From ad4f8a856780ef9b42cc2f4d00da10e766802950 Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Thu, 22 Oct 2026 05:03:47 +0800 Subject: [PATCH 1/4] build: prepare Node Agent 0.13.30 with Go 1.27.3 --- .github/workflows/codeql-verification.yml | 8 +++--- .github/workflows/security-release-gate.yml | 29 ++++++++++++--------- .github/workflows/validate.yml | 20 +++++++------- Dockerfile.dapper | 6 ++--- README.md | 16 +++++++----- go.mod | 2 +- scripts/version | 2 +- 7 files changed, 45 insertions(+), 38 deletions(-) diff --git a/.github/workflows/codeql-verification.yml b/.github/workflows/codeql-verification.yml index f2a01393..a020918e 100644 --- a/.github/workflows/codeql-verification.yml +++ b/.github/workflows/codeql-verification.yml @@ -38,15 +38,15 @@ jobs: set -euo pipefail test -z "$(git status --porcelain)" git merge-base --is-ancestor c8663d12dd253ef13258750dca056d4b1219fc10 HEAD - grep -Fq 'VERSION_OVERRIDE: v0.13.29' .github/workflows/validate.yml + grep -Fq 'VERSION_OVERRIDE: v0.13.30' .github/workflows/validate.yml grep -Fq 'SHA256SUMS' scripts/package grep -Fq 'bash scripts/verify-package "$linux_asset"' .github/workflows/validate.yml - grep -Fq 'bash scripts/verify-package dist/artifacts/node-agent-0.13.29.tar.gz' .github/workflows/security-release-gate.yml + grep -Fq 'bash scripts/verify-package dist/artifacts/node-agent-0.13.30.tar.gz' .github/workflows/security-release-gate.yml - name: Install the release Go toolchain uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: - go-version: 1.27.2 + go-version: 1.27.3 check-latest: false cache: false @@ -68,7 +68,7 @@ jobs: export GOFLAGS=-mod=vendor mkdir -p "$GITHUB_WORKSPACE/bin" CGO_ENABLED=0 go build -trimpath -tags 'netgo osusergo' \ - -ldflags='-w -s -X main.VERSION=v0.13.29' \ + -ldflags='-w -s -X main.VERSION=v0.13.30' \ -o "$GITHUB_WORKSPACE/bin/node-agent" ./ - name: Analyze without publishing temporary alerts diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index ba2c85e9..c0b352c2 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -19,9 +19,9 @@ jobs: timeout-minutes: 120 env: DAPPER_IMAGE: pasturestack/node-agent-dapper:${{ github.sha }} - RUNTIME_IMAGE: pasturestack/node-agent:v0.13.29 + RUNTIME_IMAGE: pasturestack/node-agent:v0.13.30 TRIVY_IMAGE: aquasec/trivy:0.74.0@sha256:62b1e65e8869bc4b4c6aa4fa2b21595256c7c2f6018a9d9ad61caf87187c1969 - VERSION_OVERRIDE: v0.13.29 + VERSION_OVERRIDE: v0.13.30 steps: - name: Check out candidate uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -50,20 +50,20 @@ jobs: set -euo pipefail CROSS=1 VERSION_OVERRIDE="$VERSION_OVERRIDE" make DAPPER_IMAGE="$DAPPER_IMAGE" ci make DAPPER_IMAGE="$DAPPER_IMAGE" IMAGE_NAME=pasturestack/node-agent \ - TAG=v0.13.29 VERSION_OVERRIDE="$VERSION_OVERRIDE" package-image - test -s dist/artifacts/node-agent-0.13.29.tar.gz - test -s dist/artifacts/node-agent-0.13.29-windows-amd64.zip + TAG=v0.13.30 VERSION_OVERRIDE="$VERSION_OVERRIDE" package-image + test -s dist/artifacts/node-agent-0.13.30.tar.gz + test -s dist/artifacts/node-agent-0.13.30-windows-amd64.zip test "$(cat dist/image)" = "$RUNTIME_IMAGE" - gzip -t dist/artifacts/node-agent-0.13.29.tar.gz - bash scripts/verify-package dist/artifacts/node-agent-0.13.29.tar.gz - unzip -t dist/artifacts/node-agent-0.13.29-windows-amd64.zip - sha256sum dist/artifacts/node-agent-0.13.29.tar.gz \ - dist/artifacts/node-agent-0.13.29-windows-amd64.zip \ - bin/node-agent > evidence/product-artifacts.sha256 + gzip -t dist/artifacts/node-agent-0.13.30.tar.gz + bash scripts/verify-package dist/artifacts/node-agent-0.13.30.tar.gz + unzip -t dist/artifacts/node-agent-0.13.30-windows-amd64.zip + sha256sum dist/artifacts/node-agent-0.13.30.tar.gz \ + dist/artifacts/node-agent-0.13.30-windows-amd64.zip \ + bin/node-agent bin/windows/amd64/node-agent.exe > evidence/product-artifacts.sha256 docker image inspect "$RUNTIME_IMAGE" > evidence/runtime-image-inspect.json docker run --rm --entrypoint /usr/bin/node-agent "$RUNTIME_IMAGE" --version \ > evidence/runtime-version.txt - grep -Fxq 'node-agent version v0.13.29' evidence/runtime-version.txt + grep -Fxq 'node-agent version v0.13.30' evidence/runtime-version.txt - name: Verify reproducible Linux binary shell: bash @@ -75,7 +75,12 @@ jobs: cmp /tmp/node-agent.first bin/node-agent docker run --rm --entrypoint go -v "$PWD:/work:ro" "$DAPPER_IMAGE" \ version -m /work/bin/node-agent > evidence/product-go-version.txt + grep -F 'go1.27.3' evidence/product-go-version.txt >/dev/null grep -F $'build\tCGO_ENABLED=0' evidence/product-go-version.txt >/dev/null + docker run --rm --entrypoint go -v "$PWD:/work:ro" "$DAPPER_IMAGE" \ + version -m /work/bin/windows/amd64/node-agent.exe > evidence/windows-product-go-version.txt + grep -F 'go1.27.3' evidence/windows-product-go-version.txt >/dev/null + grep -F $'build\tGOOS=windows' evidence/windows-product-go-version.txt >/dev/null - name: Scan source, product, runtime, and build image shell: bash diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 7a596330..0ac2d0b3 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -43,7 +43,7 @@ jobs: if: github.event_name == 'workflow_dispatch' && inputs.validation_scope == 'host-disk' uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: - go-version: 1.27.2 + go-version: 1.27.3 check-latest: false cache: false @@ -51,7 +51,7 @@ jobs: id: package env: CROSS: "1" - VERSION_OVERRIDE: v0.13.29 + VERSION_OVERRIDE: v0.13.30 VALIDATION_SCOPE: ${{ inputs.validation_scope || 'full' }} run: | set -euo pipefail @@ -63,7 +63,7 @@ jobs: export GOTOOLCHAIN=local GOTELEMETRY=off GOWORK=off export GOFLAGS=-mod=vendor GOPROXY=off GOSUMDB=off export GOOS=linux GOARCH=amd64 GOAMD64=v1 CGO_ENABLED=0 - test "$(go version)" = 'go version go1.27.2 linux/amd64' + test "$(go version)" = 'go version go1.27.3 linux/amd64' test -z "$(gofmt -l core/hostinfo/disk_info_linux.go core/hostinfo/disk_info_linux_test.go)" go test -count=1 -v ./core/hostinfo ./core/ping bash scripts/build @@ -74,8 +74,8 @@ jobs: exit 1 ;; esac - linux_asset="dist/artifacts/node-agent-0.13.29.tar.gz" - windows_asset="dist/artifacts/node-agent-0.13.29-windows-amd64.zip" + linux_asset="dist/artifacts/node-agent-0.13.30.tar.gz" + windows_asset="dist/artifacts/node-agent-0.13.30-windows-amd64.zip" test -s "$linux_asset" test -s "$windows_asset" gzip -t "$linux_asset" @@ -91,8 +91,8 @@ jobs: ( cd dist/artifacts sha256sum \ - node-agent-0.13.29.tar.gz \ - node-agent-0.13.29-windows-amd64.zip >SHA256SUMS + node-agent-0.13.30.tar.gz \ + node-agent-0.13.30-windows-amd64.zip >SHA256SUMS sha256sum -c SHA256SUMS ) printf 'NODE_AGENT_VALIDATION_OK source=%s version=%s scope=%s artifacts=linux,windows\n' \ @@ -101,10 +101,10 @@ jobs: - name: Retain reviewed release candidate uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: - name: node-agent-0.13.29 + name: node-agent-0.13.30 path: | - dist/artifacts/node-agent-0.13.29.tar.gz - dist/artifacts/node-agent-0.13.29-windows-amd64.zip + dist/artifacts/node-agent-0.13.30.tar.gz + dist/artifacts/node-agent-0.13.30-windows-amd64.zip dist/artifacts/SHA256SUMS if-no-files-found: error retention-days: 30 diff --git a/Dockerfile.dapper b/Dockerfile.dapper index 66ce5bc8..81033e55 100644 --- a/Dockerfile.dapper +++ b/Dockerfile.dapper @@ -50,9 +50,9 @@ RUN set -eux; \ RUN git config --system --add safe.directory '*' -ARG GO_VERSION=1.27.2 -ARG GO_SHA256_amd64=ecbadb99091a3f46e31f5f934b068b1864eafa7995211b39eaddf76996045fe5 -ARG GO_SHA256_arm=e25a174051d8675f87ac720aedcd25bf89ac652c4b82f26aa47919524725ed95 +ARG GO_VERSION=1.27.3 +ARG GO_SHA256_amd64=65efbc80fdc1fa2cd2631cad5b481777a68e8725f34e89f50fc6ac714e379b40 +ARG GO_SHA256_arm=d6f4e11dd7157030d7ac11c51c8f73201a2db932d593c3106b1da11cc32bfdf8 ARG PIP_VERSION=26.1.2 ARG SETUPTOOLS_VERSION=83.0.0 ARG WHEEL_VERSION=0.47.0 diff --git a/README.md b/README.md index 440b33a0..9cf18776 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ PastureStack is an independent community effort to preserve, audit, and moderniz ## Project status -This is a migration proof of concept. The existing Ubuntu 26.04, Go 1.27.2, modern Docker test harness, runtime hardening, and dependency maintenance are retained. Product-owned import paths, binaries, archives, images, Windows service names, and operator messages use PastureStack naming. Python test dependencies are fully pinned and cached in the disposable build image so clean-checkout tests do not depend on live PyPI availability. GitHub Actions runs repository validation and security checks. Release packaging remains manual, and no automatic production deployment is enabled. +This is a migration proof of concept. The existing Ubuntu 26.04, modern Docker test harness, runtime hardening, and dependency maintenance are retained, with the compiler updated to checksum-pinned Go 1.27.3. Product-owned import paths, binaries, archives, images, Windows service names, and operator messages use PastureStack naming. Python test dependencies are fully pinned and cached in the disposable build image so clean-checkout tests do not depend on live PyPI availability. GitHub Actions runs repository validation and security checks. Release packaging remains manual, and no automatic production deployment is enabled. ## Configuration @@ -22,14 +22,16 @@ From a Docker-capable Linux host: make test make build make package -make package-image IMAGE_NAME=pasturestack/node-agent TAG=v0.13.29 +make package-image IMAGE_NAME=pasturestack/node-agent TAG=v0.13.30 ``` Packaging is local only and does not push an image. See [COMPATIBILITY.md](COMPATIBILITY.md), [SECURITY.md](SECURITY.md), and [ORIGIN.md](ORIGIN.md). -The published Linux package is [Node Agent v0.13.29](https://github.com/PastureStack/node-agent/releases/tag/v0.13.29). -Its release contains the original validated archive and SHA-256 checksum; the -outer bootstrap image version and the Go package version are separate identities. +The current recipe packages version `0.13.30`. Source changes alone are not +publication proof: use the [official releases](https://github.com/PastureStack/node-agent/releases) +and their SHA-256 checksums to verify published packages. Published tags and assets +remain immutable; later documentation commits do not change their producer identity. +The outer bootstrap image version and the Go package version are separate identities. The authoritative build is Go modules with the checked-in `vendor/` tree. The runtime dependency baseline uses Go 1.27, AWS SDK for Go v2, Moby API 1.55 and @@ -37,11 +39,11 @@ client 0.5, gopsutil v4.26, mapstructure v2.5, netlink v1.3, and netns v0.0.5. The retired AWS SDK v1, Aliyungo, root Docker module, GOPATH/Godeps, and Trash dependency paths are not part of the build. -`VERSION_OVERRIDE=v0.13.29 make package` produces the deterministic Linux asset `node-agent-0.13.29.tar.gz`. The archive carries the legacy SHA-1 and current SHA-256 manifests required by the authenticated configcontent installer. The producer release is published by this repository; Server can embed that verified archive and distribute it through the existing configuration channel. +`VERSION_OVERRIDE=v0.13.30 make package` produces the deterministic Linux asset `node-agent-0.13.30.tar.gz`. The archive carries the legacy SHA-1 and current SHA-256 manifests required by the authenticated configcontent installer. The producer release is published by this repository; Server can embed that verified archive and distribute it through the existing configuration channel. Component publication and matching Server acceptance are separate evidence boundaries. On Linux, Node supervises the separately maintained `host-api` producer at `${PASTURESTACK_HOME:-${CATTLE_HOME:-/var/lib/pasturestack}}/bin/host-api`. Host API `0.38.5` must be installed before the Node package by the existing `pyagent` package sequence. Node verifies its exact version, forwards the current agent/host identity only through process environment, restarts an exited child, and binds its lifetime to Node. Missing or incompatible producers never fall back to the embedded legacy Host API. Stream authorization, target binding, and private durable terminal evidence remain owned by the Host API producer. -Windows retains the existing embedded compatibility path; this release does not provide Windows stream delegation or durable terminal evidence support. A replacement Windows bootstrap image and upgrade/rollback tests are still required before Windows hosts are supported. The Server-distributed Windows artifact remains independently pinned to `0.13.27`; Linux `0.13.29` and CI cross-builds do not establish new Windows runtime acceptance. +Windows retains the existing embedded compatibility path; this release does not provide Windows stream delegation or durable terminal evidence support. A replacement Windows bootstrap image and upgrade/rollback tests are still required before Windows hosts are supported. The Server-distributed Windows artifact remains independently pinned to `0.13.27`; a Linux package publication and CI cross-builds do not establish new Windows runtime acceptance. The `host.port.check` event performs a read-only host-port preflight through the existing agent event channel. It reports Docker bindings from running and stopped containers and, on Linux, listening TCP/UDP sockets visible through the existing host `/proc` mount. Incomplete host socket inspection is reported as unknown; it is never presented as an available port. diff --git a/go.mod b/go.mod index 415a0d4c..7f85402f 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/PastureStack/node-agent go 1.26.0 -toolchain go1.27.2 +toolchain go1.27.3 require ( github.com/PastureStack/websocket-proxy v0.0.0-00010101000000-000000000000 diff --git a/scripts/version b/scripts/version index 7673a8bd..eedc3d0c 100755 --- a/scripts/version +++ b/scripts/version @@ -5,4 +5,4 @@ if [ -n "$VERSION_OVERRIDE" ]; then return 0 fi -VERSION=v0.13.29 +VERSION=v0.13.30 From a76706a2b489a14d6db105aba40f19d364a3b153 Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Thu, 22 Oct 2026 05:20:01 +0800 Subject: [PATCH 2/4] build: apply official Ubuntu fixes to Node builder and runtime --- .github/workflows/security-release-gate.yml | 2 +- Dockerfile.dapper | 29 + package/Dockerfile | 12 + scripts/package-image | 13 + security/dapper.openvex.json | 2390 ++++++++++++++++--- 5 files changed, 2121 insertions(+), 325 deletions(-) diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index c0b352c2..94256f4f 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -148,7 +148,7 @@ jobs: and ((.impact_statement | length) > 0) ) ' security/dapper.openvex.json >/dev/null - grep -F $'linux-libc-dev:amd64\t7.0.0-30.30' evidence/dapper-dpkg.tsv >/dev/null + grep -F $'linux-libc-dev:amd64\t7.0.0-38.38' evidence/dapper-dpkg.tsv >/dev/null if grep -Eq '^linux-(image|modules)([-:]|[[:space:]])' evidence/dapper-dpkg.tsv; then printf 'Unexpected Linux kernel runtime package in Dapper image\n' >&2 exit 1 diff --git a/Dockerfile.dapper b/Dockerfile.dapper index 81033e55..4a372fc5 100644 --- a/Dockerfile.dapper +++ b/Dockerfile.dapper @@ -9,6 +9,14 @@ ENV DEBIAN_FRONTEND=noninteractive ARG UBUNTU_SNAPSHOT=20260825T000000Z +ADD --checksum=sha256:2c418a61d7165d0cde01d9cb05ae025cc41fc75ef6d3f095996bd045ba0945dc https://security.ubuntu.com/ubuntu/pool/main/c/curl/curl_8.18.0-1ubuntu2.8_amd64.deb /tmp/curl.deb +ADD --checksum=sha256:8db913e1fa5a694ca6ba7b828bd18c5204e6853ac07fe7ed9c6e1f94e3444d8e https://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl3t64-gnutls_8.18.0-1ubuntu2.8_amd64.deb /tmp/libcurl3t64-gnutls.deb +ADD --checksum=sha256:7c0b37592f83a629cc22f0c98effa176da9edbd6d77b3f38184a9d0ddc5e0266 https://security.ubuntu.com/ubuntu/pool/main/c/curl/libcurl4t64_8.18.0-1ubuntu2.8_amd64.deb /tmp/libcurl4t64.deb +ADD --checksum=sha256:3ff73e121f6cd4f19e80ab4329dfd914108b3936c9db3708200203a9b245b34d https://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl3t64_3.5.5-1ubuntu3.7_amd64.deb /tmp/libssl3t64.deb +ADD --checksum=sha256:6965aafe69e0a49ef34d2e26f8e83d09d1c6037b7e9ee37f19b292a3c6851621 https://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_3.5.5-1ubuntu3.7_amd64.deb /tmp/openssl.deb +ADD --checksum=sha256:51cf418571059831096abd40e0bd5debaa1ae48a6f8d87d9e4e5f7f12aa4db52 https://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-provider-legacy_3.5.5-1ubuntu3.7_amd64.deb /tmp/openssl-provider-legacy.deb +ADD --checksum=sha256:0498bc9510149ef06abd6c09b8932e43c5bc71b68634b4b8f84488b2e0a20e82 https://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-libc-dev_7.0.0-38.38_amd64.deb /tmp/linux-libc-dev.deb + ADD --checksum=sha256:6077d27c6b6f8b23590cb01ff877ed8c804a67a5442cc32b5a33da10d2bd0e90 \ https://snapshot.ubuntu.com/ubuntu/20260825T000000Z/pool/main/c/ca-certificates/ca-certificates_20260601~26.04.1_all.deb \ /tmp/ca-certificates.deb @@ -44,6 +52,27 @@ RUN set -eux; \ uuid-runtime \ xz-utils \ zip && \ + for package in curl libcurl3t64-gnutls libcurl4t64 libssl3t64 openssl openssl-provider-legacy linux-libc-dev; do \ + case "$package" in \ + curl|libcurl*) expected=8.18.0-1ubuntu2.8 ;; \ + linux-libc-dev) expected=7.0.0-38.38 ;; \ + *) expected=3.5.5-1ubuntu3.7 ;; \ + esac; \ + test "$(dpkg-deb -f "/tmp/${package}.deb" Package)" = "$package" || exit 1; \ + test "$(dpkg-deb -f "/tmp/${package}.deb" Version)" = "$expected" || exit 1; \ + test "$(dpkg-deb -f "/tmp/${package}.deb" Architecture)" = amd64 || exit 1; \ + done && \ + dpkg -i /tmp/curl.deb /tmp/libcurl3t64-gnutls.deb /tmp/libcurl4t64.deb \ + /tmp/libssl3t64.deb /tmp/openssl.deb /tmp/openssl-provider-legacy.deb /tmp/linux-libc-dev.deb && \ + for package in curl libcurl3t64-gnutls libcurl4t64 libssl3t64 openssl openssl-provider-legacy linux-libc-dev; do \ + case "$package" in \ + curl|libcurl*) expected=8.18.0-1ubuntu2.8 ;; \ + linux-libc-dev) expected=7.0.0-38.38 ;; \ + *) expected=3.5.5-1ubuntu3.7 ;; \ + esac; \ + test "$(dpkg-query -W -f='${Version}' "$package")" = "$expected" || exit 1; \ + rm -f "/tmp/${package}.deb"; \ + done && \ rm -rf /var/lib/apt/lists/* && \ rm -f /usr/bin/pebble && \ rm -f /bin/sh && ln -s /bin/bash /bin/sh diff --git a/package/Dockerfile b/package/Dockerfile index 999d4d2e..66626263 100644 --- a/package/Dockerfile +++ b/package/Dockerfile @@ -8,5 +8,17 @@ LABEL org.opencontainers.image.source="https://github.com/PastureStack/node-agen org.opencontainers.image.version="${PASTURESTACK_IMAGE_VERSION}" RUN rm -f /usr/bin/pebble +COPY libssl3t64.deb openssl-provider-legacy.deb /tmp/ +RUN set -eu; \ + for package in libssl3t64 openssl-provider-legacy; do \ + test "$(dpkg-deb -f "/tmp/${package}.deb" Package)" = "$package"; \ + test "$(dpkg-deb -f "/tmp/${package}.deb" Version)" = 3.5.5-1ubuntu3.7; \ + test "$(dpkg-deb -f "/tmp/${package}.deb" Architecture)" = amd64; \ + done; \ + dpkg -i /tmp/libssl3t64.deb /tmp/openssl-provider-legacy.deb; \ + for package in libssl3t64 openssl-provider-legacy; do \ + test "$(dpkg-query -W -f='${Version}' "$package")" = 3.5.5-1ubuntu3.7; \ + rm -f "/tmp/${package}.deb"; \ + done COPY node-agent /usr/bin/ CMD ["node-agent"] diff --git a/scripts/package-image b/scripts/package-image index eb1243c9..558e75d5 100755 --- a/scripts/package-image +++ b/scripts/package-image @@ -28,6 +28,19 @@ trap cleanup EXIT cp package/Dockerfile "$tmpdir/Dockerfile" cp bin/node-agent "$tmpdir/node-agent" +curl --proto '=https' --tlsv1.2 --fail --silent --show-error --location \ + --retry 2 --connect-timeout 10 --max-time 120 \ + -o "$tmpdir/libssl3t64.deb" \ + https://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl3t64_3.5.5-1ubuntu3.7_amd64.deb +printf '%s %s\n' 3ff73e121f6cd4f19e80ab4329dfd914108b3936c9db3708200203a9b245b34d \ + "$tmpdir/libssl3t64.deb" | sha256sum --check +curl --proto '=https' --tlsv1.2 --fail --silent --show-error --location \ + --retry 2 --connect-timeout 10 --max-time 120 \ + -o "$tmpdir/openssl-provider-legacy.deb" \ + https://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-provider-legacy_3.5.5-1ubuntu3.7_amd64.deb +printf '%s %s\n' 51cf418571059831096abd40e0bd5debaa1ae48a6f8d87d9e4e5f7f12aa4db52 \ + "$tmpdir/openssl-provider-legacy.deb" | sha256sum --check + DOCKER_BUILDKIT="${DOCKER_BUILDKIT:-0}" docker build \ --network="${DOCKER_BUILD_NETWORK:-default}" \ --build-arg PASTURESTACK_IMAGE_VERSION="${tag}" \ diff --git a/security/dapper.openvex.json b/security/dapper.openvex.json index 7d10f8e9..a7e5c0f3 100644 --- a/security/dapper.openvex.json +++ b/security/dapper.openvex.json @@ -1,17 +1,17 @@ { "@context": "https://openvex.dev/ns/v0.2.0", - "@id": "https://github.com/PastureStack/node-agent/security/openvex/dapper/2026-09-08", + "@id": "https://github.com/PastureStack/node-agent/security/openvex/dapper/2026-10-21", "author": "PastureStack contributors", - "timestamp": "2026-09-08T09:50:07+08:00", - "version": 2, + "timestamp": "2026-10-21T21:18:02+00:00", + "version": 3, "statements": [ { "vulnerability": { - "name": "CVE-2025-10263" + "name": "CVE-2022-50240" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -24,7 +24,7 @@ }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -33,11 +33,11 @@ }, { "vulnerability": { - "name": "CVE-2026-52908" + "name": "CVE-2026-100074" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -46,11 +46,11 @@ }, { "vulnerability": { - "name": "CVE-2026-52909" + "name": "CVE-2026-68103" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -59,11 +59,1480 @@ }, { "vulnerability": { - "name": "CVE-2026-52910" + "name": "CVE-2026-68451" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72198" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-72497" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74446" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74454" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74465" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74470" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74506" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74510" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74522" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74529" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74530" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74533" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74534" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74535" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74537" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74565" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74578" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74677" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74684" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74700" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74714" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74715" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74723" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74724" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74744" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-74752" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80551" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80554" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80681" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80683" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80691" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80692" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80693" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80700" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80702" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80710" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80714" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80716" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80718" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80721" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80837" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80841" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80852" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80864" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80891" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80905" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80937" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80980" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80982" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-80991" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89448" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89481" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89492" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89520" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89526" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89528" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89530" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89531" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89537" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89544" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89550" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89564" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89565" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89580" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89622" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89631" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89633" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89637" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89638" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89652" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89659" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89675" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89676" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89680" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89685" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89707" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89708" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89788" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89803" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89805" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89810" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89837" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89907" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89913" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-89922" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90003" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90037" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90048" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90057" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90092" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90093" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90104" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90108" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90111" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90148" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90149" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90150" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90152" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90155" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90161" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90162" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90167" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90169" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90199" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90200" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90204" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90205" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90217" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90227" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90237" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90256" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90313" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-90317" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -72,11 +1541,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53145" + "name": "CVE-2026-90320" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -85,11 +1554,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53148" + "name": "CVE-2026-90321" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -98,11 +1567,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53153" + "name": "CVE-2026-90324" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -111,11 +1580,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53159" + "name": "CVE-2026-90343" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -124,11 +1593,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53170" + "name": "CVE-2026-90375" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -137,11 +1606,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53171" + "name": "CVE-2026-90380" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -150,11 +1619,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53172" + "name": "CVE-2026-90392" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -163,11 +1632,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53173" + "name": "CVE-2026-90398" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -176,11 +1645,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53178" + "name": "CVE-2026-90417" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -189,11 +1658,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53182" + "name": "CVE-2026-92499" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -202,11 +1671,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53183" + "name": "CVE-2026-92507" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -215,11 +1684,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53185" + "name": "CVE-2026-92509" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -228,11 +1697,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53192" + "name": "CVE-2026-92510" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -241,11 +1710,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53193" + "name": "CVE-2026-92511" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -254,11 +1723,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53196" + "name": "CVE-2026-92512" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -267,11 +1736,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53198" + "name": "CVE-2026-93105" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -280,11 +1749,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53235" + "name": "CVE-2026-93125" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -293,11 +1762,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53239" + "name": "CVE-2026-93144" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -306,11 +1775,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53240" + "name": "CVE-2026-93148" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -319,11 +1788,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53250" + "name": "CVE-2026-93154" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -332,11 +1801,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53254" + "name": "CVE-2026-93175" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -345,11 +1814,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53256" + "name": "CVE-2026-93176" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -358,11 +1827,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53259" + "name": "CVE-2026-93192" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -371,11 +1840,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53262" + "name": "CVE-2026-93196" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -384,11 +1853,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53264" + "name": "CVE-2026-93199" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -397,11 +1866,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53266" + "name": "CVE-2026-93210" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -410,11 +1879,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53269" + "name": "CVE-2026-93221" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -423,11 +1892,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53270" + "name": "CVE-2026-93282" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -436,11 +1905,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53275" + "name": "CVE-2026-93787" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -449,11 +1918,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53276" + "name": "CVE-2026-93790" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -462,11 +1931,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53356" + "name": "CVE-2026-93792" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -475,11 +1944,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53362" + "name": "CVE-2026-93796" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -488,11 +1957,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53388" + "name": "CVE-2026-93806" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -501,11 +1970,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53398" + "name": "CVE-2026-93817" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -514,11 +1983,11 @@ }, { "vulnerability": { - "name": "CVE-2026-53399" + "name": "CVE-2026-93824" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -527,11 +1996,11 @@ }, { "vulnerability": { - "name": "CVE-2026-63801" + "name": "CVE-2026-93828" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -540,11 +2009,11 @@ }, { "vulnerability": { - "name": "CVE-2026-63809" + "name": "CVE-2026-97415" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -553,11 +2022,11 @@ }, { "vulnerability": { - "name": "CVE-2026-63815" + "name": "CVE-2026-97429" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -566,11 +2035,11 @@ }, { "vulnerability": { - "name": "CVE-2026-63823" + "name": "CVE-2026-97442" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -579,11 +2048,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64188" + "name": "CVE-2026-97493" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -592,11 +2061,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64191" + "name": "CVE-2026-97497" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -605,11 +2074,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64260" + "name": "CVE-2026-97513" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -618,11 +2087,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64266" + "name": "CVE-2026-97530" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -631,11 +2100,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64269" + "name": "CVE-2026-97555" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -644,11 +2113,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64276" + "name": "CVE-2026-97557" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -657,11 +2126,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64300" + "name": "CVE-2026-97562" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -670,11 +2139,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64361" + "name": "CVE-2026-97564" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -683,11 +2152,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64367" + "name": "CVE-2026-97565" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -696,11 +2165,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64380" + "name": "CVE-2026-97581" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -709,11 +2178,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64383" + "name": "CVE-2026-97603" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -722,11 +2191,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64385" + "name": "CVE-2026-97615" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -735,11 +2204,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64386" + "name": "CVE-2026-97906" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -748,11 +2217,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64387" + "name": "CVE-2026-97960" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -761,11 +2230,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64390" + "name": "CVE-2026-97988" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -774,11 +2243,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64393" + "name": "CVE-2026-98017" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -787,11 +2256,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64396" + "name": "CVE-2026-98019" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -800,11 +2269,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64423" + "name": "CVE-2026-98033" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -813,11 +2282,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64432" + "name": "CVE-2026-98034" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -826,11 +2295,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64440" + "name": "CVE-2026-98041" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -839,11 +2308,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64441" + "name": "CVE-2026-98056" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -852,11 +2321,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64442" + "name": "CVE-2026-98084" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -865,11 +2334,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64467" + "name": "CVE-2026-98085" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -878,11 +2347,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64490" + "name": "CVE-2026-98104" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -891,11 +2360,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64535" + "name": "CVE-2026-98107" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -904,11 +2373,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64543" + "name": "CVE-2026-98115" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -917,11 +2386,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64548" + "name": "CVE-2026-98134" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -930,11 +2399,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64554" + "name": "CVE-2026-98164" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -943,11 +2412,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64557" + "name": "CVE-2026-98167" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -956,11 +2425,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64558" + "name": "CVE-2026-98171" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -969,11 +2438,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64562" + "name": "CVE-2026-98222" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -982,11 +2451,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64564" + "name": "CVE-2026-98229" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -995,11 +2464,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64567" + "name": "CVE-2026-98260" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1008,11 +2477,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64597" + "name": "CVE-2026-98283" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1021,11 +2490,11 @@ }, { "vulnerability": { - "name": "CVE-2026-64601" + "name": "CVE-2026-98332" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1034,11 +2503,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68085" + "name": "CVE-2026-98333" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1047,11 +2516,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68098" + "name": "CVE-2026-98341" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1060,11 +2529,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68117" + "name": "CVE-2026-98359" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1073,11 +2542,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68121" + "name": "CVE-2026-98364" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1086,11 +2555,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68147" + "name": "CVE-2026-98365" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1099,11 +2568,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68162" + "name": "CVE-2026-98376" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1112,11 +2581,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68189" + "name": "CVE-2026-98420" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1125,11 +2594,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68196" + "name": "CVE-2026-98432" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1138,11 +2607,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68198" + "name": "CVE-2026-98439" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1151,11 +2620,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68199" + "name": "CVE-2026-98440" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1164,11 +2633,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68201" + "name": "CVE-2026-98441" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1177,11 +2646,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68204" + "name": "CVE-2026-98442" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1190,11 +2659,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68236" + "name": "CVE-2026-98446" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1203,11 +2672,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68257" + "name": "CVE-2026-98454" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1216,11 +2685,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68284" + "name": "CVE-2026-98456" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1229,11 +2698,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68323" + "name": "CVE-2026-98457" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1242,11 +2711,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68329" + "name": "CVE-2026-98459" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1255,11 +2724,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68380" + "name": "CVE-2026-98462" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1268,11 +2737,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68393" + "name": "CVE-2026-98464" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1281,11 +2750,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68399" + "name": "CVE-2026-98479" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1294,11 +2763,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68442" + "name": "CVE-2026-98487" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1307,11 +2776,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68446" + "name": "CVE-2026-98490" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1320,11 +2789,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68451" + "name": "CVE-2026-98491" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1333,11 +2802,11 @@ }, { "vulnerability": { - "name": "CVE-2026-68470" + "name": "CVE-2026-98503" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1346,11 +2815,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72003" + "name": "CVE-2026-98515" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1359,11 +2828,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72024" + "name": "CVE-2026-98524" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1372,11 +2841,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72110" + "name": "CVE-2026-98526" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1385,11 +2854,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72111" + "name": "CVE-2026-98532" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1398,11 +2867,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72123" + "name": "CVE-2026-98548" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1411,11 +2880,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72124" + "name": "CVE-2026-98561" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1424,11 +2893,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72135" + "name": "CVE-2026-98567" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1437,11 +2906,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72151" + "name": "CVE-2026-98568" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1450,11 +2919,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72195" + "name": "CVE-2026-98570" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1463,11 +2932,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72287" + "name": "CVE-2026-98571" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1476,11 +2945,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72288" + "name": "CVE-2026-98572" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1489,11 +2958,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72331" + "name": "CVE-2026-98573" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1502,11 +2971,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72338" + "name": "CVE-2026-98580" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1515,11 +2984,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72372" + "name": "CVE-2026-98586" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1528,11 +2997,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72390" + "name": "CVE-2026-98588" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1541,11 +3010,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72461" + "name": "CVE-2026-98589" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1554,11 +3023,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72462" + "name": "CVE-2026-98590" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1567,11 +3036,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72472" + "name": "CVE-2026-98591" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1580,11 +3049,11 @@ }, { "vulnerability": { - "name": "CVE-2026-72478" + "name": "CVE-2026-98599" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1593,11 +3062,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74268" + "name": "CVE-2026-98601" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1606,11 +3075,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74317" + "name": "CVE-2026-98606" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1619,11 +3088,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74334" + "name": "CVE-2026-98621" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1632,11 +3101,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74341" + "name": "CVE-2026-98624" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1645,11 +3114,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74363" + "name": "CVE-2026-98625" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1658,11 +3127,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74378" + "name": "CVE-2026-98626" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1671,11 +3140,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74390" + "name": "CVE-2026-98632" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1684,11 +3153,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74394" + "name": "CVE-2026-98634" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1697,11 +3166,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74411" + "name": "CVE-2026-98635" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1710,11 +3179,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74427" + "name": "CVE-2026-98641" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1723,11 +3192,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74438" + "name": "CVE-2026-98642" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1736,11 +3205,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74446" + "name": "CVE-2026-98649" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1749,11 +3218,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74465" + "name": "CVE-2026-98651" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1762,11 +3231,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74470" + "name": "CVE-2026-98652" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1775,11 +3244,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74506" + "name": "CVE-2026-98689" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1788,11 +3257,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74510" + "name": "CVE-2026-98699" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1801,11 +3270,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74529" + "name": "CVE-2026-98701" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1814,11 +3283,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74534" + "name": "CVE-2026-98702" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1827,11 +3296,11 @@ }, { "vulnerability": { - "name": "CVE-2026-74535" + "name": "CVE-2026-98704" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1840,11 +3309,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80631" + "name": "CVE-2026-98706" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1853,11 +3322,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80634" + "name": "CVE-2026-98707" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1866,11 +3335,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80637" + "name": "CVE-2026-98708" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1879,11 +3348,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80644" + "name": "CVE-2026-98709" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1892,11 +3361,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80665" + "name": "CVE-2026-98712" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1905,11 +3374,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80668" + "name": "CVE-2026-98719" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1918,11 +3387,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80671" + "name": "CVE-2026-98725" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1931,11 +3400,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80681" + "name": "CVE-2026-98730" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1944,11 +3413,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80683" + "name": "CVE-2026-98733" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1957,11 +3426,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80691" + "name": "CVE-2026-98734" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1970,11 +3439,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80692" + "name": "CVE-2026-98735" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1983,11 +3452,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80693" + "name": "CVE-2026-98737" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -1996,11 +3465,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80700" + "name": "CVE-2026-98738" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -2009,11 +3478,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80702" + "name": "CVE-2026-98739" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -2022,11 +3491,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80710" + "name": "CVE-2026-98741" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -2035,11 +3504,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80714" + "name": "CVE-2026-98742" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -2048,11 +3517,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80716" + "name": "CVE-2026-98752" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -2061,11 +3530,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80718" + "name": "CVE-2026-98754" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -2074,11 +3543,284 @@ }, { "vulnerability": { - "name": "CVE-2026-80721" + "name": "CVE-2026-98763" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98776" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98788" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98792" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98794" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98797" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98799" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98800" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98803" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98804" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98805" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98813" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98823" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98824" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98827" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98829" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98836" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98837" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98846" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98858" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98861" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable Node Agent Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned Node Agent binary and runtime image report zero Critical or High findings." + }, + { + "vulnerability": { + "name": "CVE-2026-98862" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", @@ -2087,11 +3829,11 @@ }, { "vulnerability": { - "name": "CVE-2026-80725" + "name": "CVE-2026-98863" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-30.30?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", From 0db1b43d3f3cf0a359884017f0cd699462489af0 Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Thu, 22 Oct 2026 05:33:49 +0800 Subject: [PATCH 3/4] ci: retain clean exact-scanned Node release packages --- .github/workflows/security-release-gate.yml | 21 +++++++++++++++++++++ .github/workflows/validate.yml | 3 ++- .gitignore | 1 + 3 files changed, 24 insertions(+), 1 deletion(-) diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index 94256f4f..5baa23bc 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -57,6 +57,11 @@ jobs: gzip -t dist/artifacts/node-agent-0.13.30.tar.gz bash scripts/verify-package dist/artifacts/node-agent-0.13.30.tar.gz unzip -t dist/artifacts/node-agent-0.13.30-windows-amd64.zip + ( + cd dist/artifacts + sha256sum node-agent-0.13.30.tar.gz node-agent-0.13.30-windows-amd64.zip > SHA256SUMS + sha256sum -c SHA256SUMS + ) sha256sum dist/artifacts/node-agent-0.13.30.tar.gz \ dist/artifacts/node-agent-0.13.30-windows-amd64.zip \ bin/node-agent bin/windows/amd64/node-agent.exe > evidence/product-artifacts.sha256 @@ -81,6 +86,10 @@ jobs: version -m /work/bin/windows/amd64/node-agent.exe > evidence/windows-product-go-version.txt grep -F 'go1.27.3' evidence/windows-product-go-version.txt >/dev/null grep -F $'build\tGOOS=windows' evidence/windows-product-go-version.txt >/dev/null + for report in evidence/product-go-version.txt evidence/windows-product-go-version.txt; do + grep -Fx $'\tbuild\tvcs.revision='"$GITHUB_SHA" "$report" >/dev/null + grep -Fx $'\tbuild\tvcs.modified=false' "$report" >/dev/null + done - name: Scan source, product, runtime, and build image shell: bash @@ -234,6 +243,18 @@ jobs: print('{}_components={}'.format(scope, len(bom['components']))) PY + - name: Retain exact scanned release packages + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: node-agent-scanned-0.13.30 + path: | + dist/artifacts/node-agent-0.13.30.tar.gz + dist/artifacts/node-agent-0.13.30-windows-amd64.zip + dist/artifacts/SHA256SUMS + if-no-files-found: error + retention-days: 30 + compression-level: 0 + - name: Upload reviewed evidence if: always() uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 0ac2d0b3..7cac977c 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -34,7 +34,8 @@ jobs: set -euo pipefail git init . git remote add origin "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git" - git fetch --depth=1 origin "$SOURCE_SHA" + # Match the Security gate's fetch-depth: 0 history and tags. + git fetch --tags origin "$SOURCE_SHA" git -c advice.detachedHead=false checkout --detach FETCH_HEAD test "$(git rev-parse HEAD)" = "$SOURCE_SHA" test -z "$(git status --short)" diff --git a/.gitignore b/.gitignore index 16315ec4..0c973270 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,7 @@ /.dapper /bin /dist +/evidence/ *.swp /.trash-cache .idea/* From 246df59e7d5014078be1d64e24ff33fd0ad50976 Mon Sep 17 00:00:00 2001 From: chen21019 <19357113+chen21019@users.noreply.github.com> Date: Thu, 22 Oct 2026 05:37:23 +0800 Subject: [PATCH 4/4] build: bind Node 0.13.30 to exact Host API 0.38.6 --- README.md | 4 ++-- service/hostapilauncher/process_linux_test.go | 2 +- service/hostapilauncher/supervisor.go | 2 +- service/hostapilauncher/supervisor_test.go | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 9cf18776..6ed94ce7 100644 --- a/README.md +++ b/README.md @@ -41,9 +41,9 @@ dependency paths are not part of the build. `VERSION_OVERRIDE=v0.13.30 make package` produces the deterministic Linux asset `node-agent-0.13.30.tar.gz`. The archive carries the legacy SHA-1 and current SHA-256 manifests required by the authenticated configcontent installer. The producer release is published by this repository; Server can embed that verified archive and distribute it through the existing configuration channel. Component publication and matching Server acceptance are separate evidence boundaries. -On Linux, Node supervises the separately maintained `host-api` producer at `${PASTURESTACK_HOME:-${CATTLE_HOME:-/var/lib/pasturestack}}/bin/host-api`. Host API `0.38.5` must be installed before the Node package by the existing `pyagent` package sequence. Node verifies its exact version, forwards the current agent/host identity only through process environment, restarts an exited child, and binds its lifetime to Node. Missing or incompatible producers never fall back to the embedded legacy Host API. Stream authorization, target binding, and private durable terminal evidence remain owned by the Host API producer. +On Linux, Node supervises the separately maintained `host-api` producer at `${PASTURESTACK_HOME:-${CATTLE_HOME:-/var/lib/pasturestack}}/bin/host-api`. Host API `0.38.6` must be installed before the Node package by the existing `pyagent` package sequence. Node verifies its exact version, forwards the current agent/host identity only through process environment, restarts an exited child, and binds its lifetime to Node. Missing or incompatible producers never fall back to the embedded legacy Host API. Stream authorization, target binding, and private durable terminal evidence remain owned by the Host API producer. -Windows retains the existing embedded compatibility path; this release does not provide Windows stream delegation or durable terminal evidence support. A replacement Windows bootstrap image and upgrade/rollback tests are still required before Windows hosts are supported. The Server-distributed Windows artifact remains independently pinned to `0.13.27`; a Linux package publication and CI cross-builds do not establish new Windows runtime acceptance. +Windows retains the existing embedded compatibility path; this release does not provide Windows stream delegation or durable terminal evidence support. A replacement Windows bootstrap image and upgrade/rollback tests are still required before Windows hosts are supported. The Server recipe independently pins its Windows artifact; a Linux package publication and CI cross-builds do not establish new Windows runtime acceptance. The `host.port.check` event performs a read-only host-port preflight through the existing agent event channel. It reports Docker bindings from running and stopped containers and, on Linux, listening TCP/UDP sockets visible through the existing host `/proc` mount. Incomplete host socket inspection is reported as unknown; it is never presented as an available port. diff --git a/service/hostapilauncher/process_linux_test.go b/service/hostapilauncher/process_linux_test.go index a67f0358..5ce936fc 100644 --- a/service/hostapilauncher/process_linux_test.go +++ b/service/hostapilauncher/process_linux_test.go @@ -19,7 +19,7 @@ func TestProducerIsBoundToLinuxParentDeathAndRejectsUnsafeExecutable(t *testing. } directory := t.TempDir() file := filepath.Join(directory, "host-api") - if err := os.WriteFile(file, []byte("#!/bin/sh\nprintf '0.38.5\\n'\n"), 0755); err != nil { + if err := os.WriteFile(file, []byte("#!/bin/sh\nprintf '0.38.6\\n'\n"), 0755); err != nil { t.Fatal(err) } if err := validateProducer(context.Background(), file, os.Environ()); err != nil { diff --git a/service/hostapilauncher/supervisor.go b/service/hostapilauncher/supervisor.go index 5609afb0..5404b6bd 100644 --- a/service/hostapilauncher/supervisor.go +++ b/service/hostapilauncher/supervisor.go @@ -17,7 +17,7 @@ import ( "github.com/rancher/log" ) -const RequiredVersion = "0.38.5" +const RequiredVersion = "0.38.6" type Settings struct { Binary string diff --git a/service/hostapilauncher/supervisor_test.go b/service/hostapilauncher/supervisor_test.go index f5f766c7..3c201207 100644 --- a/service/hostapilauncher/supervisor_test.go +++ b/service/hostapilauncher/supervisor_test.go @@ -9,12 +9,12 @@ import ( ) func TestProducerVersionIsExactAndBounded(t *testing.T) { - for _, version := range []string{"0.38.5", "0.38.5\n"} { + for _, version := range []string{"0.38.6", "0.38.6\n"} { if !validVersion(version) { t.Fatal("current producer rejected") } } - for _, version := range []string{"0.38.4", "0.38.5-dirty", "0.38.5\nextra", ""} { + for _, version := range []string{"0.38.4", "0.38.5", "0.38.6-dirty", "0.38.6\nextra", ""} { if validVersion(version) { t.Fatal("incompatible producer accepted") }