.38.1-5+deb12u3",
"PkgName": "libsmartcols1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "2ed2d95ea60cf46b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-3184",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:f7b2af0bcd18c640b1215c41327838ca9746bddd71b3ab982587870cf8f0528c",
"Title": "util-linux: util-linux: Access control bypass due to improper hostname canonicalization",
"Description": "A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-289"
],
"VendorSeverity": {
"azure": 1,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2026-3184",
"https://bugzilla.redhat.com/show_bug.cgi?id=2442570",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3184",
"https://www.cve.org/CVERecord?id=CVE-2026-3184"
],
"PublishedDate": "2026-04-03T19:17:23.377Z",
"LastModifiedDate": "2026-07-21T19:10:00.107Z"
},
{
"VulnerabilityID": "CVE-2022-0563",
"PkgID": "libsmartcols1@2.38.1-5+deb12u3",
"PkgName": "libsmartcols1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "2ed2d95ea60cf46b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:46a1c38dee126c4f92498e6632e0679541878ee7bb0f7d218bd44c11c73e294a",
"Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline",
"Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"Severity": "LOW",
"CweIDs": [
"CWE-209"
],
"VendorSeverity": {
"amazon": 2,
"bottlerocket": 2,
"cbl-mariner": 2,
"debian": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
},
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 1.9,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563",
"https://access.redhat.com/security/cve/CVE-2022-0563",
"https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-mv4q-wq4c-5xmg",
"https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
"https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
"https://security.gentoo.org/glsa/202401-08",
"https://security.netapp.com/advisory/ntap-20220331-0002/",
"https://www.cve.org/CVERecord?id=CVE-2022-0563"
],
"PublishedDate": "2022-02-21T19:15:08.393Z",
"LastModifiedDate": "2026-06-17T04:20:51.053Z"
},
{
"VulnerabilityID": "CVE-2025-14104",
"PkgID": "libsmartcols1@2.38.1-5+deb12u3",
"PkgName": "libsmartcols1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "2ed2d95ea60cf46b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14104",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:93374c93aea65943eac8f85987b8749bcb658ef099700720729a5538589bac17",
"Title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames",
"Description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
"Severity": "LOW",
"CweIDs": [
"CWE-125"
],
"VendorSeverity": {
"alma": 2,
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:1696",
"https://access.redhat.com/errata/RHSA-2026:1852",
"https://access.redhat.com/errata/RHSA-2026:1913",
"https://access.redhat.com/errata/RHSA-2026:2485",
"https://access.redhat.com/errata/RHSA-2026:2563",
"https://access.redhat.com/errata/RHSA-2026:2737",
"https://access.redhat.com/errata/RHSA-2026:2800",
"https://access.redhat.com/errata/RHSA-2026:3406",
"https://access.redhat.com/errata/RHSA-2026:4943",
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2025-14104",
"https://bugzilla.redhat.com/2419369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
"https://errata.almalinux.org/9/ALSA-2026-1913.html",
"https://errata.rockylinux.org/RLSA-2026:1913",
"https://linux.oracle.com/cve/CVE-2025-14104.html",
"https://linux.oracle.com/errata/ELSA-2026-1913.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
"https://www.cve.org/CVERecord?id=CVE-2025-14104"
],
"PublishedDate": "2025-12-05T17:16:03.117Z",
"LastModifiedDate": "2026-06-30T00:16:53.04Z"
},
{
"VulnerabilityID": "CVE-2026-53613",
"PkgID": "libsmartcols1@2.38.1-5+deb12u3",
"PkgName": "libsmartcols1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsmartcols1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "2ed2d95ea60cf46b"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:9b7a66afbabeb2b5845075ad3d9dc296a1cb3ab3ff900d9b7f3c5a8d1db859f7",
"Title": "[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]",
"Severity": "UNKNOWN"
},
{
"VulnerabilityID": "CVE-2022-27943",
"PkgID": "libstdc++6@12.2.0-14+deb12u1",
"PkgName": "libstdc++6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libstdc%2B%2B6@12.2.0-14%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "d4cdff858e2aab9"
},
"InstalledVersion": "12.2.0-14+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-27943",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:e526444cc342424793b30947b34c02155d6200005c1f80146d96214d18b7d86f",
"Title": "binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const",
"Description": "libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.",
"Severity": "LOW",
"CweIDs": [
"CWE-674"
],
"VendorSeverity": {
"amazon": 1,
"debian": 1,
"nvd": 2,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V2Score": 4.3,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 5.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2022-27943",
"https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=1a770b01ef415e114164b6151d1e55acdee09371",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=9234cdca6ee88badfc00297e72f13dac4e540c79",
"https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=fc968115a742d9e4674d9725ce9c2106b91b6ead",
"https://gcc.gnu.org/pipermail/gcc-patches/2022-March/592244.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/",
"https://nvd.nist.gov/vuln/detail/CVE-2022-27943",
"https://sourceware.org/bugzilla/show_bug.cgi?id=28995",
"https://www.cve.org/CVERecord?id=CVE-2022-27943"
],
"PublishedDate": "2022-03-26T13:15:07.9Z",
"LastModifiedDate": "2026-06-17T04:37:46.95Z"
},
{
"VulnerabilityID": "CVE-2013-4392",
"PkgID": "libsystemd0@252.39-1~deb12u2",
"PkgName": "libsystemd0",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "a7755f3ea7a54cf9"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2013-4392",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:5edf917153af0116d70d4ea787f832bb29d635293dc74dbb035c67d0feb7623a",
"Title": "systemd: TOCTOU race condition when updating file permissions and SELinux security contexts",
"Description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.",
"Severity": "LOW",
"CweIDs": [
"CWE-59"
],
"VendorSeverity": {
"debian": 1,
"nvd": 1,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"V2Score": 3.3
},
"redhat": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"V2Score": 3.3
}
},
"References": [
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357",
"http://www.openwall.com/lists/oss-security/2013/10/01/9",
"https://access.redhat.com/security/cve/CVE-2013-4392",
"https://bugzilla.redhat.com/show_bug.cgi?id=859060",
"https://nvd.nist.gov/vuln/detail/CVE-2013-4392",
"https://www.cve.org/CVERecord?id=CVE-2013-4392"
],
"PublishedDate": "2013-10-28T22:55:03.773Z",
"LastModifiedDate": "2026-04-29T01:13:23.04Z"
},
{
"VulnerabilityID": "CVE-2023-31437",
"PkgID": "libsystemd0@252.39-1~deb12u2",
"PkgName": "libsystemd0",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "a7755f3ea7a54cf9"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31437",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ea21f1ccabf3c8b5b725ccb56d0cdccbe181300468363ff9e573f655e9b15ba8",
"Title": "An issue was discovered in systemd 253. An attacker can modify a seale ...",
"Description": "An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
"Severity": "LOW",
"CweIDs": [
"CWE-354"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
}
},
"References": [
"https://github.com/kastel-security/Journald",
"https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
"https://github.com/systemd/systemd/releases"
],
"PublishedDate": "2023-06-13T17:15:14.657Z",
"LastModifiedDate": "2026-06-17T05:56:57.143Z"
},
{
"VulnerabilityID": "CVE-2023-31438",
"PkgID": "libsystemd0@252.39-1~deb12u2",
"PkgName": "libsystemd0",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "a7755f3ea7a54cf9"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31438",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:7453ca7d324ad2a7f4ef4c5ac5790ebdc9d92a00f1b29e765e1529370b1cb7df",
"Title": "An issue was discovered in systemd 253. An attacker can truncate a sea ...",
"Description": "An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
"Severity": "LOW",
"CweIDs": [
"CWE-354"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
}
},
"References": [
"https://github.com/kastel-security/Journald",
"https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
"https://github.com/systemd/systemd/pull/28886",
"https://github.com/systemd/systemd/releases"
],
"PublishedDate": "2023-06-13T17:15:14.707Z",
"LastModifiedDate": "2026-06-17T05:56:57.36Z"
},
{
"VulnerabilityID": "CVE-2023-31439",
"PkgID": "libsystemd0@252.39-1~deb12u2",
"PkgName": "libsystemd0",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "a7755f3ea7a54cf9"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31439",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c18ed981d92e8a30dfed750c4bd3933acf488eb775cde3f436ac3003656ce097",
"Title": "An issue was discovered in systemd 253. An attacker can modify the con ...",
"Description": "An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
"Severity": "LOW",
"CweIDs": [
"CWE-354"
],
"VendorSeverity": {
"amazon": 1,
"bottlerocket": 2,
"debian": 1,
"nvd": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31439",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-c8rh-5r8v-5w68",
"https://github.com/kastel-security/Journald",
"https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
"https://github.com/systemd/systemd/pull/28885",
"https://github.com/systemd/systemd/releases"
],
"PublishedDate": "2023-06-13T17:15:14.753Z",
"LastModifiedDate": "2026-06-17T05:56:57.503Z"
},
{
"VulnerabilityID": "CVE-2026-40228",
"PkgID": "libsystemd0@252.39-1~deb12u2",
"PkgName": "libsystemd0",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libsystemd0@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "a7755f3ea7a54cf9"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40228",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ff5b5c7fdef3ad51aaf875b49292a0abb9fe7bd7f7747d47f1a6db9434822097",
"Title": "systemd: systemd-journald: Unintended output to user terminals via logger command",
"Description": "In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a \"logger -p emerg\" command is executed, if ForwardToWall=yes is set.",
"Severity": "LOW",
"CweIDs": [
"CWE-669"
],
"VendorSeverity": {
"nvd": 1,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 2.9
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/05/1",
"https://access.redhat.com/security/cve/CVE-2026-40228",
"https://nvd.nist.gov/vuln/detail/CVE-2026-40228",
"https://www.cve.org/CVERecord?id=CVE-2026-40228",
"https://www.openwall.com/lists/oss-security/2026/04/08/1"
],
"PublishedDate": "2026-04-10T16:16:33.753Z",
"LastModifiedDate": "2026-06-17T10:44:53.31Z"
},
{
"VulnerabilityID": "CVE-2025-13151",
"PkgID": "libtasn1-6@4.19.0-2+deb12u1",
"PkgName": "libtasn1-6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libtasn1-6@4.19.0-2%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "d68d88a5384a3f6d"
},
"InstalledVersion": "4.19.0-2+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-13151",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:5d15437236d89561a4dcb50394432f1d3fdf9a6047c861e45c4325222fa4e9cc",
"Title": "libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string",
"Description": "Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.",
"Severity": "LOW",
"CweIDs": [
"CWE-787"
],
"VendorSeverity": {
"alma": 1,
"amazon": 3,
"azure": 1,
"cbl-mariner": 1,
"oracle-oval": 1,
"photon": 3,
"redhat": 1,
"rocky": 1,
"ubuntu": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 5.9
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/01/08/5",
"https://access.redhat.com/errata/RHSA-2026:28253",
"https://access.redhat.com/security/cve/CVE-2025-13151",
"https://bugzilla.redhat.com/2427698",
"https://bugzilla.redhat.com/show_bug.cgi?id=2427698",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13151",
"https://errata.almalinux.org/9/ALSA-2026-28253.html",
"https://errata.rockylinux.org/RLSA-2026:28253",
"https://gitlab.com/gnutls/libtasn1",
"https://gitlab.com/gnutls/libtasn1/-/merge_requests/121",
"https://linux.oracle.com/cve/CVE-2025-13151.html",
"https://linux.oracle.com/errata/ELSA-2026-36728.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-13151",
"https://ubuntu.com/security/notices/USN-7954-1",
"https://ubuntu.com/security/notices/USN-7954-2",
"https://www.cve.org/CVERecord?id=CVE-2025-13151",
"https://www.kb.cert.org/vuls/id/271649"
],
"PublishedDate": "2026-01-07T22:15:43.2Z",
"LastModifiedDate": "2026-06-17T08:33:34.88Z"
},
{
"VulnerabilityID": "CVE-2025-69720",
"PkgID": "libtinfo6@6.4-4",
"PkgName": "libtinfo6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libtinfo6@6.4-4?arch=arm64\u0026distro=debian-12.14",
"UID": "c1ee882de1405365"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:2e0a1fad6631d8665327601697b4586658071d2ed62df66f71d860d4059458a2",
"Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
"Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
"Severity": "HIGH",
"CweIDs": [
"CWE-121",
"CWE-120"
],
"VendorSeverity": {
"alma": 2,
"azure": 4,
"cbl-mariner": 4,
"nvd": 3,
"oracle-oval": 2,
"photon": 3,
"redhat": 2,
"rocky": 2,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"V3Score": 7.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 7.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:5913",
"https://access.redhat.com/security/cve/CVE-2025-69720",
"https://bugzilla.redhat.com/2449037",
"https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
"https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
"https://errata.almalinux.org/10/ALSA-2026-5913.html",
"https://errata.rockylinux.org/RLSA-2026:5913",
"https://github.com/Cao-Wuhui/CVE-2025-69720",
"https://invisible-island.net/archives/ncurses/6.5/",
"https://invisible-island.net/ncurses/",
"https://linux.oracle.com/cve/CVE-2025-69720.html",
"https://linux.oracle.com/errata/ELSA-2026-5913.html",
"https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
"https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
"https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
"https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
"https://ubuntu.com/security/notices/USN-8503-1",
"https://www.cve.org/CVERecord?id=CVE-2025-69720"
],
"PublishedDate": "2026-03-19T15:16:21.293Z",
"LastModifiedDate": "2026-06-17T10:00:50.423Z"
},
{
"VulnerabilityID": "CVE-2023-50495",
"PkgID": "libtinfo6@6.4-4",
"PkgName": "libtinfo6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libtinfo6@6.4-4?arch=arm64\u0026distro=debian-12.14",
"UID": "c1ee882de1405365"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-50495",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:15bc589629014cc35f5ee4fa03bf3267d3068a20d9c7dd3da28bfe4da0e33fb2",
"Title": "ncurses: segmentation fault via _nc_wrap_entry()",
"Description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
"Severity": "MEDIUM",
"VendorSeverity": {
"amazon": 2,
"cbl-mariner": 2,
"nvd": 2,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2023-50495",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
"https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
"https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
"https://security.netapp.com/advisory/ntap-20240119-0008/",
"https://ubuntu.com/security/notices/USN-6684-1",
"https://www.cve.org/CVERecord?id=CVE-2023-50495"
],
"PublishedDate": "2023-12-12T15:15:07.867Z",
"LastModifiedDate": "2026-06-17T06:39:44.053Z"
},
{
"VulnerabilityID": "CVE-2025-6141",
"PkgID": "libtinfo6@6.4-4",
"PkgName": "libtinfo6",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libtinfo6@6.4-4?arch=arm64\u0026distro=debian-12.14",
"UID": "c1ee882de1405365"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-6141",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:51ba514dc430775918e661bb379da306003b1ad4025922eb5896bfd7373b4ffe",
"Title": "gnu-ncurses: ncurses Stack Buffer Overflow",
"Description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
"Severity": "LOW",
"CweIDs": [
"CWE-119",
"CWE-121"
],
"VendorSeverity": {
"azure": 2,
"julia": 2,
"photon": 1,
"redhat": 1
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"V3Score": 3.3,
"V40Score": 4.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 3.3
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2025-6141",
"https://cert-portal.siemens.com/productcert/html/ssa-089022.html",
"https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
"https://github.com/advisories/GHSA-wfwf-ggr2-rpjf",
"https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
"https://vuldb.com/?ctiid.312610",
"https://vuldb.com/?id.312610",
"https://vuldb.com/?submit.593000",
"https://www.cve.org/CVERecord?id=CVE-2025-6141",
"https://www.gnu.org",
"https://www.gnu.org/"
],
"PublishedDate": "2025-06-16T22:16:41.527Z",
"LastModifiedDate": "2026-06-17T10:01:15.04Z"
},
{
"VulnerabilityID": "CVE-2013-4392",
"PkgID": "libudev1@252.39-1~deb12u2",
"PkgName": "libudev1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "1c60548d75d64fbf"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2013-4392",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:10693d3b206da64136b8125670f059ceec4ac034581580606a4ed7739c03bf70",
"Title": "systemd: TOCTOU race condition when updating file permissions and SELinux security contexts",
"Description": "systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.",
"Severity": "LOW",
"CweIDs": [
"CWE-59"
],
"VendorSeverity": {
"debian": 1,
"nvd": 1,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"V2Score": 3.3
},
"redhat": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:P/A:N",
"V2Score": 3.3
}
},
"References": [
"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357",
"http://www.openwall.com/lists/oss-security/2013/10/01/9",
"https://access.redhat.com/security/cve/CVE-2013-4392",
"https://bugzilla.redhat.com/show_bug.cgi?id=859060",
"https://nvd.nist.gov/vuln/detail/CVE-2013-4392",
"https://www.cve.org/CVERecord?id=CVE-2013-4392"
],
"PublishedDate": "2013-10-28T22:55:03.773Z",
"LastModifiedDate": "2026-04-29T01:13:23.04Z"
},
{
"VulnerabilityID": "CVE-2023-31437",
"PkgID": "libudev1@252.39-1~deb12u2",
"PkgName": "libudev1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "1c60548d75d64fbf"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31437",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:40dffa56f5baacae4eac759e343a6fc80bc42e1aa1c76f49238c62a4ee74a541",
"Title": "An issue was discovered in systemd 253. An attacker can modify a seale ...",
"Description": "An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
"Severity": "LOW",
"CweIDs": [
"CWE-354"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
}
},
"References": [
"https://github.com/kastel-security/Journald",
"https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
"https://github.com/systemd/systemd/releases"
],
"PublishedDate": "2023-06-13T17:15:14.657Z",
"LastModifiedDate": "2026-06-17T05:56:57.143Z"
},
{
"VulnerabilityID": "CVE-2023-31438",
"PkgID": "libudev1@252.39-1~deb12u2",
"PkgName": "libudev1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "1c60548d75d64fbf"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31438",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:45831e3ee442f76baad0d241a94bdbb5d3e7f4168fc808744c07a49f72e6f7c8",
"Title": "An issue was discovered in systemd 253. An attacker can truncate a sea ...",
"Description": "An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
"Severity": "LOW",
"CweIDs": [
"CWE-354"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
}
},
"References": [
"https://github.com/kastel-security/Journald",
"https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
"https://github.com/systemd/systemd/pull/28886",
"https://github.com/systemd/systemd/releases"
],
"PublishedDate": "2023-06-13T17:15:14.707Z",
"LastModifiedDate": "2026-06-17T05:56:57.36Z"
},
{
"VulnerabilityID": "CVE-2023-31439",
"PkgID": "libudev1@252.39-1~deb12u2",
"PkgName": "libudev1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "1c60548d75d64fbf"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31439",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:7f2c5fa4e31a3219244de570d67abf4a5056984595cebfff186e4abd3b7a0f86",
"Title": "An issue was discovered in systemd 253. An attacker can modify the con ...",
"Description": "An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent \"a reply denying that any of the finding was a security vulnerability.\"",
"Severity": "LOW",
"CweIDs": [
"CWE-354"
],
"VendorSeverity": {
"amazon": 1,
"bottlerocket": 2,
"debian": 1,
"nvd": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31439",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-c8rh-5r8v-5w68",
"https://github.com/kastel-security/Journald",
"https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf",
"https://github.com/systemd/systemd/pull/28885",
"https://github.com/systemd/systemd/releases"
],
"PublishedDate": "2023-06-13T17:15:14.753Z",
"LastModifiedDate": "2026-06-17T05:56:57.503Z"
},
{
"VulnerabilityID": "CVE-2026-40228",
"PkgID": "libudev1@252.39-1~deb12u2",
"PkgName": "libudev1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libudev1@252.39-1~deb12u2?arch=arm64\u0026distro=debian-12.14",
"UID": "1c60548d75d64fbf"
},
"InstalledVersion": "252.39-1~deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-40228",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:daf5002939c25bd78ba80e267d14017005604a684319fa7a4402c04eca9ef7b7",
"Title": "systemd: systemd-journald: Unintended output to user terminals via logger command",
"Description": "In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a \"logger -p emerg\" command is executed, if ForwardToWall=yes is set.",
"Severity": "LOW",
"CweIDs": [
"CWE-669"
],
"VendorSeverity": {
"nvd": 1,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 2.9
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/05/1",
"https://access.redhat.com/security/cve/CVE-2026-40228",
"https://nvd.nist.gov/vuln/detail/CVE-2026-40228",
"https://www.cve.org/CVERecord?id=CVE-2026-40228",
"https://www.openwall.com/lists/oss-security/2026/04/08/1"
],
"PublishedDate": "2026-04-10T16:16:33.753Z",
"LastModifiedDate": "2026-06-17T10:44:53.31Z"
},
{
"VulnerabilityID": "CVE-2026-53615",
"PkgID": "libuuid1@2.38.1-5+deb12u3",
"PkgName": "libuuid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "a0a74ba17c2ab1bc"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:a04c3bc1ade04214804ffc0a0ab29da4cf79029cb635faf50545bfaecbb64bfd",
"Title": "[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]",
"Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-53615:\n\tInteger Overflow or Wraparound in libblkid/src/partitions/dos.c\n",
"Severity": "HIGH",
"VendorSeverity": {
"amazon": 3
}
},
{
"VulnerabilityID": "CVE-2026-13595",
"PkgID": "libuuid1@2.38.1-5+deb12u3",
"PkgName": "libuuid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "a0a74ba17c2ab1bc"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13595",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ac72ca77c4f5f03497eea521a155d3a765653940adcdc5613ea714d5cd9be1ab",
"Title": "util-linux: util-linux: heap use-after-free in libblkid nested partition probing",
"Description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-416"
],
"VendorSeverity": {
"azure": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:26573",
"https://access.redhat.com/security/cve/CVE-2026-13595",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
"https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13595",
"https://www.cve.org/CVERecord?id=CVE-2026-13595"
],
"PublishedDate": "2026-06-29T09:16:28.303Z",
"LastModifiedDate": "2026-07-08T03:37:21.637Z"
},
{
"VulnerabilityID": "CVE-2026-27456",
"PkgID": "libuuid1@2.38.1-5+deb12u3",
"PkgName": "libuuid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "a0a74ba17c2ab1bc"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27456",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:0ea43610e6f72359ac54f0ad5a11cc6d3a4c51d32b07086b416059c477e26fed",
"Title": "util-linux: TOCTOU in the mount program when setting up loop devices",
"Description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59",
"CWE-269",
"CWE-367"
],
"VendorSeverity": {
"azure": 2,
"bottlerocket": 2,
"julia": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
"https://access.redhat.com/security/cve/CVE-2026-27456",
"https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml",
"https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4",
"https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
"https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27456",
"https://www.cve.org/CVERecord?id=CVE-2026-27456"
],
"PublishedDate": "2026-04-03T22:16:25.4Z",
"LastModifiedDate": "2026-07-24T22:10:00.14Z"
},
{
"VulnerabilityID": "CVE-2026-3184",
"PkgID": "libuuid1@2.38.1-5+deb12u3",
"PkgName": "libuuid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "a0a74ba17c2ab1bc"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-3184",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:4f0b2c584f312ad6960148b3ec5ea28d5dc8e6f691b1965704c204f7b9d5eca6",
"Title": "util-linux: util-linux: Access control bypass due to improper hostname canonicalization",
"Description": "A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-289"
],
"VendorSeverity": {
"azure": 1,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2026-3184",
"https://bugzilla.redhat.com/show_bug.cgi?id=2442570",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3184",
"https://www.cve.org/CVERecord?id=CVE-2026-3184"
],
"PublishedDate": "2026-04-03T19:17:23.377Z",
"LastModifiedDate": "2026-07-21T19:10:00.107Z"
},
{
"VulnerabilityID": "CVE-2022-0563",
"PkgID": "libuuid1@2.38.1-5+deb12u3",
"PkgName": "libuuid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "a0a74ba17c2ab1bc"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:3f8da922775768782e6d35b7bdeb9de54132a890d7d4bb1714657149b1615868",
"Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline",
"Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"Severity": "LOW",
"CweIDs": [
"CWE-209"
],
"VendorSeverity": {
"amazon": 2,
"bottlerocket": 2,
"cbl-mariner": 2,
"debian": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
},
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 1.9,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563",
"https://access.redhat.com/security/cve/CVE-2022-0563",
"https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-mv4q-wq4c-5xmg",
"https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
"https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
"https://security.gentoo.org/glsa/202401-08",
"https://security.netapp.com/advisory/ntap-20220331-0002/",
"https://www.cve.org/CVERecord?id=CVE-2022-0563"
],
"PublishedDate": "2022-02-21T19:15:08.393Z",
"LastModifiedDate": "2026-06-17T04:20:51.053Z"
},
{
"VulnerabilityID": "CVE-2025-14104",
"PkgID": "libuuid1@2.38.1-5+deb12u3",
"PkgName": "libuuid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "a0a74ba17c2ab1bc"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14104",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:04dfa34b44b11368504b7577a4f832c9269fd7e5b82feb3efdd1918388772cfe",
"Title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames",
"Description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
"Severity": "LOW",
"CweIDs": [
"CWE-125"
],
"VendorSeverity": {
"alma": 2,
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:1696",
"https://access.redhat.com/errata/RHSA-2026:1852",
"https://access.redhat.com/errata/RHSA-2026:1913",
"https://access.redhat.com/errata/RHSA-2026:2485",
"https://access.redhat.com/errata/RHSA-2026:2563",
"https://access.redhat.com/errata/RHSA-2026:2737",
"https://access.redhat.com/errata/RHSA-2026:2800",
"https://access.redhat.com/errata/RHSA-2026:3406",
"https://access.redhat.com/errata/RHSA-2026:4943",
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2025-14104",
"https://bugzilla.redhat.com/2419369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
"https://errata.almalinux.org/9/ALSA-2026-1913.html",
"https://errata.rockylinux.org/RLSA-2026:1913",
"https://linux.oracle.com/cve/CVE-2025-14104.html",
"https://linux.oracle.com/errata/ELSA-2026-1913.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
"https://www.cve.org/CVERecord?id=CVE-2025-14104"
],
"PublishedDate": "2025-12-05T17:16:03.117Z",
"LastModifiedDate": "2026-06-30T00:16:53.04Z"
},
{
"VulnerabilityID": "CVE-2026-53613",
"PkgID": "libuuid1@2.38.1-5+deb12u3",
"PkgName": "libuuid1",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/libuuid1@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "a0a74ba17c2ab1bc"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:3d811a48c725ade2fcd156a21f860917f1b2b8922b668a745543b1353a65f558",
"Title": "[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]",
"Severity": "UNKNOWN"
},
{
"VulnerabilityID": "CVE-2007-5686",
"PkgID": "login@1:4.13+dfsg1-1+deb12u2",
"PkgName": "login",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/login@4.13%2Bdfsg1-1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "f506aaa0a9653d73"
},
"InstalledVersion": "1:4.13+dfsg1-1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2007-5686",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:a78ba5e0536dd595d4eb57005298206748b60ce9608665194ba0fc01041261a0",
"Title": "initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...",
"Description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.",
"Severity": "LOW",
"CweIDs": [
"CWE-264"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"V2Score": 4.9
}
},
"References": [
"http://secunia.com/advisories/27215",
"http://www.securityfocus.com/archive/1/482129/100/100/threaded",
"http://www.securityfocus.com/archive/1/482857/100/0/threaded",
"http://www.securityfocus.com/bid/26048",
"http://www.vupen.com/english/advisories/2007/3474",
"https://issues.rpath.com/browse/RPL-1825"
],
"PublishedDate": "2007-10-28T17:08:00Z",
"LastModifiedDate": "2026-04-23T00:35:47.467Z"
},
{
"VulnerabilityID": "CVE-2024-56433",
"PkgID": "login@1:4.13+dfsg1-1+deb12u2",
"PkgName": "login",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/login@4.13%2Bdfsg1-1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "f506aaa0a9653d73"
},
"InstalledVersion": "1:4.13+dfsg1-1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-56433",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:dc667a003c8584508b1948d900ca53f5b8a44acedf3b8d3e4cbbe27883255e25",
"Title": "shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise",
"Description": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
"Severity": "LOW",
"CweIDs": [
"CWE-1188"
],
"VendorSeverity": {
"alma": 1,
"azure": 1,
"oracle-oval": 1,
"redhat": 1,
"rocky": 1,
"ubuntu": 1
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"V3Score": 3.6
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2025:20559",
"https://access.redhat.com/security/cve/CVE-2024-56433",
"https://bugzilla.redhat.com/2334165",
"https://bugzilla.redhat.com/show_bug.cgi?id=2334165",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56433",
"https://errata.almalinux.org/9/ALSA-2025-20559.html",
"https://errata.rockylinux.org/RLSA-2025:20559",
"https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241",
"https://github.com/shadow-maint/shadow/issues/1157",
"https://github.com/shadow-maint/shadow/releases/tag/4.4",
"https://linux.oracle.com/cve/CVE-2024-56433.html",
"https://linux.oracle.com/errata/ELSA-2025-20559-0.html",
"https://nvd.nist.gov/vuln/detail/CVE-2024-56433",
"https://www.cve.org/CVERecord?id=CVE-2024-56433"
],
"PublishedDate": "2024-12-26T09:15:07.267Z",
"LastModifiedDate": "2026-06-17T08:12:10.903Z"
},
{
"VulnerabilityID": "TEMP-0628843-DBAD28",
"PkgID": "login@1:4.13+dfsg1-1+deb12u2",
"PkgName": "login",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/login@4.13%2Bdfsg1-1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "f506aaa0a9653d73"
},
"InstalledVersion": "1:4.13+dfsg1-1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:5a5017675a3a0441dee67cb631d52fbefccddc0835031430d35238d5e9d84d71",
"Title": "[more related to CVE-2005-4890]",
"Severity": "LOW",
"VendorSeverity": {
"debian": 1
}
},
{
"VulnerabilityID": "CVE-2026-53615",
"PkgID": "mount@2.38.1-5+deb12u3",
"PkgName": "mount",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "420d8a646a297157"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:3f75d3b243c68ca233390216c1b0e175734e79e8ab9c41c74fd9af550e96d4d9",
"Title": "[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]",
"Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-53615:\n\tInteger Overflow or Wraparound in libblkid/src/partitions/dos.c\n",
"Severity": "HIGH",
"VendorSeverity": {
"amazon": 3
}
},
{
"VulnerabilityID": "CVE-2026-13595",
"PkgID": "mount@2.38.1-5+deb12u3",
"PkgName": "mount",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "420d8a646a297157"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13595",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:50c2359ef506d4917a8db930e14c392005f51405216bfb19435552d42c85840a",
"Title": "util-linux: util-linux: heap use-after-free in libblkid nested partition probing",
"Description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-416"
],
"VendorSeverity": {
"azure": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:26573",
"https://access.redhat.com/security/cve/CVE-2026-13595",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
"https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13595",
"https://www.cve.org/CVERecord?id=CVE-2026-13595"
],
"PublishedDate": "2026-06-29T09:16:28.303Z",
"LastModifiedDate": "2026-07-08T03:37:21.637Z"
},
{
"VulnerabilityID": "CVE-2026-27456",
"PkgID": "mount@2.38.1-5+deb12u3",
"PkgName": "mount",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "420d8a646a297157"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27456",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:e0f6beb9556ecf319f3301c51c2c3a99f9e4c6c9afe6c82d15aeadb789f4f42b",
"Title": "util-linux: TOCTOU in the mount program when setting up loop devices",
"Description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59",
"CWE-269",
"CWE-367"
],
"VendorSeverity": {
"azure": 2,
"bottlerocket": 2,
"julia": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
"https://access.redhat.com/security/cve/CVE-2026-27456",
"https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml",
"https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4",
"https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
"https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27456",
"https://www.cve.org/CVERecord?id=CVE-2026-27456"
],
"PublishedDate": "2026-04-03T22:16:25.4Z",
"LastModifiedDate": "2026-07-24T22:10:00.14Z"
},
{
"VulnerabilityID": "CVE-2026-3184",
"PkgID": "mount@2.38.1-5+deb12u3",
"PkgName": "mount",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "420d8a646a297157"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-3184",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:1e4b1eb8e6faa91ceeb11e9b1c1c0a8c9f8d1eff304e5f2aa168d793515a0447",
"Title": "util-linux: util-linux: Access control bypass due to improper hostname canonicalization",
"Description": "A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-289"
],
"VendorSeverity": {
"azure": 1,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2026-3184",
"https://bugzilla.redhat.com/show_bug.cgi?id=2442570",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3184",
"https://www.cve.org/CVERecord?id=CVE-2026-3184"
],
"PublishedDate": "2026-04-03T19:17:23.377Z",
"LastModifiedDate": "2026-07-21T19:10:00.107Z"
},
{
"VulnerabilityID": "CVE-2022-0563",
"PkgID": "mount@2.38.1-5+deb12u3",
"PkgName": "mount",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "420d8a646a297157"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:a6a49ff21a877ca7857ec294ff80eb7f6d4e74eb5b3a881eecdbf2dbab4564ca",
"Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline",
"Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"Severity": "LOW",
"CweIDs": [
"CWE-209"
],
"VendorSeverity": {
"amazon": 2,
"bottlerocket": 2,
"cbl-mariner": 2,
"debian": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
},
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 1.9,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563",
"https://access.redhat.com/security/cve/CVE-2022-0563",
"https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-mv4q-wq4c-5xmg",
"https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
"https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
"https://security.gentoo.org/glsa/202401-08",
"https://security.netapp.com/advisory/ntap-20220331-0002/",
"https://www.cve.org/CVERecord?id=CVE-2022-0563"
],
"PublishedDate": "2022-02-21T19:15:08.393Z",
"LastModifiedDate": "2026-06-17T04:20:51.053Z"
},
{
"VulnerabilityID": "CVE-2025-14104",
"PkgID": "mount@2.38.1-5+deb12u3",
"PkgName": "mount",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "420d8a646a297157"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14104",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:32aca4b6756b3e205c66f0f712c71c361204679ed239726a32327705fd05ff6a",
"Title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames",
"Description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
"Severity": "LOW",
"CweIDs": [
"CWE-125"
],
"VendorSeverity": {
"alma": 2,
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:1696",
"https://access.redhat.com/errata/RHSA-2026:1852",
"https://access.redhat.com/errata/RHSA-2026:1913",
"https://access.redhat.com/errata/RHSA-2026:2485",
"https://access.redhat.com/errata/RHSA-2026:2563",
"https://access.redhat.com/errata/RHSA-2026:2737",
"https://access.redhat.com/errata/RHSA-2026:2800",
"https://access.redhat.com/errata/RHSA-2026:3406",
"https://access.redhat.com/errata/RHSA-2026:4943",
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2025-14104",
"https://bugzilla.redhat.com/2419369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
"https://errata.almalinux.org/9/ALSA-2026-1913.html",
"https://errata.rockylinux.org/RLSA-2026:1913",
"https://linux.oracle.com/cve/CVE-2025-14104.html",
"https://linux.oracle.com/errata/ELSA-2026-1913.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
"https://www.cve.org/CVERecord?id=CVE-2025-14104"
],
"PublishedDate": "2025-12-05T17:16:03.117Z",
"LastModifiedDate": "2026-06-30T00:16:53.04Z"
},
{
"VulnerabilityID": "CVE-2026-53613",
"PkgID": "mount@2.38.1-5+deb12u3",
"PkgName": "mount",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/mount@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "420d8a646a297157"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:0a522179424054a52325842fce38b9254d8dafd728477836f313bb2b6cdbb2fc",
"Title": "[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]",
"Severity": "UNKNOWN"
},
{
"VulnerabilityID": "CVE-2025-69720",
"PkgID": "ncurses-base@6.4-4",
"PkgName": "ncurses-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/ncurses-base@6.4-4?arch=all\u0026distro=debian-12.14",
"UID": "8e69deb4f19b17b3"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:549c0afc73cf757e8450e5dd6cff6f6dc24affc49a46c694841ea899c9d02d34",
"Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
"Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
"Severity": "HIGH",
"CweIDs": [
"CWE-121",
"CWE-120"
],
"VendorSeverity": {
"alma": 2,
"azure": 4,
"cbl-mariner": 4,
"nvd": 3,
"oracle-oval": 2,
"photon": 3,
"redhat": 2,
"rocky": 2,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"V3Score": 7.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 7.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:5913",
"https://access.redhat.com/security/cve/CVE-2025-69720",
"https://bugzilla.redhat.com/2449037",
"https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
"https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
"https://errata.almalinux.org/10/ALSA-2026-5913.html",
"https://errata.rockylinux.org/RLSA-2026:5913",
"https://github.com/Cao-Wuhui/CVE-2025-69720",
"https://invisible-island.net/archives/ncurses/6.5/",
"https://invisible-island.net/ncurses/",
"https://linux.oracle.com/cve/CVE-2025-69720.html",
"https://linux.oracle.com/errata/ELSA-2026-5913.html",
"https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
"https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
"https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
"https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
"https://ubuntu.com/security/notices/USN-8503-1",
"https://www.cve.org/CVERecord?id=CVE-2025-69720"
],
"PublishedDate": "2026-03-19T15:16:21.293Z",
"LastModifiedDate": "2026-06-17T10:00:50.423Z"
},
{
"VulnerabilityID": "CVE-2023-50495",
"PkgID": "ncurses-base@6.4-4",
"PkgName": "ncurses-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/ncurses-base@6.4-4?arch=all\u0026distro=debian-12.14",
"UID": "8e69deb4f19b17b3"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-50495",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c9bf50a736a47a2ca6354811b2645da98a819880c28c76b12b2204af9f0bed67",
"Title": "ncurses: segmentation fault via _nc_wrap_entry()",
"Description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
"Severity": "MEDIUM",
"VendorSeverity": {
"amazon": 2,
"cbl-mariner": 2,
"nvd": 2,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2023-50495",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
"https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
"https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
"https://security.netapp.com/advisory/ntap-20240119-0008/",
"https://ubuntu.com/security/notices/USN-6684-1",
"https://www.cve.org/CVERecord?id=CVE-2023-50495"
],
"PublishedDate": "2023-12-12T15:15:07.867Z",
"LastModifiedDate": "2026-06-17T06:39:44.053Z"
},
{
"VulnerabilityID": "CVE-2025-6141",
"PkgID": "ncurses-base@6.4-4",
"PkgName": "ncurses-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/ncurses-base@6.4-4?arch=all\u0026distro=debian-12.14",
"UID": "8e69deb4f19b17b3"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-6141",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:1408df13de01153ded9838444166ff32294771cd8dd4a035513561f310664fb5",
"Title": "gnu-ncurses: ncurses Stack Buffer Overflow",
"Description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
"Severity": "LOW",
"CweIDs": [
"CWE-119",
"CWE-121"
],
"VendorSeverity": {
"azure": 2,
"julia": 2,
"photon": 1,
"redhat": 1
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"V3Score": 3.3,
"V40Score": 4.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 3.3
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2025-6141",
"https://cert-portal.siemens.com/productcert/html/ssa-089022.html",
"https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
"https://github.com/advisories/GHSA-wfwf-ggr2-rpjf",
"https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
"https://vuldb.com/?ctiid.312610",
"https://vuldb.com/?id.312610",
"https://vuldb.com/?submit.593000",
"https://www.cve.org/CVERecord?id=CVE-2025-6141",
"https://www.gnu.org",
"https://www.gnu.org/"
],
"PublishedDate": "2025-06-16T22:16:41.527Z",
"LastModifiedDate": "2026-06-17T10:01:15.04Z"
},
{
"VulnerabilityID": "CVE-2025-69720",
"PkgID": "ncurses-bin@6.4-4",
"PkgName": "ncurses-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/ncurses-bin@6.4-4?arch=arm64\u0026distro=debian-12.14",
"UID": "1418b34f273972a0"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:387d4b275bd7dde2059c9f162a8cfc38fa30b6690aa0c590c33e4625b44c106b",
"Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.",
"Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.",
"Severity": "HIGH",
"CweIDs": [
"CWE-121",
"CWE-120"
],
"VendorSeverity": {
"alma": 2,
"azure": 4,
"cbl-mariner": 4,
"nvd": 3,
"oracle-oval": 2,
"photon": 3,
"redhat": 2,
"rocky": 2,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"V3Score": 7.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 7.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:5913",
"https://access.redhat.com/security/cve/CVE-2025-69720",
"https://bugzilla.redhat.com/2449037",
"https://bugzilla.redhat.com/show_bug.cgi?id=2449037",
"https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720",
"https://errata.almalinux.org/10/ALSA-2026-5913.html",
"https://errata.rockylinux.org/RLSA-2026:5913",
"https://github.com/Cao-Wuhui/CVE-2025-69720",
"https://invisible-island.net/archives/ncurses/6.5/",
"https://invisible-island.net/ncurses/",
"https://linux.oracle.com/cve/CVE-2025-69720.html",
"https://linux.oracle.com/errata/ELSA-2026-5913.html",
"https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2",
"https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2",
"https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2",
"https://nvd.nist.gov/vuln/detail/CVE-2025-69720",
"https://ubuntu.com/security/notices/USN-8503-1",
"https://www.cve.org/CVERecord?id=CVE-2025-69720"
],
"PublishedDate": "2026-03-19T15:16:21.293Z",
"LastModifiedDate": "2026-06-17T10:00:50.423Z"
},
{
"VulnerabilityID": "CVE-2023-50495",
"PkgID": "ncurses-bin@6.4-4",
"PkgName": "ncurses-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/ncurses-bin@6.4-4?arch=arm64\u0026distro=debian-12.14",
"UID": "1418b34f273972a0"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-50495",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:f38a8aeae35bef3baf041a8ac56a2c8cdac4114ae350decc3e7778477e9e904b",
"Title": "ncurses: segmentation fault via _nc_wrap_entry()",
"Description": "NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().",
"Severity": "MEDIUM",
"VendorSeverity": {
"amazon": 2,
"cbl-mariner": 2,
"nvd": 2,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2023-50495",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LU4MYMKFEZQ5VSCVLRIZGDQOUW3T44GT/",
"https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00020.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2023-04/msg00029.html",
"https://nvd.nist.gov/vuln/detail/CVE-2023-50495",
"https://security.netapp.com/advisory/ntap-20240119-0008/",
"https://ubuntu.com/security/notices/USN-6684-1",
"https://www.cve.org/CVERecord?id=CVE-2023-50495"
],
"PublishedDate": "2023-12-12T15:15:07.867Z",
"LastModifiedDate": "2026-06-17T06:39:44.053Z"
},
{
"VulnerabilityID": "CVE-2025-6141",
"PkgID": "ncurses-bin@6.4-4",
"PkgName": "ncurses-bin",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/ncurses-bin@6.4-4?arch=arm64\u0026distro=debian-12.14",
"UID": "1418b34f273972a0"
},
"InstalledVersion": "6.4-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-6141",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:8a330eff333aacba8a7a5be4047c3eded8a58563e5a056f01678dc5d13378374",
"Title": "gnu-ncurses: ncurses Stack Buffer Overflow",
"Description": "A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_termcap of the file tinfo/parse_entry.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. Upgrading to version 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component.",
"Severity": "LOW",
"CweIDs": [
"CWE-119",
"CWE-121"
],
"VendorSeverity": {
"azure": 2,
"julia": 2,
"photon": 1,
"redhat": 1
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"V3Score": 3.3,
"V40Score": 4.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 3.3
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2025-6141",
"https://cert-portal.siemens.com/productcert/html/ssa-089022.html",
"https://cert-portal.siemens.com/productcert/html/ssa-253495.html",
"https://github.com/advisories/GHSA-wfwf-ggr2-rpjf",
"https://invisible-island.net/ncurses/NEWS.html#index-t20250329",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html",
"https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-6141",
"https://vuldb.com/?ctiid.312610",
"https://vuldb.com/?id.312610",
"https://vuldb.com/?submit.593000",
"https://www.cve.org/CVERecord?id=CVE-2025-6141",
"https://www.gnu.org",
"https://www.gnu.org/"
],
"PublishedDate": "2025-06-16T22:16:41.527Z",
"LastModifiedDate": "2026-06-17T10:01:15.04Z"
},
{
"VulnerabilityID": "CVE-2007-5686",
"PkgID": "passwd@1:4.13+dfsg1-1+deb12u2",
"PkgName": "passwd",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/passwd@4.13%2Bdfsg1-1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "d17b237f13a8f0e3"
},
"InstalledVersion": "1:4.13+dfsg1-1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2007-5686",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:3a0ec20b71f4015c6b58511a233f79c24e1906b70a19778493bcfa81f5a29202",
"Title": "initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...",
"Description": "initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging failed authentication attempts by remote attackers.",
"Severity": "LOW",
"CweIDs": [
"CWE-264"
],
"VendorSeverity": {
"debian": 1,
"nvd": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
"V2Score": 4.9
}
},
"References": [
"http://secunia.com/advisories/27215",
"http://www.securityfocus.com/archive/1/482129/100/100/threaded",
"http://www.securityfocus.com/archive/1/482857/100/0/threaded",
"http://www.securityfocus.com/bid/26048",
"http://www.vupen.com/english/advisories/2007/3474",
"https://issues.rpath.com/browse/RPL-1825"
],
"PublishedDate": "2007-10-28T17:08:00Z",
"LastModifiedDate": "2026-04-23T00:35:47.467Z"
},
{
"VulnerabilityID": "CVE-2024-56433",
"PkgID": "passwd@1:4.13+dfsg1-1+deb12u2",
"PkgName": "passwd",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/passwd@4.13%2Bdfsg1-1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "d17b237f13a8f0e3"
},
"InstalledVersion": "1:4.13+dfsg1-1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-56433",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:47f762e6d6dfdc27a268a5e6654551eacfe16fad85a279910f2ac5fd58611197",
"Title": "shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise",
"Description": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
"Severity": "LOW",
"CweIDs": [
"CWE-1188"
],
"VendorSeverity": {
"alma": 1,
"azure": 1,
"oracle-oval": 1,
"redhat": 1,
"rocky": 1,
"ubuntu": 1
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"V3Score": 3.6
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2025:20559",
"https://access.redhat.com/security/cve/CVE-2024-56433",
"https://bugzilla.redhat.com/2334165",
"https://bugzilla.redhat.com/show_bug.cgi?id=2334165",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56433",
"https://errata.almalinux.org/9/ALSA-2025-20559.html",
"https://errata.rockylinux.org/RLSA-2025:20559",
"https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241",
"https://github.com/shadow-maint/shadow/issues/1157",
"https://github.com/shadow-maint/shadow/releases/tag/4.4",
"https://linux.oracle.com/cve/CVE-2024-56433.html",
"https://linux.oracle.com/errata/ELSA-2025-20559-0.html",
"https://nvd.nist.gov/vuln/detail/CVE-2024-56433",
"https://www.cve.org/CVERecord?id=CVE-2024-56433"
],
"PublishedDate": "2024-12-26T09:15:07.267Z",
"LastModifiedDate": "2026-06-17T08:12:10.903Z"
},
{
"VulnerabilityID": "TEMP-0628843-DBAD28",
"PkgID": "passwd@1:4.13+dfsg1-1+deb12u2",
"PkgName": "passwd",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/passwd@4.13%2Bdfsg1-1%2Bdeb12u2?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "d17b237f13a8f0e3"
},
"InstalledVersion": "1:4.13+dfsg1-1+deb12u2",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:68a51ea041d60b1b711279bff14081d02e108e26c34635cf0266ba1a65543f13",
"Title": "[more related to CVE-2005-4890]",
"Severity": "LOW",
"VendorSeverity": {
"debian": 1
}
},
{
"VulnerabilityID": "CVE-2026-13221",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13221",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:dac9ebe37f321b117c87081f022d52ebf8810538137e0a142f71cbaca9b2c635",
"Title": "Perl versions through 5.43.9 produce silently incorrect regular expres ...",
"Description": "Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.",
"Severity": "CRITICAL",
"CweIDs": [
"CWE-190"
],
"VendorSeverity": {
"azure": 2,
"nvd": 4
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"V3Score": 9.1
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/07/13/5",
"https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch",
"https://github.com/Perl/perl5/issues/23388",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13221"
],
"PublishedDate": "2026-07-13T17:16:48.923Z",
"LastModifiedDate": "2026-07-14T18:15:18.85Z"
},
{
"VulnerabilityID": "CVE-2026-42496",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42496",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:000f787bb5f85a6fa82856a0dc89b7d156b87f3dc57ba33d86cc45b72d10d720",
"Title": "perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access",
"Description": "Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target.\n\nA subsequent open through the extracted name reads or writes the attacker chosen path.",
"Severity": "CRITICAL",
"CweIDs": [
"CWE-59",
"CWE-22"
],
"VendorSeverity": {
"alma": 3,
"amazon": 3,
"azure": 3,
"nvd": 4,
"oracle-oval": 3,
"redhat": 3,
"rocky": 3,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"V3Score": 9.1
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"V3Score": 8.2
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:30851",
"https://access.redhat.com/errata/RHSA-2026:30852",
"https://access.redhat.com/errata/RHSA-2026:30856",
"https://access.redhat.com/errata/RHSA-2026:30857",
"https://access.redhat.com/security/cve/CVE-2026-42496",
"https://bugzilla.redhat.com/2481314",
"https://bugzilla.redhat.com/show_bug.cgi?id=2481314",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42496",
"https://errata.almalinux.org/9/ALSA-2026-30856.html",
"https://errata.rockylinux.org/RLSA-2026:30856",
"https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch",
"https://linux.oracle.com/cve/CVE-2026-42496.html",
"https://linux.oracle.com/errata/ELSA-2026-30857.html",
"https://lists.security.metacpan.org/cve-announce/msg/40396459/",
"https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42496",
"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json",
"https://ubuntu.com/security/notices/USN-8467-1",
"https://www.cve.org/CVERecord?id=CVE-2026-42496",
"https://www.cve.org/CVERecord?id=CVE-2026-42497"
],
"PublishedDate": "2026-05-26T02:16:40.13Z",
"LastModifiedDate": "2026-07-24T10:10:00.197Z"
},
{
"VulnerabilityID": "CVE-2026-57433",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57433",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:b01bfc251cd2a18352f86f8a02e195eab2e05e23dc3867bfb45f68e5169f2ff8",
"Title": "Storable versions before 3.41 for Perl have a signed integer overflow ...",
"Description": "Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.\n\nretrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.\n\nA crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.",
"Severity": "CRITICAL",
"CweIDs": [
"CWE-190"
],
"VendorSeverity": {
"azure": 4
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/07/13/7",
"https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch",
"https://nvd.nist.gov/vuln/detail/CVE-2026-57433"
],
"PublishedDate": "2026-07-13T17:17:55.783Z",
"LastModifiedDate": "2026-07-14T17:47:20.473Z"
},
{
"VulnerabilityID": "CVE-2026-8376",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8376",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:269dfb66402927abd44457604b3bb35cda68ef198ffddf0cb72195c964d50b45",
"Title": "perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds",
"Description": "Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.",
"Severity": "CRITICAL",
"CweIDs": [
"CWE-680"
],
"VendorSeverity": {
"amazon": 2,
"azure": 2,
"nvd": 4,
"photon": 4,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 9.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"V3Score": 5.7
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/26/1",
"https://access.redhat.com/security/cve/CVE-2026-8376",
"https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch",
"https://github.com/Perl/perl5/pull/24433",
"https://nvd.nist.gov/vuln/detail/CVE-2026-8376",
"https://ubuntu.com/security/notices/USN-8467-1",
"https://www.cve.org/CVERecord?id=CVE-2026-8376"
],
"PublishedDate": "2026-05-26T00:16:57.15Z",
"LastModifiedDate": "2026-07-23T11:10:00.12Z"
},
{
"VulnerabilityID": "CVE-2026-42497",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42497",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:83ea71ff5d99e212ce95e7907702d3558db8ebc65946c7b5fa50c376196ec813",
"Title": "perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction",
"Description": "Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to link() without validating it against absolute paths or .. segments, creating a hardlink that shares the victim file's inode.\n\nA subsequent write through the extracted name modifies the victim file, and the post-extraction chmod, chown, and utime block in _extract_file() (guarded only against symlinks via -l) applies the tar header's mode, owner, and timestamps to the shared inode during extraction alone.",
"Severity": "HIGH",
"CweIDs": [
"CWE-59",
"CWE-732"
],
"VendorSeverity": {
"amazon": 3,
"azure": 2,
"nvd": 3,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-42497",
"https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch",
"https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42497",
"https://www.cve.org/CVERecord?id=CVE-2026-42496",
"https://www.cve.org/CVERecord?id=CVE-2026-42497"
],
"PublishedDate": "2026-05-26T02:16:40.25Z",
"LastModifiedDate": "2026-07-24T11:10:00.17Z"
},
{
"VulnerabilityID": "CVE-2026-48962",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48962",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:8e7e090025fe6d7f3283ad215653ca129dd1937abe4093aff0d0856e50c5142d",
"Title": "perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob",
"Description": "IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege.",
"Severity": "HIGH",
"CweIDs": [
"CWE-95",
"CWE-94"
],
"VendorSeverity": {
"alma": 3,
"amazon": 3,
"azure": 3,
"oracle-oval": 3,
"redhat": 3,
"rocky": 3
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 7.8
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/27/4",
"https://access.redhat.com/errata/RHSA-2026:29182",
"https://access.redhat.com/errata/RHSA-2026:29210",
"https://access.redhat.com/errata/RHSA-2026:29867",
"https://access.redhat.com/errata/RHSA-2026:29941",
"https://access.redhat.com/errata/RHSA-2026:30085",
"https://access.redhat.com/errata/RHSA-2026:30086",
"https://access.redhat.com/errata/RHSA-2026:30115",
"https://access.redhat.com/errata/RHSA-2026:30843",
"https://access.redhat.com/errata/RHSA-2026:30851",
"https://access.redhat.com/errata/RHSA-2026:30858",
"https://access.redhat.com/errata/RHSA-2026:30859",
"https://access.redhat.com/errata/RHSA-2026:30860",
"https://access.redhat.com/security/cve/CVE-2026-48962",
"https://bugzilla.redhat.com/2481767",
"https://bugzilla.redhat.com/show_bug.cgi?id=2481767",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48962",
"https://errata.almalinux.org/9/ALSA-2026-30859.html",
"https://errata.rockylinux.org/RLSA-2026:30859",
"https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch",
"https://linux.oracle.com/cve/CVE-2026-48962.html",
"https://linux.oracle.com/errata/ELSA-2026-30860.html",
"https://metacpan.org/release/PMQS/IO-Compress-2.220/changes",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48962",
"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json",
"https://www.cve.org/CVERecord?id=CVE-2026-48962"
],
"PublishedDate": "2026-05-27T04:16:31.333Z",
"LastModifiedDate": "2026-07-24T12:10:00.21Z"
},
{
"VulnerabilityID": "CVE-2026-57432",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57432",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:62bb914893e4f79aed963a22bccec109e2d0429e9d86c0d570722041e25862fe",
"Title": "Perl versions through 5.43.10 have an integer overflow in S_measure_st ...",
"Description": "Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.\n\nS_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.\n\nA template derived from untrusted input can read heap memory past the buffer and return it to the caller.",
"Severity": "HIGH",
"CweIDs": [
"CWE-125",
"CWE-190"
],
"VendorSeverity": {
"azure": 3,
"nvd": 3
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 8.4
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/07/13/6",
"https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch",
"https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch",
"https://nvd.nist.gov/vuln/detail/CVE-2026-57432"
],
"PublishedDate": "2026-07-13T17:17:55.67Z",
"LastModifiedDate": "2026-07-14T18:04:48.367Z"
},
{
"VulnerabilityID": "CVE-2026-9538",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "fix_deferred",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:f853c953560b4f5941f4a362f6384babe523783241410d4bd523a310ed822cd0",
"Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size",
"Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.",
"Severity": "HIGH",
"CweIDs": [
"CWE-789"
],
"VendorSeverity": {
"amazon": 3,
"nvd": 3,
"redhat": 3
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/26/4",
"https://access.redhat.com/security/cve/CVE-2026-9538",
"https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch",
"https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes",
"https://nvd.nist.gov/vuln/detail/CVE-2026-9538",
"https://www.cve.org/CVERecord?id=CVE-2026-9538"
],
"PublishedDate": "2026-05-26T02:16:41.15Z",
"LastModifiedDate": "2026-07-23T11:10:00.12Z"
},
{
"VulnerabilityID": "CVE-2025-15649",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-15649",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:1549cc042872d37c4bfced88f95819c6c1b108a375011610af392553b72f82dd",
"Title": "perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header",
"Description": "IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date.\n\n_dosToUnixTime() decodes the local-file-header last-modification date field and calls Time::Local::timelocal() without an eval guard. A header whose date field decodes to an out-of-range month, day, or hour causes timelocal() to die.\n\nThe exception propagates out of IO::Uncompress::Unzip-\u003enew($file) where callers expect undef plus $UnzipError.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-248"
],
"VendorSeverity": {
"azure": 2,
"redhat": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/27/1",
"https://access.redhat.com/security/cve/CVE-2025-15649",
"https://github.com/pmqs/IO-Compress/commit/fd28c1d2374eee9811f6d0c5bddc0957abdf1da8.patch",
"https://github.com/pmqs/IO-Compress/issues/65",
"https://metacpan.org/release/PMQS/IO-Compress-2.215/changes",
"https://nvd.nist.gov/vuln/detail/CVE-2025-15649",
"https://www.cve.org/CVERecord?id=CVE-2025-15649"
],
"PublishedDate": "2026-05-27T04:16:23.873Z",
"LastModifiedDate": "2026-07-24T12:10:00.21Z"
},
{
"VulnerabilityID": "CVE-2026-12087",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-12087",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:087a6e911e9330ac3c9f353e13dc1ead37a105d5d486fd38d992c3ba6ece1188",
"Title": "perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read",
"Description": "Socket versions before 2.041 for Perl have an out-of-bounds heap read.\n\nIn Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.\n\nCalling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-125",
"CWE-805"
],
"VendorSeverity": {
"azure": 3,
"redhat": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"V3Score": 5.3
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/06/15/10",
"https://access.redhat.com/security/cve/CVE-2026-12087",
"https://github.com/Perl/perl5/commit/de19a0b0ad1900fef976c5c1400bd8f11ec6c6cb.patch",
"https://metacpan.org/release/PEVANS/Socket-2.041/changes",
"https://nvd.nist.gov/vuln/detail/CVE-2026-12087",
"https://www.cve.org/CVERecord?id=CVE-2026-12087"
],
"PublishedDate": "2026-06-15T22:16:16.197Z",
"LastModifiedDate": "2026-06-17T10:14:37.383Z"
},
{
"VulnerabilityID": "CVE-2026-48959",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48959",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:d870d2891955c3864dd5c0b58d49f99162a3cf8116217d23c511fb2bcb3b7c18",
"Title": "perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward",
"Description": "IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward.\n\nfastForward() compares length $offset (the digit count of the offset, 1 to 19) against the chunk size $c instead of $offset itself, so $c shrinks from 16 KiB to 1-19 bytes per iteration.\n\nExtracting a named entry from an attacker supplied zip via IO::Uncompress::Unzip-\u003enew($zip, Name =\u003e $target) drives a per-byte read loop scaling with the entry's compressed size, up to the non-Zip64 4 GiB cap.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-407"
],
"VendorSeverity": {
"amazon": 3,
"azure": 3,
"redhat": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 5
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/27/2",
"https://access.redhat.com/security/cve/CVE-2026-48959",
"https://github.com/pmqs/IO-Compress/commit/68db44076f4c1a86a2ffe53a958eac6cabaf72e2.patch",
"https://metacpan.org/release/PMQS/IO-Compress-2.220/changes",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48959",
"https://www.cve.org/CVERecord?id=CVE-2026-48959"
],
"PublishedDate": "2026-05-27T04:16:31.093Z",
"LastModifiedDate": "2026-07-24T12:10:00.21Z"
},
{
"VulnerabilityID": "CVE-2026-48961",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48961",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ef9d3efd8c847dacc2c6ad7d29051d6decd1450bae2e8877dd54fa682af828be",
"Title": "perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field",
"Description": "IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID.\n\nWhen decode_ux() in bin/zipdetails handles an Info-ZIP Unix Extra Field (tag 0x7875) with UID Size or GID Size set to 8, causing zipdetails to decode an 8-byte UID or GID value, it dispatches through decodeLitteEndian(), which calls a misnamed helper unpackValueQ. The actual function defined in the same file is unpackValue_Q (with underscore); the call raises 'Undefined subroutine \u0026main::unpackValueQ' and the script exits with status 255.\n\nLibrary callers of IO::Compress and IO::Uncompress are not affected; the defect is in the bundled CLI tool.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-755"
],
"VendorSeverity": {
"amazon": 3,
"redhat": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 5
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/27/3",
"https://access.redhat.com/security/cve/CVE-2026-48961",
"https://github.com/pmqs/IO-Compress/commit/33c89d03d6e746ed2ead4f2f6570d47864c61bc7.patch",
"https://metacpan.org/release/PMQS/IO-Compress-2.220/changes",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48961",
"https://www.cve.org/CVERecord?id=CVE-2026-48961"
],
"PublishedDate": "2026-05-27T04:16:31.21Z",
"LastModifiedDate": "2026-07-24T12:10:00.21Z"
},
{
"VulnerabilityID": "CVE-2026-7010",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-7010",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:675090001222eee89e2059317d30b9e79d031da917d5b0092b26beee790ddae5",
"Title": "HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ...",
"Description": "HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.\n\nThe unvalidated inputs are the method and URI in the request line, the URL host that becomes the `Host:` header, and HTTP/1.1 control data field values.\n\nAn attacker who controls one of these inputs, for example a user supplied URL passed to a webhook or URL fetch endpoint, can inject additional headers and smuggle requests to the upstream server.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-113"
],
"VendorSeverity": {
"amazon": 2
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/05/11/17",
"https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/d73c7651e82ace02693842df55928b6c3ae7c38d.patch",
"https://metacpan.org/release/HAARG/HTTP-Tiny-0.093-TRIAL/changes"
],
"PublishedDate": "2026-05-11T22:22:14.75Z",
"LastModifiedDate": "2026-06-17T11:01:37.993Z"
},
{
"VulnerabilityID": "CVE-2011-4116",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2011-4116",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:9aba7376120dc0c49f7686e378ddc0fc35324f37c9e6157ad0d83e5f22cb81e4",
"Title": "perl: File:: Temp insecure temporary file handling",
"Description": "_is_safe in the File::Temp module for Perl does not properly handle symlinks.",
"Severity": "LOW",
"CweIDs": [
"CWE-59"
],
"VendorSeverity": {
"debian": 1,
"nvd": 1,
"redhat": 1
},
"CVSS": {
"nvd": {
"V2Vector": "AV:L/AC:M/Au:S/C:N/I:P/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"V2Score": 1.5,
"V3Score": 3.3
},
"redhat": {
"V2Vector": "AV:L/AC:M/Au:N/C:N/I:P/A:N",
"V2Score": 1.9
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2011/11/04/2",
"http://www.openwall.com/lists/oss-security/2011/11/04/4",
"https://access.redhat.com/security/cve/CVE-2011-4116",
"https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14",
"https://nvd.nist.gov/vuln/detail/CVE-2011-4116",
"https://rt.cpan.org/Public/Bug/Display.html?id=69106",
"https://seclists.org/oss-sec/2011/q4/238",
"https://www.cve.org/CVERecord?id=CVE-2011-4116"
],
"PublishedDate": "2020-01-31T18:15:11.343Z",
"LastModifiedDate": "2025-08-04T19:04:38.29Z"
},
{
"VulnerabilityID": "CVE-2023-31486",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-31486",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ba7a5ceeed5cd37600c58238c01a9892d74e0dd9f809473022e1ae449f8ab680",
"Title": "http-tiny: perl: insecure TLS cert default",
"Description": "HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.",
"Severity": "LOW",
"CweIDs": [
"CWE-295"
],
"VendorSeverity": {
"alma": 2,
"amazon": 3,
"cbl-mariner": 3,
"debian": 1,
"nvd": 3,
"oracle-oval": 2,
"photon": 3,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 8.1
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 8.1
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2023/04/29/1",
"http://www.openwall.com/lists/oss-security/2023/05/03/3",
"http://www.openwall.com/lists/oss-security/2023/05/03/5",
"http://www.openwall.com/lists/oss-security/2023/05/07/2",
"https://access.redhat.com/errata/RHSA-2023:6542",
"https://access.redhat.com/security/cve/CVE-2023-31486",
"https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/",
"https://bugzilla.redhat.com/2228392",
"https://errata.almalinux.org/9/ALSA-2023-6542.html",
"https://github.com/chansen/p5-http-tiny/pull/153",
"https://hackeriet.github.io/cpan-http-tiny-overview/",
"https://linux.oracle.com/cve/CVE-2023-31486.html",
"https://linux.oracle.com/errata/ELSA-2023-7174.html",
"https://nvd.nist.gov/vuln/detail/CVE-2023-31486",
"https://security.netapp.com/advisory/ntap-20241129-0011/",
"https://www.cve.org/CVERecord?id=CVE-2023-31486",
"https://www.openwall.com/lists/oss-security/2023/04/18/14",
"https://www.openwall.com/lists/oss-security/2023/05/03/4",
"https://www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/"
],
"PublishedDate": "2023-04-29T00:15:09.083Z",
"LastModifiedDate": "2026-06-17T05:57:05.473Z"
},
{
"VulnerabilityID": "CVE-2026-7017",
"PkgID": "perl-base@5.36.0-7+deb12u3",
"PkgName": "perl-base",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/perl-base@5.36.0-7%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "7c39d6802a7617bc"
},
"InstalledVersion": "5.36.0-7+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-7017",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:71d81f28ed651870acbff80c20dda79841675eee860a0a0e0cdd5386864684c0",
"Title": "HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...",
"Description": "HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets.\n\nWhen the server returns a 3xx redirect, `_maybe_redirect` follows the `Location:` header and `_prepare_headers_and_cb` re-merges the caller's `headers` argument into the new request, without checking whether the redirect target shares an origin with the original URL. Caller-supplied `Authorization`, `Cookie` and `Proxy-Authorization` headers are therefore re-sent to whatever host the redirect names, across scheme, host or port boundaries, and including `https` to `http` downgrades that expose them in plaintext on the wire.\n\nThe HTTP::Tiny POD note that \"Authorization headers will not be included in a redirected request\" applied only to the URL-userinfo Basic-auth path, not to headers passed explicitly by the caller.",
"Severity": "UNKNOWN",
"CweIDs": [
"CWE-522"
],
"References": [
"http://www.openwall.com/lists/oss-security/2026/07/07/13",
"https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/84984ef3930ddd4afcf5eb83b40d3cee200739c3.patch",
"https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/8f32ca89e21c3ad0422adc698fa6ad17a193f55f.patch",
"https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/e7a03aedf2395158f2b0d3bad2df943349227bb3.patch",
"https://github.com/Perl-Toolchain-Gang/HTTP-Tiny/pull/36",
"https://metacpan.org/release/HAARG/HTTP-Tiny-0.095-TRIAL/changes"
],
"PublishedDate": "2026-07-07T19:16:55.53Z",
"LastModifiedDate": "2026-07-08T15:56:29.29Z"
},
{
"VulnerabilityID": "TEMP-0517018-A83CE6",
"PkgID": "sysvinit-utils@3.06-4",
"PkgName": "sysvinit-utils",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/sysvinit-utils@3.06-4?arch=arm64\u0026distro=debian-12.14",
"UID": "d048edf3ca47548e"
},
"InstalledVersion": "3.06-4",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:fe20cb6fce7b46d8b84fde0d22dd8fb4fd570d15bcf88b47011bd9a2668a8298",
"Title": "[sysvinit: no-root option in expert installer exposes locally exploitable security flaw]",
"Severity": "LOW",
"VendorSeverity": {
"debian": 1
}
},
{
"VulnerabilityID": "CVE-2026-5704",
"PkgID": "tar@1.34+dfsg-1.2+deb12u1",
"PkgName": "tar",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "91f4d59d9c1afa40"
},
"InstalledVersion": "1.34+dfsg-1.2+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-5704",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:8ecfb1c69fbc0576e1c963c6e7ab13fb2047767e5de0c4a98cb81b25f7683f1a",
"Title": "tar: tar: Hidden file injection via crafted archives",
"Description": "A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-434"
],
"VendorSeverity": {
"nvd": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
"V3Score": 5
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2026/04/11/10",
"http://www.openwall.com/lists/oss-security/2026/04/11/11",
"http://www.openwall.com/lists/oss-security/2026/04/12/2",
"https://access.redhat.com/security/cve/CVE-2026-5704",
"https://bugzilla.redhat.com/show_bug.cgi?id=2455360",
"https://nvd.nist.gov/vuln/detail/CVE-2026-5704",
"https://ubuntu.com/security/notices/USN-8477-1",
"https://ubuntu.com/security/notices/USN-8477-2",
"https://ubuntu.com/security/notices/USN-8477-3",
"https://www.cve.org/CVERecord?id=CVE-2026-5704"
],
"PublishedDate": "2026-04-06T16:16:42.14Z",
"LastModifiedDate": "2026-06-17T10:59:31.78Z"
},
{
"VulnerabilityID": "CVE-2005-2541",
"PkgID": "tar@1.34+dfsg-1.2+deb12u1",
"PkgName": "tar",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "91f4d59d9c1afa40"
},
"InstalledVersion": "1.34+dfsg-1.2+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2005-2541",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ea1da588d20c61fca823ce5653cd61de9992b2bdde254561d3e67f729f73beb6",
"Title": "tar: does not properly warn the user when extracting setuid or setgid files",
"Description": "Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.",
"Severity": "LOW",
"VendorSeverity": {
"debian": 1,
"nvd": 3,
"redhat": 2
},
"CVSS": {
"nvd": {
"V2Vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"V2Score": 10
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"V3Score": 7
}
},
"References": [
"http://marc.info/?l=bugtraq\u0026m=112327628230258\u0026w=2",
"https://access.redhat.com/security/cve/CVE-2005-2541",
"https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E",
"https://nvd.nist.gov/vuln/detail/CVE-2005-2541",
"https://www.cve.org/CVERecord?id=CVE-2005-2541"
],
"PublishedDate": "2005-08-10T04:00:00Z",
"LastModifiedDate": "2026-04-16T00:27:16.627Z"
},
{
"VulnerabilityID": "TEMP-0290435-0B57B5",
"PkgID": "tar@1.34+dfsg-1.2+deb12u1",
"PkgName": "tar",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/tar@1.34%2Bdfsg-1.2%2Bdeb12u1?arch=arm64\u0026distro=debian-12.14",
"UID": "91f4d59d9c1afa40"
},
"InstalledVersion": "1.34+dfsg-1.2+deb12u1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:cbc353061bb9bfa75d6bba59410a42e1089fa88a0d3d6774e8c474a70fa57276",
"Title": "[tar's rmt command may have undesired side effects]",
"Severity": "LOW",
"VendorSeverity": {
"debian": 1
}
},
{
"VulnerabilityID": "CVE-2026-53615",
"PkgID": "util-linux@2.38.1-5+deb12u3",
"PkgName": "util-linux",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "192d0e9306a19f41"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:bf79d0170cfa9a9b9ea7f1072990f41673b3022aa4f385b2afc99a12ea83b0ff",
"Title": "[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]",
"Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-53615:\n\tInteger Overflow or Wraparound in libblkid/src/partitions/dos.c\n",
"Severity": "HIGH",
"VendorSeverity": {
"amazon": 3
}
},
{
"VulnerabilityID": "CVE-2026-13595",
"PkgID": "util-linux@2.38.1-5+deb12u3",
"PkgName": "util-linux",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "192d0e9306a19f41"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13595",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ad3a49f88044df15136815e51ab24cd56ea2f9b1cb3181d6b5bc14e18c34d15b",
"Title": "util-linux: util-linux: heap use-after-free in libblkid nested partition probing",
"Description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-416"
],
"VendorSeverity": {
"azure": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:26573",
"https://access.redhat.com/security/cve/CVE-2026-13595",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
"https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13595",
"https://www.cve.org/CVERecord?id=CVE-2026-13595"
],
"PublishedDate": "2026-06-29T09:16:28.303Z",
"LastModifiedDate": "2026-07-08T03:37:21.637Z"
},
{
"VulnerabilityID": "CVE-2026-27456",
"PkgID": "util-linux@2.38.1-5+deb12u3",
"PkgName": "util-linux",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "192d0e9306a19f41"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27456",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:a19867beef8c0d00762fba616d9b7c441e9146ff56e1623585a588c6a5f0747b",
"Title": "util-linux: TOCTOU in the mount program when setting up loop devices",
"Description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59",
"CWE-269",
"CWE-367"
],
"VendorSeverity": {
"azure": 2,
"bottlerocket": 2,
"julia": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
"https://access.redhat.com/security/cve/CVE-2026-27456",
"https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml",
"https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4",
"https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
"https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27456",
"https://www.cve.org/CVERecord?id=CVE-2026-27456"
],
"PublishedDate": "2026-04-03T22:16:25.4Z",
"LastModifiedDate": "2026-07-24T22:10:00.14Z"
},
{
"VulnerabilityID": "CVE-2026-3184",
"PkgID": "util-linux@2.38.1-5+deb12u3",
"PkgName": "util-linux",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "192d0e9306a19f41"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-3184",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:1bf8bd223b34ce8106f4f683a55774f80092777a49679e92886d78fc57af9a71",
"Title": "util-linux: util-linux: Access control bypass due to improper hostname canonicalization",
"Description": "A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-289"
],
"VendorSeverity": {
"azure": 1,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2026-3184",
"https://bugzilla.redhat.com/show_bug.cgi?id=2442570",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3184",
"https://www.cve.org/CVERecord?id=CVE-2026-3184"
],
"PublishedDate": "2026-04-03T19:17:23.377Z",
"LastModifiedDate": "2026-07-21T19:10:00.107Z"
},
{
"VulnerabilityID": "CVE-2022-0563",
"PkgID": "util-linux@2.38.1-5+deb12u3",
"PkgName": "util-linux",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "192d0e9306a19f41"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:bdc51e7326d9cb38000bb933c6314b88770d4011600ca871fea5f8c6ce63099c",
"Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline",
"Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"Severity": "LOW",
"CweIDs": [
"CWE-209"
],
"VendorSeverity": {
"amazon": 2,
"bottlerocket": 2,
"cbl-mariner": 2,
"debian": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
},
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 1.9,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563",
"https://access.redhat.com/security/cve/CVE-2022-0563",
"https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-mv4q-wq4c-5xmg",
"https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
"https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
"https://security.gentoo.org/glsa/202401-08",
"https://security.netapp.com/advisory/ntap-20220331-0002/",
"https://www.cve.org/CVERecord?id=CVE-2022-0563"
],
"PublishedDate": "2022-02-21T19:15:08.393Z",
"LastModifiedDate": "2026-06-17T04:20:51.053Z"
},
{
"VulnerabilityID": "CVE-2025-14104",
"PkgID": "util-linux@2.38.1-5+deb12u3",
"PkgName": "util-linux",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "192d0e9306a19f41"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14104",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:491a637e29140ff6ed298ad43cb800c90af06fbf0bd22a510cf2b3431c310bb7",
"Title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames",
"Description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
"Severity": "LOW",
"CweIDs": [
"CWE-125"
],
"VendorSeverity": {
"alma": 2,
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:1696",
"https://access.redhat.com/errata/RHSA-2026:1852",
"https://access.redhat.com/errata/RHSA-2026:1913",
"https://access.redhat.com/errata/RHSA-2026:2485",
"https://access.redhat.com/errata/RHSA-2026:2563",
"https://access.redhat.com/errata/RHSA-2026:2737",
"https://access.redhat.com/errata/RHSA-2026:2800",
"https://access.redhat.com/errata/RHSA-2026:3406",
"https://access.redhat.com/errata/RHSA-2026:4943",
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2025-14104",
"https://bugzilla.redhat.com/2419369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
"https://errata.almalinux.org/9/ALSA-2026-1913.html",
"https://errata.rockylinux.org/RLSA-2026:1913",
"https://linux.oracle.com/cve/CVE-2025-14104.html",
"https://linux.oracle.com/errata/ELSA-2026-1913.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
"https://www.cve.org/CVERecord?id=CVE-2025-14104"
],
"PublishedDate": "2025-12-05T17:16:03.117Z",
"LastModifiedDate": "2026-06-30T00:16:53.04Z"
},
{
"VulnerabilityID": "CVE-2026-53613",
"PkgID": "util-linux@2.38.1-5+deb12u3",
"PkgName": "util-linux",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "192d0e9306a19f41"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c62eef13b128b42f81747dfba4b9f7646172835eba37043a168bf2430b83b402",
"Title": "[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]",
"Severity": "UNKNOWN"
},
{
"VulnerabilityID": "CVE-2026-53615",
"PkgID": "util-linux-extra@2.38.1-5+deb12u3",
"PkgName": "util-linux-extra",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "ab8a783e8d77ff59"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:e54b09954d8058058c9aea1ef825f02866b3f4059c4e4bc4c0a28bdbe4b2b529",
"Title": "[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]",
"Description": "Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2026-53615:\n\tInteger Overflow or Wraparound in libblkid/src/partitions/dos.c\n",
"Severity": "HIGH",
"VendorSeverity": {
"amazon": 3
}
},
{
"VulnerabilityID": "CVE-2026-13595",
"PkgID": "util-linux-extra@2.38.1-5+deb12u3",
"PkgName": "util-linux-extra",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "ab8a783e8d77ff59"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13595",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:1c80ba27e61bd1f109dc72c185e1b66f4f3260b41af1f23df0b98a24f20c3899",
"Title": "util-linux: util-linux: heap use-after-free in libblkid nested partition probing",
"Description": "A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-416"
],
"VendorSeverity": {
"azure": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.8
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:26573",
"https://access.redhat.com/security/cve/CVE-2026-13595",
"https://bugzilla.redhat.com/show_bug.cgi?id=2494101",
"https://github.com/util-linux/util-linux/commit/c0186f14fbdb02f64c8e0ba701ce727ea764ff4c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13595",
"https://www.cve.org/CVERecord?id=CVE-2026-13595"
],
"PublishedDate": "2026-06-29T09:16:28.303Z",
"LastModifiedDate": "2026-07-08T03:37:21.637Z"
},
{
"VulnerabilityID": "CVE-2026-27456",
"PkgID": "util-linux-extra@2.38.1-5+deb12u3",
"PkgName": "util-linux-extra",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "ab8a783e8d77ff59"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27456",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:cfe913075dfeb4e90a43fcc7dfe4da483e9ff1b2f083a017475aeda263521397",
"Title": "util-linux: TOCTOU in the mount program when setting up loop devices",
"Description": "util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SUID binary /usr/bin/mount from util-linux. The mount binary, when setting up loop devices, validates the source file path with user privileges via fork() + setuid() + realpath(), but subsequently re-canonicalizes and opens it with root privileges (euid=0) without verifying that the path has not been replaced between both operations. Neither O_NOFOLLOW, nor inode comparison, nor post-open fstat() are employed. This allows a local unprivileged user to replace the source file with a symlink pointing to any root-owned file or device during the race window, causing the SUID binary to open and mount it as root. Exploitation requires an /etc/fstab entry with user,loop options whose path points to a directory where the attacker has write permission, and that /usr/bin/mount has the SUID bit set (the default configuration on virtually all Linux distributions). The impact is unauthorized read access to root-protected files and block devices, including backup images, disk volumes, and any file containing a valid filesystem. This issue has been patched in version 2.41.4.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-59",
"CWE-269",
"CWE-367"
],
"VendorSeverity": {
"azure": 2,
"bottlerocket": 2,
"julia": 2,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 4.7
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456",
"https://access.redhat.com/security/cve/CVE-2026-27456",
"https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/14.5.0/BRSA-jgcxwcxt3sxd.toml",
"https://github.com/util-linux/util-linux/commit/5e390467b26a3cf3fecc04e1a0d482dff3162fc4",
"https://github.com/util-linux/util-linux/releases/tag/v2.41.4",
"https://github.com/util-linux/util-linux/security/advisories/GHSA-qq4x-vfq4-9h9g",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27456",
"https://www.cve.org/CVERecord?id=CVE-2026-27456"
],
"PublishedDate": "2026-04-03T22:16:25.4Z",
"LastModifiedDate": "2026-07-24T22:10:00.14Z"
},
{
"VulnerabilityID": "CVE-2026-3184",
"PkgID": "util-linux-extra@2.38.1-5+deb12u3",
"PkgName": "util-linux-extra",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "ab8a783e8d77ff59"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-3184",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:c121b13a652800e9ae567a3cd04d60b2e6c7e11dc2dc745b7447b2ba8999d9f9",
"Title": "util-linux: util-linux: Access control bypass due to improper hostname canonicalization",
"Description": "A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-289"
],
"VendorSeverity": {
"azure": 1,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 2
},
"CVSS": {
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 3.7
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2026-3184",
"https://bugzilla.redhat.com/show_bug.cgi?id=2442570",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3184",
"https://www.cve.org/CVERecord?id=CVE-2026-3184"
],
"PublishedDate": "2026-04-03T19:17:23.377Z",
"LastModifiedDate": "2026-07-21T19:10:00.107Z"
},
{
"VulnerabilityID": "CVE-2022-0563",
"PkgID": "util-linux-extra@2.38.1-5+deb12u3",
"PkgName": "util-linux-extra",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "ab8a783e8d77ff59"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2022-0563",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:ab9959b25ca2cc10adad519fb46cc70754957b639dcc40e6da8e4a88f3478bb3",
"Title": "util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline",
"Description": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"Severity": "LOW",
"CweIDs": [
"CWE-209"
],
"VendorSeverity": {
"amazon": 2,
"bottlerocket": 2,
"cbl-mariner": 2,
"debian": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 2
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
},
"nvd": {
"V2Vector": "AV:L/AC:M/Au:N/C:P/I:N/A:N",
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V2Score": 1.9,
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"V3Score": 5.5
}
},
"References": [
"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0563",
"https://access.redhat.com/security/cve/CVE-2022-0563",
"https://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline/",
"https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-mv4q-wq4c-5xmg",
"https://lore.kernel.org/util-linux/20220214110609.msiwlm457ngoic6w@ws.net.home/T/#u",
"https://nvd.nist.gov/vuln/detail/CVE-2022-0563",
"https://security.gentoo.org/glsa/202401-08",
"https://security.netapp.com/advisory/ntap-20220331-0002/",
"https://www.cve.org/CVERecord?id=CVE-2022-0563"
],
"PublishedDate": "2022-02-21T19:15:08.393Z",
"LastModifiedDate": "2026-06-17T04:20:51.053Z"
},
{
"VulnerabilityID": "CVE-2025-14104",
"PkgID": "util-linux-extra@2.38.1-5+deb12u3",
"PkgName": "util-linux-extra",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "ab8a783e8d77ff59"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "debian",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-14104",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:89d7b598cd5e9fa070f64a12a87427c70755a7e6fd844793de28e2616e70dec3",
"Title": "util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames",
"Description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.",
"Severity": "LOW",
"CweIDs": [
"CWE-125"
],
"VendorSeverity": {
"alma": 2,
"azure": 2,
"cbl-mariner": 2,
"debian": 1,
"oracle-oval": 2,
"photon": 2,
"redhat": 2,
"rocky": 2
},
"CVSS": {
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:1696",
"https://access.redhat.com/errata/RHSA-2026:1852",
"https://access.redhat.com/errata/RHSA-2026:1913",
"https://access.redhat.com/errata/RHSA-2026:2485",
"https://access.redhat.com/errata/RHSA-2026:2563",
"https://access.redhat.com/errata/RHSA-2026:2737",
"https://access.redhat.com/errata/RHSA-2026:2800",
"https://access.redhat.com/errata/RHSA-2026:3406",
"https://access.redhat.com/errata/RHSA-2026:4943",
"https://access.redhat.com/errata/RHSA-2026:7180",
"https://access.redhat.com/security/cve/CVE-2025-14104",
"https://bugzilla.redhat.com/2419369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2419369",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14104",
"https://errata.almalinux.org/9/ALSA-2026-1913.html",
"https://errata.rockylinux.org/RLSA-2026:1913",
"https://linux.oracle.com/cve/CVE-2025-14104.html",
"https://linux.oracle.com/errata/ELSA-2026-1913.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-14104",
"https://www.cve.org/CVERecord?id=CVE-2025-14104"
],
"PublishedDate": "2025-12-05T17:16:03.117Z",
"LastModifiedDate": "2026-06-30T00:16:53.04Z"
},
{
"VulnerabilityID": "CVE-2026-53613",
"PkgID": "util-linux-extra@2.38.1-5+deb12u3",
"PkgName": "util-linux-extra",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/util-linux-extra@2.38.1-5%2Bdeb12u3?arch=arm64\u0026distro=debian-12.14",
"UID": "ab8a783e8d77ff59"
},
"InstalledVersion": "2.38.1-5+deb12u3",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:4ae247a5110f7358d7b07344c395f057cf74f0dc612177e8782d1022033183f1",
"Title": "[Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection]",
"Severity": "UNKNOWN"
},
{
"VulnerabilityID": "CVE-2023-45853",
"PkgID": "zlib1g@1:1.2.13.dfsg-1",
"PkgName": "zlib1g",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/zlib1g@1.2.13.dfsg-1?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "9cee98a6d3479b11"
},
"InstalledVersion": "1:1.2.13.dfsg-1",
"Status": "will_not_fix",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2023-45853",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:f0dd9e2e79d044a939be27c02f5ad166fbd8e6bc397b9e23d90c63f502c96bd1",
"Title": "zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6",
"Description": "MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an affected zlib version, and exposes the applicable MiniZip code through its compress API.",
"Severity": "CRITICAL",
"CweIDs": [
"CWE-190"
],
"VendorSeverity": {
"amazon": 2,
"azure": 3,
"cbl-mariner": 4,
"ghsa": 4,
"julia": 4,
"nvd": 4,
"photon": 4,
"redhat": 2,
"ubuntu": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 9.8
},
"julia": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 9.8
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"V3Score": 9.8
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"V3Score": 5.3
}
},
"References": [
"http://www.openwall.com/lists/oss-security/2023/10/20/9",
"http://www.openwall.com/lists/oss-security/2024/01/24/10",
"https://access.redhat.com/security/cve/CVE-2023-45853",
"https://cert-portal.siemens.com/productcert/html/ssa-398330.html",
"https://cert-portal.siemens.com/productcert/html/ssa-470355.html",
"https://cert-portal.siemens.com/productcert/html/ssa-769027.html",
"https://chromium.googlesource.com/chromium/src/+/d709fb23806858847131027da95ef4c548813356",
"https://chromium.googlesource.com/chromium/src/+/de29dd6c7151d3cd37cb4cf0036800ddfb1d8b61",
"https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710f827d40a407d3266/contrib/README.contrib#L1-L4",
"https://github.com/madler/zlib/commit/73331a6a0481067628f065ffe87bb1d8f787d10c",
"https://github.com/madler/zlib/pull/843",
"https://github.com/smihica/pyminizip",
"https://github.com/smihica/pyminizip/blob/master/zlib-1.2.11/contrib/minizip/zip.c",
"https://lists.debian.org/debian-lts-announce/2023/11/msg00026.html",
"https://nvd.nist.gov/vuln/detail/CVE-2023-45853",
"https://pypi.org/project/pyminizip/#history",
"https://security.gentoo.org/glsa/202401-18",
"https://security.netapp.com/advisory/ntap-20231130-0009",
"https://security.netapp.com/advisory/ntap-20231130-0009/",
"https://ubuntu.com/security/notices/USN-7107-1",
"https://www.cve.org/CVERecord?id=CVE-2023-45853",
"https://www.winimage.com/zLibDll/minizip.html"
],
"PublishedDate": "2023-10-14T02:15:09.323Z",
"LastModifiedDate": "2026-07-14T13:17:02.983Z"
},
{
"VulnerabilityID": "CVE-2026-27171",
"PkgID": "zlib1g@1:1.2.13.dfsg-1",
"PkgName": "zlib1g",
"PkgIdentifier": {
"PURL": "pkg:deb/debian/zlib1g@1.2.13.dfsg-1?arch=arm64\u0026distro=debian-12.14\u0026epoch=1",
"UID": "9cee98a6d3479b11"
},
"InstalledVersion": "1:1.2.13.dfsg-1",
"Status": "affected",
"Layer": {
"Digest": "sha256:74f1dcfcc9c80045f6f6394ffcfc261cb19d0c71b97e964aec3d4abf4e0f7009",
"DiffID": "sha256:5b9cd2976ab91a69cd9bc7ff7bcf886b7d0a3518d4ec5f1e724d0f4cf8634197"
},
"SeveritySource": "nvd",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-27171",
"DataSource": {
"ID": "debian",
"Name": "Debian Security Tracker",
"URL": "https://salsa.debian.org/security-tracker-team/security-tracker"
},
"Fingerprint": "sha256:d2e568cbaf977ca06c36801d92d5dad2842c98b45f7878022c364a131b2e8bb8",
"Title": "zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions",
"Description": "zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-1284"
],
"VendorSeverity": {
"amazon": 1,
"azure": 1,
"cbl-mariner": 1,
"julia": 2,
"nvd": 2,
"photon": 2,
"redhat": 1,
"ubuntu": 1
},
"CVSS": {
"julia": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 5.5
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 3.3
}
},
"References": [
"https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit",
"https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/",
"https://7asecurity.com/reports/pentest-report-zlib-RC1.1.pdf",
"https://access.redhat.com/security/cve/CVE-2026-27171",
"https://github.com/advisories/GHSA-h858-mf2m-8jf4",
"https://github.com/madler/zlib/issues/904",
"https://github.com/madler/zlib/releases/tag/v1.3.2",
"https://nvd.nist.gov/vuln/detail/CVE-2026-27171",
"https://ostif.org/zlib-audit-complete",
"https://ostif.org/zlib-audit-complete/",
"https://www.cve.org/CVERecord?id=CVE-2026-27171"
],
"PublishedDate": "2026-02-18T04:16:01.263Z",
"LastModifiedDate": "2026-06-17T10:26:47.357Z"
}
]
},
{
"Target": "Node.js",
"Class": "lang-pkgs",
"Type": "node-pkg",
"Packages": [
{
"ID": "@hiverelay/blind-daemon@1.0.0-rc.1",
"Name": "@hiverelay/blind-daemon",
"Identifier": {
"PURL": "pkg:npm/%40hiverelay/blind-daemon@1.0.0-rc.1",
"UID": "5e01898a9c8ef6df"
},
"Version": "1.0.0-rc.1",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/@hiverelay/blind-daemon/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@hiverelay/blind-ipc@1.0.0-rc.1",
"Name": "@hiverelay/blind-ipc",
"Identifier": {
"PURL": "pkg:npm/%40hiverelay/blind-ipc@1.0.0-rc.1",
"UID": "f802b00f18998f29"
},
"Version": "1.0.0-rc.1",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/@hiverelay/blind-ipc/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@hiverelay/blind-peercred@1.0.0-rc.1",
"Name": "@hiverelay/blind-peercred",
"Identifier": {
"PURL": "pkg:npm/%40hiverelay/blind-peercred@1.0.0-rc.1",
"UID": "727907a8728efa7f"
},
"Version": "1.0.0-rc.1",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/@hiverelay/blind-peercred/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@hiverelay/blind-protocol@1.0.0-rc.1",
"Name": "@hiverelay/blind-protocol",
"Identifier": {
"PURL": "pkg:npm/%40hiverelay/blind-protocol@1.0.0-rc.1",
"UID": "2a33cf094db2a972"
},
"Version": "1.0.0-rc.1",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/@hiverelay/blind-protocol/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@isaacs/cliui@8.0.2",
"Name": "@isaacs/cliui",
"Identifier": {
"PURL": "pkg:npm/%40isaacs/cliui@8.0.2",
"UID": "b8227c9af53bf615"
},
"Version": "8.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@isaacs/fs-minipass@4.0.1",
"Name": "@isaacs/fs-minipass",
"Identifier": {
"PURL": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
"UID": "a243149143caa5d3"
},
"Version": "4.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/fs-minipass/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@isaacs/string-locale-compare@1.1.0",
"Name": "@isaacs/string-locale-compare",
"Identifier": {
"PURL": "pkg:npm/%40isaacs/string-locale-compare@1.1.0",
"UID": "4b7c47e3454f8345"
},
"Version": "1.1.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/string-locale-compare/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/agent@3.0.0",
"Name": "@npmcli/agent",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/agent@3.0.0",
"UID": "a200f48a14bc8d6d"
},
"Version": "3.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/agent/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/arborist@8.0.5",
"Name": "@npmcli/arborist",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/arborist@8.0.5",
"UID": "fbdc31566d3acae4"
},
"Version": "8.0.5",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/arborist/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/config@9.0.0",
"Name": "@npmcli/config",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/config@9.0.0",
"UID": "9a1231a6689da84b"
},
"Version": "9.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/config/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/fs@4.0.0",
"Name": "@npmcli/fs",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/fs@4.0.0",
"UID": "a99260a70eb10883"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/fs/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/git@6.0.3",
"Name": "@npmcli/git",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/git@6.0.3",
"UID": "a1c60860bd5c5710"
},
"Version": "6.0.3",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/git/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/installed-package-contents@3.0.0",
"Name": "@npmcli/installed-package-contents",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/installed-package-contents@3.0.0",
"UID": "6f210c833f2004b2"
},
"Version": "3.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/installed-package-contents/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/map-workspaces@4.0.2",
"Name": "@npmcli/map-workspaces",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/map-workspaces@4.0.2",
"UID": "7f83b53de880c241"
},
"Version": "4.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/map-workspaces/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/metavuln-calculator@8.0.1",
"Name": "@npmcli/metavuln-calculator",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/metavuln-calculator@8.0.1",
"UID": "3586c94b422e953b"
},
"Version": "8.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/name-from-folder@3.0.0",
"Name": "@npmcli/name-from-folder",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/name-from-folder@3.0.0",
"UID": "7dabbbc0ee1915d7"
},
"Version": "3.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/name-from-folder/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/node-gyp@4.0.0",
"Name": "@npmcli/node-gyp",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/node-gyp@4.0.0",
"UID": "2eeb8928b868a416"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/node-gyp/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/package-json@6.2.0",
"Name": "@npmcli/package-json",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/package-json@6.2.0",
"UID": "dddc37d11f4d0797"
},
"Version": "6.2.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/package-json/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/promise-spawn@8.0.3",
"Name": "@npmcli/promise-spawn",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/promise-spawn@8.0.3",
"UID": "a015a31611496882"
},
"Version": "8.0.3",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/query@4.0.1",
"Name": "@npmcli/query",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/query@4.0.1",
"UID": "6959557b7faec84b"
},
"Version": "4.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/query/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/redact@3.2.2",
"Name": "@npmcli/redact",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/redact@3.2.2",
"UID": "77edde12513778c9"
},
"Version": "3.2.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/redact/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@npmcli/run-script@9.1.0",
"Name": "@npmcli/run-script",
"Identifier": {
"PURL": "pkg:npm/%40npmcli/run-script@9.1.0",
"UID": "a5be34778fb73365"
},
"Version": "9.1.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/run-script/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@pkgjs/parseargs@0.11.0",
"Name": "@pkgjs/parseargs",
"Identifier": {
"PURL": "pkg:npm/%40pkgjs/parseargs@0.11.0",
"UID": "63153b366f22754b"
},
"Version": "0.11.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@pkgjs/parseargs/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@sigstore/bundle@3.1.0",
"Name": "@sigstore/bundle",
"Identifier": {
"PURL": "pkg:npm/%40sigstore/bundle@3.1.0",
"UID": "7927bc0e0cf7af0a"
},
"Version": "3.1.0",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/bundle/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@sigstore/core@2.0.0",
"Name": "@sigstore/core",
"Identifier": {
"PURL": "pkg:npm/%40sigstore/core@2.0.0",
"UID": "f70e70e8bb1a3ee"
},
"Version": "2.0.0",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/core/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@sigstore/protobuf-specs@0.4.3",
"Name": "@sigstore/protobuf-specs",
"Identifier": {
"PURL": "pkg:npm/%40sigstore/protobuf-specs@0.4.3",
"UID": "bd9b2ca6220a5a8e"
},
"Version": "0.4.3",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/protobuf-specs/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@sigstore/sign@3.1.0",
"Name": "@sigstore/sign",
"Identifier": {
"PURL": "pkg:npm/%40sigstore/sign@3.1.0",
"UID": "d4445bdd56ad3354"
},
"Version": "3.1.0",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/sign/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@sigstore/tuf@3.1.1",
"Name": "@sigstore/tuf",
"Identifier": {
"PURL": "pkg:npm/%40sigstore/tuf@3.1.1",
"UID": "35326683f394696e"
},
"Version": "3.1.1",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/tuf/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@sigstore/verify@2.1.1",
"Name": "@sigstore/verify",
"Identifier": {
"PURL": "pkg:npm/%40sigstore/verify@2.1.1",
"UID": "b04e03f3cc3a2f80"
},
"Version": "2.1.1",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/verify/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@tufjs/canonical-json@2.0.0",
"Name": "@tufjs/canonical-json",
"Identifier": {
"PURL": "pkg:npm/%40tufjs/canonical-json@2.0.0",
"UID": "c9bd83d46147e58a"
},
"Version": "2.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@tufjs/canonical-json/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "@tufjs/models@3.0.1",
"Name": "@tufjs/models",
"Identifier": {
"PURL": "pkg:npm/%40tufjs/models@3.0.1",
"UID": "fb2b26817b78ce2d"
},
"Version": "3.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/tuf-js/node_modules/@tufjs/models/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "abbrev@3.0.1",
"Name": "abbrev",
"Identifier": {
"PURL": "pkg:npm/abbrev@3.0.1",
"UID": "accb84b009d748f1"
},
"Version": "3.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/abbrev/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "agent-base@7.1.4",
"Name": "agent-base",
"Identifier": {
"PURL": "pkg:npm/agent-base@7.1.4",
"UID": "a29114964ca5cb1"
},
"Version": "7.1.4",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/agent-base/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ansi-regex@5.0.1",
"Name": "ansi-regex",
"Identifier": {
"PURL": "pkg:npm/ansi-regex@5.0.1",
"UID": "1516ae0336e3fe5b"
},
"Version": "5.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ansi-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ansi-regex@6.2.2",
"Name": "ansi-regex",
"Identifier": {
"PURL": "pkg:npm/ansi-regex@6.2.2",
"UID": "427b563abd9dea71"
},
"Version": "6.2.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ansi-regex@6.2.2",
"Name": "ansi-regex",
"Identifier": {
"PURL": "pkg:npm/ansi-regex@6.2.2",
"UID": "64537dc59acd477e"
},
"Version": "6.2.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/ansi-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ansi-styles@4.3.0",
"Name": "ansi-styles",
"Identifier": {
"PURL": "pkg:npm/ansi-styles@4.3.0",
"UID": "d8df5d7a0071b171"
},
"Version": "4.3.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ansi-styles@6.2.3",
"Name": "ansi-styles",
"Identifier": {
"PURL": "pkg:npm/ansi-styles@6.2.3",
"UID": "e8a1552423124ba2"
},
"Version": "6.2.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ansi-styles/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "aproba@2.1.0",
"Name": "aproba",
"Identifier": {
"PURL": "pkg:npm/aproba@2.1.0",
"UID": "65b5d298c3c834d"
},
"Version": "2.1.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/aproba/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "archy@1.0.0",
"Name": "archy",
"Identifier": {
"PURL": "pkg:npm/archy@1.0.0",
"UID": "c6f97df2c6bd73cd"
},
"Version": "1.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/archy/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "b4a@1.8.1",
"Name": "b4a",
"Identifier": {
"PURL": "pkg:npm/b4a@1.8.1",
"UID": "f54b9f0fb46ff70f"
},
"Version": "1.8.1",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/b4a/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "balanced-match@1.0.2",
"Name": "balanced-match",
"Identifier": {
"PURL": "pkg:npm/balanced-match@1.0.2",
"UID": "292b6cb8de8f521c"
},
"Version": "1.0.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/balanced-match/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "bare-addon-resolve@1.10.0",
"Name": "bare-addon-resolve",
"Identifier": {
"PURL": "pkg:npm/bare-addon-resolve@1.10.0",
"UID": "794475b8c73674e3"
},
"Version": "1.10.0",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/bare-addon-resolve/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "bare-module-resolve@1.12.2",
"Name": "bare-module-resolve",
"Identifier": {
"PURL": "pkg:npm/bare-module-resolve@1.12.2",
"UID": "23de42b335e800f"
},
"Version": "1.12.2",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/bare-module-resolve/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "bare-semver@1.1.0",
"Name": "bare-semver",
"Identifier": {
"PURL": "pkg:npm/bare-semver@1.1.0",
"UID": "8fcd2e0c2ab6f0cb"
},
"Version": "1.1.0",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/bare-semver/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "bin-links@5.0.0",
"Name": "bin-links",
"Identifier": {
"PURL": "pkg:npm/bin-links@5.0.0",
"UID": "1dd9a7be9aed6fc4"
},
"Version": "5.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/bin-links/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "binary-extensions@2.3.0",
"Name": "binary-extensions",
"Identifier": {
"PURL": "pkg:npm/binary-extensions@2.3.0",
"UID": "230ec0fa5d8085ed"
},
"Version": "2.3.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/binary-extensions/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "brace-expansion@2.0.2",
"Name": "brace-expansion",
"Identifier": {
"PURL": "pkg:npm/brace-expansion@2.0.2",
"UID": "81ea87e5789052ae"
},
"Version": "2.0.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "cacache@19.0.1",
"Name": "cacache",
"Identifier": {
"PURL": "pkg:npm/cacache@19.0.1",
"UID": "bc0a0e917abe1794"
},
"Version": "19.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/cacache/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "chalk@5.6.2",
"Name": "chalk",
"Identifier": {
"PURL": "pkg:npm/chalk@5.6.2",
"UID": "1f19bd2e420a59a6"
},
"Version": "5.6.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/chalk/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "chownr@3.0.0",
"Name": "chownr",
"Identifier": {
"PURL": "pkg:npm/chownr@3.0.0",
"UID": "c2446e59cf4aad08"
},
"Version": "3.0.0",
"Licenses": [
"BlueOak-1.0.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/chownr/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ci-info@4.4.0",
"Name": "ci-info",
"Identifier": {
"PURL": "pkg:npm/ci-info@4.4.0",
"UID": "ec9c48df6b096b3a"
},
"Version": "4.4.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ci-info/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "cidr-regex@4.1.3",
"Name": "cidr-regex",
"Identifier": {
"PURL": "pkg:npm/cidr-regex@4.1.3",
"UID": "555f12f4d301792f"
},
"Version": "4.1.3",
"Licenses": [
"BSD-2-Clause"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/cidr-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "cli-columns@4.0.0",
"Name": "cli-columns",
"Identifier": {
"PURL": "pkg:npm/cli-columns@4.0.0",
"UID": "c13347c6a11babea"
},
"Version": "4.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/cli-columns/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "cmd-shim@7.0.0",
"Name": "cmd-shim",
"Identifier": {
"PURL": "pkg:npm/cmd-shim@7.0.0",
"UID": "fb59eec8b6d45069"
},
"Version": "7.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/cmd-shim/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "color-convert@2.0.1",
"Name": "color-convert",
"Identifier": {
"PURL": "pkg:npm/color-convert@2.0.1",
"UID": "bd1efdd30f697050"
},
"Version": "2.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/color-convert/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "color-name@1.1.4",
"Name": "color-name",
"Identifier": {
"PURL": "pkg:npm/color-name@1.1.4",
"UID": "d139f68849e5a900"
},
"Version": "1.1.4",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/color-name/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "common-ancestor-path@1.0.1",
"Name": "common-ancestor-path",
"Identifier": {
"PURL": "pkg:npm/common-ancestor-path@1.0.1",
"UID": "75be870e681ddfc7"
},
"Version": "1.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/common-ancestor-path/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "compact-encoding@2.19.2",
"Name": "compact-encoding",
"Identifier": {
"PURL": "pkg:npm/compact-encoding@2.19.2",
"UID": "e251f438051f1d4"
},
"Version": "2.19.2",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/compact-encoding/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "corepack@0.34.6",
"Name": "corepack",
"Identifier": {
"PURL": "pkg:npm/corepack@0.34.6",
"UID": "36651e0812a33f0c"
},
"Version": "0.34.6",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/corepack/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "cross-spawn@7.0.6",
"Name": "cross-spawn",
"Identifier": {
"PURL": "pkg:npm/cross-spawn@7.0.6",
"UID": "61f4e4c7fed1b814"
},
"Version": "7.0.6",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/cross-spawn/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "cssesc@3.0.0",
"Name": "cssesc",
"Identifier": {
"PURL": "pkg:npm/cssesc@3.0.0",
"UID": "7f5523593daaa2d6"
},
"Version": "3.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/cssesc/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "debug@4.4.3",
"Name": "debug",
"Identifier": {
"PURL": "pkg:npm/debug@4.4.3",
"UID": "cbfc08d5e097ff06"
},
"Version": "4.4.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/debug/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "diff@5.2.2",
"Name": "diff",
"Identifier": {
"PURL": "pkg:npm/diff@5.2.2",
"UID": "57669da130973e2"
},
"Version": "5.2.2",
"Licenses": [
"BSD-3-Clause"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/diff/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "eastasianwidth@0.2.0",
"Name": "eastasianwidth",
"Identifier": {
"PURL": "pkg:npm/eastasianwidth@0.2.0",
"UID": "e837d05849c9e09b"
},
"Version": "0.2.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/eastasianwidth/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "emoji-regex@8.0.0",
"Name": "emoji-regex",
"Identifier": {
"PURL": "pkg:npm/emoji-regex@8.0.0",
"UID": "ff9f7d586cb43e8d"
},
"Version": "8.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/emoji-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "emoji-regex@9.2.2",
"Name": "emoji-regex",
"Identifier": {
"PURL": "pkg:npm/emoji-regex@9.2.2",
"UID": "e3da15e8bc9892e"
},
"Version": "9.2.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "emoji-regex@9.2.2",
"Name": "emoji-regex",
"Identifier": {
"PURL": "pkg:npm/emoji-regex@9.2.2",
"UID": "cce19d255d5bd19d"
},
"Version": "9.2.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/emoji-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "encoding@0.1.13",
"Name": "encoding",
"Identifier": {
"PURL": "pkg:npm/encoding@0.1.13",
"UID": "b275a07a9d6210f1"
},
"Version": "0.1.13",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/encoding/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "env-paths@2.2.1",
"Name": "env-paths",
"Identifier": {
"PURL": "pkg:npm/env-paths@2.2.1",
"UID": "4d5f9228dca262ad"
},
"Version": "2.2.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/env-paths/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "err-code@2.0.3",
"Name": "err-code",
"Identifier": {
"PURL": "pkg:npm/err-code@2.0.3",
"UID": "6520b55ebdc1fc1"
},
"Version": "2.0.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/err-code/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "exponential-backoff@3.1.3",
"Name": "exponential-backoff",
"Identifier": {
"PURL": "pkg:npm/exponential-backoff@3.1.3",
"UID": "1b8f0088b2ee45c2"
},
"Version": "3.1.3",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/exponential-backoff/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "fastest-levenshtein@1.0.16",
"Name": "fastest-levenshtein",
"Identifier": {
"PURL": "pkg:npm/fastest-levenshtein@1.0.16",
"UID": "c2930316b43e3802"
},
"Version": "1.0.16",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/fastest-levenshtein/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "fdir@6.5.0",
"Name": "fdir",
"Identifier": {
"PURL": "pkg:npm/fdir@6.5.0",
"UID": "9c948f687b5a10c1"
},
"Version": "6.5.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/fdir/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "foreground-child@3.3.1",
"Name": "foreground-child",
"Identifier": {
"PURL": "pkg:npm/foreground-child@3.3.1",
"UID": "b66b3e60c9840580"
},
"Version": "3.3.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/foreground-child/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "fs-minipass@3.0.3",
"Name": "fs-minipass",
"Identifier": {
"PURL": "pkg:npm/fs-minipass@3.0.3",
"UID": "fcead9aef62eff18"
},
"Version": "3.0.3",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/fs-minipass/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "glob@10.5.0",
"Name": "glob",
"Identifier": {
"PURL": "pkg:npm/glob@10.5.0",
"UID": "d5cced6625c74cc"
},
"Version": "10.5.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/glob/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "graceful-fs@4.2.11",
"Name": "graceful-fs",
"Identifier": {
"PURL": "pkg:npm/graceful-fs@4.2.11",
"UID": "48999ee23c560636"
},
"Version": "4.2.11",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/graceful-fs/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "hosted-git-info@8.1.0",
"Name": "hosted-git-info",
"Identifier": {
"PURL": "pkg:npm/hosted-git-info@8.1.0",
"UID": "2473223e22e19f08"
},
"Version": "8.1.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/hosted-git-info/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "http-cache-semantics@4.2.0",
"Name": "http-cache-semantics",
"Identifier": {
"PURL": "pkg:npm/http-cache-semantics@4.2.0",
"UID": "f7b0a7c67def6ec7"
},
"Version": "4.2.0",
"Licenses": [
"BSD-2-Clause"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/http-cache-semantics/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "http-proxy-agent@7.0.2",
"Name": "http-proxy-agent",
"Identifier": {
"PURL": "pkg:npm/http-proxy-agent@7.0.2",
"UID": "b03040e191aa89aa"
},
"Version": "7.0.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/http-proxy-agent/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "https-proxy-agent@7.0.6",
"Name": "https-proxy-agent",
"Identifier": {
"PURL": "pkg:npm/https-proxy-agent@7.0.6",
"UID": "e351f3713548ce82"
},
"Version": "7.0.6",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/https-proxy-agent/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "iconv-lite@0.6.3",
"Name": "iconv-lite",
"Identifier": {
"PURL": "pkg:npm/iconv-lite@0.6.3",
"UID": "3b91bc453b91fa4"
},
"Version": "0.6.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/iconv-lite/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ignore-walk@7.0.0",
"Name": "ignore-walk",
"Identifier": {
"PURL": "pkg:npm/ignore-walk@7.0.0",
"UID": "a3cf6024c4423a1f"
},
"Version": "7.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ignore-walk/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "imurmurhash@0.1.4",
"Name": "imurmurhash",
"Identifier": {
"PURL": "pkg:npm/imurmurhash@0.1.4",
"UID": "8c2f7026a19bfbd"
},
"Version": "0.1.4",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/imurmurhash/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ini@5.0.0",
"Name": "ini",
"Identifier": {
"PURL": "pkg:npm/ini@5.0.0",
"UID": "a3bff60fc5b19975"
},
"Version": "5.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ini/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "init-package-json@7.0.2",
"Name": "init-package-json",
"Identifier": {
"PURL": "pkg:npm/init-package-json@7.0.2",
"UID": "f9a5f13066987842"
},
"Version": "7.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/init-package-json/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ip-address@10.1.0",
"Name": "ip-address",
"Identifier": {
"PURL": "pkg:npm/ip-address@10.1.0",
"UID": "88a805ee478f0c75"
},
"Version": "10.1.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ip-address/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ip-regex@5.0.0",
"Name": "ip-regex",
"Identifier": {
"PURL": "pkg:npm/ip-regex@5.0.0",
"UID": "41a7ec2cac2596f3"
},
"Version": "5.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ip-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "is-cidr@5.1.1",
"Name": "is-cidr",
"Identifier": {
"PURL": "pkg:npm/is-cidr@5.1.1",
"UID": "979912027a25476e"
},
"Version": "5.1.1",
"Licenses": [
"BSD-2-Clause"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/is-cidr/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "is-fullwidth-code-point@3.0.0",
"Name": "is-fullwidth-code-point",
"Identifier": {
"PURL": "pkg:npm/is-fullwidth-code-point@3.0.0",
"UID": "ad71067c5da66cd8"
},
"Version": "3.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/is-fullwidth-code-point/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "isexe@2.0.0",
"Name": "isexe",
"Identifier": {
"PURL": "pkg:npm/isexe@2.0.0",
"UID": "7ef0cf39565c06a4"
},
"Version": "2.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/isexe/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "isexe@3.1.5",
"Name": "isexe",
"Identifier": {
"PURL": "pkg:npm/isexe@3.1.5",
"UID": "6cee478c2cce97e3"
},
"Version": "3.1.5",
"Licenses": [
"BlueOak-1.0.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/which/node_modules/isexe/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "jackspeak@3.4.3",
"Name": "jackspeak",
"Identifier": {
"PURL": "pkg:npm/jackspeak@3.4.3",
"UID": "70a6f223353e0b6e"
},
"Version": "3.4.3",
"Licenses": [
"BlueOak-1.0.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/jackspeak/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "json-parse-even-better-errors@4.0.0",
"Name": "json-parse-even-better-errors",
"Identifier": {
"PURL": "pkg:npm/json-parse-even-better-errors@4.0.0",
"UID": "eef59382e1d5f78d"
},
"Version": "4.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/json-parse-even-better-errors/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "json-stringify-nice@1.1.4",
"Name": "json-stringify-nice",
"Identifier": {
"PURL": "pkg:npm/json-stringify-nice@1.1.4",
"UID": "c5c27ed2359935d9"
},
"Version": "1.1.4",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/json-stringify-nice/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "jsonparse@1.3.1",
"Name": "jsonparse",
"Identifier": {
"PURL": "pkg:npm/jsonparse@1.3.1",
"UID": "6d24ba846346e57e"
},
"Version": "1.3.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/jsonparse/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "just-diff@6.0.2",
"Name": "just-diff",
"Identifier": {
"PURL": "pkg:npm/just-diff@6.0.2",
"UID": "c6c2fd84314937b7"
},
"Version": "6.0.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/just-diff/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "just-diff-apply@5.5.0",
"Name": "just-diff-apply",
"Identifier": {
"PURL": "pkg:npm/just-diff-apply@5.5.0",
"UID": "f52effebae09b036"
},
"Version": "5.5.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/just-diff-apply/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmaccess@9.0.0",
"Name": "libnpmaccess",
"Identifier": {
"PURL": "pkg:npm/libnpmaccess@9.0.0",
"UID": "36d23673811b2cdc"
},
"Version": "9.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmaccess/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmdiff@7.0.5",
"Name": "libnpmdiff",
"Identifier": {
"PURL": "pkg:npm/libnpmdiff@7.0.5",
"UID": "26287702ddfe6297"
},
"Version": "7.0.5",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmdiff/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmexec@9.0.5",
"Name": "libnpmexec",
"Identifier": {
"PURL": "pkg:npm/libnpmexec@9.0.5",
"UID": "892e9eb1cacfc807"
},
"Version": "9.0.5",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmexec/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmfund@6.0.5",
"Name": "libnpmfund",
"Identifier": {
"PURL": "pkg:npm/libnpmfund@6.0.5",
"UID": "c1b993a9a1f3969d"
},
"Version": "6.0.5",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmfund/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmhook@11.0.0",
"Name": "libnpmhook",
"Identifier": {
"PURL": "pkg:npm/libnpmhook@11.0.0",
"UID": "98107d57f4eae788"
},
"Version": "11.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmhook/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmorg@7.0.0",
"Name": "libnpmorg",
"Identifier": {
"PURL": "pkg:npm/libnpmorg@7.0.0",
"UID": "d127861fbddf85c1"
},
"Version": "7.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmorg/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmpack@8.0.5",
"Name": "libnpmpack",
"Identifier": {
"PURL": "pkg:npm/libnpmpack@8.0.5",
"UID": "f7e1b50c0f974d62"
},
"Version": "8.0.5",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmpack/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmpublish@10.0.2",
"Name": "libnpmpublish",
"Identifier": {
"PURL": "pkg:npm/libnpmpublish@10.0.2",
"UID": "caee096f910b3e55"
},
"Version": "10.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmpublish/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmsearch@8.0.0",
"Name": "libnpmsearch",
"Identifier": {
"PURL": "pkg:npm/libnpmsearch@8.0.0",
"UID": "85266cc6f2979458"
},
"Version": "8.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmsearch/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmteam@7.0.0",
"Name": "libnpmteam",
"Identifier": {
"PURL": "pkg:npm/libnpmteam@7.0.0",
"UID": "ed7b356168d3529e"
},
"Version": "7.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmteam/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "libnpmversion@7.0.0",
"Name": "libnpmversion",
"Identifier": {
"PURL": "pkg:npm/libnpmversion@7.0.0",
"UID": "f52eba6e43d982f5"
},
"Version": "7.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/libnpmversion/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "lru-cache@10.4.3",
"Name": "lru-cache",
"Identifier": {
"PURL": "pkg:npm/lru-cache@10.4.3",
"UID": "7d681053381ec2bc"
},
"Version": "10.4.3",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/lru-cache/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "make-fetch-happen@14.0.3",
"Name": "make-fetch-happen",
"Identifier": {
"PURL": "pkg:npm/make-fetch-happen@14.0.3",
"UID": "da8860cfe3310af9"
},
"Version": "14.0.3",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/make-fetch-happen/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minimatch@9.0.9",
"Name": "minimatch",
"Identifier": {
"PURL": "pkg:npm/minimatch@9.0.9",
"UID": "773f304ec036ee34"
},
"Version": "9.0.9",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minimatch/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass@3.3.6",
"Name": "minipass",
"Identifier": {
"PURL": "pkg:npm/minipass@3.3.6",
"UID": "7efbc5baf98c8d10"
},
"Version": "3.3.6",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-flush/node_modules/minipass/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass@3.3.6",
"Name": "minipass",
"Identifier": {
"PURL": "pkg:npm/minipass@3.3.6",
"UID": "b7ce61ea2292da41"
},
"Version": "3.3.6",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/minipass/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass@3.3.6",
"Name": "minipass",
"Identifier": {
"PURL": "pkg:npm/minipass@3.3.6",
"UID": "336c142883f370bb"
},
"Version": "3.3.6",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-sized/node_modules/minipass/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass@7.1.3",
"Name": "minipass",
"Identifier": {
"PURL": "pkg:npm/minipass@7.1.3",
"UID": "4051bad8dec024d1"
},
"Version": "7.1.3",
"Licenses": [
"BlueOak-1.0.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass-collect@2.0.1",
"Name": "minipass-collect",
"Identifier": {
"PURL": "pkg:npm/minipass-collect@2.0.1",
"UID": "c5f716d9c0ec4b92"
},
"Version": "2.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-collect/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass-fetch@4.0.1",
"Name": "minipass-fetch",
"Identifier": {
"PURL": "pkg:npm/minipass-fetch@4.0.1",
"UID": "c12f3b8ebc68890f"
},
"Version": "4.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-fetch/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass-flush@1.0.5",
"Name": "minipass-flush",
"Identifier": {
"PURL": "pkg:npm/minipass-flush@1.0.5",
"UID": "4e155f4804d5b01e"
},
"Version": "1.0.5",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-flush/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass-pipeline@1.2.4",
"Name": "minipass-pipeline",
"Identifier": {
"PURL": "pkg:npm/minipass-pipeline@1.2.4",
"UID": "f9ca1e5f3449b3dc"
},
"Version": "1.2.4",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minipass-sized@1.0.3",
"Name": "minipass-sized",
"Identifier": {
"PURL": "pkg:npm/minipass-sized@1.0.3",
"UID": "e396142656705cf8"
},
"Version": "1.0.3",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-sized/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "minizlib@3.1.0",
"Name": "minizlib",
"Identifier": {
"PURL": "pkg:npm/minizlib@3.1.0",
"UID": "c55f100e28b906b"
},
"Version": "3.1.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minizlib/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ms@2.1.3",
"Name": "ms",
"Identifier": {
"PURL": "pkg:npm/ms@2.1.3",
"UID": "50a140c9d554dc56"
},
"Version": "2.1.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ms/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "mute-stream@2.0.0",
"Name": "mute-stream",
"Identifier": {
"PURL": "pkg:npm/mute-stream@2.0.0",
"UID": "73f25d912e1a8ff2"
},
"Version": "2.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/mute-stream/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "negotiator@1.0.0",
"Name": "negotiator",
"Identifier": {
"PURL": "pkg:npm/negotiator@1.0.0",
"UID": "28c19cc3e361ce6c"
},
"Version": "1.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/negotiator/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "node-gyp@11.5.0",
"Name": "node-gyp",
"Identifier": {
"PURL": "pkg:npm/node-gyp@11.5.0",
"UID": "7878d2102121db27"
},
"Version": "11.5.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/node-gyp/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "nopt@8.1.0",
"Name": "nopt",
"Identifier": {
"PURL": "pkg:npm/nopt@8.1.0",
"UID": "41cab835ae9660fb"
},
"Version": "8.1.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/nopt/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "normalize-package-data@7.0.1",
"Name": "normalize-package-data",
"Identifier": {
"PURL": "pkg:npm/normalize-package-data@7.0.1",
"UID": "e61599089dc611ef"
},
"Version": "7.0.1",
"Licenses": [
"BSD-2-Clause"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/normalize-package-data/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm@10.9.8",
"Name": "npm",
"Identifier": {
"PURL": "pkg:npm/npm@10.9.8",
"UID": "77daf1f88582d71f"
},
"Version": "10.9.8",
"Licenses": [
"Artistic-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-audit-report@6.0.0",
"Name": "npm-audit-report",
"Identifier": {
"PURL": "pkg:npm/npm-audit-report@6.0.0",
"UID": "dc2dc36fc6abd31e"
},
"Version": "6.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-audit-report/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-bundled@4.0.0",
"Name": "npm-bundled",
"Identifier": {
"PURL": "pkg:npm/npm-bundled@4.0.0",
"UID": "2947f170ba1ca8e3"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-bundled/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-install-checks@7.1.2",
"Name": "npm-install-checks",
"Identifier": {
"PURL": "pkg:npm/npm-install-checks@7.1.2",
"UID": "8fb92bb5a2df3a64"
},
"Version": "7.1.2",
"Licenses": [
"BSD-2-Clause"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-install-checks/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-normalize-package-bin@4.0.0",
"Name": "npm-normalize-package-bin",
"Identifier": {
"PURL": "pkg:npm/npm-normalize-package-bin@4.0.0",
"UID": "ee42f2e22cab9180"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-normalize-package-bin/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-package-arg@12.0.2",
"Name": "npm-package-arg",
"Identifier": {
"PURL": "pkg:npm/npm-package-arg@12.0.2",
"UID": "f894396e3e248134"
},
"Version": "12.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-package-arg/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-packlist@9.0.0",
"Name": "npm-packlist",
"Identifier": {
"PURL": "pkg:npm/npm-packlist@9.0.0",
"UID": "db7cd72fc0f45f1e"
},
"Version": "9.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-packlist/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-pick-manifest@10.0.0",
"Name": "npm-pick-manifest",
"Identifier": {
"PURL": "pkg:npm/npm-pick-manifest@10.0.0",
"UID": "a35bce8cba3286ec"
},
"Version": "10.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-pick-manifest/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-profile@11.0.1",
"Name": "npm-profile",
"Identifier": {
"PURL": "pkg:npm/npm-profile@11.0.1",
"UID": "49c8f7e9fa29054d"
},
"Version": "11.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-profile/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-registry-fetch@18.0.2",
"Name": "npm-registry-fetch",
"Identifier": {
"PURL": "pkg:npm/npm-registry-fetch@18.0.2",
"UID": "5484a99ea6526660"
},
"Version": "18.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-registry-fetch/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "npm-user-validate@3.0.0",
"Name": "npm-user-validate",
"Identifier": {
"PURL": "pkg:npm/npm-user-validate@3.0.0",
"UID": "b4f2dfd86ff6e937"
},
"Version": "3.0.0",
"Licenses": [
"BSD-2-Clause"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/npm-user-validate/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "p-map@7.0.4",
"Name": "p-map",
"Identifier": {
"PURL": "pkg:npm/p-map@7.0.4",
"UID": "7de5ffb924393231"
},
"Version": "7.0.4",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/p-map/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "package-json-from-dist@1.0.1",
"Name": "package-json-from-dist",
"Identifier": {
"PURL": "pkg:npm/package-json-from-dist@1.0.1",
"UID": "5f02a305c6540579"
},
"Version": "1.0.1",
"Licenses": [
"BlueOak-1.0.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/package-json-from-dist/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "pacote@19.0.2",
"Name": "pacote",
"Identifier": {
"PURL": "pkg:npm/pacote@19.0.2",
"UID": "61822dc9dcec19a2"
},
"Version": "19.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/pacote/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "pacote@20.0.1",
"Name": "pacote",
"Identifier": {
"PURL": "pkg:npm/pacote@20.0.1",
"UID": "1fa2aa156482f152"
},
"Version": "20.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@npmcli/metavuln-calculator/node_modules/pacote/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "parse-conflict-json@4.0.0",
"Name": "parse-conflict-json",
"Identifier": {
"PURL": "pkg:npm/parse-conflict-json@4.0.0",
"UID": "809fdcdc6ce11080"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/parse-conflict-json/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "path-key@3.1.1",
"Name": "path-key",
"Identifier": {
"PURL": "pkg:npm/path-key@3.1.1",
"UID": "9d7c1eb3094d0711"
},
"Version": "3.1.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/path-key/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "path-scurry@1.11.1",
"Name": "path-scurry",
"Identifier": {
"PURL": "pkg:npm/path-scurry@1.11.1",
"UID": "89bcb231a511831d"
},
"Version": "1.11.1",
"Licenses": [
"BlueOak-1.0.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/path-scurry/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "picomatch@4.0.3",
"Name": "picomatch",
"Identifier": {
"PURL": "pkg:npm/picomatch@4.0.3",
"UID": "f12a2f1c39a2487"
},
"Version": "4.0.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/picomatch/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "postcss-selector-parser@7.1.1",
"Name": "postcss-selector-parser",
"Identifier": {
"PURL": "pkg:npm/postcss-selector-parser@7.1.1",
"UID": "6bb9fdabb98c035a"
},
"Version": "7.1.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/postcss-selector-parser/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "proc-log@5.0.0",
"Name": "proc-log",
"Identifier": {
"PURL": "pkg:npm/proc-log@5.0.0",
"UID": "398eb12bf60f4562"
},
"Version": "5.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/proc-log/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "proggy@3.0.0",
"Name": "proggy",
"Identifier": {
"PURL": "pkg:npm/proggy@3.0.0",
"UID": "593b297cd25e41d"
},
"Version": "3.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/proggy/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "promise-all-reject-late@1.0.1",
"Name": "promise-all-reject-late",
"Identifier": {
"PURL": "pkg:npm/promise-all-reject-late@1.0.1",
"UID": "759c5c0dfe22841e"
},
"Version": "1.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-all-reject-late/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "promise-call-limit@3.0.2",
"Name": "promise-call-limit",
"Identifier": {
"PURL": "pkg:npm/promise-call-limit@3.0.2",
"UID": "d3e52c24867edbc5"
},
"Version": "3.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-call-limit/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "promise-retry@2.0.1",
"Name": "promise-retry",
"Identifier": {
"PURL": "pkg:npm/promise-retry@2.0.1",
"UID": "6e1f780ae52b5609"
},
"Version": "2.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/promise-retry/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "promzard@2.0.0",
"Name": "promzard",
"Identifier": {
"PURL": "pkg:npm/promzard@2.0.0",
"UID": "ee265baca4217a80"
},
"Version": "2.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/promzard/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "qrcode-terminal@0.12.0",
"Name": "qrcode-terminal",
"Identifier": {
"PURL": "pkg:npm/qrcode-terminal@0.12.0",
"UID": "b17a7c2ec3321961"
},
"Version": "0.12.0",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/qrcode-terminal/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "read@4.1.0",
"Name": "read",
"Identifier": {
"PURL": "pkg:npm/read@4.1.0",
"UID": "865984186a418959"
},
"Version": "4.1.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/read/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "read-cmd-shim@5.0.0",
"Name": "read-cmd-shim",
"Identifier": {
"PURL": "pkg:npm/read-cmd-shim@5.0.0",
"UID": "f25242979738c381"
},
"Version": "5.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/read-cmd-shim/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "read-package-json-fast@4.0.0",
"Name": "read-package-json-fast",
"Identifier": {
"PURL": "pkg:npm/read-package-json-fast@4.0.0",
"UID": "2c9929860e4df529"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/read-package-json-fast/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "require-addon@1.2.0",
"Name": "require-addon",
"Identifier": {
"PURL": "pkg:npm/require-addon@1.2.0",
"UID": "5dc33df10eb0cb1a"
},
"Version": "1.2.0",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/require-addon/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "retry@0.12.0",
"Name": "retry",
"Identifier": {
"PURL": "pkg:npm/retry@0.12.0",
"UID": "608a6385cf364c2b"
},
"Version": "0.12.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/retry/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "safer-buffer@2.1.2",
"Name": "safer-buffer",
"Identifier": {
"PURL": "pkg:npm/safer-buffer@2.1.2",
"UID": "c91f6999c7debfda"
},
"Version": "2.1.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/safer-buffer/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "semver@7.7.4",
"Name": "semver",
"Identifier": {
"PURL": "pkg:npm/semver@7.7.4",
"UID": "90a01a8a01ea3a09"
},
"Version": "7.7.4",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/semver/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "shebang-command@2.0.0",
"Name": "shebang-command",
"Identifier": {
"PURL": "pkg:npm/shebang-command@2.0.0",
"UID": "fe0501cb328ce3b"
},
"Version": "2.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/shebang-command/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "shebang-regex@3.0.0",
"Name": "shebang-regex",
"Identifier": {
"PURL": "pkg:npm/shebang-regex@3.0.0",
"UID": "8c44c7d1eb25d9be"
},
"Version": "3.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/shebang-regex/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "signal-exit@4.1.0",
"Name": "signal-exit",
"Identifier": {
"PURL": "pkg:npm/signal-exit@4.1.0",
"UID": "883b84195e986f6a"
},
"Version": "4.1.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/signal-exit/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "sigstore@3.1.0",
"Name": "sigstore",
"Identifier": {
"PURL": "pkg:npm/sigstore@3.1.0",
"UID": "835a7633ebe8b530"
},
"Version": "3.1.0",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/sigstore/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "smart-buffer@4.2.0",
"Name": "smart-buffer",
"Identifier": {
"PURL": "pkg:npm/smart-buffer@4.2.0",
"UID": "f0c5ee9f68d6fddf"
},
"Version": "4.2.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/smart-buffer/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "socks@2.8.7",
"Name": "socks",
"Identifier": {
"PURL": "pkg:npm/socks@2.8.7",
"UID": "a3c3b9778fe9269d"
},
"Version": "2.8.7",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/socks/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "socks-proxy-agent@8.0.5",
"Name": "socks-proxy-agent",
"Identifier": {
"PURL": "pkg:npm/socks-proxy-agent@8.0.5",
"UID": "e2e974b7f8f572c4"
},
"Version": "8.0.5",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/socks-proxy-agent/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "sodium-native@4.3.3",
"Name": "sodium-native",
"Identifier": {
"PURL": "pkg:npm/sodium-native@4.3.3",
"UID": "b5aa0e446ee99065"
},
"Version": "4.3.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/sodium-native/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "sodium-universal@4.0.1",
"Name": "sodium-universal",
"Identifier": {
"PURL": "pkg:npm/sodium-universal@4.0.1",
"UID": "85ea8d0b50c6140f"
},
"Version": "4.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:0376aa31d2ddeb4505a60f42e9e431b84f6e0b730780b1b1ea30be4ad8423af7",
"DiffID": "sha256:a98b35110a8f551f13b7e36ed0d357a20f2765a88ac6eb7073d78ad895db3cd2"
},
"FilePath": "opt/hiverelay/daemon/node_modules/sodium-universal/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "spdx-correct@3.2.0",
"Name": "spdx-correct",
"Identifier": {
"PURL": "pkg:npm/spdx-correct@3.2.0",
"UID": "ccc34415eb746b9a"
},
"Version": "3.2.0",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-correct/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "spdx-exceptions@2.5.0",
"Name": "spdx-exceptions",
"Identifier": {
"PURL": "pkg:npm/spdx-exceptions@2.5.0",
"UID": "3602fef2070203cf"
},
"Version": "2.5.0",
"Licenses": [
"CC-BY-3.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-exceptions/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "spdx-expression-parse@3.0.1",
"Name": "spdx-expression-parse",
"Identifier": {
"PURL": "pkg:npm/spdx-expression-parse@3.0.1",
"UID": "f17cfd9d15e191ac"
},
"Version": "3.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-correct/node_modules/spdx-expression-parse/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "spdx-expression-parse@3.0.1",
"Name": "spdx-expression-parse",
"Identifier": {
"PURL": "pkg:npm/spdx-expression-parse@3.0.1",
"UID": "d810a03590b3ad31"
},
"Version": "3.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/validate-npm-package-license/node_modules/spdx-expression-parse/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "spdx-expression-parse@4.0.0",
"Name": "spdx-expression-parse",
"Identifier": {
"PURL": "pkg:npm/spdx-expression-parse@4.0.0",
"UID": "951d3251ced005b"
},
"Version": "4.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-expression-parse/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "spdx-license-ids@3.0.23",
"Name": "spdx-license-ids",
"Identifier": {
"PURL": "pkg:npm/spdx-license-ids@3.0.23",
"UID": "565aca18fc1c1d30"
},
"Version": "3.0.23",
"Licenses": [
"CC0-1.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/spdx-license-ids/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "ssri@12.0.0",
"Name": "ssri",
"Identifier": {
"PURL": "pkg:npm/ssri@12.0.0",
"UID": "25e76f353f17f097"
},
"Version": "12.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/ssri/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "string-width@4.2.3",
"Name": "string-width",
"Identifier": {
"PURL": "pkg:npm/string-width@4.2.3",
"UID": "50671a77584f7818"
},
"Version": "4.2.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/string-width-cjs/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "string-width@4.2.3",
"Name": "string-width",
"Identifier": {
"PURL": "pkg:npm/string-width@4.2.3",
"UID": "f40914f4b9d19df2"
},
"Version": "4.2.3",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/string-width/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "string-width@5.1.2",
"Name": "string-width",
"Identifier": {
"PURL": "pkg:npm/string-width@5.1.2",
"UID": "acc7ab16b3c46f2e"
},
"Version": "5.1.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/string-width/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "string-width@5.1.2",
"Name": "string-width",
"Identifier": {
"PURL": "pkg:npm/string-width@5.1.2",
"UID": "26f12bb4d5f8ce91"
},
"Version": "5.1.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/string-width/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "strip-ansi@6.0.1",
"Name": "strip-ansi",
"Identifier": {
"PURL": "pkg:npm/strip-ansi@6.0.1",
"UID": "c8d49e34f1cd87df"
},
"Version": "6.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/strip-ansi-cjs/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "strip-ansi@6.0.1",
"Name": "strip-ansi",
"Identifier": {
"PURL": "pkg:npm/strip-ansi@6.0.1",
"UID": "27648fc4d23271fe"
},
"Version": "6.0.1",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/strip-ansi/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "strip-ansi@7.2.0",
"Name": "strip-ansi",
"Identifier": {
"PURL": "pkg:npm/strip-ansi@7.2.0",
"UID": "cdaff036565829e1"
},
"Version": "7.2.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "strip-ansi@7.2.0",
"Name": "strip-ansi",
"Identifier": {
"PURL": "pkg:npm/strip-ansi@7.2.0",
"UID": "826c0bb540146cbf"
},
"Version": "7.2.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/node_modules/strip-ansi/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "supports-color@9.4.0",
"Name": "supports-color",
"Identifier": {
"PURL": "pkg:npm/supports-color@9.4.0",
"UID": "e6fdec1687f0e861"
},
"Version": "9.4.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/supports-color/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "tar@7.5.11",
"Name": "tar",
"Identifier": {
"PURL": "pkg:npm/tar@7.5.11",
"UID": "3aca9bae4d3f1419"
},
"Version": "7.5.11",
"Licenses": [
"BlueOak-1.0.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "text-table@0.2.0",
"Name": "text-table",
"Identifier": {
"PURL": "pkg:npm/text-table@0.2.0",
"UID": "db9d37c2491d4eb4"
},
"Version": "0.2.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/text-table/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "tiny-relative-date@1.3.0",
"Name": "tiny-relative-date",
"Identifier": {
"PURL": "pkg:npm/tiny-relative-date@1.3.0",
"UID": "113325395c8c3f86"
},
"Version": "1.3.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/tiny-relative-date/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "tinyglobby@0.2.15",
"Name": "tinyglobby",
"Identifier": {
"PURL": "pkg:npm/tinyglobby@0.2.15",
"UID": "785b158db9ecc846"
},
"Version": "0.2.15",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/tinyglobby/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "treeverse@3.0.0",
"Name": "treeverse",
"Identifier": {
"PURL": "pkg:npm/treeverse@3.0.0",
"UID": "815f9702b2f3013d"
},
"Version": "3.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/treeverse/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "tuf-js@3.1.0",
"Name": "tuf-js",
"Identifier": {
"PURL": "pkg:npm/tuf-js@3.1.0",
"UID": "351f35e0a85bc32b"
},
"Version": "3.1.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/tuf-js/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "unique-filename@4.0.0",
"Name": "unique-filename",
"Identifier": {
"PURL": "pkg:npm/unique-filename@4.0.0",
"UID": "33f76cc124d9f7c1"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/unique-filename/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "unique-slug@5.0.0",
"Name": "unique-slug",
"Identifier": {
"PURL": "pkg:npm/unique-slug@5.0.0",
"UID": "377c74e93002c962"
},
"Version": "5.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/unique-slug/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "util-deprecate@1.0.2",
"Name": "util-deprecate",
"Identifier": {
"PURL": "pkg:npm/util-deprecate@1.0.2",
"UID": "f9c0b05c435e4f77"
},
"Version": "1.0.2",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/util-deprecate/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "validate-npm-package-license@3.0.4",
"Name": "validate-npm-package-license",
"Identifier": {
"PURL": "pkg:npm/validate-npm-package-license@3.0.4",
"UID": "bb4a490d518c102f"
},
"Version": "3.0.4",
"Licenses": [
"Apache-2.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/validate-npm-package-license/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "validate-npm-package-name@6.0.2",
"Name": "validate-npm-package-name",
"Identifier": {
"PURL": "pkg:npm/validate-npm-package-name@6.0.2",
"UID": "31ef9be742c0857b"
},
"Version": "6.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/validate-npm-package-name/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "walk-up-path@3.0.1",
"Name": "walk-up-path",
"Identifier": {
"PURL": "pkg:npm/walk-up-path@3.0.1",
"UID": "a7d0bec29806c900"
},
"Version": "3.0.1",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/walk-up-path/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "which@2.0.2",
"Name": "which",
"Identifier": {
"PURL": "pkg:npm/which@2.0.2",
"UID": "1e1c9c717eb7247f"
},
"Version": "2.0.2",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/cross-spawn/node_modules/which/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "which@5.0.0",
"Name": "which",
"Identifier": {
"PURL": "pkg:npm/which@5.0.0",
"UID": "862f16459e9582a2"
},
"Version": "5.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/which/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "wrap-ansi@7.0.0",
"Name": "wrap-ansi",
"Identifier": {
"PURL": "pkg:npm/wrap-ansi@7.0.0",
"UID": "56487f6382f300f2"
},
"Version": "7.0.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi-cjs/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "wrap-ansi@8.1.0",
"Name": "wrap-ansi",
"Identifier": {
"PURL": "pkg:npm/wrap-ansi@8.1.0",
"UID": "c9b062e6020fdea4"
},
"Version": "8.1.0",
"Licenses": [
"MIT"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/wrap-ansi/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "write-file-atomic@6.0.0",
"Name": "write-file-atomic",
"Identifier": {
"PURL": "pkg:npm/write-file-atomic@6.0.0",
"UID": "e6b40f965956ba2f"
},
"Version": "6.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/write-file-atomic/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "yallist@4.0.0",
"Name": "yallist",
"Identifier": {
"PURL": "pkg:npm/yallist@4.0.0",
"UID": "234c922bfe36d637"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-flush/node_modules/yallist/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "yallist@4.0.0",
"Name": "yallist",
"Identifier": {
"PURL": "pkg:npm/yallist@4.0.0",
"UID": "f844828a67933457"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-pipeline/node_modules/yallist/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "yallist@4.0.0",
"Name": "yallist",
"Identifier": {
"PURL": "pkg:npm/yallist@4.0.0",
"UID": "395c0674795c08fe"
},
"Version": "4.0.0",
"Licenses": [
"ISC"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/minipass-sized/node_modules/yallist/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "yallist@5.0.0",
"Name": "yallist",
"Identifier": {
"PURL": "pkg:npm/yallist@5.0.0",
"UID": "54aace8c0fad3070"
},
"Version": "5.0.0",
"Licenses": [
"BlueOak-1.0.0"
],
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"FilePath": "usr/local/lib/node_modules/npm/node_modules/yallist/package.json",
"AnalyzedBy": "node-pkg"
},
{
"ID": "yarn@1.22.22",
"Name": "yarn",
"Identifier": {
"PURL": "pkg:npm/yarn@1.22.22",
"UID": "a475ae636b391b4"
},
"Version": "1.22.22",
"Licenses": [
"BSD-2-Clause"
],
"Layer": {
"Digest": "sha256:4bc834702693a20ef8e6f2b58d80b8e54faf0094e6377ad8464ed4ebb7715ff1",
"DiffID": "sha256:9cbea61511025738777b634194f928d92f2143b7482bd5be0d1dd682f8d5d0c9"
},
"FilePath": "opt/yarn-v1.22.22/package.json",
"AnalyzedBy": "node-pkg"
}
],
"Vulnerabilities": [
{
"VulnerabilityID": "CVE-2026-48758",
"VendorIDs": [
"GHSA-jfc7-64v2-mr8c"
],
"PkgID": "@sigstore/core@2.0.0",
"PkgName": "@sigstore/core",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/@sigstore/core/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/%40sigstore/core@2.0.0",
"UID": "f70e70e8bb1a3ee"
},
"InstalledVersion": "2.0.0",
"FixedVersion": "3.2.1",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48758",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:240037dfc3468566838e2419a1bf5ed5f66853257357664332566724fcdb9c5b",
"Title": "sigstore-core: @sigstore/core: Signature bypass due to incorrect encoding in preAuthEncoding",
"Description": "sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.2.1, the preAuthEncoding function in @sigstore/core uses Node.js ascii encoding when converting the PAE string to bytes, allowing payloadType to be mutated after signing without invalidating the signature and breaking the type-binding guarantee that DSSE is designed to provide. This issue is fixed in version 3.2.1.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-347"
],
"VendorSeverity": {
"ghsa": 2,
"redhat": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"V3Score": 5.4
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"V3Score": 5.4
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-48758",
"https://github.com/sigstore/sigstore-js",
"https://github.com/sigstore/sigstore-js/commit/b5aa4f1f8d2db0a9dfa6430fb114d9c2f1c304f7",
"https://github.com/sigstore/sigstore-js/pull/1657",
"https://github.com/sigstore/sigstore-js/releases/tag/@sigstore%2Fcore@3.2.1",
"https://github.com/sigstore/sigstore-js/security/advisories/GHSA-jfc7-64v2-mr8c",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48758",
"https://www.cve.org/CVERecord?id=CVE-2026-48758"
],
"PublishedDate": "2026-07-14T21:17:01.113Z",
"LastModifiedDate": "2026-07-15T20:23:47.313Z"
},
{
"VulnerabilityID": "CVE-2026-13149",
"VendorIDs": [
"GHSA-3jxr-9vmj-r5cp"
],
"PkgID": "brace-expansion@2.0.2",
"PkgName": "brace-expansion",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/brace-expansion@2.0.2",
"UID": "81ea87e5789052ae"
},
"InstalledVersion": "2.0.2",
"FixedVersion": "5.0.7, 1.1.16, 2.1.2",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13149",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:84ee62c28427dc5c60cdd216244298298251cbdea778bece09c206c2b2959c12",
"Title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"Description": "brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.",
"Severity": "HIGH",
"CweIDs": [
"CWE-400",
"CWE-407"
],
"VendorSeverity": {
"ghsa": 3,
"redhat": 3
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:U/V:D/RE:M/U:Amber",
"V3Score": 5.3,
"V40Score": 7.7
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-13149",
"https://github.com/juliangruber/brace-expansion",
"https://github.com/juliangruber/brace-expansion/commit/835d6be91201122d9adffb0c0c8c094189ace265",
"https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"https://github.com/juliangruber/brace-expansion/commit/d74e63030c012e3b7ae81657b8d665619cd51b95",
"https://github.com/juliangruber/brace-expansion/pull/122",
"https://github.com/juliangruber/brace-expansion/pull/123",
"https://github.com/juliangruber/brace-expansion/releases/tag/v1.1.16",
"https://github.com/juliangruber/brace-expansion/releases/tag/v2.1.2",
"https://github.com/juliangruber/brace-expansion/releases/tag/v5.0.7",
"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-3jxr-9vmj-r5cp",
"https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"https://www.cve.org/CVERecord?id=CVE-2026-13149",
"https://www.npmjs.com/package/brace-expansion"
],
"PublishedDate": "2026-06-30T10:16:34.56Z",
"LastModifiedDate": "2026-07-08T12:17:20.087Z"
},
{
"VulnerabilityID": "CVE-2026-14257",
"VendorIDs": [
"GHSA-mh99-v99m-4gvg"
],
"PkgID": "brace-expansion@2.0.2",
"PkgName": "brace-expansion",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/brace-expansion@2.0.2",
"UID": "81ea87e5789052ae"
},
"InstalledVersion": "2.0.2",
"FixedVersion": "5.0.8",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14257",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:a8b941a3fe5b9ea676051095a46a688f2df1b62df63522f219a5729792d6c41d",
"Title": "brace-expansion through 5.0.7 is vulnerable to denial of service via m ...",
"Description": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input ('{a,b}'.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.",
"Severity": "HIGH",
"CweIDs": [
"CWE-400",
"CWE-770"
],
"VendorSeverity": {
"ghsa": 3
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
}
},
"References": [
"https://github.com/juliangruber/brace-expansion",
"https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5",
"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-mh99-v99m-4gvg",
"https://nvd.nist.gov/vuln/detail/CVE-2026-14257",
"https://www.npmjs.com/package/brace-expansion"
],
"PublishedDate": "2026-07-23T14:17:00.25Z",
"LastModifiedDate": "2026-07-23T15:48:25.133Z"
},
{
"VulnerabilityID": "CVE-2026-33750",
"VendorIDs": [
"GHSA-f886-m6hf-6m8v"
],
"PkgID": "brace-expansion@2.0.2",
"PkgName": "brace-expansion",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/brace-expansion/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/brace-expansion@2.0.2",
"UID": "81ea87e5789052ae"
},
"InstalledVersion": "2.0.2",
"FixedVersion": "5.0.5, 3.0.2, 2.0.3, 1.1.13",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33750",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:d2f04e96e58637d00f0be2c64bc6590ffbe16c869b69996d94eef27f1ad1346d",
"Title": "brace-expansion: brace-expansion: Denial of Service via zero step value in brace pattern",
"Description": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13, a brace pattern with a zero step value (e.g., `{1..2..0}`) causes the sequence generation loop to run indefinitely, making the process hang for seconds and allocate heaps of memory. Versions 5.0.5, 3.0.2, 2.0.3, and 1.1.13 fix the issue. As a workaround, sanitize strings passed to `expand()` to ensure a step value of `0` is not used.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-400"
],
"VendorSeverity": {
"ghsa": 2,
"nvd": 3,
"redhat": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"V3Score": 6.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-33750",
"https://github.com/juliangruber/brace-expansion",
"https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L107-L113",
"https://github.com/juliangruber/brace-expansion/blob/daa71bcb4a30a2df9bcb7f7b8daaf2ab30e5794a/src/index.ts#L184",
"https://github.com/juliangruber/brace-expansion/commit/311ac0d54994158c0a384e286a7d6cbb17ee8ed5",
"https://github.com/juliangruber/brace-expansion/commit/7fd684f89fdde3549563d0a6522226a9189472a2",
"https://github.com/juliangruber/brace-expansion/commit/b9cacd9e55e7a1fa588fe4b7bb1159d52f1d902a",
"https://github.com/juliangruber/brace-expansion/issues/98",
"https://github.com/juliangruber/brace-expansion/pull/95",
"https://github.com/juliangruber/brace-expansion/pull/96",
"https://github.com/juliangruber/brace-expansion/pull/97",
"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-f886-m6hf-6m8v",
"https://nvd.nist.gov/vuln/detail/CVE-2026-33750",
"https://www.cve.org/CVERecord?id=CVE-2026-33750"
],
"PublishedDate": "2026-03-27T15:16:57.297Z",
"LastModifiedDate": "2026-06-17T10:38:02.143Z"
},
{
"VulnerabilityID": "CVE-2026-42338",
"VendorIDs": [
"GHSA-v2v4-37r5-5v8g"
],
"PkgID": "ip-address@10.1.0",
"PkgName": "ip-address",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/ip-address/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/ip-address@10.1.0",
"UID": "88a805ee478f0c75"
},
"InstalledVersion": "10.1.0",
"FixedVersion": "10.1.1",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42338",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:d57b29430ab887086434de4a5fd154df261a5cae97ee4892bf50d1e1b5af286b",
"Title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"Description": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressError.parseMessage (emitted by the Address6 constructor for invalid input) can contain unescaped attacker-controlled content in one branch. An application that (1) passes untrusted input to Address6 and (2) renders the output of these methods, or the thrown error's parseMessage, as HTML (e.g. via innerHTML) is vulnerable to cross-site scripting. This vulnerability is fixed in 10.1.1.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-79"
],
"VendorSeverity": {
"alma": 3,
"ghsa": 2,
"nvd": 2,
"oracle-oval": 3,
"redhat": 3,
"rocky": 3
},
"CVSS": {
"ghsa": {
"V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"V40Score": 5.3
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"V3Score": 6.1
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"V3Score": 8.1
}
},
"References": [
"https://access.redhat.com/errata/RHSA-2026:33155",
"https://access.redhat.com/errata/RHSA-2026:33160",
"https://access.redhat.com/errata/RHSA-2026:33163",
"https://access.redhat.com/errata/RHSA-2026:33173",
"https://access.redhat.com/errata/RHSA-2026:33183",
"https://access.redhat.com/errata/RHSA-2026:33574",
"https://access.redhat.com/errata/RHSA-2026:34374",
"https://access.redhat.com/errata/RHSA-2026:35841",
"https://access.redhat.com/errata/RHSA-2026:35842",
"https://access.redhat.com/errata/RHSA-2026:35891",
"https://access.redhat.com/errata/RHSA-2026:35892",
"https://access.redhat.com/errata/RHSA-2026:36754",
"https://access.redhat.com/errata/RHSA-2026:36820",
"https://access.redhat.com/errata/RHSA-2026:39246",
"https://access.redhat.com/errata/RHSA-2026:39868",
"https://access.redhat.com/errata/RHSA-2026:41928",
"https://access.redhat.com/errata/RHSA-2026:41947",
"https://access.redhat.com/security/cve/CVE-2026-42338",
"https://bugzilla.redhat.com/2476810",
"https://bugzilla.redhat.com/2489980",
"https://bugzilla.redhat.com/2490000",
"https://bugzilla.redhat.com/2490006",
"https://bugzilla.redhat.com/2490008",
"https://bugzilla.redhat.com/2493325",
"https://bugzilla.redhat.com/2493326",
"https://bugzilla.redhat.com/2493329",
"https://bugzilla.redhat.com/2493331",
"https://bugzilla.redhat.com/2493332",
"https://bugzilla.redhat.com/2493333",
"https://bugzilla.redhat.com/2493335",
"https://bugzilla.redhat.com/2493337",
"https://bugzilla.redhat.com/show_bug.cgi?id=2476810",
"https://bugzilla.redhat.com/show_bug.cgi?id=2489980",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490000",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490006",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490008",
"https://bugzilla.redhat.com/show_bug.cgi?id=2493325",
"https://bugzilla.redhat.com/show_bug.cgi?id=2493326",
"https://bugzilla.redhat.com/show_bug.cgi?id=2493329",
"https://bugzilla.redhat.com/show_bug.cgi?id=2493331",
"https://bugzilla.redhat.com/show_bug.cgi?id=2493332",
"https://bugzilla.redhat.com/show_bug.cgi?id=2493333",
"https://bugzilla.redhat.com/show_bug.cgi?id=2493335",
"https://bugzilla.redhat.com/show_bug.cgi?id=2493337",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11525",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-12151",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42338",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48615",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48618",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48619",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48928",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48930",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48933",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48934",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48935",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6733",
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9678",
"https://errata.almalinux.org/9/ALSA-2026-35892.html",
"https://errata.rockylinux.org/RLSA-2026:35892",
"https://github.com/beaugunderson/ip-address",
"https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"https://linux.oracle.com/cve/CVE-2026-42338.html",
"https://linux.oracle.com/errata/ELSA-2026-41947.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42338.json",
"https://www.cve.org/CVERecord?id=CVE-2026-42338"
],
"PublishedDate": "2026-05-12T20:16:41.13Z",
"LastModifiedDate": "2026-07-24T13:18:19.597Z"
},
{
"VulnerabilityID": "CVE-2026-33671",
"VendorIDs": [
"GHSA-c2c7-rcm5-vvqj"
],
"PkgID": "picomatch@4.0.3",
"PkgName": "picomatch",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/picomatch/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/picomatch@4.0.3",
"UID": "f12a2f1c39a2487"
},
"InstalledVersion": "4.0.3",
"FixedVersion": "4.0.4, 3.0.2, 2.3.2",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33671",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:b6b70443e70b091566d11de238e6e938e5a6e14cff93377f6a3a9986f1d8772d",
"Title": "picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns",
"Description": "Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain patterns using extglob quantifiers such as `+()` and `*()`, especially when combined with overlapping alternatives or nested extglobs, are compiled into regular expressions that can exhibit catastrophic backtracking on non-matching input. Applications are impacted when they allow untrusted users to supply glob patterns that are passed to `picomatch` for compilation or matching. In those cases, an attacker can cause excessive CPU consumption and block the Node.js event loop, resulting in a denial of service. Applications that only use trusted, developer-controlled glob patterns are much less likely to be exposed in a security-relevant way. This issue is fixed in picomatch 4.0.4, 3.0.2 and 2.3.2. Users should upgrade to one of these versions or later, depending on their supported release line. If upgrading is not immediately possible, avoid passing untrusted glob patterns to `picomatch`. Possible mitigations include disabling extglob support for untrusted patterns by using `noextglob: true`, rejecting or sanitizing patterns containing nested extglobs or extglob quantifiers such as `+()` and `*()`, enforcing strict allowlists for accepted pattern syntax, running matching in an isolated worker or separate process with time and resource limits, and applying application-level request throttling and input validation for any endpoint that accepts glob patterns.",
"Severity": "HIGH",
"CweIDs": [
"CWE-1333"
],
"VendorSeverity": {
"azure": 3,
"ghsa": 3,
"redhat": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 6.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-33671",
"https://github.com/micromatch/picomatch",
"https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d",
"https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj",
"https://nvd.nist.gov/vuln/detail/CVE-2026-33671",
"https://www.cve.org/CVERecord?id=CVE-2026-33671"
],
"PublishedDate": "2026-03-26T22:16:30.21Z",
"LastModifiedDate": "2026-06-17T10:37:54.007Z"
},
{
"VulnerabilityID": "CVE-2026-33672",
"VendorIDs": [
"GHSA-3v7f-55p6-f55p"
],
"PkgID": "picomatch@4.0.3",
"PkgName": "picomatch",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/picomatch/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/picomatch@4.0.3",
"UID": "f12a2f1c39a2487"
},
"InstalledVersion": "4.0.3",
"FixedVersion": "4.0.4, 3.0.2, 2.3.2",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-33672",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:b9fa36562f08086f8686a86dcf7f9628c9541643385f36d83f342a8c7cc7a686",
"Title": "picomatch: Picomatch: Data integrity compromised via method injection with crafted POSIX bracket expressions",
"Description": "Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Because the object inherits from `Object.prototype`, specially crafted POSIX bracket expressions (e.g., `[[:constructor:]]`) can reference inherited method names. These methods are implicitly converted to strings and injected into the generated regular expression. This leads to incorrect glob matching behavior (integrity impact), where patterns may match unintended filenames. The issue does not enable remote code execution, but it can cause security-relevant logic errors in applications that rely on glob matching for filtering, validation, or access control. All users of affected `picomatch` versions that process untrusted or user-controlled glob patterns are potentially impacted. This issue is fixed in picomatch 4.0.4, 3.0.2 and 2.3.2. Users should upgrade to one of these versions or later, depending on their supported release line. If upgrading is not immediately possible, avoid passing untrusted glob patterns to picomatch. Possible mitigations include sanitizing or rejecting untrusted glob patterns, especially those containing POSIX character classes like `[[:...:]]`; avoiding the use of POSIX bracket expressions if user input is involved; and manually patching the library by modifying `POSIX_REGEX_SOURCE` to use a null prototype.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-1321"
],
"VendorSeverity": {
"azure": 2,
"ghsa": 2,
"redhat": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"V3Score": 5.3
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-33672",
"https://github.com/micromatch/picomatch",
"https://github.com/micromatch/picomatch/commit/4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903",
"https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p",
"https://nvd.nist.gov/vuln/detail/CVE-2026-33672",
"https://www.cve.org/CVERecord?id=CVE-2026-33672"
],
"PublishedDate": "2026-03-26T22:16:30.387Z",
"LastModifiedDate": "2026-06-17T10:37:54.113Z"
},
{
"VulnerabilityID": "CVE-2026-48815",
"VendorIDs": [
"GHSA-52v5-jr5w-gjxr"
],
"PkgID": "sigstore@3.1.0",
"PkgName": "sigstore",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/sigstore/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/sigstore@3.1.0",
"UID": "835a7633ebe8b530"
},
"InstalledVersion": "3.1.0",
"FixedVersion": "4.1.1",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48815",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:251f5482f57586d1228edc549970ecafc60a6da704f2a4fedfa8174eda629c3f",
"Title": "sigstore: Sigstore: Unauthorized certificates accepted due to ignored `certificateOIDs` verification option",
"Description": "sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in sigstore.verify() is accepted by the public API but discarded before verification, so required certificate extension OIDs are never checked and applications relying on certificateOIDs to restrict which certificates may sign artifacts can accept unauthorized certificates. This issue is fixed in version 4.1.1.",
"Severity": "HIGH",
"CweIDs": [
"CWE-347"
],
"VendorSeverity": {
"ghsa": 3,
"redhat": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"V3Score": 5.9
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-48815",
"https://github.com/sigstore/sigstore-js",
"https://github.com/sigstore/sigstore-js/commit/7845532f9d17f6f765363dbee82b01bd159fb52b",
"https://github.com/sigstore/sigstore-js/pull/1658",
"https://github.com/sigstore/sigstore-js/pull/1658/changes",
"https://github.com/sigstore/sigstore-js/releases/tag/sigstore@4.1.1",
"https://github.com/sigstore/sigstore-js/security/advisories/GHSA-52v5-jr5w-gjxr",
"https://nvd.nist.gov/vuln/detail/CVE-2026-48815",
"https://www.cve.org/CVERecord?id=CVE-2026-48815"
],
"PublishedDate": "2026-07-14T21:17:01.37Z",
"LastModifiedDate": "2026-07-15T20:23:47.313Z"
},
{
"VulnerabilityID": "CVE-2026-59873",
"VendorIDs": [
"GHSA-23hp-3jrh-7fpw"
],
"PkgID": "tar@7.5.11",
"PkgName": "tar",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/tar@7.5.11",
"UID": "3aca9bae4d3f1419"
},
"InstalledVersion": "7.5.11",
"FixedVersion": "7.5.19",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59873",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:cee950c8159866151fd034ef2673784457f7ac624d3e5ba5efea6b09587e0b5d",
"Title": "tar: node-tar: Denial of Service via crafted gzip bomb",
"Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small crafted gzip bomb to exhaust disk space and CPU. This issue is fixed in version 7.5.19.",
"Severity": "CRITICAL",
"CweIDs": [
"CWE-770"
],
"VendorSeverity": {
"ghsa": 4,
"nvd": 3,
"redhat": 3
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
"V3Score": 7.5,
"V40Score": 9.2
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-59873",
"https://github.com/isaacs/node-tar",
"https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3",
"https://github.com/isaacs/node-tar/releases/tag/v7.5.19",
"https://github.com/isaacs/node-tar/security/advisories/GHSA-23hp-3jrh-7fpw",
"https://nvd.nist.gov/vuln/detail/CVE-2026-59873",
"https://www.cve.org/CVERecord?id=CVE-2026-59873"
],
"PublishedDate": "2026-07-08T16:16:33.867Z",
"LastModifiedDate": "2026-07-10T18:57:17.907Z"
},
{
"VulnerabilityID": "CVE-2026-59874",
"VendorIDs": [
"GHSA-8x88-c5mf-7j5w"
],
"PkgID": "tar@7.5.11",
"PkgName": "tar",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/tar@7.5.11",
"UID": "3aca9bae4d3f1419"
},
"InstalledVersion": "7.5.11",
"FixedVersion": "7.5.18",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59874",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:8421db113a634411098152e9f38a0eb5fb8852cd5138b81d0fdf36d8b621e201",
"Title": "tar: Node-tar: Denial of Service via malformed tar archive header",
"Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18.",
"Severity": "HIGH",
"CweIDs": [
"CWE-835"
],
"VendorSeverity": {
"ghsa": 3,
"nvd": 3,
"redhat": 3
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"V3Score": 7.5,
"V40Score": 8.7
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-59874",
"https://github.com/isaacs/node-tar",
"https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5",
"https://github.com/isaacs/node-tar/releases/tag/v7.5.18",
"https://github.com/isaacs/node-tar/security/advisories/GHSA-8x88-c5mf-7j5w",
"https://nvd.nist.gov/vuln/detail/CVE-2026-59874",
"https://www.cve.org/CVERecord?id=CVE-2026-59874"
],
"PublishedDate": "2026-07-08T16:16:33.99Z",
"LastModifiedDate": "2026-07-10T18:54:12.67Z"
},
{
"VulnerabilityID": "CVE-2026-53655",
"VendorIDs": [
"GHSA-vmf3-w455-68vh"
],
"PkgID": "tar@7.5.11",
"PkgName": "tar",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/tar@7.5.11",
"UID": "3aca9bae4d3f1419"
},
"InstalledVersion": "7.5.11",
"FixedVersion": "7.5.16",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53655",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:a5b6f82ad37385e625ffc684cd5302ca7bf183f2ea63f60c3a93775ead9bacfd",
"Title": "node-tar: node-tar: File smuggling due to inconsistent tar archive parsing",
"Description": "node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (and other PAX overrides) to the next header entry of any type, including intermediary metadata headers such as a GNU long-name (L) or long-link (K) entry. Per POSIX pax, a PAX extended header (x) describes the next file entry, not the intermediary extension headers that may sit between the x header and the file it annotates. Because node-tar lets the PAX size override the byte length of an intervening L/K/x header, an attacker can desynchronize node-tar's stream cursor relative to every other mainstream tar implementation (GNU tar, libarchive/bsdtar, Python tarfile, and the now-fixed tar-rs / astral-tokio-tar). The result is a tar parser interpretation differential (CWE-436): a single crafted archive yields a different set of members under node-tar than under the reference tar tools. An attacker can use this to hide a member from one parser while it is visible to another, which defeats security tooling whose scanner and extractor disagree on archive contents (e.g. a malware/secret scanner that lists entries with one library while a downstream step extracts with another) This vulnerability is fixed in 7.5.16.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-436"
],
"VendorSeverity": {
"ghsa": 2,
"nvd": 2,
"redhat": 2
},
"CVSS": {
"ghsa": {
"V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
"V40Score": 6.9
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"V3Score": 5.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N",
"V3Score": 6.1
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-53655",
"https://github.com/isaacs/node-tar",
"https://github.com/isaacs/node-tar/security/advisories/GHSA-vmf3-w455-68vh",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53655",
"https://www.cve.org/CVERecord?id=CVE-2026-53655"
],
"PublishedDate": "2026-06-22T16:16:38.593Z",
"LastModifiedDate": "2026-06-26T20:03:47.01Z"
},
{
"VulnerabilityID": "CVE-2026-59871",
"VendorIDs": [
"GHSA-w8wr-v893-vjvp"
],
"PkgID": "tar@7.5.11",
"PkgName": "tar",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/tar@7.5.11",
"UID": "3aca9bae4d3f1419"
},
"InstalledVersion": "7.5.11",
"FixedVersion": "7.5.18",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59871",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:fd1d583bf5d564812621494f87e2e77df465e615b83b198e00e129c4d4e948e2",
"Title": "node-tar: node-tar: Denial of Service due to incorrect PAX path handling",
"Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindowsPath(entry.path).split('/') to throw an uncaught TypeError. This issue is fixed in version 7.5.18.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-704"
],
"VendorSeverity": {
"ghsa": 2,
"nvd": 3,
"redhat": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
},
"nvd": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"V3Score": 7.5
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-59871",
"https://github.com/isaacs/node-tar",
"https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b",
"https://github.com/isaacs/node-tar/releases/tag/v7.5.18",
"https://github.com/isaacs/node-tar/security/advisories/GHSA-w8wr-v893-vjvp",
"https://nvd.nist.gov/vuln/detail/CVE-2026-59871",
"https://www.cve.org/CVERecord?id=CVE-2026-59871"
],
"PublishedDate": "2026-07-08T16:16:33.723Z",
"LastModifiedDate": "2026-07-10T19:02:55.14Z"
},
{
"VulnerabilityID": "CVE-2026-59875",
"VendorIDs": [
"GHSA-gvwx-54wh-qm9j"
],
"PkgID": "tar@7.5.11",
"PkgName": "tar",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/tar@7.5.11",
"UID": "3aca9bae4d3f1419"
},
"InstalledVersion": "7.5.11",
"FixedVersion": "7.5.17",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-59875",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:d667fbf69d3d77ee0140839169aa588da75e17cf5a31b6a50782238019745fff",
"Title": "node-tar: node-tar: Denial of Service via crafted archive with NUL bytes in metadata",
"Description": "node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts, allowing a crafted archive with values to reach fs.lstat or fs.open and terminate the process with an uncaught exception. This issue is fixed in version 7.5.17.",
"Severity": "MEDIUM",
"CweIDs": [
"CWE-248"
],
"VendorSeverity": {
"ghsa": 2,
"redhat": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
},
"redhat": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
}
},
"References": [
"https://access.redhat.com/security/cve/CVE-2026-59875",
"https://github.com/isaacs/node-tar",
"https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3",
"https://github.com/isaacs/node-tar/releases/tag/v7.5.17",
"https://github.com/isaacs/node-tar/security/advisories/GHSA-gvwx-54wh-qm9j",
"https://nvd.nist.gov/vuln/detail/CVE-2026-59875",
"https://www.cve.org/CVERecord?id=CVE-2026-59875"
],
"PublishedDate": "2026-07-08T16:16:34.107Z",
"LastModifiedDate": "2026-07-10T19:10:59.333Z"
},
{
"VulnerabilityID": "GHSA-r292-9mhp-454m",
"PkgID": "tar@7.5.11",
"PkgName": "tar",
"PkgPath": "usr/local/lib/node_modules/npm/node_modules/tar/package.json",
"PkgIdentifier": {
"PURL": "pkg:npm/tar@7.5.11",
"UID": "3aca9bae4d3f1419"
},
"InstalledVersion": "7.5.11",
"FixedVersion": "7.5.21",
"Status": "fixed",
"Layer": {
"Digest": "sha256:bbce3da877fb05b8743f5ab454ae860f44f2de31c26fee07de6573e328084d7c",
"DiffID": "sha256:54518ad2cb5373051f4a34597fd830ca1560179c5364f37338ed4ef856d51e48"
},
"SeveritySource": "ghsa",
"PrimaryURL": "https://github.com/advisories/GHSA-r292-9mhp-454m",
"DataSource": {
"ID": "ghsa",
"Name": "GitHub Security Advisory npm",
"URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm"
},
"Fingerprint": "sha256:7e9e5d7e4f4b038e6b250676587e5a6c5a5093880935be8b72cbdad6c4ba0fc1",
"Title": "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection",
"Description": "## Summary\n`node-tar` (npm `tar`) contains an uncontrolled-recursion stack-exhaustion DoS in the internal `mapHas` helper used by `filesFilter`. When a consumer calls `tar.t(...)` or `tar.x(...)` with a non-empty member-selection list, node-tar installs a filter that closes over the recursive `mapHas` (`src/list.ts:33-44`). `mapHas` walks an entry path upward one `path.dirname()` call per recursion **with no segment cap**. A single crafted tar with a GNU-`L` (or PAX-`x`) long-path header can deliver a path of tens of thousands of `/`-separated segments (up to `maxMetaEntrySize` = 1 MiB). The recursion overflows the call stack, throwing an uncatchable `RangeError` that terminates the Node process on async/streaming consumers.\n\n## Root Cause\n`filesFilter` (`src/list.ts:27-51`) is installed whenever a caller passes a member-selection list (`src/list.ts:119-122`, `src/extract.ts:55-57`). Its filter is invoked at `src/parse.ts:253` (`entry.ignore = entry.ignore || !this.filter(entry.path, entry)`) inside `Parser[CONSUMEHEADER]` — and crucially **outside** the only try/catch in that method (which wraps `new Header` at `src/parse.ts:179-183`). `mapHas` recurses once per path segment with no depth limit. The `Unpack` `maxDepth` guard (`src/unpack.ts:342`, in `[CHECKPATH]`) only runs on the `'entry'` event, which fires *after* `CONSUMEHEADER` has already invoked the filter — so the stack overflows before any depth guard executes. `tar.t` (list) has no `maxDepth` at all.\n\n## Impact\nUnauthenticated, remotely-triggerable denial of service: a ~188-byte gzip (≈26 KB tar) crashes any service that lists or extracts *selected members* from an untrusted archive (package registries, CI artifact/cache restore, upload processors). On async (`await tar.t(...)`/`tar.x(...)`) and streaming/`pipe` consumers the `RangeError` escapes the promise as an `uncaughtException` and terminates the process — standard defensive `try/catch` around the async call does NOT prevent it. (The synchronous API is catchable; the async/stream paths — the dominant server pattern — are not.)\n\n## Proof of Concept\n```js\n// Build a tar whose single entry has a GNU-L long path of ~12,000 \"a/\" segments (~26 KB),\n// gzip it (≈188 bytes), then have a consumer list/extract with member selection:\nconst tar = require('tar');\nawait tar.t({ file: 'evil.tar.gz', gzip: true }, ['some-member']); // -\u003e RangeError, process exit\n```\nEmpirically reproduced on Node v24.18.0 against built `dist/commonjs` of node-tar 7.5.20: 188-byte gzip → 26,112-byte tar (12,000 segments) → uncaught `RangeError: Maximum call stack size exceeded` → process exit. A control run with no member-selection list (filter not installed) parses cleanly (exit 0), isolating `mapHas` as the sole cause.\n\n## Attack Chain\n1. **Entry.** Attacker crafts a tar with a GNU `L` (or PAX `x`) long-path header whose body is `\"a/\"`×~12000 (~26 KB), followed by a normal file entry.\n - **Guard:** `maxMetaEntrySize` caps the meta body at 1 MiB (`src/parse.ts:241`).\n - **Bypass proof:** 26 KB ≪ 1 MiB → accepted (verified: 26 KB archive parsed up to the filter).\n2. **Trigger.** Victim service calls `tar.t({file},[sel])` or `tar.x({file,cwd},[sel])` (member selection — a documented, common API).\n - **Guard:** `Unpack.maxDepth` (default 1024) at `src/unpack.ts:342`; decompression-ratio guard.\n - **Bypass proof:** `maxDepth` lives in `[CHECKPATH]` on the `'entry'` event, which fires *after* `CONSUMEHEADER`'s filter call — the crash occurs before it (extract exits 1 with default maxDepth). `tar.t` has no maxDepth. Ratio is ~139× (trivial); no total-bytes cap applies to the uncompressed meta body.\n3. **Sink.** `this.filter(entry.path)` → `mapHas` recurses once per `/` segment (`src/list.ts:39`).\n - **Guard:** try/catch in `CONSUMEHEADER`.\n - **Bypass proof:** the only try/catch wraps `new Header` (`src/parse.ts:179-183`); the `this.filter(...)` call at `src/parse.ts:253` is outside it. The `RangeError` propagates out of the stream write/`'data'` path → uncaught exception (verified: `process.on('uncaughtException')` fires; async `await`+`try/catch` does NOT intercept).\n4. **Impact.** Node process termination; a 188-byte gzip crashes any consumer that lists/extracts selected members from untrusted archives.\n\n## Bypass Evidence\n- `mapHas` recursion is member-name-independent: the crash fires even when the requested members do not match the malicious entry path — the attacker only needs the consumer to *use* member selection.\n- Standalone `mapHas` overflows at 20k–30k segments; on the real streaming path (atop `write → CONSUMECHUNK → CONSUMEHEADER → filter`) it crashes at ≤8k segments (finder's ~12k estimate is accurate for the reachable path).\n- Control (no member list → no filter) parses cleanly (exit 0), isolating `mapHas`.\n\n## Affected Versions\n`\u003c= 7.5.20` (npm `tar`). `mapHas` present verbatim on tag `v7.5.20` (latest GitHub release and npm `dist-tag latest`); no segment/depth cap in `src/list.ts` or the `CONSUMEHEADER` filter path; HEAD == 7.5.20, no unreleased fix.\n\n## Suggested Fix\nRewrite `mapHas` iteratively (walk `dirname` in a `while` loop with a segment/visited cap), or enforce a hard path-segment limit in `Header`/`Parser` independent of `maxMetaEntrySize`, applied before any per-entry filter runs.\n\n## Dedup Note\nDistinct from CVE-2024-28863 / GHSA-f5x3-32g6-qm9j \"lack of folders depth validation\" (that bounds `mkdir` recursion during *extraction* via `maxDepth` in `Unpack[CHECKPATH]` on the `'entry'` event — a different sink, code path, and fix; runs after the filter and does not apply to `tar.t`). Also distinct from the PAX NUL/numeric-path crash advisories (improper-input-to-fs / type confusion, not recursion) and the gzip-bomb advisory (resource exhaustion on disk writes). None touch `list.ts`/`filesFilter`/`mapHas` or require member selection.\n\n---\nReported by **zx (Jace)** — GitHub: @manus-use",
"Severity": "MEDIUM",
"VendorSeverity": {
"ghsa": 2
},
"CVSS": {
"ghsa": {
"V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"V3Score": 5.3
}
},
"References": [
"https://github.com/isaacs/node-tar",
"https://github.com/isaacs/node-tar/commit/631ae59121bf8fc8a22bbae35f074cb9b789cd4a",
"https://github.com/isaacs/node-tar/releases/tag/v7.5.21",
"https://github.com/isaacs/node-tar/security/advisories/GHSA-r292-9mhp-454m"
],
"PublishedDate": "2026-07-24T16:26:16Z",
"LastModifiedDate": "2026-07-24T16:26:17Z"
}
]
}
]
}