From 697e5192f668f4343e4eaf20b7b3cab2cf149f47 Mon Sep 17 00:00:00 2001 From: Rex Pan Date: Thu, 2 Mar 2023 11:42:17 +1100 Subject: [PATCH 1/5] More specific cyclone dx parsing --- internal/sbom/cyclonedx.go | 24 ++++++++++++++++++++++++ internal/sbom/sbom.go | 2 ++ internal/sbom/spdx.go | 10 +++++++++- pkg/osvscanner/osvscanner.go | 24 ++++++++++++------------ 4 files changed, 47 insertions(+), 13 deletions(-) diff --git a/internal/sbom/cyclonedx.go b/internal/sbom/cyclonedx.go index e7b1927419..9d080a9375 100644 --- a/internal/sbom/cyclonedx.go +++ b/internal/sbom/cyclonedx.go @@ -3,6 +3,7 @@ package sbom import ( "fmt" "io" + "path/filepath" "strings" "github.com/CycloneDX/cyclonedx-go" @@ -21,6 +22,29 @@ func (c *CycloneDX) Name() string { return "CycloneDX" } +func (s *CycloneDX) StandardFileName(path string) bool { + expectedGlobs := []string{ + "bom.xml", + "bom.json", + "*.cdx.json", + "*.cdx.xml", + } + filename := filepath.Base(path) + for _, v := range expectedGlobs { + matched, err := filepath.Match(v, filename) + if err != nil { + // Just panic since the only error is invalid glob pattern + panic("Glob pattern is invalid: " + err.Error()) + } + + if matched { + return true + } + } + + return false +} + func (c *CycloneDX) enumerateComponents(components []cyclonedx.Component, callback func(Identifier) error) error { for _, component := range components { if component.PackageURL != "" { diff --git a/internal/sbom/sbom.go b/internal/sbom/sbom.go index ff263c0a7a..f77cbef65e 100644 --- a/internal/sbom/sbom.go +++ b/internal/sbom/sbom.go @@ -13,6 +13,8 @@ type Identifier struct { // SBOMReader is an interface for all SBOM providers. type SBOMReader interface { Name() string + // Checks if the file path is a standard recognized file name + StandardFileName(string) bool GetPackages(io.ReadSeeker, func(Identifier) error) error } diff --git a/internal/sbom/spdx.go b/internal/sbom/spdx.go index 210833a638..48e846c58e 100644 --- a/internal/sbom/spdx.go +++ b/internal/sbom/spdx.go @@ -4,8 +4,10 @@ package sbom import ( "fmt" "io" + "path/filepath" + "strings" - "github.com/spdx/tools-golang/json" + spdx_json "github.com/spdx/tools-golang/json" "github.com/spdx/tools-golang/rdfloader" "github.com/spdx/tools-golang/spdx/v2_3" "github.com/spdx/tools-golang/tvloader" @@ -26,6 +28,12 @@ func (s *SPDX) Name() string { return "SPDX" } +func (s *SPDX) StandardFileName(path string) bool { + // All spdx files should have the .spdx in the filename, even if + // it's not the extension: https://spdx.github.io/spdx-spec/v2.3/conformance/ + return strings.Contains(strings.ToLower(filepath.Base(path)), ".spdx") +} + func (s *SPDX) enumeratePackages(doc *v2_3.Document, callback func(Identifier) error) error { for _, p := range doc.Packages { for _, r := range p.PackageExternalReferences { diff --git a/pkg/osvscanner/osvscanner.go b/pkg/osvscanner/osvscanner.go index 6b1d8e53e0..55c414f2ed 100644 --- a/pkg/osvscanner/osvscanner.go +++ b/pkg/osvscanner/osvscanner.go @@ -222,22 +222,22 @@ func scanLockfile(r *output.Reporter, query *osv.BatchedQuery, path string, pars // scanSBOMFile will load, identify, and parse the SBOM path passed in, and add the dependencies specified // within to `query` func scanSBOMFile(r *output.Reporter, query *osv.BatchedQuery, path string) error { - file, err := os.Open(path) - if err != nil { - return err - } - defer file.Close() - for _, provider := range sbom.Providers { - if provider.Name() == "SPDX" && - !strings.Contains(strings.ToLower(filepath.Base(path)), ".spdx") { - // All spdx files should have the .spdx in the filename, even if - // it's not the extension: https://spdx.github.io/spdx-spec/v2.3/conformance/ - // Skip if this isn't the case to avoid panics + if !provider.StandardFileName(path) { + // Skip if filename is not usually a sbom file of this format continue } + + // Opening file inside loop is OK, since providers is not very long, + // and it is unlikely that multiple providers accept the same file name + file, err := os.Open(path) + if err != nil { + return err + } + defer file.Close() + count := 0 - err := provider.GetPackages(file, func(id sbom.Identifier) error { + err = provider.GetPackages(file, func(id sbom.Identifier) error { purlQuery := osv.MakePURLRequest(id.PURL) purlQuery.Source = models.SourceInfo{ Path: path, From 177633f8da7af2d1ed96362b124f8b4be51d4c72 Mon Sep 17 00:00:00 2001 From: Rex Pan Date: Thu, 2 Mar 2023 12:13:31 +1100 Subject: [PATCH 2/5] Add test for cyclonedx sboms --- .../fixtures/locks-many/alpine.cdx.xml | 604 ++ .../sbom-insecure/postgres-stretch.cdx.xml | 5110 +++++++++++++++++ cmd/osv-scanner/main_test.go | 23 +- pkg/osvscanner/osvscanner.go | 2 +- 4 files changed, 5737 insertions(+), 2 deletions(-) create mode 100644 cmd/osv-scanner/fixtures/locks-many/alpine.cdx.xml create mode 100644 cmd/osv-scanner/fixtures/sbom-insecure/postgres-stretch.cdx.xml diff --git a/cmd/osv-scanner/fixtures/locks-many/alpine.cdx.xml b/cmd/osv-scanner/fixtures/locks-many/alpine.cdx.xml new file mode 100644 index 0000000000..6a0e162114 --- /dev/null +++ b/cmd/osv-scanner/fixtures/locks-many/alpine.cdx.xml @@ -0,0 +1,604 @@ + + + + 2023-03-02T12:04:22+11:00 + + + anchore + syft + 0.73.0 + + + + alpine:latest + sha256:fd6275a37d2472b9d3be70c3261087b8d65e441c21342ae7313096312bcda2b3 + + + + + Natanael Copa <ncopa@alpinelinux.org> + alpine-baselayout + 3.4.0-r0 + Alpine base dir structure and init scripts + + + GPL-2.0-only + + + cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:* + pkg:apk/alpine/alpine-baselayout@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.2 + + + https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:alpine-baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine_baselayout:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine_baselayout:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine:alpine-baselayout:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine:alpine_baselayout:3.4.0-r0:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + bd965a7ebf7fd8f07d7a0cc0d7375bf3e4eb9b24 + 331776 + alpine-baselayout + Q1/eXfmbYT1WXenFSqKjroYyK84NE= + alpine-baselayout-data=3.4.0-r0 + /bin/sh + 8890 + + + + Natanael Copa <ncopa@alpinelinux.org> + alpine-baselayout-data + 3.4.0-r0 + Alpine base dir structure and init scripts + + + GPL-2.0-only + + + cpe:2.3:a:alpine-baselayout-data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:* + pkg:apk/alpine/alpine-baselayout-data@3.4.0-r0?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.17.2 + + + https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:alpine-baselayout-data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine_baselayout_data:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine_baselayout_data:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine-baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine-baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine_baselayout:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine_baselayout:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine:alpine-baselayout-data:3.4.0-r0:*:*:*:*:*:*:* + cpe:2.3:a:alpine:alpine_baselayout_data:3.4.0-r0:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + bd965a7ebf7fd8f07d7a0cc0d7375bf3e4eb9b24 + 77824 + alpine-baselayout + Q1/JgpM8J6DWI/541tUX+uHEzSjqo= + 11664 + + + + Natanael Copa <ncopa@alpinelinux.org> + alpine-keys + 2.4-r1 + Public keys for Alpine Linux packages + + + MIT + + + cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:* + pkg:apk/alpine/alpine-keys@2.4-r1?arch=x86_64&upstream=alpine-keys&distro=alpine-3.17.2 + + + https://alpinelinux.org + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:alpine-keys:alpine_keys:2.4-r1:*:*:*:*:*:*:* + cpe:2.3:a:alpine_keys:alpine-keys:2.4-r1:*:*:*:*:*:*:* + cpe:2.3:a:alpine_keys:alpine_keys:2.4-r1:*:*:*:*:*:*:* + cpe:2.3:a:alpine:alpine-keys:2.4-r1:*:*:*:*:*:*:* + cpe:2.3:a:alpine:alpine_keys:2.4-r1:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + aab68f8c9ab434a46710de8e12fb3206e2930a59 + 159744 + alpine-keys + Q1KM01lfKVp+gEZn23awujqjSkrN8= + 13361 + + + + Natanael Copa <ncopa@alpinelinux.org> + apk-tools + 2.12.10-r1 + Alpine Package Keeper - package manager for alpine + + + GPL-2.0-only + + + cpe:2.3:a:apk-tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:* + pkg:apk/alpine/apk-tools@2.12.10-r1?arch=x86_64&upstream=apk-tools&distro=alpine-3.17.2 + + + https://gitlab.alpinelinux.org/alpine/apk-tools + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:apk-tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:* + cpe:2.3:a:apk_tools:apk-tools:2.12.10-r1:*:*:*:*:*:*:* + cpe:2.3:a:apk_tools:apk_tools:2.12.10-r1:*:*:*:*:*:*:* + cpe:2.3:a:apk:apk-tools:2.12.10-r1:*:*:*:*:*:*:* + cpe:2.3:a:apk:apk_tools:2.12.10-r1:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + 0188f510baadbae393472103427b9c1875117136 + 307200 + apk-tools + so:libapk.so.3.12.0=3.12.0 + cmd:apk=2.12.10-r1 + Q1Ef3iwt+cMdGngEgaFr2URIJhKzQ= + musl>=1.2 + ca-certificates-bundle + so:libc.musl-x86_64.so.1 + so:libcrypto.so.3 + so:libssl.so.3 + so:libz.so.1 + 120973 + + + + busybox + 1.35.0 + cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:* + + binary-cataloger + BinaryMetadata + binary + cpe:2.3:a:busybox:busybox:1.35.0:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /bin/busybox + + + + Sören Tempel <soeren+alpine@soeren-tempel.net> + busybox + 1.35.0-r29 + Size optimized toolbox of many common UNIX utilities + + + GPL-2.0-only + + + cpe:2.3:a:busybox:busybox:1.35.0-r29:*:*:*:*:*:*:* + pkg:apk/alpine/busybox@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2 + + + https://busybox.net/ + + + + apkdb-cataloger + ApkMetadata + apk + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + 1dbf7a793afae640ea643a055b6dd4f430ac116b + 962560 + busybox + cmd:busybox=1.35.0-r29 + Q1NN3sp0yr99btRysqty3nQUrWHaY= + so:libc.musl-x86_64.so.1 + 509600 + + + + Sören Tempel <soeren+alpine@soeren-tempel.net> + busybox-binsh + 1.35.0-r29 + busybox ash /bin/sh + + + GPL-2.0-only + + + cpe:2.3:a:busybox-binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:* + pkg:apk/alpine/busybox-binsh@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2 + + + https://busybox.net/ + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:busybox-binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:* + cpe:2.3:a:busybox_binsh:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:* + cpe:2.3:a:busybox_binsh:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:* + cpe:2.3:a:busybox:busybox-binsh:1.35.0-r29:*:*:*:*:*:*:* + cpe:2.3:a:busybox:busybox_binsh:1.35.0-r29:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + 1dbf7a793afae640ea643a055b6dd4f430ac116b + 8192 + busybox + /bin/sh + cmd:sh=1.35.0-r29 + Q1miWwyhWKXVEiRYLhmArV1TKMs6A= + busybox=1.35.0-r29 + 1547 + + + + Natanael Copa <ncopa@alpinelinux.org> + ca-certificates-bundle + 20220614-r4 + Pre generated bundle of Mozilla certificates + + + MPL-2.0 + + + MIT + + + cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:* + pkg:apk/alpine/ca-certificates-bundle@20220614-r4?arch=x86_64&upstream=ca-certificates&distro=alpine-3.17.2 + + + https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/ + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:ca-certificates-bundle:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:* + cpe:2.3:a:ca_certificates_bundle:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:* + cpe:2.3:a:ca_certificates_bundle:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:* + cpe:2.3:a:ca-certificates:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:* + cpe:2.3:a:ca-certificates:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:* + cpe:2.3:a:ca_certificates:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:* + cpe:2.3:a:ca_certificates:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:* + cpe:2.3:a:ca:ca-certificates-bundle:20220614-r4:*:*:*:*:*:*:* + cpe:2.3:a:ca:ca_certificates_bundle:20220614-r4:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + e1839fd45a096c9e21ac24f8a61991d357d11628 + 237568 + ca-certificates + ca-certificates-cacert=20220614-r4 + Q14PFUzkDXTGDcHkiuEdFuzb+EvxQ= + 126296 + + + + Natanael Copa <ncopa@alpinelinux.org> + libc-utils + 0.7.2-r3 + Meta package to pull in correct libc + + + BSD-2-Clause + + + BSD-3-Clause + + + cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:* + pkg:apk/alpine/libc-utils@0.7.2-r3?arch=x86_64&upstream=libc-dev&distro=alpine-3.17.2 + + + https://alpinelinux.org + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:libc-utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:* + cpe:2.3:a:libc_utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:* + cpe:2.3:a:libc_utils:libc_utils:0.7.2-r3:*:*:*:*:*:*:* + cpe:2.3:a:libc:libc-utils:0.7.2-r3:*:*:*:*:*:*:* + cpe:2.3:a:libc:libc_utils:0.7.2-r3:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + 60424133be2e79bbfeff3d58147a22886f817ce2 + 4096 + libc-dev + Q19Gg06pBPiiG9UN94ql7qImsHSUQ= + musl-utils + 1485 + + + + Ariadne Conill <ariadne@dereferenced.org> + libcrypto3 + 3.0.8-r0 + Crypto library from openssl + + + Apache-2.0 + + + cpe:2.3:a:libcrypto3:libcrypto3:3.0.8-r0:*:*:*:*:*:*:* + pkg:apk/alpine/libcrypto3@3.0.8-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.2 + + + https://www.openssl.org/ + + + + apkdb-cataloger + ApkMetadata + apk + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + 524302e205a5b43c2bb48d041bcb10ccf2b480f9 + 4206592 + openssl + so:libcrypto.so.3=3 + Q1lyWpurYeMlLEt60ys+OlTABmzgs= + so:libc.musl-x86_64.so.1 + 1710217 + + + + Ariadne Conill <ariadne@dereferenced.org> + libssl3 + 3.0.8-r0 + SSL shared libraries + + + Apache-2.0 + + + cpe:2.3:a:libssl3:libssl3:3.0.8-r0:*:*:*:*:*:*:* + pkg:apk/alpine/libssl3@3.0.8-r0?arch=x86_64&upstream=openssl&distro=alpine-3.17.2 + + + https://www.openssl.org/ + + + + apkdb-cataloger + ApkMetadata + apk + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + 524302e205a5b43c2bb48d041bcb10ccf2b480f9 + 622592 + openssl + so:libssl.so.3=3 + Q1Z6/d/FKYkPehWzNtOtYnJ74oIkY= + so:libc.musl-x86_64.so.1 + so:libcrypto.so.3 + 246853 + + + + Timo Teräs <timo.teras@iki.fi> + musl + 1.2.3-r4 + the musl c library (libc) implementation + + + MIT + + + cpe:2.3:a:musl:musl:1.2.3-r4:*:*:*:*:*:*:* + pkg:apk/alpine/musl@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.2 + + + https://musl.libc.org/ + + + + apkdb-cataloger + ApkMetadata + apk + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + f93af038c3de7146121c2ea8124ba5ce29b4b058 + 634880 + musl + so:libc.musl-x86_64.so.1=1 + Q1Pk7x1woArbB1nzkMPJPq1TECwus= + 388955 + + + + Timo Teräs <timo.teras@iki.fi> + musl-utils + 1.2.3-r4 + the musl c library (libc) implementation + + + MIT + + + BSD-2-Clause + + + GPL-2.0-or-later + + + cpe:2.3:a:musl-utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:* + pkg:apk/alpine/musl-utils@1.2.3-r4?arch=x86_64&upstream=musl&distro=alpine-3.17.2 + + + https://musl.libc.org/ + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:musl-utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:* + cpe:2.3:a:musl_utils:musl-utils:1.2.3-r4:*:*:*:*:*:*:* + cpe:2.3:a:musl_utils:musl_utils:1.2.3-r4:*:*:*:*:*:*:* + cpe:2.3:a:musl:musl-utils:1.2.3-r4:*:*:*:*:*:*:* + cpe:2.3:a:musl:musl_utils:1.2.3-r4:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + f93af038c3de7146121c2ea8124ba5ce29b4b058 + 135168 + musl + cmd:getconf=1.2.3-r4 + cmd:getent=1.2.3-r4 + cmd:iconv=1.2.3-r4 + cmd:ldconfig=1.2.3-r4 + cmd:ldd=1.2.3-r4 + Q1ZWJL4eySx8nPSjF1FAJgQyvuNs4= + scanelf + so:libc.musl-x86_64.so.1 + 36697 + + + + Natanael Copa <ncopa@alpinelinux.org> + scanelf + 1.3.5-r1 + Scan ELF binaries for stuff + + + GPL-2.0-only + + + cpe:2.3:a:scanelf:scanelf:1.3.5-r1:*:*:*:*:*:*:* + pkg:apk/alpine/scanelf@1.3.5-r1?arch=x86_64&upstream=pax-utils&distro=alpine-3.17.2 + + + https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities + + + + apkdb-cataloger + ApkMetadata + apk + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + e52243dbb02069f10d48440ccc5fd41fa5fc2236 + 98304 + pax-utils + cmd:scanelf=1.3.5-r1 + Q11dxYFsHvBFAzzHGDo5gOTDNJDyQ= + so:libc.musl-x86_64.so.1 + 37687 + + + + Sören Tempel <soeren+alpine@soeren-tempel.net> + ssl_client + 1.35.0-r29 + EXternal ssl_client for busybox wget + + + GPL-2.0-only + + + cpe:2.3:a:ssl-client:ssl-client:1.35.0-r29:*:*:*:*:*:*:* + pkg:apk/alpine/ssl_client@1.35.0-r29?arch=x86_64&upstream=busybox&distro=alpine-3.17.2 + + + https://busybox.net/ + + + + apkdb-cataloger + ApkMetadata + apk + cpe:2.3:a:ssl-client:ssl_client:1.35.0-r29:*:*:*:*:*:*:* + cpe:2.3:a:ssl_client:ssl-client:1.35.0-r29:*:*:*:*:*:*:* + cpe:2.3:a:ssl_client:ssl_client:1.35.0-r29:*:*:*:*:*:*:* + cpe:2.3:a:ssl:ssl-client:1.35.0-r29:*:*:*:*:*:*:* + cpe:2.3:a:ssl:ssl_client:1.35.0-r29:*:*:*:*:*:*:* + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + 1dbf7a793afae640ea643a055b6dd4f430ac116b + 28672 + busybox + cmd:ssl_client=1.35.0-r29 + Q1QuqZjeP6XG85I29tOiCWofL8Cj0= + so:libc.musl-x86_64.so.1 + so:libcrypto.so.3 + so:libssl.so.3 + 4929 + + + + Natanael Copa <ncopa@alpinelinux.org> + zlib + 1.2.13-r0 + A compression/decompression Library + + + Zlib + + + cpe:2.3:a:zlib:zlib:1.2.13-r0:*:*:*:*:*:*:* + pkg:apk/alpine/zlib@1.2.13-r0?arch=x86_64&upstream=zlib&distro=alpine-3.17.2 + + + https://zlib.net/ + + + + apkdb-cataloger + ApkMetadata + apk + sha256:7cd52847ad775a5ddc4b58326cf884beee34544296402c6292ed76474c686d39 + /lib/apk/db/installed + bb37266b06a72d21d1fd850ef4b86665cf9ef70f + 110592 + zlib + so:libz.so.1=1.2.13 + Q1rjnXT01l1PAxXheUxe4Oldl5rFk= + so:libc.musl-x86_64.so.1 + 54258 + + + + alpine + 3.17.2 + Alpine Linux v3.17 + + + + https://gitlab.alpinelinux.org/alpine/aports/-/issues + + + https://alpinelinux.org/ + + + + alpine + Alpine Linux v3.17 + 3.17.2 + + + + \ No newline at end of file diff --git a/cmd/osv-scanner/fixtures/sbom-insecure/postgres-stretch.cdx.xml b/cmd/osv-scanner/fixtures/sbom-insecure/postgres-stretch.cdx.xml new file mode 100644 index 0000000000..76cf7fd9f2 --- /dev/null +++ b/cmd/osv-scanner/fixtures/sbom-insecure/postgres-stretch.cdx.xml @@ -0,0 +1,5110 @@ + + + + 2023-03-02T12:00:49+11:00 + + + anchore + syft + 0.73.0 + + + + postgres:11.15-stretch + sha256:84ac18036f93e18c3d8165e4fd9d9885924bb71beeab042dd50443d4f88fcdda + + + + + Debian Adduser Developers <adduser-devel@lists.alioth.debian.org> + adduser + 3.115 + + + GPL-2.0-only + + + cpe:2.3:a:adduser:adduser:3.115:*:*:*:*:*:*:* + pkg:deb/debian/adduser@3.115?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/adduser/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/adduser.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/adduser.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 849 + + + + APT Development Team <deity@lists.debian.org> + apt + 1.4.11 + + + GPL-2.0-only + + + GPLv2+ + + + cpe:2.3:a:apt:apt:1.4.11:*:*:*:*:*:*:* + pkg:deb/debian/apt@1.4.11?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/apt/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/apt.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/apt.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 3539 + + + + Santiago Vila <sanvila@debian.org> + base-files + 9.9+deb9u13 + + + GPL + + + cpe:2.3:a:base-files:base-files:9.9\+deb9u13:*:*:*:*:*:*:* + pkg:deb/debian/base-files@9.9+deb9u13?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:base-files:base_files:9.9\+deb9u13:*:*:*:*:*:*:* + cpe:2.3:a:base_files:base-files:9.9\+deb9u13:*:*:*:*:*:*:* + cpe:2.3:a:base_files:base_files:9.9\+deb9u13:*:*:*:*:*:*:* + cpe:2.3:a:base:base-files:9.9\+deb9u13:*:*:*:*:*:*:* + cpe:2.3:a:base:base_files:9.9\+deb9u13:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/base-files/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/base-files.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/base-files.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 333 + + + + Colin Watson <cjwatson@debian.org> + base-passwd + 3.5.43 + + + GPL-2.0-only + + + PD + + + cpe:2.3:a:base-passwd:base-passwd:3.5.43:*:*:*:*:*:*:* + pkg:deb/debian/base-passwd@3.5.43?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:base-passwd:base_passwd:3.5.43:*:*:*:*:*:*:* + cpe:2.3:a:base_passwd:base-passwd:3.5.43:*:*:*:*:*:*:* + cpe:2.3:a:base_passwd:base_passwd:3.5.43:*:*:*:*:*:*:* + cpe:2.3:a:base:base-passwd:3.5.43:*:*:*:*:*:*:* + cpe:2.3:a:base:base_passwd:3.5.43:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/base-passwd/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/base-passwd.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 229 + + + + Matthias Klose <doko@debian.org> + bash + 4.4-5 + + + GPL-3.0-only + + + cpe:2.3:a:bash:bash:4.4-5:*:*:*:*:*:*:* + pkg:deb/debian/bash@4.4-5?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/bash/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/bash.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/bash.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 5798 + + + + Debian util-linux Maintainers <ah-util-linux@debian.org> + bsdutils + 1:2.29.2-1+deb9u1 + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-4-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + MIT + + + public-domain + + + cpe:2.3:a:bsdutils:bsdutils:1\:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/bsdutils@1:2.29.2-1+deb9u1?arch=amd64&upstream=util-linux%402.29.2-1+deb9u1&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/bsdutils/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/bsdutils.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 238 + util-linux + 2.29.2-1+deb9u1 + + + + Michael Stone <mstone@debian.org> + coreutils + 8.26-3 + + + GPL-3.0-only + + + cpe:2.3:a:coreutils:coreutils:8.26-3:*:*:*:*:*:*:* + pkg:deb/debian/coreutils@8.26-3?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/coreutils/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/coreutils.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 15103 + + + + Gerrit Pape <pape@smarden.org> + dash + 0.5.8-2.4 + + + GPL + + + cpe:2.3:a:dash:dash:0.5.8-2.4:*:*:*:*:*:*:* + pkg:deb/debian/dash@0.5.8-2.4?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/dash/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/dash.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 204 + + + + Debconf Developers <debconf-devel@lists.alioth.debian.org> + debconf + 1.5.61 + + + BSD-2-Clause + + + cpe:2.3:a:debconf:debconf:1.5.61:*:*:*:*:*:*:* + pkg:deb/debian/debconf@1.5.61?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/debconf/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/debconf.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/debconf.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 558 + + + + Debian Release Team <packages@release.debian.org> + debian-archive-keyring + 2017.5+deb9u2 + + + GPL + + + cpe:2.3:a:debian-archive-keyring:debian-archive-keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/debian-archive-keyring@2017.5+deb9u2?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:debian-archive-keyring:debian_archive_keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:debian_archive_keyring:debian-archive-keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:debian_archive_keyring:debian_archive_keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:debian-archive:debian-archive-keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:debian-archive:debian_archive_keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:debian_archive:debian-archive-keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:debian_archive:debian_archive_keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:debian:debian-archive-keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:debian:debian_archive_keyring:2017.5\+deb9u2:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/debian-archive-keyring/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/debian-archive-keyring.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/debian-archive-keyring.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 189 + + + + Clint Adams <clint@debian.org> + debianutils + 4.8.1.1 + + + GPL + + + cpe:2.3:a:debianutils:debianutils:4.8.1.1:*:*:*:*:*:*:* + pkg:deb/debian/debianutils@4.8.1.1?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/debianutils/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/debianutils.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 213 + + + + Santiago Vila <sanvila@debian.org> + diffutils + 1:3.5-3 + + + GFDL + + + GPL + + + cpe:2.3:a:diffutils:diffutils:1\:3.5-3:*:*:*:*:*:*:* + pkg:deb/debian/diffutils@1:3.5-3?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/diffutils/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/diffutils.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1327 + + + + Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org> + dirmngr + 2.1.18-8~deb9u4 + + + BSD-3-Clause + + + Expat + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + RFC-Reference + + + TinySCHEME + + + permissive + + + cpe:2.3:a:dirmngr:dirmngr:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/dirmngr@2.1.18-8~deb9u4?arch=amd64&upstream=gnupg2&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/dirmngr/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/dirmngr.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1088 + gnupg2 + + + + Dpkg Developers <debian-dpkg@lists.debian.org> + dpkg + 1.18.25 + + + BSD-2-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + public-domain-md5 + + + public-domain-s-s-d + + + cpe:2.3:a:dpkg:dpkg:1.18.25:*:*:*:*:*:*:* + pkg:deb/debian/dpkg@1.18.25?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/dpkg/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/dpkg.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/dpkg.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 6778 + + + + Theodore Y. Ts'o <tytso@mit.edu> + e2fslibs + 1.43.4-2+deb9u2 + + + GPL-2.0-only + + + LGPL-2.0-only + + + cpe:2.3:a:e2fslibs:e2fslibs:1.43.4-2\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/e2fslibs@1.43.4-2+deb9u2?arch=amd64&upstream=e2fsprogs&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/e2fslibs/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/e2fslibs:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 450 + e2fsprogs + + + + Theodore Y. Ts'o <tytso@mit.edu> + e2fsprogs + 1.43.4-2+deb9u2 + + + GPL-2.0-only + + + LGPL-2.0-only + + + cpe:2.3:a:e2fsprogs:e2fsprogs:1.43.4-2\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/e2fsprogs@1.43.4-2+deb9u2?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/e2fsprogs/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/e2fsprogs.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/e2fsprogs.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 4027 + + + + Andreas Metzler <ametzler@debian.org> + findutils + 4.6.0+git+20161106-2 + + + GFDL-1.3-only + + + GPL-3.0-only + + + cpe:2.3:a:findutils:findutils:4.6.0\+git\+20161106-2:*:*:*:*:*:*:* + pkg:deb/debian/findutils@4.6.0+git+20161106-2?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/findutils/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/findutils.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1854 + + + + Debian GCC Maintainers <debian-gcc@lists.debian.org> + gcc-6-base + 6.3.0-18+deb9u1 + + + Artistic + + + GFDL-1.2-only + + + GPL + + + GPL-2.0-only + + + GPL-3.0-only + + + cpe:2.3:a:gcc-6-base:gcc-6-base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/gcc-6-base@6.3.0-18+deb9u1?arch=amd64&upstream=gcc-6&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:gcc-6-base:gcc_6_base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:gcc_6_base:gcc-6-base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:gcc_6_base:gcc_6_base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:gcc-6:gcc-6-base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:gcc-6:gcc_6_base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:gcc_6:gcc-6-base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:gcc_6:gcc_6_base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:gcc:gcc-6-base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:gcc:gcc_6_base:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/gcc-6-base/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/gcc-6-base:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 209 + gcc-6 + + + + github.com/opencontainers/runc + v1.0.1 + cpe:2.3:a:opencontainers:runc:v1.0.1:*:*:*:*:*:*:* + pkg:golang/github.com/opencontainers/runc@v1.0.1 + + go-module-binary-cataloger + go + GolangBinMetadata + go-module + sha256:0305f2b14826a228defa3526b1fcd8af7291315d19e9e8dea531eb8725f1c369 + /usr/local/bin/gosu + x86_64 + go1.16.7 + h1:G18PGckGdAm3yVQRWDVQ1rLSLntiniKJ0cNRT2Tm5gs= + github.com/tianon/gosu + + + + github.com/tianon/gosu + (devel) + cpe:2.3:a:tianon:gosu:\(devel\):*:*:*:*:*:*:* + pkg:golang/github.com/tianon/gosu@(devel) + + go-module-binary-cataloger + go + GolangBinMetadata + go-module + sha256:0305f2b14826a228defa3526b1fcd8af7291315d19e9e8dea531eb8725f1c369 + /usr/local/bin/gosu + x86_64 + go1.16.7 + github.com/tianon/gosu + + + + Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org> + gnupg + 2.1.18-8~deb9u4 + + + BSD-3-Clause + + + Expat + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + RFC-Reference + + + TinySCHEME + + + permissive + + + cpe:2.3:a:gnupg:gnupg:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/gnupg@2.1.18-8~deb9u4?arch=amd64&upstream=gnupg2&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/gnupg/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/gnupg.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 2093 + gnupg2 + + + + Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org> + gnupg-agent + 2.1.18-8~deb9u4 + + + BSD-3-Clause + + + Expat + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + RFC-Reference + + + TinySCHEME + + + permissive + + + cpe:2.3:a:gnupg-agent:gnupg-agent:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/gnupg-agent@2.1.18-8~deb9u4?arch=amd64&upstream=gnupg2&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:gnupg-agent:gnupg_agent:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:gnupg_agent:gnupg-agent:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:gnupg_agent:gnupg_agent:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:gnupg:gnupg-agent:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:gnupg:gnupg_agent:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/gnupg-agent/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/gnupg-agent.conffiles + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/gnupg-agent.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1362 + gnupg2 + + + + golang.org/x/sys + v0.0.0-20210817142637-7d9622a276b7 + cpe:2.3:a:golang:x\/sys:v0.0.0-20210817142637-7d9622a276b7:*:*:*:*:*:*:* + pkg:golang/golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7 + + go-module-binary-cataloger + go + GolangBinMetadata + go-module + sha256:0305f2b14826a228defa3526b1fcd8af7291315d19e9e8dea531eb8725f1c369 + /usr/local/bin/gosu + x86_64 + go1.16.7 + h1:lQ8Btl/sJr2+f4ql7ffKUKfnV0BsgsICvm0oEeINAQY= + github.com/tianon/gosu + + + + Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org> + gpgv + 2.1.18-8~deb9u4 + + + BSD-3-Clause + + + Expat + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + RFC-Reference + + + TinySCHEME + + + permissive + + + cpe:2.3:a:gpgv:gpgv:2.1.18-8\~deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/gpgv@2.1.18-8~deb9u4?arch=amd64&upstream=gnupg2&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/gpgv/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/gpgv.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 721 + gnupg2 + + + + Anibal Monsalve Salazar <anibal@debian.org> + grep + 2.27-2 + + + GPL-3.0-only + + + GPL-3.0-or-later + + + cpe:2.3:a:grep:grep:2.27-2:*:*:*:*:*:*:* + pkg:deb/debian/grep@2.27-2?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/grep/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/grep.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1131 + + + + Bdale Garbee <bdale@gag.com> + gzip + 1.6-5+deb9u1 + + + GPL + + + cpe:2.3:a:gzip:gzip:1.6-5\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/gzip@1.6-5+deb9u1?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/gzip/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/gzip.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 230 + + + + Debian Hostname Team <hostname-devel@lists.alioth.debian.org> + hostname + 3.18+b1 + + + GPL-2.0-only + + + cpe:2.3:a:hostname:hostname:3.18\+b1:*:*:*:*:*:*:* + pkg:deb/debian/hostname@3.18+b1?arch=amd64&upstream=hostname%403.18&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/hostname/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/hostname.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 47 + hostname + 3.18 + + + + Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org> + init-system-helpers + 1.48 + + + BSD-3-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + cpe:2.3:a:init-system-helpers:init-system-helpers:1.48:*:*:*:*:*:*:* + pkg:deb/debian/init-system-helpers@1.48?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:init-system-helpers:init_system_helpers:1.48:*:*:*:*:*:*:* + cpe:2.3:a:init_system_helpers:init-system-helpers:1.48:*:*:*:*:*:*:* + cpe:2.3:a:init_system_helpers:init_system_helpers:1.48:*:*:*:*:*:*:* + cpe:2.3:a:init-system:init-system-helpers:1.48:*:*:*:*:*:*:* + cpe:2.3:a:init-system:init_system_helpers:1.48:*:*:*:*:*:*:* + cpe:2.3:a:init_system:init-system-helpers:1.48:*:*:*:*:*:*:* + cpe:2.3:a:init_system:init_system_helpers:1.48:*:*:*:*:*:*:* + cpe:2.3:a:init:init-system-helpers:1.48:*:*:*:*:*:*:* + cpe:2.3:a:init:init_system_helpers:1.48:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/init-system-helpers/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/init-system-helpers.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 131 + + + + Anibal Monsalve Salazar <anibal@debian.org> + libacl1 + 2.2.52-3+b1 + + + GPL + + + LGPL-2.1-only + + + cpe:2.3:a:libacl1:libacl1:2.2.52-3\+b1:*:*:*:*:*:*:* + pkg:deb/debian/libacl1@2.2.52-3+b1?arch=amd64&upstream=acl%402.2.52-3&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libacl1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libacl1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 62 + acl + 2.2.52-3 + + + + APT Development Team <deity@lists.debian.org> + libapt-pkg5.0 + 1.4.11 + + + GPL-2.0-only + + + GPLv2+ + + + cpe:2.3:a:libapt-pkg5.0:libapt-pkg5.0:1.4.11:*:*:*:*:*:*:* + pkg:deb/debian/libapt-pkg5.0@1.4.11?arch=amd64&upstream=apt&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libapt-pkg5.0:libapt_pkg5.0:1.4.11:*:*:*:*:*:*:* + cpe:2.3:a:libapt_pkg5.0:libapt-pkg5.0:1.4.11:*:*:*:*:*:*:* + cpe:2.3:a:libapt_pkg5.0:libapt_pkg5.0:1.4.11:*:*:*:*:*:*:* + cpe:2.3:a:libapt:libapt-pkg5.0:1.4.11:*:*:*:*:*:*:* + cpe:2.3:a:libapt:libapt_pkg5.0:1.4.11:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libapt-pkg5.0/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libapt-pkg5.0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 3056 + apt + + + + Debian GnuPG-Maintainers <pkg-gnupg-maint@lists.alioth.debian.org> + libassuan0 + 2.4.3-2 + + + GAP + + + GAP~FSF + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + cpe:2.3:a:libassuan0:libassuan0:2.4.3-2:*:*:*:*:*:*:* + pkg:deb/debian/libassuan0@2.4.3-2?arch=amd64&upstream=libassuan&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libassuan0/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libassuan0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 106 + libassuan + + + + Anibal Monsalve Salazar <anibal@debian.org> + libattr1 + 1:2.4.47-2+b2 + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:libattr1:libattr1:1\:2.4.47-2\+b2:*:*:*:*:*:*:* + pkg:deb/debian/libattr1@1:2.4.47-2+b2?arch=amd64&upstream=attr%401:2.4.47-2&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libattr1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libattr1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 42 + attr + 1:2.4.47-2 + + + + Laurent Bigonville <bigon@debian.org> + libaudit-common + 1:2.6.7-2 + + + GPL-1.0-only + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:libaudit-common:libaudit-common:1\:2.6.7-2:*:*:*:*:*:*:* + pkg:deb/debian/libaudit-common@1:2.6.7-2?arch=all&upstream=audit&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libaudit-common:libaudit_common:1\:2.6.7-2:*:*:*:*:*:*:* + cpe:2.3:a:libaudit_common:libaudit-common:1\:2.6.7-2:*:*:*:*:*:*:* + cpe:2.3:a:libaudit_common:libaudit_common:1\:2.6.7-2:*:*:*:*:*:*:* + cpe:2.3:a:libaudit:libaudit-common:1\:2.6.7-2:*:*:*:*:*:*:* + cpe:2.3:a:libaudit:libaudit_common:1\:2.6.7-2:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libaudit-common/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libaudit-common.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libaudit-common.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 30 + audit + + + + Laurent Bigonville <bigon@debian.org> + libaudit1 + 1:2.6.7-2 + + + GPL-1.0-only + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:libaudit1:libaudit1:1\:2.6.7-2:*:*:*:*:*:*:* + pkg:deb/debian/libaudit1@1:2.6.7-2?arch=amd64&upstream=audit&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libaudit1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libaudit1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 150 + audit + + + + Debian util-linux Maintainers <ah-util-linux@debian.org> + libblkid1 + 2.29.2-1+deb9u1 + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-4-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + MIT + + + public-domain + + + cpe:2.3:a:libblkid1:libblkid1:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libblkid1@2.29.2-1+deb9u1?arch=amd64&upstream=util-linux&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libblkid1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libblkid1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 367 + util-linux + + + + Guillem Jover <guillem@debian.org> + libbsd0 + 0.8.3-1+deb9u1 + + + BSD-2-Clause + + + BSD-2-Clause + + + BSD-2-clause-author + + + BSD-2-clause-verbatim + + + BSD-3-Clause + + + BSD-3-clause-Peter-Wemm + + + BSD-3-clause-Regents + + + BSD-4-clause-Christopher-G-Demetriou + + + BSD-4-clause-Niels-Provos + + + BSD-5-clause-Peter-Wemm + + + Beerware + + + Expat + + + ISC + + + ISC-Original + + + public-domain + + + public-domain-Colin-Plumb + + + cpe:2.3:a:libbsd0:libbsd0:0.8.3-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libbsd0@0.8.3-1+deb9u1?arch=amd64&upstream=libbsd&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libbsd0/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libbsd0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 159 + libbsd + + + + Anibal Monsalve Salazar <anibal@debian.org> + libbz2-1.0 + 1.0.6-8.1 + + + GPL-2.0-only + + + cpe:2.3:a:libbz2-1.0:libbz2-1.0:1.0.6-8.1:*:*:*:*:*:*:* + pkg:deb/debian/libbz2-1.0@1.0.6-8.1?arch=amd64&upstream=bzip2&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libbz2-1.0:libbz2_1.0:1.0.6-8.1:*:*:*:*:*:*:* + cpe:2.3:a:libbz2_1.0:libbz2-1.0:1.0.6-8.1:*:*:*:*:*:*:* + cpe:2.3:a:libbz2_1.0:libbz2_1.0:1.0.6-8.1:*:*:*:*:*:*:* + cpe:2.3:a:libbz2:libbz2-1.0:1.0.6-8.1:*:*:*:*:*:*:* + cpe:2.3:a:libbz2:libbz2_1.0:1.0.6-8.1:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libbz2-1.0/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libbz2-1.0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 96 + bzip2 + + + + GNU Libc Maintainers <debian-glibc@lists.debian.org> + libc-bin + 2.24-11+deb9u4 + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:libc-bin:libc-bin:2.24-11\+deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/libc-bin@2.24-11+deb9u4?arch=amd64&upstream=glibc&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libc-bin:libc_bin:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:libc_bin:libc-bin:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:libc_bin:libc_bin:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:libc:libc-bin:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:libc:libc_bin:2.24-11\+deb9u4:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libc-bin/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libc-bin.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libc-bin.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 3366 + glibc + + + + GNU Libc Maintainers <debian-glibc@lists.debian.org> + libc-l10n + 2.24-11+deb9u4 + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:libc-l10n:libc-l10n:2.24-11\+deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/libc-l10n@2.24-11+deb9u4?arch=all&upstream=glibc&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libc-l10n:libc_l10n:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:libc_l10n:libc-l10n:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:libc_l10n:libc_l10n:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:libc:libc-l10n:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:libc:libc_l10n:2.24-11\+deb9u4:*:*:*:*:*:*:* + sha256:5afa113a433cd32056370367d1a936a5e77cc30cca6590c0241acffa33d1ec56 + /usr/share/doc/libc-l10n/copyright + sha256:5afa113a433cd32056370367d1a936a5e77cc30cca6590c0241acffa33d1ec56 + /var/lib/dpkg/info/libc-l10n.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 4211 + glibc + + + + GNU Libc Maintainers <debian-glibc@lists.debian.org> + libc6 + 2.24-11+deb9u4 + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:libc6:libc6:2.24-11\+deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/libc6@2.24-11+deb9u4?arch=amd64&upstream=glibc&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libc6/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libc6:amd64.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libc6:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 10686 + glibc + + + + Pierre Chifflier <pollux@debian.org> + libcap-ng0 + 0.7.7-3+b1 + + + GPL-2.0-only + + + GPL-3.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:libcap-ng0:libcap-ng0:0.7.7-3\+b1:*:*:*:*:*:*:* + pkg:deb/debian/libcap-ng0@0.7.7-3+b1?arch=amd64&upstream=libcap-ng%400.7.7-3&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libcap-ng0:libcap_ng0:0.7.7-3\+b1:*:*:*:*:*:*:* + cpe:2.3:a:libcap_ng0:libcap-ng0:0.7.7-3\+b1:*:*:*:*:*:*:* + cpe:2.3:a:libcap_ng0:libcap_ng0:0.7.7-3\+b1:*:*:*:*:*:*:* + cpe:2.3:a:libcap:libcap-ng0:0.7.7-3\+b1:*:*:*:*:*:*:* + cpe:2.3:a:libcap:libcap_ng0:0.7.7-3\+b1:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libcap-ng0/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libcap-ng0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 43 + libcap-ng + 0.7.7-3 + + + + Theodore Y. Ts'o <tytso@mit.edu> + libcomerr2 + 1.43.4-2+deb9u2 + cpe:2.3:a:libcomerr2:libcomerr2:1.43.4-2\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/libcomerr2@1.43.4-2+deb9u2?arch=amd64&upstream=e2fsprogs&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libcomerr2/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libcomerr2:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 84 + e2fsprogs + + + + Debian Berkeley DB Group <pkg-db-devel@lists.alioth.debian.org> + libdb5.3 + 5.3.28-12+deb9u1 + cpe:2.3:a:libdb5.3:libdb5.3:5.3.28-12\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libdb5.3@5.3.28-12+deb9u1?arch=amd64&upstream=db5.3&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libdb5.3/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libdb5.3:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1814 + db5.3 + + + + Debian Install System Team <debian-boot@lists.debian.org> + libdebconfclient0 + 0.227 + cpe:2.3:a:libdebconfclient0:libdebconfclient0:0.227:*:*:*:*:*:*:* + pkg:deb/debian/libdebconfclient0@0.227?arch=amd64&upstream=cdebconf&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libdebconfclient0/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libdebconfclient0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 67 + cdebconf + + + + LLVM Packaging Team <pkg-llvm-team@lists.alioth.debian.org> + libedit2 + 3.1-20160903-3 + cpe:2.3:a:libedit2:libedit2:3.1-20160903-3:*:*:*:*:*:*:* + pkg:deb/debian/libedit2@3.1-20160903-3?arch=amd64&upstream=libedit&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libedit2/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libedit2:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 241 + libedit + + + + Debian util-linux Maintainers <ah-util-linux@debian.org> + libfdisk1 + 2.29.2-1+deb9u1 + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-4-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + MIT + + + public-domain + + + cpe:2.3:a:libfdisk1:libfdisk1:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libfdisk1@2.29.2-1+deb9u1?arch=amd64&upstream=util-linux&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libfdisk1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libfdisk1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 469 + util-linux + + + + Debian GCC Maintainers <debian-gcc@lists.debian.org> + libffi6 + 3.2.1-6 + + + GPL + + + cpe:2.3:a:libffi6:libffi6:3.2.1-6:*:*:*:*:*:*:* + pkg:deb/debian/libffi6@3.2.1-6?arch=amd64&upstream=libffi&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libffi6/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libffi6:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 56 + libffi + + + + Debian GCC Maintainers <debian-gcc@lists.debian.org> + libgcc1 + 1:6.3.0-18+deb9u1 + + + Artistic + + + GFDL-1.2-only + + + GPL + + + GPL-2.0-only + + + GPL-3.0-only + + + cpe:2.3:a:libgcc1:libgcc1:1\:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libgcc1@1:6.3.0-18+deb9u1?arch=amd64&upstream=gcc-6%406.3.0-18+deb9u1&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/gcc-6-base/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libgcc1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 108 + gcc-6 + 6.3.0-18+deb9u1 + + + + Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> + libgcrypt20 + 1.7.6-2+deb9u4 + + + GPL-2.0-only + + + LGPL + + + cpe:2.3:a:libgcrypt20:libgcrypt20:1.7.6-2\+deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/libgcrypt20@1.7.6-2+deb9u4?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libgcrypt20/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libgcrypt20:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1266 + + + + Debian QA Group <packages@qa.debian.org> + libgdbm3 + 1.8.3-14 + + + GPL-2.0-only + + + cpe:2.3:a:libgdbm3:libgdbm3:1.8.3-14:*:*:*:*:*:*:* + pkg:deb/debian/libgdbm3@1.8.3-14?arch=amd64&upstream=gdbm&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libgdbm3/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libgdbm3:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 68 + gdbm + + + + Debian Science Team <debian-science-maintainers@lists.alioth.debian.org> + libgmp10 + 2:6.1.2+dfsg-1+deb9u1 + + + GPL + + + GPL-2.0-only + + + GPL-3.0-only + + + LGPL-3.0-only + + + cpe:2.3:a:libgmp10:libgmp10:2\:6.1.2\+dfsg-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libgmp10@2:6.1.2+dfsg-1+deb9u1?arch=amd64&upstream=gmp&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libgmp10/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libgmp10:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 568 + gmp + + + + Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> + libgnutls30 + 3.5.8-5+deb9u6 + + + CC0 + + + GFDL-1.3-only + + + GPL + + + GPL-3.0-only + + + LGPL + + + LGPL-3.0-only + + + LGPL2.1 + + + The + + + cpe:2.3:a:libgnutls30:libgnutls30:3.5.8-5\+deb9u6:*:*:*:*:*:*:* + pkg:deb/debian/libgnutls30@3.5.8-5+deb9u6?arch=amd64&upstream=gnutls28&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libgnutls30/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libgnutls30:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 2429 + gnutls28 + + + + Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org> + libgpg-error0 + 1.26-2 + + + GPL-2.1+ + + + LGPL-2.1-only + + + cpe:2.3:a:libgpg-error0:libgpg-error0:1.26-2:*:*:*:*:*:*:* + pkg:deb/debian/libgpg-error0@1.26-2?arch=amd64&upstream=libgpg-error&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libgpg-error0:libgpg_error0:1.26-2:*:*:*:*:*:*:* + cpe:2.3:a:libgpg_error0:libgpg-error0:1.26-2:*:*:*:*:*:*:* + cpe:2.3:a:libgpg_error0:libgpg_error0:1.26-2:*:*:*:*:*:*:* + cpe:2.3:a:libgpg:libgpg-error0:1.26-2:*:*:*:*:*:*:* + cpe:2.3:a:libgpg:libgpg_error0:1.26-2:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libgpg-error0/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libgpg-error0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 572 + libgpg-error + + + + Sam Hartman <hartmans@debian.org> + libgssapi-krb5-2 + 1.15-1+deb9u3 + + + GPL-2.0-only + + + cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.15-1\+deb9u3:*:*:*:*:*:*:* + pkg:deb/debian/libgssapi-krb5-2@1.15-1+deb9u3?arch=amd64&upstream=krb5&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.15-1\+deb9u3:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libgssapi-krb5-2/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libgssapi-krb5-2:amd64.conffiles + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 423 + krb5 + + + + Magnus Holmgren <holmgren@debian.org> + libhogweed4 + 3.3-1+deb9u1 + + + GAP + + + GPL + + + GPL-2.0-only + + + GPL-2.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-or-later + + + other + + + public-domain + + + cpe:2.3:a:libhogweed4:libhogweed4:3.3-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libhogweed4@3.3-1+deb9u1?arch=amd64&upstream=nettle&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libnettle6/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libhogweed4:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 232 + nettle + + + + Laszlo Boszormenyi (GCS) <gcs@debian.org> + libicu57 + 57.1-6+deb9u5 + cpe:2.3:a:libicu57:libicu57:57.1-6\+deb9u5:*:*:*:*:*:*:* + pkg:deb/debian/libicu57@57.1-6+deb9u5?arch=amd64&upstream=icu&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libicu57/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libicu57:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 30043 + icu + + + + Debian Libidn Team <help-libidn@gnu.org> + libidn11 + 1.33-1+deb9u1 + + + GAP + + + GFDL-1.3-only + + + GFDL-1.3+ + + + GPL-2.0-only + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL-2.0-only + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + cpe:2.3:a:libidn11:libidn11:1.33-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libidn11@1.33-1+deb9u1?arch=amd64&upstream=libidn&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libidn11/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libidn11:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 307 + libidn + + + + Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> + libjson-perl + 2.90-1 + + + Artistic + + + GPL-1.0-only + + + GPL-1.0-or-later + + + cpe:2.3:a:libjson-perl:libjson-perl:2.90-1:*:*:*:*:*:*:* + pkg:deb/debian/libjson-perl@2.90-1?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libjson-perl:libjson_perl:2.90-1:*:*:*:*:*:*:* + cpe:2.3:a:libjson_perl:libjson-perl:2.90-1:*:*:*:*:*:*:* + cpe:2.3:a:libjson_perl:libjson_perl:2.90-1:*:*:*:*:*:*:* + cpe:2.3:a:libjson:libjson-perl:2.90-1:*:*:*:*:*:*:* + cpe:2.3:a:libjson:libjson_perl:2.90-1:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libjson-perl/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libjson-perl.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 229 + + + + Sam Hartman <hartmans@debian.org> + libk5crypto3 + 1.15-1+deb9u3 + + + GPL-2.0-only + + + cpe:2.3:a:libk5crypto3:libk5crypto3:1.15-1\+deb9u3:*:*:*:*:*:*:* + pkg:deb/debian/libk5crypto3@1.15-1+deb9u3?arch=amd64&upstream=krb5&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libk5crypto3/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libk5crypto3:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 311 + krb5 + + + + Christian Kastner <ckk@debian.org> + libkeyutils1 + 1.5.9-9 + + + GPL-2.0-only + + + GPL-2.0-or-later + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + cpe:2.3:a:libkeyutils1:libkeyutils1:1.5.9-9:*:*:*:*:*:*:* + pkg:deb/debian/libkeyutils1@1.5.9-9?arch=amd64&upstream=keyutils&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libkeyutils1/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libkeyutils1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 36 + keyutils + + + + Sam Hartman <hartmans@debian.org> + libkrb5-3 + 1.15-1+deb9u3 + + + GPL-2.0-only + + + cpe:2.3:a:libkrb5-3:libkrb5-3:1.15-1\+deb9u3:*:*:*:*:*:*:* + pkg:deb/debian/libkrb5-3@1.15-1+deb9u3?arch=amd64&upstream=krb5&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libkrb5-3:libkrb5_3:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libkrb5_3:libkrb5-3:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libkrb5_3:libkrb5_3:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libkrb5:libkrb5-3:1.15-1\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libkrb5:libkrb5_3:1.15-1\+deb9u3:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libkrb5-3/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libkrb5-3:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1026 + krb5 + + + + Sam Hartman <hartmans@debian.org> + libkrb5support0 + 1.15-1+deb9u3 + + + GPL-2.0-only + + + cpe:2.3:a:libkrb5support0:libkrb5support0:1.15-1\+deb9u3:*:*:*:*:*:*:* + pkg:deb/debian/libkrb5support0@1.15-1+deb9u3?arch=amd64&upstream=krb5&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libkrb5support0/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libkrb5support0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 159 + krb5 + + + + Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> + libksba8 + 1.3.5-2 + + + GPL-3.0-only + + + cpe:2.3:a:libksba8:libksba8:1.3.5-2:*:*:*:*:*:*:* + pkg:deb/debian/libksba8@1.3.5-2?arch=amd64&upstream=libksba&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libksba8/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libksba8:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 264 + libksba + + + + Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org> + libldap-2.4-2 + 2.4.44+dfsg-5+deb9u8 + cpe:2.3:a:libldap-2.4-2:libldap-2.4-2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + pkg:deb/debian/libldap-2.4-2@2.4.44+dfsg-5+deb9u8?arch=amd64&upstream=openldap&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libldap-2.4-2:libldap_2.4_2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap_2.4_2:libldap-2.4-2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap_2.4_2:libldap_2.4_2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap-2.4:libldap-2.4-2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap-2.4:libldap_2.4_2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap_2.4:libldap-2.4-2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap_2.4:libldap_2.4_2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap:libldap-2.4-2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap:libldap_2.4_2:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libldap-2.4-2/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libldap-2.4-2:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 510 + openldap + + + + Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org> + libldap-common + 2.4.44+dfsg-5+deb9u8 + cpe:2.3:a:libldap-common:libldap-common:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + pkg:deb/debian/libldap-common@2.4.44+dfsg-5+deb9u8?arch=all&upstream=openldap&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libldap-common:libldap_common:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap_common:libldap-common:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap_common:libldap_common:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap:libldap-common:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + cpe:2.3:a:libldap:libldap_common:2.4.44\+dfsg-5\+deb9u8:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libldap-common/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libldap-common.conffiles + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libldap-common.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 109 + openldap + + + + LLVM Packaging Team <pkg-llvm-team@lists.alioth.debian.org> + libllvm6.0 + 1:6.0-1~bpo9+1 + + + ARM + + + Apple + + + BSD-3-Clause + + + BSD-3-Clause + + + Expat + + + LLVM + + + MIT + + + NCSA + + + Polly + + + Python + + + U-OF-I-BSD-LIKE + + + public-domain + + + solar-public-domain + + + cpe:2.3:a:libllvm6.0:libllvm6.0:1\:6.0-1\~bpo9\+1:*:*:*:*:*:*:* + pkg:deb/debian/libllvm6.0@1:6.0-1~bpo9+1?arch=amd64&upstream=llvm-toolchain-6.0&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libllvm6.0/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libllvm6.0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 59860 + llvm-toolchain-6.0 + + + + Nobuhiro Iwamatsu <iwamatsu@debian.org> + liblz4-1 + 0.0~r131-2+deb9u1 + + + BSD-2-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + cpe:2.3:a:liblz4-1:liblz4-1:0.0\~r131-2\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/liblz4-1@0.0~r131-2+deb9u1?arch=amd64&upstream=lz4&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:liblz4-1:liblz4_1:0.0\~r131-2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:liblz4_1:liblz4-1:0.0\~r131-2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:liblz4_1:liblz4_1:0.0\~r131-2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:liblz4:liblz4-1:0.0\~r131-2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:liblz4:liblz4_1:0.0\~r131-2\+deb9u1:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/liblz4-1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/liblz4-1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 92 + lz4 + + + + Jonathan Nieder <jrnieder@gmail.com> + liblzma5 + 5.2.2-1.2+deb9u1 + + + Autoconf + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + LGPL-2.0-only + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + PD + + + PD-debian + + + config-h + + + noderivs + + + permissive-fsf + + + permissive-nowarranty + + + probably-PD + + + cpe:2.3:a:liblzma5:liblzma5:5.2.2-1.2\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/liblzma5@5.2.2-1.2+deb9u1?arch=amd64&upstream=xz-utils&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/liblzma5/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/liblzma5:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 338 + xz-utils + + + + Debian util-linux Maintainers <ah-util-linux@debian.org> + libmount1 + 2.29.2-1+deb9u1 + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-4-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + MIT + + + public-domain + + + cpe:2.3:a:libmount1:libmount1:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libmount1@2.29.2-1+deb9u1?arch=amd64&upstream=util-linux&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libmount1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libmount1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 403 + util-linux + + + + Craig Small <csmall@debian.org> + libncurses5 + 6.0+20161126-1+deb9u2 + cpe:2.3:a:libncurses5:libncurses5:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/libncurses5@6.0+20161126-1+deb9u2?arch=amd64&upstream=ncurses&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libtinfo5/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libncurses5:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 287 + ncurses + + + + Craig Small <csmall@debian.org> + libncursesw5 + 6.0+20161126-1+deb9u2 + cpe:2.3:a:libncursesw5:libncursesw5:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/libncursesw5@6.0+20161126-1+deb9u2?arch=amd64&upstream=ncurses&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libtinfo5/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libncursesw5:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 347 + ncurses + + + + Magnus Holmgren <holmgren@debian.org> + libnettle6 + 3.3-1+deb9u1 + + + GAP + + + GPL + + + GPL-2.0-only + + + GPL-2.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-or-later + + + other + + + public-domain + + + cpe:2.3:a:libnettle6:libnettle6:3.3-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libnettle6@3.3-1+deb9u1?arch=amd64&upstream=nettle&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libnettle6/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libnettle6:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 357 + nettle + + + + Eric Dorland <eric@debian.org> + libnpth0 + 1.3-1 + + + GPL-2.0-only + + + GPL-2.0-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + cpe:2.3:a:libnpth0:libnpth0:1.3-1:*:*:*:*:*:*:* + pkg:deb/debian/libnpth0@1.3-1?arch=amd64&upstream=npth&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libnpth0/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libnpth0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 43 + npth + + + + Debian SSSD Team <pkg-sssd-devel@lists.alioth.debian.org> + libnss-wrapper + 1.1.3-1 + + + BSD-3-clauses + + + cpe:2.3:a:libnss-wrapper:libnss-wrapper:1.1.3-1:*:*:*:*:*:*:* + pkg:deb/debian/libnss-wrapper@1.1.3-1?arch=amd64&upstream=nss-wrapper&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libnss-wrapper:libnss_wrapper:1.1.3-1:*:*:*:*:*:*:* + cpe:2.3:a:libnss_wrapper:libnss-wrapper:1.1.3-1:*:*:*:*:*:*:* + cpe:2.3:a:libnss_wrapper:libnss_wrapper:1.1.3-1:*:*:*:*:*:*:* + cpe:2.3:a:libnss:libnss-wrapper:1.1.3-1:*:*:*:*:*:*:* + cpe:2.3:a:libnss:libnss_wrapper:1.1.3-1:*:*:*:*:*:*:* + sha256:01d30ba422c5d9f4a346d59ee398d0ab9882cd9b962e972a68c9c5345c2e4767 + /usr/share/doc/libnss-wrapper/copyright + sha256:01d30ba422c5d9f4a346d59ee398d0ab9882cd9b962e972a68c9c5345c2e4767 + /var/lib/dpkg/info/libnss-wrapper.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 87 + nss-wrapper + + + + Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> + libp11-kit0 + 0.23.3-2+deb9u1 + + + BSD-3-Clause + + + ISC + + + ISC+IBM + + + permissive-like-automake-output + + + same-as-rest-of-p11kit + + + cpe:2.3:a:libp11-kit0:libp11-kit0:0.23.3-2\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libp11-kit0@0.23.3-2+deb9u1?arch=amd64&upstream=p11-kit&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libp11-kit0:libp11_kit0:0.23.3-2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:libp11_kit0:libp11-kit0:0.23.3-2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:libp11_kit0:libp11_kit0:0.23.3-2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:libp11:libp11-kit0:0.23.3-2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:libp11:libp11_kit0:0.23.3-2\+deb9u1:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libp11-kit0/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libp11-kit0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 439 + p11-kit + + + + Steve Langasek <vorlon@debian.org> + libpam-modules + 1.1.8-3.6 + + + GPL + + + cpe:2.3:a:libpam-modules:libpam-modules:1.1.8-3.6:*:*:*:*:*:*:* + pkg:deb/debian/libpam-modules@1.1.8-3.6?arch=amd64&upstream=pam&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libpam-modules:libpam_modules:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam_modules:libpam-modules:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam_modules:libpam_modules:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam:libpam-modules:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam:libpam_modules:1.1.8-3.6:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libpam-modules/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libpam-modules:amd64.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libpam-modules:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 874 + pam + + + + Steve Langasek <vorlon@debian.org> + libpam-modules-bin + 1.1.8-3.6 + + + GPL + + + cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.1.8-3.6:*:*:*:*:*:*:* + pkg:deb/debian/libpam-modules-bin@1.1.8-3.6?arch=amd64&upstream=pam&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libpam-modules-bin:libpam_modules_bin:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam_modules_bin:libpam-modules-bin:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam_modules_bin:libpam_modules_bin:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam-modules:libpam-modules-bin:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam-modules:libpam_modules_bin:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam_modules:libpam-modules-bin:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam_modules:libpam_modules_bin:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam:libpam-modules-bin:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam:libpam_modules_bin:1.1.8-3.6:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libpam-modules-bin/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libpam-modules-bin.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 220 + pam + + + + Steve Langasek <vorlon@debian.org> + libpam-runtime + 1.1.8-3.6 + + + GPL + + + cpe:2.3:a:libpam-runtime:libpam-runtime:1.1.8-3.6:*:*:*:*:*:*:* + pkg:deb/debian/libpam-runtime@1.1.8-3.6?arch=all&upstream=pam&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libpam-runtime:libpam_runtime:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam_runtime:libpam-runtime:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam_runtime:libpam_runtime:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam:libpam-runtime:1.1.8-3.6:*:*:*:*:*:*:* + cpe:2.3:a:libpam:libpam_runtime:1.1.8-3.6:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libpam-runtime/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libpam-runtime.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libpam-runtime.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1016 + pam + + + + Steve Langasek <vorlon@debian.org> + libpam0g + 1.1.8-3.6 + + + GPL + + + cpe:2.3:a:libpam0g:libpam0g:1.1.8-3.6:*:*:*:*:*:*:* + pkg:deb/debian/libpam0g@1.1.8-3.6?arch=amd64&upstream=pam&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libpam0g/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libpam0g:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 229 + pam + + + + Matthew Vernon <matthew@debian.org> + libpcre3 + 2:8.39-3 + cpe:2.3:a:libpcre3:libpcre3:2\:8.39-3:*:*:*:*:*:*:* + pkg:deb/debian/libpcre3@2:8.39-3?arch=amd64&upstream=pcre3&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libpcre3/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libpcre3:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 668 + pcre3 + + + + Niko Tyni <ntyni@debian.org> + libperl5.24 + 5.24.1-3+deb9u7 + + + Artistic + + + Artistic-2.0 + + + BSD-3-Clause + + + BSD-3-clause-GENERIC + + + BSD-3-clause-with-weird-numbering + + + BSD-4-clause-POWERDOG + + + BZIP + + + DONT-CHANGE-THE-GPL + + + Expat + + + GPL-1.0-only + + + GPL-1.0-or-later + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3+-WITH-BISON-EXCEPTION + + + HSIEH-BSD + + + HSIEH-DERIVATIVE + + + LGPL-2.1-only + + + REGCOMP + + + REGCOMP, + + + RRA-KEEP-THIS-NOTICE + + + S2P + + + SDBM-PUBLIC-DOMAIN + + + TEXT-TABS + + + Unicode + + + Zlib + + + cpe:2.3:a:libperl5.24:libperl5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + pkg:deb/debian/libperl5.24@5.24.1-3+deb9u7?arch=amd64&upstream=perl&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libperl5.24/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libperl5.24:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 20936 + perl + + + + Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org> + libpq5 + 14.2-1.pgdg90+1 + + + Artistic + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-3-Clause + + + Custom-Unicode + + + Custom-pg_dump + + + Custom-regex + + + GPL-1.0-only + + + PostgreSQL + + + TCL + + + blf + + + double-metaphone + + + imath + + + nagaysau-ishii + + + rijndael + + + cpe:2.3:a:libpq5:libpq5:14.2-1.pgdg90\+1:*:*:*:*:*:*:* + pkg:deb/debian/libpq5@14.2-1.pgdg90+1?arch=amd64&upstream=postgresql-14&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libpq5/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libpq5:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 743 + postgresql-14 + + + + Matthias Klose <doko@debian.org> + libreadline7 + 7.0-3 + + + GFDL + + + GPL-3.0-only + + + cpe:2.3:a:libreadline7:libreadline7:7.0-3:*:*:*:*:*:*:* + pkg:deb/debian/libreadline7@7.0-3?arch=amd64&upstream=readline&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libreadline7/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libreadline7:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 416 + readline + + + + Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org> + libsasl2-2 + 2.1.27~101-g0780600+dfsg-3+deb9u2 + + + BSD-4-Clause + + + GPL-3.0-only + + + GPL-3.0-or-later + + + cpe:2.3:a:libsasl2-2:libsasl2-2:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/libsasl2-2@2.1.27~101-g0780600+dfsg-3+deb9u2?arch=amd64&upstream=cyrus-sasl2&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libsasl2-2:libsasl2_2:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2_2:libsasl2-2:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2_2:libsasl2_2:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2:libsasl2-2:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2:libsasl2_2:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libsasl2-2/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libsasl2-2:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 184 + cyrus-sasl2 + + + + Debian Cyrus SASL Team <pkg-cyrus-sasl2-debian-devel@lists.alioth.debian.org> + libsasl2-modules-db + 2.1.27~101-g0780600+dfsg-3+deb9u2 + + + BSD-4-Clause + + + GPL-3.0-only + + + GPL-3.0-or-later + + + cpe:2.3:a:libsasl2-modules-db:libsasl2-modules-db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/libsasl2-modules-db@2.1.27~101-g0780600+dfsg-3+deb9u2?arch=amd64&upstream=cyrus-sasl2&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libsasl2-modules-db:libsasl2_modules_db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2_modules_db:libsasl2-modules-db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2_modules_db:libsasl2_modules_db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2-modules:libsasl2-modules-db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2-modules:libsasl2_modules_db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2_modules:libsasl2-modules-db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2_modules:libsasl2_modules_db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2:libsasl2-modules-db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:libsasl2:libsasl2_modules_db:2.1.27\~101-g0780600\+dfsg-3\+deb9u2:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libsasl2-modules-db/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libsasl2-modules-db:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 97 + cyrus-sasl2 + + + + Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org> + libselinux1 + 2.6-3+b3 + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:libselinux1:libselinux1:2.6-3\+b3:*:*:*:*:*:*:* + pkg:deb/debian/libselinux1@2.6-3+b3?arch=amd64&upstream=libselinux%402.6-3&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libselinux1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libselinux1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 209 + libselinux + 2.6-3 + + + + Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org> + libsemanage-common + 2.6-2 + + + GPL + + + LGPL + + + cpe:2.3:a:libsemanage-common:libsemanage-common:2.6-2:*:*:*:*:*:*:* + pkg:deb/debian/libsemanage-common@2.6-2?arch=all&upstream=libsemanage&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libsemanage-common:libsemanage_common:2.6-2:*:*:*:*:*:*:* + cpe:2.3:a:libsemanage_common:libsemanage-common:2.6-2:*:*:*:*:*:*:* + cpe:2.3:a:libsemanage_common:libsemanage_common:2.6-2:*:*:*:*:*:*:* + cpe:2.3:a:libsemanage:libsemanage-common:2.6-2:*:*:*:*:*:*:* + cpe:2.3:a:libsemanage:libsemanage_common:2.6-2:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libsemanage-common/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libsemanage-common.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libsemanage-common.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 39 + libsemanage + + + + Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org> + libsemanage1 + 2.6-2 + + + GPL + + + LGPL + + + cpe:2.3:a:libsemanage1:libsemanage1:2.6-2:*:*:*:*:*:*:* + pkg:deb/debian/libsemanage1@2.6-2?arch=amd64&upstream=libsemanage&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libsemanage1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libsemanage1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 291 + libsemanage + + + + Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org> + libsepol1 + 2.6-2 + + + GPL + + + LGPL + + + cpe:2.3:a:libsepol1:libsepol1:2.6-2:*:*:*:*:*:*:* + pkg:deb/debian/libsepol1@2.6-2?arch=amd64&upstream=libsepol&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libsepol1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libsepol1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 653 + libsepol + + + + Debian util-linux Maintainers <ah-util-linux@debian.org> + libsmartcols1 + 2.29.2-1+deb9u1 + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-4-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + MIT + + + public-domain + + + cpe:2.3:a:libsmartcols1:libsmartcols1:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libsmartcols1@2.29.2-1+deb9u1?arch=amd64&upstream=util-linux&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libsmartcols1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libsmartcols1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 257 + util-linux + + + + Laszlo Boszormenyi (GCS) <gcs@debian.org> + libsqlite3-0 + 3.16.2-5+deb9u3 + + + GPL-2.0-only + + + GPL-2.0-or-later + + + public-domain + + + cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.16.2-5\+deb9u3:*:*:*:*:*:*:* + pkg:deb/debian/libsqlite3-0@3.16.2-5+deb9u3?arch=amd64&upstream=sqlite3&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.16.2-5\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.16.2-5\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.16.2-5\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libsqlite3:libsqlite3-0:3.16.2-5\+deb9u3:*:*:*:*:*:*:* + cpe:2.3:a:libsqlite3:libsqlite3_0:3.16.2-5\+deb9u3:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libsqlite3-0/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libsqlite3-0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1163 + sqlite3 + + + + Theodore Y. Ts'o <tytso@mit.edu> + libss2 + 1.43.4-2+deb9u2 + cpe:2.3:a:libss2:libss2:1.43.4-2\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/libss2@1.43.4-2+deb9u2?arch=amd64&upstream=e2fsprogs&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libss2/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libss2:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 96 + e2fsprogs + + + + Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> + libssl1.1 + 1.1.0l-1~deb9u5 + cpe:2.3:a:libssl1.1:libssl1.1:1.1.0l-1\~deb9u5:*:*:*:*:*:*:* + pkg:deb/debian/libssl1.1@1.1.0l-1~deb9u5?arch=amd64&upstream=openssl&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libssl1.1/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libssl1.1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 3565 + openssl + + + + Debian GCC Maintainers <debian-gcc@lists.debian.org> + libstdc++6 + 6.3.0-18+deb9u1 + + + Artistic + + + GFDL-1.2-only + + + GPL + + + GPL-2.0-only + + + GPL-3.0-only + + + cpe:2.3:a:libstdc\+\+6:libstdc\+\+6:6.3.0-18\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libstdc++6@6.3.0-18+deb9u1?arch=amd64&upstream=gcc-6&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/gcc-6-base/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libstdc++6:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1998 + gcc-6 + + + + Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org> + libsystemd0 + 232-25+deb9u13 + + + CC0 + + + Expat + + + GPL-2.0-only + + + GPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + public-domain + + + cpe:2.3:a:libsystemd0:libsystemd0:232-25\+deb9u13:*:*:*:*:*:*:* + pkg:deb/debian/libsystemd0@232-25+deb9u13?arch=amd64&upstream=systemd&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libsystemd0/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libsystemd0:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 654 + systemd + + + + Debian GnuTLS Maintainers <pkg-gnutls-maint@lists.alioth.debian.org> + libtasn1-6 + 4.10-1.1+deb9u1 + + + GFDL-1.3-only + + + GPL-3.0-only + + + LGPL + + + LGPL-2.1-only + + + cpe:2.3:a:libtasn1-6:libtasn1-6:4.10-1.1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libtasn1-6@4.10-1.1+deb9u1?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libtasn1-6:libtasn1_6:4.10-1.1\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:libtasn1_6:libtasn1-6:4.10-1.1\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:libtasn1_6:libtasn1_6:4.10-1.1\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:libtasn1:libtasn1-6:4.10-1.1\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:libtasn1:libtasn1_6:4.10-1.1\+deb9u1:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/libtasn1-6/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/libtasn1-6:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 112 + + + + Craig Small <csmall@debian.org> + libtinfo5 + 6.0+20161126-1+deb9u2 + cpe:2.3:a:libtinfo5:libtinfo5:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/libtinfo5@6.0+20161126-1+deb9u2?arch=amd64&upstream=ncurses&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libtinfo5/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libtinfo5:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 478 + ncurses + + + + Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org> + libudev1 + 232-25+deb9u13 + + + CC0 + + + Expat + + + GPL-2.0-only + + + GPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + public-domain + + + cpe:2.3:a:libudev1:libudev1:232-25\+deb9u13:*:*:*:*:*:*:* + pkg:deb/debian/libudev1@232-25+deb9u13?arch=amd64&upstream=systemd&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libudev1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libudev1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 224 + systemd + + + + Vaclav Ovsik <vaclav.ovsik@i.cz> + libustr-1.0-1 + 1.0.4-6 + + + BSD-2-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + MIT + + + cpe:2.3:a:libustr-1.0-1:libustr-1.0-1:1.0.4-6:*:*:*:*:*:*:* + pkg:deb/debian/libustr-1.0-1@1.0.4-6?arch=amd64&upstream=ustr&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:libustr-1.0-1:libustr_1.0_1:1.0.4-6:*:*:*:*:*:*:* + cpe:2.3:a:libustr_1.0_1:libustr-1.0-1:1.0.4-6:*:*:*:*:*:*:* + cpe:2.3:a:libustr_1.0_1:libustr_1.0_1:1.0.4-6:*:*:*:*:*:*:* + cpe:2.3:a:libustr-1.0:libustr-1.0-1:1.0.4-6:*:*:*:*:*:*:* + cpe:2.3:a:libustr-1.0:libustr_1.0_1:1.0.4-6:*:*:*:*:*:*:* + cpe:2.3:a:libustr_1.0:libustr-1.0-1:1.0.4-6:*:*:*:*:*:*:* + cpe:2.3:a:libustr_1.0:libustr_1.0_1:1.0.4-6:*:*:*:*:*:*:* + cpe:2.3:a:libustr:libustr-1.0-1:1.0.4-6:*:*:*:*:*:*:* + cpe:2.3:a:libustr:libustr_1.0_1:1.0.4-6:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libustr-1.0-1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libustr-1.0-1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 258 + ustr + + + + Debian util-linux Maintainers <ah-util-linux@debian.org> + libuuid1 + 2.29.2-1+deb9u1 + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-4-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + MIT + + + public-domain + + + cpe:2.3:a:libuuid1:libuuid1:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libuuid1@2.29.2-1+deb9u1?arch=amd64&upstream=util-linux&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/libuuid1/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/libuuid1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 107 + util-linux + + + + Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org> + libxml2 + 2.9.4+dfsg1-2.2+deb9u6 + cpe:2.3:a:libxml2:libxml2:2.9.4\+dfsg1-2.2\+deb9u6:*:*:*:*:*:*:* + pkg:deb/debian/libxml2@2.9.4+dfsg1-2.2+deb9u6?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libxml2/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libxml2:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 2131 + + + + Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org> + libxslt1.1 + 1.1.29-2.1+deb9u2 + cpe:2.3:a:libxslt1.1:libxslt1.1:1.1.29-2.1\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/libxslt1.1@1.1.29-2.1+deb9u2?arch=amd64&upstream=libxslt&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/libxslt1.1/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/libxslt1.1:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 481 + libxslt + + + + Debian Med Packaging <debian-med-packaging@lists.alioth.debian.org> + libzstd1 + 1.1.2-1+deb9u1 + + + BSD-3-clause-with-patent-grant + + + Expat + + + Zlib + + + cpe:2.3:a:libzstd1:libzstd1:1.1.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/libzstd1@1.1.2-1+deb9u1?arch=amd64&upstream=libzstd&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:01d30ba422c5d9f4a346d59ee398d0ab9882cd9b962e972a68c9c5345c2e4767 + /usr/share/doc/libzstd1/copyright + sha256:01d30ba422c5d9f4a346d59ee398d0ab9882cd9b962e972a68c9c5345c2e4767 + /var/lib/dpkg/info/libzstd1.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 550 + libzstd + + + + GNU Libc Maintainers <debian-glibc@lists.debian.org> + locales + 2.24-11+deb9u4 + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:locales:locales:2.24-11\+deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/locales@2.24-11+deb9u4?arch=all&upstream=glibc&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:5afa113a433cd32056370367d1a936a5e77cc30cca6590c0241acffa33d1ec56 + /usr/share/doc/locales/copyright + sha256:5afa113a433cd32056370367d1a936a5e77cc30cca6590c0241acffa33d1ec56 + /var/lib/dpkg/info/locales.conffiles + sha256:5afa113a433cd32056370367d1a936a5e77cc30cca6590c0241acffa33d1ec56 + /var/lib/dpkg/info/locales.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 9246 + glibc + + + + Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org> + login + 1:4.4-4.1+deb9u1 + + + GPL-2.0-only + + + cpe:2.3:a:login:login:1\:4.4-4.1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/login@1:4.4-4.1+deb9u1?arch=amd64&upstream=shadow&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/login/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/login.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/login.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 2747 + shadow + + + + Debian LSB Team <debian-lsb@lists.debian.org> + lsb-base + 9.20161125 + + + BSD-3-Clause + + + GPL-2.0-only + + + cpe:2.3:a:lsb-base:lsb-base:9.20161125:*:*:*:*:*:*:* + pkg:deb/debian/lsb-base@9.20161125?arch=all&upstream=lsb&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:lsb-base:lsb_base:9.20161125:*:*:*:*:*:*:* + cpe:2.3:a:lsb_base:lsb-base:9.20161125:*:*:*:*:*:*:* + cpe:2.3:a:lsb_base:lsb_base:9.20161125:*:*:*:*:*:*:* + cpe:2.3:a:lsb:lsb-base:9.20161125:*:*:*:*:*:*:* + cpe:2.3:a:lsb:lsb_base:9.20161125:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/lsb-base/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/lsb-base.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 49 + lsb + + + + Steve Langasek <vorlon@debian.org> + mawk + 1.3.3-17+b3 + + + GPL-2.0-only + + + cpe:2.3:a:mawk:mawk:1.3.3-17\+b3:*:*:*:*:*:*:* + pkg:deb/debian/mawk@1.3.3-17+b3?arch=amd64&upstream=mawk%401.3.3-17&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/mawk/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/mawk.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 183 + mawk + 1.3.3-17 + + + + Debian util-linux Maintainers <ah-util-linux@debian.org> + mount + 2.29.2-1+deb9u1 + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-4-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + MIT + + + public-domain + + + cpe:2.3:a:mount:mount:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/mount@2.29.2-1+deb9u1?arch=amd64&upstream=util-linux&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/mount/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/mount.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 444 + util-linux + + + + GNU Libc Maintainers <debian-glibc@lists.debian.org> + multiarch-support + 2.24-11+deb9u4 + + + GPL-2.0-only + + + LGPL-2.1-only + + + cpe:2.3:a:multiarch-support:multiarch-support:2.24-11\+deb9u4:*:*:*:*:*:*:* + pkg:deb/debian/multiarch-support@2.24-11+deb9u4?arch=amd64&upstream=glibc&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:multiarch-support:multiarch_support:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:multiarch_support:multiarch-support:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:multiarch_support:multiarch_support:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:multiarch:multiarch-support:2.24-11\+deb9u4:*:*:*:*:*:*:* + cpe:2.3:a:multiarch:multiarch_support:2.24-11\+deb9u4:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/multiarch-support/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/multiarch-support.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 221 + glibc + + + + Craig Small <csmall@debian.org> + ncurses-base + 6.0+20161126-1+deb9u2 + cpe:2.3:a:ncurses-base:ncurses-base:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/ncurses-base@6.0+20161126-1+deb9u2?arch=all&upstream=ncurses&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:ncurses-base:ncurses_base:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:ncurses_base:ncurses-base:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:ncurses_base:ncurses_base:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:ncurses:ncurses-base:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:ncurses:ncurses_base:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/ncurses-base/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/ncurses-base.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/ncurses-base.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 340 + ncurses + + + + Craig Small <csmall@debian.org> + ncurses-bin + 6.0+20161126-1+deb9u2 + cpe:2.3:a:ncurses-bin:ncurses-bin:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + pkg:deb/debian/ncurses-bin@6.0+20161126-1+deb9u2?arch=amd64&upstream=ncurses&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:ncurses-bin:ncurses_bin:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:ncurses_bin:ncurses-bin:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:ncurses_bin:ncurses_bin:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:ncurses:ncurses-bin:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + cpe:2.3:a:ncurses:ncurses_bin:6.0\+20161126-1\+deb9u2:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/ncurses-bin/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/ncurses-bin.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 536 + ncurses + + + + Marco d'Itri <md@linux.it> + netbase + 5.4 + + + GPL-2.0-only + + + cpe:2.3:a:netbase:netbase:5.4:*:*:*:*:*:*:* + pkg:deb/debian/netbase@5.4?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/netbase/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/netbase.conffiles + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/netbase.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 44 + + + + Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> + openssl + 1.1.0l-1~deb9u5 + cpe:2.3:a:openssl:openssl:1.1.0l-1\~deb9u5:*:*:*:*:*:*:* + pkg:deb/debian/openssl@1.1.0l-1~deb9u5?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/openssl/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/openssl.conffiles + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/openssl.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1315 + + + + Shadow package maintainers <pkg-shadow-devel@lists.alioth.debian.org> + passwd + 1:4.4-4.1+deb9u1 + + + GPL-2.0-only + + + cpe:2.3:a:passwd:passwd:1\:4.4-4.1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/passwd@1:4.4-4.1+deb9u1?arch=amd64&upstream=shadow&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/passwd/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/passwd.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/passwd.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 2478 + shadow + + + + Niko Tyni <ntyni@debian.org> + perl + 5.24.1-3+deb9u7 + + + Artistic + + + Artistic-2.0 + + + BSD-3-Clause + + + BSD-3-clause-GENERIC + + + BSD-3-clause-with-weird-numbering + + + BSD-4-clause-POWERDOG + + + BZIP + + + DONT-CHANGE-THE-GPL + + + Expat + + + GPL-1.0-only + + + GPL-1.0-or-later + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3+-WITH-BISON-EXCEPTION + + + HSIEH-BSD + + + HSIEH-DERIVATIVE + + + LGPL-2.1-only + + + REGCOMP + + + REGCOMP, + + + RRA-KEEP-THIS-NOTICE + + + S2P + + + SDBM-PUBLIC-DOMAIN + + + TEXT-TABS + + + Unicode + + + Zlib + + + cpe:2.3:a:perl:perl:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + pkg:deb/debian/perl@5.24.1-3+deb9u7?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/perl/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/perl.conffiles + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/perl.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 651 + + + + Niko Tyni <ntyni@debian.org> + perl-base + 5.24.1-3+deb9u7 + + + Artistic + + + Artistic-2.0 + + + BSD-3-Clause + + + BSD-3-clause-GENERIC + + + BSD-3-clause-with-weird-numbering + + + BSD-4-clause-POWERDOG + + + BZIP + + + DONT-CHANGE-THE-GPL + + + Expat + + + GPL-1.0-only + + + GPL-1.0-or-later + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3+-WITH-BISON-EXCEPTION + + + HSIEH-BSD + + + HSIEH-DERIVATIVE + + + LGPL-2.1-only + + + REGCOMP + + + REGCOMP, + + + RRA-KEEP-THIS-NOTICE + + + S2P + + + SDBM-PUBLIC-DOMAIN + + + TEXT-TABS + + + Unicode + + + Zlib + + + cpe:2.3:a:perl-base:perl-base:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + pkg:deb/debian/perl-base@5.24.1-3+deb9u7?arch=amd64&upstream=perl&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:perl-base:perl_base:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl_base:perl-base:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl_base:perl_base:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl:perl-base:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl:perl_base:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/perl/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/perl-base.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 7551 + perl + + + + Niko Tyni <ntyni@debian.org> + perl-modules-5.24 + 5.24.1-3+deb9u7 + + + Artistic + + + Artistic-2.0 + + + BSD-3-Clause + + + BSD-3-clause-GENERIC + + + BSD-3-clause-with-weird-numbering + + + BSD-4-clause-POWERDOG + + + BZIP + + + DONT-CHANGE-THE-GPL + + + Expat + + + GPL-1.0-only + + + GPL-1.0-or-later + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3+-WITH-BISON-EXCEPTION + + + HSIEH-BSD + + + HSIEH-DERIVATIVE + + + LGPL-2.1-only + + + REGCOMP + + + REGCOMP, + + + RRA-KEEP-THIS-NOTICE + + + S2P + + + SDBM-PUBLIC-DOMAIN + + + TEXT-TABS + + + Unicode + + + Zlib + + + cpe:2.3:a:perl-modules-5.24:perl-modules-5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + pkg:deb/debian/perl-modules-5.24@5.24.1-3+deb9u7?arch=all&upstream=perl&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:perl-modules-5.24:perl_modules_5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl_modules_5.24:perl-modules-5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl_modules_5.24:perl_modules_5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl-modules:perl-modules-5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl-modules:perl_modules_5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl_modules:perl-modules-5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl_modules:perl_modules_5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl:perl-modules-5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + cpe:2.3:a:perl:perl_modules_5.24:5.24.1-3\+deb9u7:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/perl-modules-5.24/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/perl-modules-5.24.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 17631 + perl + + + + Debian PostgreSQL Maintainers <pkg-postgresql-public@lists.alioth.debian.org> + pgdg-keyring + 2018.2 + cpe:2.3:a:pgdg-keyring:pgdg-keyring:2018.2:*:*:*:*:*:*:* + pkg:deb/debian/pgdg-keyring@2018.2?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:pgdg-keyring:pgdg_keyring:2018.2:*:*:*:*:*:*:* + cpe:2.3:a:pgdg_keyring:pgdg-keyring:2018.2:*:*:*:*:*:*:* + cpe:2.3:a:pgdg_keyring:pgdg_keyring:2018.2:*:*:*:*:*:*:* + cpe:2.3:a:pgdg:pgdg-keyring:2018.2:*:*:*:*:*:*:* + cpe:2.3:a:pgdg:pgdg_keyring:2018.2:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/pgdg-keyring/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/pgdg-keyring.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 22 + + + + Debian GnuPG Maintainers <pkg-gnupg-maint@lists.alioth.debian.org> + pinentry-curses + 1.0.0-2 + + + GPL-2.0-only + + + GPL-2.0-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + X11 + + + cpe:2.3:a:pinentry-curses:pinentry-curses:1.0.0-2:*:*:*:*:*:*:* + pkg:deb/debian/pinentry-curses@1.0.0-2?arch=amd64&upstream=pinentry&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:pinentry-curses:pinentry_curses:1.0.0-2:*:*:*:*:*:*:* + cpe:2.3:a:pinentry_curses:pinentry-curses:1.0.0-2:*:*:*:*:*:*:* + cpe:2.3:a:pinentry_curses:pinentry_curses:1.0.0-2:*:*:*:*:*:*:* + cpe:2.3:a:pinentry:pinentry-curses:1.0.0-2:*:*:*:*:*:*:* + cpe:2.3:a:pinentry:pinentry_curses:1.0.0-2:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/pinentry-curses/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/pinentry-curses.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 99 + pinentry + + + + postgresql + 11.15 + cpe:2.3:a:postgresql:postgresql:11.15:*:*:*:*:*:*:* + pkg:generic/postgresql@11.15 + + binary-cataloger + BinaryMetadata + binary + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/lib/postgresql/11/bin/postgres + + + + Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org> + postgresql-11 + 11.15-1.pgdg90+1 + + + Artistic + + + BSD-2-Clause + + + BSD-3-Clause + + + Custom-Unicode + + + Custom-pg_dump + + + Custom-regex + + + GPL-1.0-only + + + PostgreSQL + + + Snowball + + + TCL + + + blf + + + double-metaphone + + + imath + + + nagaysau-ishii + + + rijndael + + + cpe:2.3:a:postgresql-11:postgresql-11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + pkg:deb/debian/postgresql-11@11.15-1.pgdg90+1?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:postgresql-11:postgresql_11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_11:postgresql-11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_11:postgresql_11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql:postgresql-11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql:postgresql_11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/postgresql-11/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/postgresql-11.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 44373 + + + + Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org> + postgresql-client-11 + 11.15-1.pgdg90+1 + + + Artistic + + + BSD-2-Clause + + + BSD-3-Clause + + + Custom-Unicode + + + Custom-pg_dump + + + Custom-regex + + + GPL-1.0-only + + + PostgreSQL + + + Snowball + + + TCL + + + blf + + + double-metaphone + + + imath + + + nagaysau-ishii + + + rijndael + + + cpe:2.3:a:postgresql-client-11:postgresql-client-11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + pkg:deb/debian/postgresql-client-11@11.15-1.pgdg90+1?arch=amd64&upstream=postgresql-11&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:postgresql-client-11:postgresql_client_11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_client_11:postgresql-client-11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_client_11:postgresql_client_11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql-client:postgresql-client-11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql-client:postgresql_client_11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_client:postgresql-client-11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_client:postgresql_client_11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql:postgresql-client-11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql:postgresql_client_11:11.15-1.pgdg90\+1:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/postgresql-client-11/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/postgresql-client-11.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 6465 + postgresql-11 + + + + Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org> + postgresql-client-common + 238.pgdg90+1 + + + GPL-2.0-only + + + GPL-2.0-or-later + + + cpe:2.3:a:postgresql-client-common:postgresql-client-common:238.pgdg90\+1:*:*:*:*:*:*:* + pkg:deb/debian/postgresql-client-common@238.pgdg90+1?arch=all&upstream=postgresql-common&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:postgresql-client-common:postgresql_client_common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_client_common:postgresql-client-common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_client_common:postgresql_client_common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql-client:postgresql-client-common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql-client:postgresql_client_common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_client:postgresql-client-common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_client:postgresql_client_common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql:postgresql-client-common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql:postgresql_client_common:238.pgdg90\+1:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/postgresql-client-common/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/postgresql-client-common.conffiles + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/postgresql-client-common.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 188 + postgresql-common + + + + Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org> + postgresql-common + 238.pgdg90+1 + + + GPL-2.0-only + + + GPL-2.0-or-later + + + cpe:2.3:a:postgresql-common:postgresql-common:238.pgdg90\+1:*:*:*:*:*:*:* + pkg:deb/debian/postgresql-common@238.pgdg90+1?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:postgresql-common:postgresql_common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_common:postgresql-common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql_common:postgresql_common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql:postgresql-common:238.pgdg90\+1:*:*:*:*:*:*:* + cpe:2.3:a:postgresql:postgresql_common:238.pgdg90\+1:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/postgresql-common/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/postgresql-common.conffiles + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/postgresql-common.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 691 + + + + Matthias Klose <doko@debian.org> + readline-common + 7.0-3 + + + GFDL + + + GPL-3.0-only + + + cpe:2.3:a:readline-common:readline-common:7.0-3:*:*:*:*:*:*:* + pkg:deb/debian/readline-common@7.0-3?arch=all&upstream=readline&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:readline-common:readline_common:7.0-3:*:*:*:*:*:*:* + cpe:2.3:a:readline_common:readline-common:7.0-3:*:*:*:*:*:*:* + cpe:2.3:a:readline_common:readline_common:7.0-3:*:*:*:*:*:*:* + cpe:2.3:a:readline:readline-common:7.0-3:*:*:*:*:*:*:* + cpe:2.3:a:readline:readline_common:7.0-3:*:*:*:*:*:*:* + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /usr/share/doc/readline-common/copyright + sha256:53da616d382b12a2259d87e48c0a266b2acdbbd42d6efb446b71ee2e1816be47 + /var/lib/dpkg/info/readline-common.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 89 + readline + + + + Clint Adams <clint@debian.org> + sed + 4.4-1 + + + GPL-3.0-only + + + cpe:2.3:a:sed:sed:4.4-1:*:*:*:*:*:*:* + pkg:deb/debian/sed@4.4-1?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/sed/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/sed.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 799 + + + + Anibal Monsalve Salazar <anibal@debian.org> + sensible-utils + 0.0.9+deb9u1 + + + GPL-2.0-only + + + cpe:2.3:a:sensible-utils:sensible-utils:0.0.9\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/sensible-utils@0.0.9+deb9u1?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:sensible-utils:sensible_utils:0.0.9\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:sensible_utils:sensible-utils:0.0.9\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:sensible_utils:sensible_utils:0.0.9\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:sensible:sensible-utils:0.0.9\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:sensible:sensible_utils:0.0.9\+deb9u1:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/sensible-utils/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/sensible-utils.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 62 + + + + Debian Apache Maintainers <debian-apache@lists.debian.org> + ssl-cert + 1.0.39 + + + BSD-3-Clause + + + cpe:2.3:a:ssl-cert:ssl-cert:1.0.39:*:*:*:*:*:*:* + pkg:deb/debian/ssl-cert@1.0.39?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:ssl-cert:ssl_cert:1.0.39:*:*:*:*:*:*:* + cpe:2.3:a:ssl_cert:ssl-cert:1.0.39:*:*:*:*:*:*:* + cpe:2.3:a:ssl_cert:ssl_cert:1.0.39:*:*:*:*:*:*:* + cpe:2.3:a:ssl:ssl-cert:1.0.39:*:*:*:*:*:*:* + cpe:2.3:a:ssl:ssl_cert:1.0.39:*:*:*:*:*:*:* + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/ssl-cert/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/ssl-cert.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 63 + + + + Debian sysvinit maintainers <pkg-sysvinit-devel@lists.alioth.debian.org> + sysvinit-utils + 2.88dsf-59.9 + + + GPL-2.0-only + + + cpe:2.3:a:sysvinit-utils:sysvinit-utils:2.88dsf-59.9:*:*:*:*:*:*:* + pkg:deb/debian/sysvinit-utils@2.88dsf-59.9?arch=amd64&upstream=sysvinit&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:sysvinit-utils:sysvinit_utils:2.88dsf-59.9:*:*:*:*:*:*:* + cpe:2.3:a:sysvinit_utils:sysvinit-utils:2.88dsf-59.9:*:*:*:*:*:*:* + cpe:2.3:a:sysvinit_utils:sysvinit_utils:2.88dsf-59.9:*:*:*:*:*:*:* + cpe:2.3:a:sysvinit:sysvinit-utils:2.88dsf-59.9:*:*:*:*:*:*:* + cpe:2.3:a:sysvinit:sysvinit_utils:2.88dsf-59.9:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/sysvinit-utils/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/sysvinit-utils.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 110 + sysvinit + + + + Bdale Garbee <bdale@gag.com> + tar + 1.29b-1.1+deb9u1 + + + GPL-2.0-only + + + GPL-3.0-only + + + cpe:2.3:a:tar:tar:1.29b-1.1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/tar@1.29b-1.1+deb9u1?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/tar/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/tar.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/tar.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 2774 + + + + GNU Libc Maintainers <debian-glibc@lists.debian.org> + tzdata + 2021a-0+deb9u3 + cpe:2.3:a:tzdata:tzdata:2021a-0\+deb9u3:*:*:*:*:*:*:* + pkg:deb/debian/tzdata@2021a-0+deb9u3?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/tzdata/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/tzdata.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 3036 + + + + Manoj Srivastava <srivasta@debian.org> + ucf + 3.0036 + + + GPL-2.0-only + + + cpe:2.3:a:ucf:ucf:3.0036:*:*:*:*:*:*:* + pkg:deb/debian/ucf@3.0036?arch=all&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /usr/share/doc/ucf/copyright + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/ucf.conffiles + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/info/ucf.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 191 + + + + Debian util-linux Maintainers <ah-util-linux@debian.org> + util-linux + 2.29.2-1+deb9u1 + + + BSD-2-Clause + + + BSD-3-Clause + + + BSD-4-Clause + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + GPL-3.0-or-later + + + LGPL + + + LGPL-2.0-only + + + LGPL-2.0-or-later + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + LGPL-3.0-only + + + LGPL-3.0-or-later + + + MIT + + + public-domain + + + cpe:2.3:a:util-linux:util-linux:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/util-linux@2.29.2-1+deb9u1?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:util-linux:util_linux:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:util_linux:util-linux:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:util_linux:util_linux:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:util:util-linux:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:util:util_linux:2.29.2-1\+deb9u1:*:*:*:*:*:*:* + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/util-linux/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/util-linux.conffiles + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/util-linux.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 3558 + + + + Jonathan Nieder <jrnieder@gmail.com> + xz-utils + 5.2.2-1.2+deb9u1 + + + Autoconf + + + GPL-2.0-only + + + GPL-2.0-or-later + + + GPL-3.0-only + + + LGPL-2.0-only + + + LGPL-2.1-only + + + LGPL-2.1-or-later + + + PD + + + PD-debian + + + config-h + + + noderivs + + + permissive-fsf + + + permissive-nowarranty + + + probably-PD + + + cpe:2.3:a:xz-utils:xz-utils:5.2.2-1.2\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/xz-utils@5.2.2-1.2+deb9u1?arch=amd64&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + cpe:2.3:a:xz-utils:xz_utils:5.2.2-1.2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:xz_utils:xz-utils:5.2.2-1.2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:xz_utils:xz_utils:5.2.2-1.2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:xz:xz-utils:5.2.2-1.2\+deb9u1:*:*:*:*:*:*:* + cpe:2.3:a:xz:xz_utils:5.2.2-1.2\+deb9u1:*:*:*:*:*:*:* + sha256:01d30ba422c5d9f4a346d59ee398d0ab9882cd9b962e972a68c9c5345c2e4767 + /usr/share/doc/xz-utils/copyright + sha256:01d30ba422c5d9f4a346d59ee398d0ab9882cd9b962e972a68c9c5345c2e4767 + /var/lib/dpkg/info/xz-utils.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 515 + + + + Mark Brown <broonie@debian.org> + zlib1g + 1:1.2.8.dfsg-5+deb9u1 + cpe:2.3:a:zlib1g:zlib1g:1\:1.2.8.dfsg-5\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/zlib1g@1:1.2.8.dfsg-5+deb9u1?arch=amd64&upstream=zlib&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /usr/share/doc/zlib1g/copyright + sha256:20fa02db39e77a3327d6aabea63ca2b5ced645c33e08ada3aea745130d341e73 + /var/lib/dpkg/info/zlib1g:amd64.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 156 + zlib + + + + Debian Med Packaging <debian-med-packaging@lists.alioth.debian.org> + zstd + 1.1.2-1+deb9u1 + + + BSD-3-clause-with-patent-grant + + + Expat + + + Zlib + + + cpe:2.3:a:zstd:zstd:1.1.2-1\+deb9u1:*:*:*:*:*:*:* + pkg:deb/debian/zstd@1.1.2-1+deb9u1?arch=amd64&upstream=libzstd&distro=debian-9 + + dpkgdb-cataloger + DpkgMetadata + deb + sha256:01d30ba422c5d9f4a346d59ee398d0ab9882cd9b962e972a68c9c5345c2e4767 + /usr/share/doc/zstd/copyright + sha256:01d30ba422c5d9f4a346d59ee398d0ab9882cd9b962e972a68c9c5345c2e4767 + /var/lib/dpkg/info/zstd.md5sums + sha256:28ad98e51293c2d01fd259354167ecd9f9ca0cd7aa8f025e068d7f372e5ccceb + /var/lib/dpkg/status + 1218 + libzstd + + + + debian + 9 + Debian GNU/Linux 9 (stretch) + + + + https://bugs.debian.org/ + + + https://www.debian.org/ + + + https://www.debian.org/support + support + + + + debian + Debian GNU/Linux 9 (stretch) + stretch + 9 + + + + \ No newline at end of file diff --git a/cmd/osv-scanner/main_test.go b/cmd/osv-scanner/main_test.go index 3199c9f3c3..d3cb9b5edd 100644 --- a/cmd/osv-scanner/main_test.go +++ b/cmd/osv-scanner/main_test.go @@ -128,7 +128,27 @@ func TestRun(t *testing.T) { wantExitCode: 0, wantStdout: ` Scanning dir ./fixtures/locks-many/composer.lock - Scanned %%/fixtures/locks-many/composer.lock file and found 1 packages + Scanned %%/fixtures/locks-many/composer.lock file and found 1 packages + `, + wantStderr: "", + }, + // one specific supported sbom with vulns + { + name: "", + args: []string{"", "./fixtures/sbom-insecure/postgres-stretch.cdx.xml"}, + wantExitCode: 1, + wantStdout: ` + Scanning dir ./fixtures/sbom-insecure/postgres-stretch.cdx.xml + Scanned /home/rexpan/Documents/Projects/osv-scanner/cmd/osv-scanner/fixtures/sbom-insecure/postgres-stretch.cdx.xml as CycloneDX SBOM and found 136 packages + +-------------------------------------+-----------+---------+------------------------------------+-------------------------------------------------+ + | OSV URL (ID IN BOLD) | ECOSYSTEM | PACKAGE | VERSION | SOURCE | + +-------------------------------------+-----------+---------+------------------------------------+-------------------------------------------------+ + | https://osv.dev/GHSA-v95c-p5hm-xq8f | Go | runc | v1.0.1 | fixtures/sbom-insecure/postgres-stretch.cdx.xml | + | https://osv.dev/GO-2022-0274 | | | | | + | https://osv.dev/GHSA-f3fp-gc8g-vw66 | Go | runc | v1.0.1 | fixtures/sbom-insecure/postgres-stretch.cdx.xml | + | https://osv.dev/GHSA-p782-xgp4-8hr8 | Go | sys | v0.0.0-20210817142637-7d9622a276b7 | fixtures/sbom-insecure/postgres-stretch.cdx.xml | + | https://osv.dev/GO-2022-0493 | | | | | + +-------------------------------------+-----------+---------+------------------------------------+-------------------------------------------------+ `, wantStderr: "", }, @@ -152,6 +172,7 @@ func TestRun(t *testing.T) { wantStdout: ` Scanning dir ./fixtures/locks-many Scanned %%/fixtures/locks-many/Gemfile.lock file and found 1 packages + Scanned /home/rexpan/Documents/Projects/osv-scanner/cmd/osv-scanner/fixtures/locks-many/alpine.cdx.xml as CycloneDX SBOM and found 15 packages Scanned %%/fixtures/locks-many/composer.lock file and found 1 packages Scanned %%/fixtures/locks-many/yarn.lock file and found 1 packages `, diff --git a/pkg/osvscanner/osvscanner.go b/pkg/osvscanner/osvscanner.go index 55c414f2ed..a37eccb9e8 100644 --- a/pkg/osvscanner/osvscanner.go +++ b/pkg/osvscanner/osvscanner.go @@ -250,7 +250,7 @@ func scanSBOMFile(r *output.Reporter, query *osv.BatchedQuery, path string) erro }) if err == nil { // Found the right format. - r.PrintText(fmt.Sprintf("Scanned %s SBOM and found %d packages\n", provider.Name(), count)) + r.PrintText(fmt.Sprintf("Scanned %s as %s SBOM and found %d packages\n", path, provider.Name(), count)) return nil } From 0fc49b9fc6c823d2563b175e5afd9caa688a8f67 Mon Sep 17 00:00:00 2001 From: Rex Pan Date: Thu, 2 Mar 2023 12:14:47 +1100 Subject: [PATCH 3/5] Add reference comment --- internal/sbom/cyclonedx.go | 1 + 1 file changed, 1 insertion(+) diff --git a/internal/sbom/cyclonedx.go b/internal/sbom/cyclonedx.go index 9d080a9375..4311c723cf 100644 --- a/internal/sbom/cyclonedx.go +++ b/internal/sbom/cyclonedx.go @@ -23,6 +23,7 @@ func (c *CycloneDX) Name() string { } func (s *CycloneDX) StandardFileName(path string) bool { + // From https://cyclonedx.org/specification/overview/#recognized-file-patterns expectedGlobs := []string{ "bom.xml", "bom.json", From cdec8478cefd1ee4a572dbdff818f7e16ed7e44b Mon Sep 17 00:00:00 2001 From: Rex Pan Date: Thu, 2 Mar 2023 12:24:16 +1100 Subject: [PATCH 4/5] Fix linter complaint --- internal/sbom/cyclonedx.go | 4 ++-- internal/sbom/sbom.go | 2 +- internal/sbom/spdx.go | 2 +- pkg/osvscanner/osvscanner.go | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/internal/sbom/cyclonedx.go b/internal/sbom/cyclonedx.go index 4311c723cf..98bedb171b 100644 --- a/internal/sbom/cyclonedx.go +++ b/internal/sbom/cyclonedx.go @@ -22,8 +22,8 @@ func (c *CycloneDX) Name() string { return "CycloneDX" } -func (s *CycloneDX) StandardFileName(path string) bool { - // From https://cyclonedx.org/specification/overview/#recognized-file-patterns +func (c *CycloneDX) MatchesRecognizedFileNames(path string) bool { + // See https://cyclonedx.org/specification/overview/#recognized-file-patterns expectedGlobs := []string{ "bom.xml", "bom.json", diff --git a/internal/sbom/sbom.go b/internal/sbom/sbom.go index f77cbef65e..a53e3ccf28 100644 --- a/internal/sbom/sbom.go +++ b/internal/sbom/sbom.go @@ -14,7 +14,7 @@ type Identifier struct { type SBOMReader interface { Name() string // Checks if the file path is a standard recognized file name - StandardFileName(string) bool + MatchesRecognizedFileNames(string) bool GetPackages(io.ReadSeeker, func(Identifier) error) error } diff --git a/internal/sbom/spdx.go b/internal/sbom/spdx.go index 48e846c58e..70e5860bba 100644 --- a/internal/sbom/spdx.go +++ b/internal/sbom/spdx.go @@ -28,7 +28,7 @@ func (s *SPDX) Name() string { return "SPDX" } -func (s *SPDX) StandardFileName(path string) bool { +func (s *SPDX) MatchesRecognizedFileNames(path string) bool { // All spdx files should have the .spdx in the filename, even if // it's not the extension: https://spdx.github.io/spdx-spec/v2.3/conformance/ return strings.Contains(strings.ToLower(filepath.Base(path)), ".spdx") diff --git a/pkg/osvscanner/osvscanner.go b/pkg/osvscanner/osvscanner.go index a37eccb9e8..8dd6e5bd28 100644 --- a/pkg/osvscanner/osvscanner.go +++ b/pkg/osvscanner/osvscanner.go @@ -223,7 +223,7 @@ func scanLockfile(r *output.Reporter, query *osv.BatchedQuery, path string, pars // within to `query` func scanSBOMFile(r *output.Reporter, query *osv.BatchedQuery, path string) error { for _, provider := range sbom.Providers { - if !provider.StandardFileName(path) { + if !provider.MatchesRecognizedFileNames(path) { // Skip if filename is not usually a sbom file of this format continue } From 3c14d051f305a0be658ecf6c98642517847c8f80 Mon Sep 17 00:00:00 2001 From: Rex Pan Date: Thu, 2 Mar 2023 12:27:36 +1100 Subject: [PATCH 5/5] Fix tests --- cmd/osv-scanner/main_test.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cmd/osv-scanner/main_test.go b/cmd/osv-scanner/main_test.go index d3cb9b5edd..8cd2274622 100644 --- a/cmd/osv-scanner/main_test.go +++ b/cmd/osv-scanner/main_test.go @@ -139,7 +139,7 @@ func TestRun(t *testing.T) { wantExitCode: 1, wantStdout: ` Scanning dir ./fixtures/sbom-insecure/postgres-stretch.cdx.xml - Scanned /home/rexpan/Documents/Projects/osv-scanner/cmd/osv-scanner/fixtures/sbom-insecure/postgres-stretch.cdx.xml as CycloneDX SBOM and found 136 packages + Scanned %%/fixtures/sbom-insecure/postgres-stretch.cdx.xml as CycloneDX SBOM and found 136 packages +-------------------------------------+-----------+---------+------------------------------------+-------------------------------------------------+ | OSV URL (ID IN BOLD) | ECOSYSTEM | PACKAGE | VERSION | SOURCE | +-------------------------------------+-----------+---------+------------------------------------+-------------------------------------------------+ @@ -172,7 +172,7 @@ func TestRun(t *testing.T) { wantStdout: ` Scanning dir ./fixtures/locks-many Scanned %%/fixtures/locks-many/Gemfile.lock file and found 1 packages - Scanned /home/rexpan/Documents/Projects/osv-scanner/cmd/osv-scanner/fixtures/locks-many/alpine.cdx.xml as CycloneDX SBOM and found 15 packages + Scanned %%/fixtures/locks-many/alpine.cdx.xml as CycloneDX SBOM and found 15 packages Scanned %%/fixtures/locks-many/composer.lock file and found 1 packages Scanned %%/fixtures/locks-many/yarn.lock file and found 1 packages `,