diff --git a/.github/workflows/security-release-gate.yml b/.github/workflows/security-release-gate.yml index 2012173a..8b45a4db 100644 --- a/.github/workflows/security-release-gate.yml +++ b/.github/workflows/security-release-gate.yml @@ -1,13 +1,24 @@ name: Security release gate on: + pull_request: + branches: [main] workflow_dispatch: + inputs: + release_tag: + description: New immutable numeric tag; empty runs verification only + required: false + default: '' + type: string push: branches: - 'verification/external-dns-sync-*' permissions: - contents: read + contents: write + packages: write + id-token: write + attestations: write concurrency: group: external-dns-sync-security-${{ github.ref }} @@ -30,6 +41,29 @@ jobs: fetch-depth: 0 persist-credentials: false + - name: Validate manual release request + if: github.event_name == 'workflow_dispatch' && inputs.release_tag != '' + shell: bash + env: + GH_TOKEN: ${{ github.token }} + RELEASE_TAG: ${{ inputs.release_tag }} + run: | + set -euo pipefail + test "$GITHUB_REF" = refs/heads/main + [[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]] + test "$RELEASE_TAG" = 'v0.8.1' + test -z "$(git status --porcelain)" + test "$(git rev-parse HEAD)" = "$GITHUB_SHA" + test "$(gh api "repos/$GITHUB_REPOSITORY/git/ref/heads/main" --jq .object.sha)" = "$GITHUB_SHA" + tags="$(gh api --paginate "repos/$GITHUB_REPOSITORY/tags" --jq '.[].name')" + if grep -Fxq "$RELEASE_TAG" <<<"$tags"; then + echo 'The release tag already exists; refusing to overwrite it' >&2 + exit 1 + fi + gh api "repos/$GITHUB_REPOSITORY/commits/$GITHUB_SHA/check-runs" --jq ' + [.check_runs[] | select(.name == "Analyze (go)" or .name == "Analyze (actions)")] + | group_by(.name) | length == 2 and all(any(.conclusion == "success"))' | grep -Fx true + - name: Record candidate identity and source gates shell: bash run: | @@ -113,7 +147,7 @@ jobs: docker run --rm --entrypoint sh "$DAPPER_IMAGE" -lc \ 'docker --version; go version -m /usr/bin/docker' \ > evidence/docker-cli-version.txt - grep -F 'Docker version 29.7.2' evidence/docker-cli-version.txt >/dev/null + grep -F 'Docker version 29.9.2' evidence/docker-cli-version.txt >/dev/null test -f package/third-party-licenses/github.com/aws/aws-sdk-go-v2/LICENSE.txt test -f package/third-party-licenses/github.com/aws/aws-sdk-go-v2/NOTICE.txt test -f package/third-party-licenses/github.com/alibabacloud-go/alidns-20150109/v5/LICENSE @@ -205,7 +239,7 @@ jobs: # The reviewed package is only user-space Linux API headers inside # the disposable builder; no kernel image or modules can be present. - grep -F $'linux-libc-dev:amd64\t7.0.0-29.29' evidence/dapper-dpkg.tsv >/dev/null + grep -F $'linux-libc-dev:amd64\t7.0.0-38.38' evidence/dapper-dpkg.tsv >/dev/null if grep -Eq '^linux-(image|modules)([-:]|[[:space:]])' evidence/dapper-dpkg.tsv; then printf 'Unexpected Linux kernel runtime package in Dapper image\n' >&2 exit 1 @@ -290,6 +324,58 @@ jobs: test "$dapper_applicable_critical" -eq 0 test "$dapper_applicable_high" -eq 0 + - name: Publish the tested image once + id: publish + if: github.event_name == 'workflow_dispatch' && inputs.release_tag != '' + shell: bash + env: + GH_TOKEN: ${{ github.token }} + RELEASE_TAG: ${{ inputs.release_tag }} + TESTED_IMAGE: ghcr.io/pasturestack/external-dns-sync:v0.8.1 + run: | + set -euo pipefail + test "$(gh api "repos/$GITHUB_REPOSITORY/git/ref/heads/main" --jq .object.sha)" = "$GITHUB_SHA" + remote="ghcr.io/pasturestack/external-dns-sync:$RELEASE_TAG" + printf '%s' "$GH_TOKEN" | docker login ghcr.io -u "$GITHUB_ACTOR" --password-stdin + if docker manifest inspect "$remote" > /dev/null 2> evidence/registry-preflight.txt; then + echo 'Image tag already exists; refusing to overwrite it' >&2 + exit 1 + fi + grep -Ei 'manifest unknown|no such manifest|not found' evidence/registry-preflight.txt + docker tag "$TESTED_IMAGE" "$remote" + docker push "$remote" + reference="$(docker image inspect --format '{{index .RepoDigests 0}}' "$remote")" + digest="${reference#*@}" + [[ "$digest" =~ ^sha256:[0-9a-f]{64}$ ]] + printf 'digest=%s\n' "$digest" >> "$GITHUB_OUTPUT" + printf 'image=%s\ndigest=%s\nproducer=%s\n' "$remote" "$digest" "$GITHUB_SHA" > evidence/published.txt + (cd evidence && sha256sum published.txt > published.sha256) + + - name: Attest the published image + if: github.event_name == 'workflow_dispatch' && inputs.release_tag != '' + uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2 + with: + subject-name: ghcr.io/pasturestack/external-dns-sync + subject-digest: ${{ steps.publish.outputs.digest }} + push-to-registry: true + + - name: Record the immutable source and release + if: github.event_name == 'workflow_dispatch' && inputs.release_tag != '' + shell: bash + env: + GH_TOKEN: ${{ github.token }} + RELEASE_TAG: ${{ inputs.release_tag }} + run: | + set -euo pipefail + tag_sha="$(gh api --method POST "repos/$GITHUB_REPOSITORY/git/tags" \ + -f tag="$RELEASE_TAG" -f object="$GITHUB_SHA" -f type=commit \ + -f message="Security refresh $RELEASE_TAG" --jq .sha)" + gh api --method POST "repos/$GITHUB_REPOSITORY/git/refs" \ + -f ref="refs/tags/$RELEASE_TAG" -f sha="$tag_sha" >/dev/null + gh release create "$RELEASE_TAG" --repo "$GITHUB_REPOSITORY" --verify-tag \ + --title "$RELEASE_TAG" --notes-file evidence/published.txt \ + evidence/published.txt evidence/published.sha256 evidence/*.json + - name: Upload review evidence if: always() uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 diff --git a/Dockerfile.dapper b/Dockerfile.dapper index 9092a461..98166135 100644 --- a/Dockerfile.dapper +++ b/Dockerfile.dapper @@ -4,15 +4,18 @@ FROM ${UBUNTU_IMAGE} # Modified by PastureStack contributors for independent maintenance and rebranding. COPY ubuntu-apt.lock /licenses/ubuntu-apt.lock -ADD --checksum=sha256:6077d27c6b6f8b23590cb01ff877ed8c804a67a5442cc32b5a33da10d2bd0e90 https://archive.ubuntu.com/ubuntu/pool/main/c/ca-certificates/ca-certificates_20260601~26.04.1_all.deb /tmp/ca-certificates.deb +COPY security/install-ubuntu-security-updates.sh /usr/local/lib/pasturestack/install-ubuntu-security-updates.sh +COPY security/ubuntu-security-packages.lock /usr/share/pasturestack/ubuntu-security-packages.lock + +ADD --checksum=sha256:5b6326f1932cfd7be57130561dc78192f09ed9f58bfbe6606ed0c50510c3b6cd https://archive.ubuntu.com/ubuntu/pool/main/c/ca-certificates/ca-certificates_20260816ubuntu0.26.04.1_all.deb /tmp/ca-certificates.deb ARG DAPPER_HOST_ARCH=amd64 -ARG GO_VERSION=1.27.0 -ARG DOCKER_VERSION=29.7.2 -ARG GO_LINUX_AMD64_SHA256=675c26c449cbb18fc24b74650de1eabbae6e16f64326fd85a283fb3b58280685 -ARG GO_LINUX_ARM64_SHA256=51798d2c42d0e1c6ed7fd9f48728b4193abac9e8aad6dbac2fe96a81f5909bda -ARG DOCKER_LINUX_AMD64_SHA256=803d433f226db4776e1768fd319fc6c6e4935a456acf84fcc0080818b854bc8f -ARG DOCKER_LINUX_ARM64_SHA256=43d143448adf2c2787704e7d7704fd6d62d367a54c5edaef0a3f75509cb0938d +ARG GO_VERSION=1.27.3 +ARG DOCKER_VERSION=29.9.2 +ARG GO_LINUX_AMD64_SHA256=65efbc80fdc1fa2cd2631cad5b481777a68e8725f34e89f50fc6ac714e379b40 +ARG GO_LINUX_ARM64_SHA256=a06e99309dbcbdca1a8ccd2282c3ee146e55930886e26b4f1193269587165f49 +ARG DOCKER_LINUX_AMD64_SHA256=9ac225999fd5e863f7694c728ef23d480616b1e5639328fa309befd4243d69eb +ARG DOCKER_LINUX_ARM64_SHA256=873b3e0207857c3b2f28392fb922f3ea6efe37620c16d4d4aaf2fef409c90b73 ENV HOST_ARCH=${DAPPER_HOST_ARCH} ARCH=${DAPPER_HOST_ARCH} ENV DEBIAN_FRONTEND=noninteractive @@ -33,7 +36,7 @@ RUN set -eux; \ apt-get update && \ apt-get install -y --no-install-recommends \ bash="${UBUNTU_APT_BASH_VERSION}" \ - ca-certificates="${UBUNTU_APT_CA_CERTIFICATES_VERSION}" \ + /tmp/ca-certificates.deb \ curl="${UBUNTU_APT_CURL_VERSION}" \ file="${UBUNTU_APT_FILE_VERSION}" \ gcc="${UBUNTU_APT_GCC_VERSION}" \ @@ -44,6 +47,9 @@ RUN set -eux; \ make="${UBUNTU_APT_MAKE_VERSION}" \ tar="${UBUNTU_APT_TAR_VERSION}" \ xz-utils="${UBUNTU_APT_XZ_UTILS_VERSION}"; \ + test "$(dpkg-query -W -f='${Version}' ca-certificates)" = "${UBUNTU_APT_CA_CERTIFICATES_VERSION}"; \ + sh /usr/local/lib/pasturestack/install-ubuntu-security-updates.sh /usr/share/pasturestack/ubuntu-security-packages.lock /etc/ssl/certs/ca-certificates.crt; \ + dpkg-query -W -f='${binary:Package}\t${Version}\n' | LC_ALL=C sort > /usr/share/pasturestack/ubuntu-security-packages.tsv; \ { \ printf 'snapshot\t%s\n' "${UBUNTU_APT_SNAPSHOT}"; \ dpkg-query -W -f='${binary:Package}\t${Version}\n' | LC_ALL=C sort; \ diff --git a/README.md b/README.md index ed2135ef..162814d1 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,7 @@ +Current source builds use Go 1.27.3 with Go language minimum 1.26.0, selected `golang.org/x/net` v0.60.0 and its required `golang.org/x/sys` v0.48.0. The Ubuntu 26.04 builder pins CA package 20260816ubuntu0.26.04.1 without advancing other package snapshots; the Alpine 3.23 runtime pins CA package 20261020-r0. These inputs apply to newly built artifacts. + # External DNS Sync > PastureStack is an independent community effort to preserve, audit, and modernize the Rancher 1.6 ecosystem. It is not affiliated with or endorsed by Rancher Labs or SUSE. @@ -85,7 +87,7 @@ precedence for new deployments. ## Local build and test -The project uses a containerized Go 1.27.0 module build with a committed +The project uses a containerized Go 1.27.3 module build with a committed `vendor/modules.txt` dependency lock. Route 53 uses AWS SDK for Go v2 `v1.65.10`; AliDNS uses Alibaba Cloud's maintained V2.0 SDK `v5.6.0`. The end-of-life AWS SDK for Go v1, Aliyungo, and the legacy `vendor.conf` @@ -142,3 +144,5 @@ PastureStack has not replaced the license. Upstream copyright notices and the license and notice files of vendored dependencies must be preserved. The local packaging step copies discovered vendored legal files into `/licenses/third-party/` in the runtime image. + +Security micro-updates are constrained by `security/ubuntu-security-packages.lock` to the signed Ubuntu 26.04 snapshot of 2026-10-23; the general package snapshot remains unchanged. Builds record the resulting package versions in `/usr/share/pasturestack/ubuntu-security-packages.tsv`. Existing runtime and firewall contracts are unchanged. diff --git a/SECURITY.md b/SECURITY.md index d5e1ad94..ff7abfc9 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -49,9 +49,9 @@ socket to build and package the runtime image. It must not be deployed as a production service. The build image uses a digest-pinned Ubuntu 26.04 base, the -`20260808T000000Z` snapshot, Go 1.27.0, and Docker CLI 29.7.2 from +`20260808T000000Z` snapshot, Go 1.27.3, and Docker CLI 29.9.2 from SHA-256-verified official archives. The runtime uses a digest-pinned Alpine -3.23 base with only exact Bash and CA-certificate packages. +3.23 base with exact Bash, CA-certificate, musl, zlib, and OpenSSL-library security pins. Builds run in Go module vendor mode with network dependency resolution disabled. Route 53 uses AWS SDK for Go v2 and AliDNS uses Alibaba Cloud's maintained V2.0 SDK; the end-of-life AWS SDK for Go v1, Aliyungo, and `vendor.conf` must not diff --git a/go.mod b/go.mod index 036b5d44..9ab07c8c 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/PastureStack/external-dns-sync go 1.26.0 -toolchain go1.27.0 +toolchain go1.27.3 require ( github.com/alibabacloud-go/alidns-20150109/v5 v5.6.0 @@ -24,7 +24,7 @@ require ( github.com/sirupsen/logrus v1.10.2 github.com/valyala/fasttemplate v1.2.2 github.com/waynz0r/go-powerdns v1.1.1 - golang.org/x/net v0.58.0 + golang.org/x/net v0.60.0 golang.org/x/oauth2 v0.36.0 ) @@ -58,7 +58,7 @@ require ( github.com/shopspring/decimal v1.4.0 // indirect github.com/tjfoc/gmsm v1.4.1 // indirect github.com/valyala/bytebufferpool v1.0.0 // indirect - golang.org/x/sys v0.47.0 // indirect + golang.org/x/sys v0.48.0 // indirect golang.org/x/time v0.15.0 // indirect gopkg.in/ini.v1 v1.67.3 // indirect ) diff --git a/go.sum b/go.sum index 588b17f5..5803cd9d 100644 --- a/go.sum +++ b/go.sum @@ -252,6 +252,8 @@ golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM= golang.org/x/net v0.26.0/go.mod h1:5YKkiSynbBIh3p6iOc/vibscux0x38BZDkn8sCUPxHE= golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= +golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU= +golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs= golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q= @@ -288,6 +290,8 @@ golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/sys v0.21.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo= +golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= @@ -312,6 +316,7 @@ golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI= golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= +golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI= golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U= golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= diff --git a/package/Dockerfile b/package/Dockerfile index abf9d18f..56a94f32 100644 --- a/package/Dockerfile +++ b/package/Dockerfile @@ -9,7 +9,12 @@ COPY ubuntu-apt.lock /licenses/ubuntu-build-apt.lock RUN apk add --no-cache \ bash=5.3.3-r1 \ - ca-certificates=20260611-r0 && \ + ca-certificates=20261020-r0 \ + libcrypto3=3.5.9-r0 \ + libssl3=3.5.9-r0 \ + musl=1.2.5-r24 \ + musl-utils=1.2.5-r24 \ + zlib=1.3.2-r1 && \ apk info -v | LC_ALL=C sort > /licenses/EXTERNAL-DNS-SYNC-RUNTIME-ALPINE-PACKAGES.tsv && \ addgroup -S -g 10001 pasturestack && \ adduser -S -D -h /home/pasturestack -s /sbin/nologin -G pasturestack -u 10001 pasturestack diff --git a/scripts/check-source-gates b/scripts/check-source-gates index e96c7139..574137b7 100755 --- a/scripts/check-source-gates +++ b/scripts/check-source-gates @@ -26,24 +26,27 @@ reject_marker() { fi } -require_marker Dockerfile.dapper 'ARG GO_VERSION=1.27.0' EXTERNAL_DNS_GO_VERSION_NOT_CURRENT +require_marker Dockerfile.dapper 'ARG GO_VERSION=1.27.3' EXTERNAL_DNS_GO_VERSION_NOT_CURRENT require_marker Dockerfile.dapper 'GO111MODULE=on' EXTERNAL_DNS_GO_MODULE_MODE_MISSING require_marker Dockerfile.dapper 'GOTOOLCHAIN=local' EXTERNAL_DNS_GO_TOOLCHAIN_NOT_LOCAL require_marker Dockerfile.dapper 'GOPROXY=off' EXTERNAL_DNS_GO_NETWORK_BUILD_NOT_DISABLED reject_marker Dockerfile.dapper 'GO111MODULE=off' EXTERNAL_DNS_LEGACY_GOPATH_MODE_PRESENT -require_marker Dockerfile.dapper 'ARG GO_LINUX_AMD64_SHA256=675c26c449cbb18fc24b74650de1eabbae6e16f64326fd85a283fb3b58280685' EXTERNAL_DNS_GO_AMD64_SHA_MISSING -require_marker Dockerfile.dapper 'ARG GO_LINUX_ARM64_SHA256=51798d2c42d0e1c6ed7fd9f48728b4193abac9e8aad6dbac2fe96a81f5909bda' EXTERNAL_DNS_GO_ARM64_SHA_MISSING -require_marker Dockerfile.dapper 'ARG DOCKER_VERSION=29.7.2' EXTERNAL_DNS_DOCKER_VERSION_NOT_CURRENT -require_marker Dockerfile.dapper 'ARG DOCKER_LINUX_AMD64_SHA256=803d433f226db4776e1768fd319fc6c6e4935a456acf84fcc0080818b854bc8f' EXTERNAL_DNS_DOCKER_AMD64_SHA_MISSING -require_marker Dockerfile.dapper 'ARG DOCKER_LINUX_ARM64_SHA256=43d143448adf2c2787704e7d7704fd6d62d367a54c5edaef0a3f75509cb0938d' EXTERNAL_DNS_DOCKER_ARM64_SHA_MISSING +require_marker Dockerfile.dapper 'ARG GO_LINUX_AMD64_SHA256=65efbc80fdc1fa2cd2631cad5b481777a68e8725f34e89f50fc6ac714e379b40' EXTERNAL_DNS_GO_AMD64_SHA_MISSING +require_marker Dockerfile.dapper 'ARG GO_LINUX_ARM64_SHA256=a06e99309dbcbdca1a8ccd2282c3ee146e55930886e26b4f1193269587165f49' EXTERNAL_DNS_GO_ARM64_SHA_MISSING +require_marker Dockerfile.dapper 'ARG DOCKER_VERSION=29.9.2' EXTERNAL_DNS_DOCKER_VERSION_NOT_CURRENT +require_marker Dockerfile.dapper 'ARG DOCKER_LINUX_AMD64_SHA256=9ac225999fd5e863f7694c728ef23d480616b1e5639328fa309befd4243d69eb' EXTERNAL_DNS_DOCKER_AMD64_SHA_MISSING +require_marker Dockerfile.dapper 'ARG DOCKER_LINUX_ARM64_SHA256=873b3e0207857c3b2f28392fb922f3ea6efe37620c16d4d4aaf2fef409c90b73' EXTERNAL_DNS_DOCKER_ARM64_SHA_MISSING require_marker Dockerfile.dapper 'echo "${docker_sha} /tmp/docker.tgz" | sha256sum -c -' EXTERNAL_DNS_DOCKER_SHA_NOT_CHECKED reject_marker Dockerfile.dapper 'curl -fsSL "https://download.docker.com' EXTERNAL_DNS_DOCKER_DOWNLOAD_UNBOUNDED require_marker package/Dockerfile 'USER 10001:10001' EXTERNAL_DNS_RUNTIME_NOT_NON_ROOT require_marker ubuntu-apt.lock "UBUNTU_APT_SNAPSHOT='20260808T000000Z'" EXTERNAL_DNS_APT_SNAPSHOT_MISSING -require_marker Dockerfile.dapper 'ca-certificates="${UBUNTU_APT_CA_CERTIFICATES_VERSION}"' EXTERNAL_DNS_BUILD_APT_LOCK_MISSING +require_marker Dockerfile.dapper '/tmp/ca-certificates.deb \' EXTERNAL_DNS_BUILD_CA_PACKAGE_MISSING +require_marker Dockerfile.dapper 'test "$(dpkg-query -W -f=' EXTERNAL_DNS_BUILD_CA_READBACK_MISSING require_marker package/Dockerfile 'ARG ALPINE_IMAGE=alpine:3.23@sha256:1beb0dc0a51de7ff38e3b5274078a2e0b81113ba5c7535e1a03d5913a5edbda3' EXTERNAL_DNS_RUNTIME_BASE_NOT_PINNED require_marker package/Dockerfile 'bash=5.3.3-r1' EXTERNAL_DNS_RUNTIME_BASH_NOT_PINNED -require_marker package/Dockerfile 'ca-certificates=20260611-r0' EXTERNAL_DNS_RUNTIME_CA_NOT_PINNED +require_marker package/Dockerfile 'ca-certificates=20261020-r0' EXTERNAL_DNS_RUNTIME_CA_NOT_PINNED +require_marker package/Dockerfile 'libcrypto3=3.5.9-r0' EXTERNAL_DNS_RUNTIME_CRYPTO_NOT_PATCHED +require_marker package/Dockerfile 'libssl3=3.5.9-r0' EXTERNAL_DNS_RUNTIME_SSL_NOT_PATCHED reject_marker package/Dockerfile 'apt-get' EXTERNAL_DNS_RUNTIME_APT_PRESENT require_marker package/Dockerfile 'org.opencontainers.image.version="${VERSION}"' EXTERNAL_DNS_OCI_VERSION_MISSING require_marker package/Dockerfile 'org.opencontainers.image.revision="${REVISION}"' EXTERNAL_DNS_OCI_REVISION_MISSING @@ -52,7 +55,7 @@ require_marker scripts/version 'plain numeric semantic version' EXTERNAL_DNS_NUM require_marker scripts/package 'test "${legal_count}" -eq 59' EXTERNAL_DNS_LEGAL_COUNT_GATE_MISSING require_marker scripts/package 'mkdir -p ../dist' EXTERNAL_DNS_DIST_DIRECTORY_GATE_MISSING require_marker go.mod 'go 1.26.0' EXTERNAL_DNS_GO_MODULE_COMPATIBILITY_VERSION_MISSING -require_marker go.mod 'toolchain go1.27.0' EXTERNAL_DNS_GO_TOOLCHAIN_VERSION_MISSING +require_marker go.mod 'toolchain go1.27.3' EXTERNAL_DNS_GO_TOOLCHAIN_VERSION_MISSING require_marker go.mod 'github.com/aws/aws-sdk-go-v2/service/route53 v1.65.10' EXTERNAL_DNS_AWS_SDK_V2_ROUTE53_MISSING require_marker go.mod 'github.com/alibabacloud-go/alidns-20150109/v5 v5.6.0' EXTERNAL_DNS_ALIDNS_V5_MISSING require_marker vendor/modules.txt '# github.com/aws/aws-sdk-go-v2/service/route53 v1.65.10' EXTERNAL_DNS_AWS_SDK_V2_VENDOR_MISSING @@ -173,5 +176,5 @@ if [ "$failure_count" -ne 0 ]; then exit 1 fi -printf 'EXTERNAL_DNS_SOURCE_GATES_OK go_min=1.26.0 toolchain=1.27.0 build=ubuntu-26.04 runtime=alpine-3.23 non_root=1 legal_files=%s endpoint_override=bounded\n' \ +printf 'EXTERNAL_DNS_SOURCE_GATES_OK go_min=1.26.0 toolchain=1.27.3 build=ubuntu-26.04 runtime=alpine-3.23 non_root=1 legal_files=%s endpoint_override=bounded\n' \ "$legal_count" diff --git a/security/dapper.openvex.json b/security/dapper.openvex.json index 7a36b4e7..2f6534cd 100644 --- a/security/dapper.openvex.json +++ b/security/dapper.openvex.json @@ -2,606 +2,3843 @@ "@context": "https://openvex.dev/ns/v0.2.0", "@id": "https://github.com/PastureStack/external-dns-sync/security/dapper.openvex.json", "author": "PastureStack contributors", - "timestamp": "2026-08-13T03:50:00+08:00", - "version": 1, + "timestamp": "2026-10-23T12:54:12Z", + "version": 2, "statements": [ + { + "vulnerability": { + "name": "CVE-2022-50240" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, { "vulnerability": { "name": "CVE-2025-40190" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-100074" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-68103" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-68451" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-72198" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-72497" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74446" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74454" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74465" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74470" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74506" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74510" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74522" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74529" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74530" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74533" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74534" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74535" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74537" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74565" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74578" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74677" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74684" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74700" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74714" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74715" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74723" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74724" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74744" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-74752" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80551" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80554" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80681" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80683" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80691" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80692" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80693" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80700" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80702" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80710" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80714" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80716" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80718" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80721" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80837" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80841" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80852" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80864" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80891" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80905" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80937" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80980" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80982" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-80991" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89448" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89481" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89492" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89520" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89526" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89528" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89530" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89531" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89537" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89544" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89550" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89564" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89565" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89580" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89622" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89631" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89633" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89637" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89638" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89652" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89659" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89675" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89676" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89680" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89685" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89707" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89708" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89788" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89803" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89805" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89810" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89837" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89907" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89913" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-89922" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90003" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90037" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90048" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90057" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90092" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90093" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90104" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90108" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90111" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90148" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90149" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90150" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90152" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90155" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90161" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90162" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90167" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90169" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90199" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90200" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90204" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90205" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90217" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90227" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90237" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90256" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90313" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90317" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90320" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90321" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90324" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90343" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90375" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90380" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90392" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90398" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-90417" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-92499" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-92507" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-92509" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-92510" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-92511" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-92512" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93105" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93125" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93144" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93148" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93154" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93175" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93176" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93192" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93196" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93199" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93210" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93221" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93282" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93787" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93790" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93792" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93796" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93806" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93817" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93824" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-93828" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97415" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97429" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97442" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97493" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97497" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97513" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97530" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97555" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97557" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97562" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97564" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97565" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97581" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97603" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97615" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97906" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97960" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-97988" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98017" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98019" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98033" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98034" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98041" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98056" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98084" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98085" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98104" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98107" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98115" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98134" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98164" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98167" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98171" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98222" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98229" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98260" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98283" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98332" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98333" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98341" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98359" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98364" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98365" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98376" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98420" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98432" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98439" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98440" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98441" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98442" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98446" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98454" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98456" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98457" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98459" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98462" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98464" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98479" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98487" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98490" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98491" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98503" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98515" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98524" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98526" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98532" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98548" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98561" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98567" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98568" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98570" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98571" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98572" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98573" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98580" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98586" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98588" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98589" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98590" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98591" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98599" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98601" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98606" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98621" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98624" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98625" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98626" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98632" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98634" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98635" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98641" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98642" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98649" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98651" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98652" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" + } + ], + "status": "not_affected", + "justification": "vulnerable_code_not_present", + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." + }, + { + "vulnerability": { + "name": "CVE-2026-98689" + }, + "products": [ + { + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-46331" + "name": "CVE-2026-98699" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-52908" + "name": "CVE-2026-98701" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-52909" + "name": "CVE-2026-98702" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-52910" + "name": "CVE-2026-98704" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-52924" + "name": "CVE-2026-98706" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53145" + "name": "CVE-2026-98707" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53148" + "name": "CVE-2026-98708" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53151" + "name": "CVE-2026-98709" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53153" + "name": "CVE-2026-98712" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53159" + "name": "CVE-2026-98719" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53170" + "name": "CVE-2026-98725" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53171" + "name": "CVE-2026-98730" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53172" + "name": "CVE-2026-98733" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53173" + "name": "CVE-2026-98734" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53175" + "name": "CVE-2026-98735" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53176" + "name": "CVE-2026-98737" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53178" + "name": "CVE-2026-98738" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53182" + "name": "CVE-2026-98739" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53183" + "name": "CVE-2026-98741" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53185" + "name": "CVE-2026-98742" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53186" + "name": "CVE-2026-98752" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53192" + "name": "CVE-2026-98754" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53193" + "name": "CVE-2026-98763" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53196" + "name": "CVE-2026-98776" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53198" + "name": "CVE-2026-98788" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53212" + "name": "CVE-2026-98792" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53215" + "name": "CVE-2026-98794" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53224" + "name": "CVE-2026-98797" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53235" + "name": "CVE-2026-98799" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53239" + "name": "CVE-2026-98800" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53240" + "name": "CVE-2026-98803" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53250" + "name": "CVE-2026-98804" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53254" + "name": "CVE-2026-98805" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53256" + "name": "CVE-2026-98813" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53259" + "name": "CVE-2026-98823" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53260" + "name": "CVE-2026-98824" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53262" + "name": "CVE-2026-98827" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53264" + "name": "CVE-2026-98829" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53266" + "name": "CVE-2026-98836" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53269" + "name": "CVE-2026-98837" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53270" + "name": "CVE-2026-98846" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53275" + "name": "CVE-2026-98858" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53276" + "name": "CVE-2026-98861" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-53359" + "name": "CVE-2026-98862" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." }, { "vulnerability": { - "name": "CVE-2026-64531" + "name": "CVE-2026-98863" }, "products": [ { - "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-29.29?arch=amd64&distro=ubuntu-26.04" + "@id": "pkg:deb/ubuntu/linux-libc-dev@7.0.0-38.38?arch=amd64&distro=ubuntu-26.04" } ], "status": "not_affected", "justification": "vulnerable_code_not_present", - "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. The builder contains no Linux kernel image or module package and is never shipped or run as the product. The independently scanned external-dns-sync binary and runtime image report zero Critical or High findings." + "impact_statement": "linux-libc-dev is present only in the disposable external-dns-sync Dapper builder as user-space API headers required by libc6-dev for GCC and Go race tests. No Linux kernel image, module package, or executable kernel implementation is included. The gate verifies this package/content boundary and independently requires the product binary and runtime image to have zero Critical or High findings without these exemptions." } ] } diff --git a/security/install-ubuntu-security-updates.sh b/security/install-ubuntu-security-updates.sh new file mode 100644 index 00000000..054c8935 --- /dev/null +++ b/security/install-ubuntu-security-updates.sh @@ -0,0 +1,51 @@ +#!/bin/sh +# Same-series official micro-updates. Never install a package just for a scan. +set -eu +test "$#" -eq 2 || { echo 'usage: security-updates LOCK TRUSTED_CA_BUNDLE' >&2; exit 2; } +lock=$1 +trusted_ca=$2 +. /etc/os-release +test "$ID:$VERSION_ID" = ubuntu:26.04 +test -s "$lock" +test -s "$trusted_ca" +tmp=$(mktemp -d) +trap 'rm -rf "$tmp"' EXIT HUP INT TERM +dpkg-query -W -f='${binary:Package}\t${db:Status-Status}\n' | LC_ALL=C sort > "$tmp/before" +set -- +while IFS= read -r entry || test -n "$entry"; do + case "$entry" in ''|'#'*) continue;; esac + case "$entry" in *[!a-zA-Z0-9.:+~=_-]*) echo "Invalid lock entry" >&2; exit 1;; esac + package=${entry%%=*} + version=${entry#*=} + test "$package" != "$version" + status=$(dpkg-query -W -f='${db:Status-Status}' "$package" 2>/dev/null || true) + test "$status" = installed || continue + installed=$(dpkg-query -W -f='${Version}' "$package") + # A newer base may already contain the fix; never downgrade it. + dpkg --compare-versions "$installed" ge "$version" && continue + set -- "$@" "$entry" +done < "$lock" +if test "$#" -gt 0; then + printf 'Types: deb\nURIs: https://snapshot.ubuntu.com/ubuntu/20261023T000000Z\nSuites: resolute-updates resolute-security\nComponents: main\nSigned-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg\nSnapshot: no\n' > "$tmp/security.sources" + apt_security() { + apt-get -o Dir::Etc::sourcelist="$tmp/security.sources" \ + -o Dir::Etc::sourceparts=- -o Acquire::https::CaInfo="$trusted_ca" \ + -o Acquire::https::Verify-Peer=true -o Acquire::https::Verify-Host=true \ + -o Acquire::AllowInsecureRepositories=false -o APT::Get::AllowUnauthenticated=false \ + -o Acquire::Retries=5 "$@" + } + apt_security update + DEBIAN_FRONTEND=noninteractive apt_security install -y --only-upgrade --no-install-recommends --no-remove "$@" +fi +while IFS= read -r entry || test -n "$entry"; do + case "$entry" in ''|'#'*) continue;; esac + package=${entry%%=*} + version=${entry#*=} + status=$(dpkg-query -W -f='${db:Status-Status}' "$package" 2>/dev/null || true) + test "$status" = installed || continue + dpkg --compare-versions "$(dpkg-query -W -f='${Version}' "$package")" ge "$version" +done < "$lock" +dpkg-query -W -f='${binary:Package}\t${db:Status-Status}\n' | LC_ALL=C sort > "$tmp/after" +# A security micro-update must not add/remove packages or change installed status. +cmp "$tmp/before" "$tmp/after" +printf 'UBUNTU_SECURITY_MICRO_UPDATES_OK\n' diff --git a/security/ubuntu-security-packages.lock b/security/ubuntu-security-packages.lock new file mode 100644 index 00000000..848640b9 --- /dev/null +++ b/security/ubuntu-security-packages.lock @@ -0,0 +1,38 @@ +# Official Ubuntu 26.04 security/updates snapshot: 20261023T000000Z +# Existing packages only; ABI series and unrelated packages are preserved. +bsdutils=1:2.41.3-3ubuntu2.2 +curl=8.18.0-1ubuntu2.8 +diffutils=1:3.12-1ubuntu0.1 +gnu-coreutils=9.7-3ubuntu2.1 +gpgv=2.4.8-4ubuntu3.1 +libattr1=1:2.5.2-4ubuntu0.1 +libblkid1=2.41.3-3ubuntu2.2 +libbz2-1.0=1.0.8-6ubuntu0.1 +libc-bin=2.43-2ubuntu2.4 +libc-gconv-modules-extra=2.43-2ubuntu2.4 +libc6=2.43-2ubuntu2.4 +libc6-dev=2.43-2ubuntu2.4 +libcurl4t64=8.18.0-1ubuntu2.8 +libgcrypt20=1.12.0-2ubuntu1.1 +libmount1=2.41.3-3ubuntu2.2 +libperl5.40=5.40.1-7ubuntu0.3 +libsmartcols1=2.41.3-3ubuntu2.2 +libssh2-1t64=1.11.1-1ubuntu0.26.04.4 +libssl3t64=3.5.5-1ubuntu3.7 +libuuid1=2.41.3-3ubuntu2.2 +linux-libc-dev=7.0.0-38.38 +login=1:4.16.0-2+really2.41.3-3ubuntu2.2 +mount=2.41.3-3ubuntu2.2 +openssl=3.5.5-1ubuntu3.7 +openssl-provider-legacy=3.5.5-1ubuntu3.7 +perl=5.40.1-7ubuntu0.3 +perl-base=5.40.1-7ubuntu0.3 +perl-modules-5.40=5.40.1-7ubuntu0.3 +util-linux=2.41.3-3ubuntu2.2 +zlib1g=1:1.3.dfsg+really1.3.1-1ubuntu3.2 +curl=8.18.0-1ubuntu2.8 +libcurl4t64=8.18.0-1ubuntu2.8 +libssh2-1t64=1.11.1-1ubuntu0.26.04.4 +libcurl3t64-gnutls=8.18.0-1ubuntu2.8 +libc-dev-bin=2.43-2ubuntu2.4 +libexpat1=2.7.4-1ubuntu0.2 diff --git a/ubuntu-apt.lock b/ubuntu-apt.lock index 18777af2..cd5583f4 100644 --- a/ubuntu-apt.lock +++ b/ubuntu-apt.lock @@ -4,7 +4,7 @@ UBUNTU_APT_SNAPSHOT='20260808T000000Z' UBUNTU_APT_BASH_VERSION='5.3-2ubuntu1' -UBUNTU_APT_CA_CERTIFICATES_VERSION='20260601~26.04.1' +UBUNTU_APT_CA_CERTIFICATES_VERSION='20260816ubuntu0.26.04.1' UBUNTU_APT_CURL_VERSION='8.18.0-1ubuntu2.3' UBUNTU_APT_FILE_VERSION='1:5.46-5build2' UBUNTU_APT_GCC_VERSION='4:15.2.0-5ubuntu1' diff --git a/vendor/golang.org/x/sys/unix/ifreq_linux.go b/vendor/golang.org/x/sys/unix/ifreq_linux.go index 309f5a2b..3f7fa766 100644 --- a/vendor/golang.org/x/sys/unix/ifreq_linux.go +++ b/vendor/golang.org/x/sys/unix/ifreq_linux.go @@ -22,7 +22,13 @@ import ( // fields can be get and set using the following methods: // - Uint16/SetUint16: flags // - Uint32/SetUint32: ifindex, metric, mtu -type Ifreq struct{ raw ifreq } +type Ifreq struct { + // Aligns the union for the accessors below, which cast it in place; + // the generated ifreq is all byte arrays, so its alignment is one. + _ [0]int64 + + raw ifreq +} // NewIfreq creates an Ifreq with the input network interface name after // validating the name does not exceed IFNAMSIZ-1 (trailing NULL required) diff --git a/vendor/golang.org/x/sys/unix/ioctl_linux.go b/vendor/golang.org/x/sys/unix/ioctl_linux.go index 7ca4fa12..5589d4f6 100644 --- a/vendor/golang.org/x/sys/unix/ioctl_linux.go +++ b/vendor/golang.org/x/sys/unix/ioctl_linux.go @@ -332,3 +332,10 @@ func IoctlLoopSetStatus64(fd int, value *LoopInfo64) error { func IoctlLoopConfigure(fd int, value *LoopConfig) error { return ioctlPtr(fd, LOOP_CONFIGURE, unsafe.Pointer(value)) } + +// IoctlPidfdInfo fetches information about a pidfd. +// The Mask field of the info argument indicates which +// values to fetch. +func IoctlPidfdInfo(fd int, info *PidfdInfo) error { + return ioctlPtr(fd, PIDFD_GET_INFO, unsafe.Pointer(info)) +} diff --git a/vendor/golang.org/x/sys/unix/mkerrors.sh b/vendor/golang.org/x/sys/unix/mkerrors.sh index fa74cfe9..9e907ac2 100644 --- a/vendor/golang.org/x/sys/unix/mkerrors.sh +++ b/vendor/golang.org/x/sys/unix/mkerrors.sh @@ -290,14 +290,7 @@ struct ltchars { #include #include -#if defined(__sparc__) -// On sparc{,64}, the kernel defines struct termios2 itself which clashes with the -// definition in glibc. As only the error constants are needed here, include the -// generic termibits.h (which is included by termbits.h on sparc). -#include -#else #include -#endif #ifndef PTRACE_GETREGS #define PTRACE_GETREGS 0xc @@ -544,7 +537,7 @@ ccflags="$@" $2 ~ /^LO_(KEY|NAME)_SIZE$/ || $2 ~ /^LOOP_(CLR|CTL|GET|SET)_/ || $2 == "LOOP_CONFIGURE" || - $2 ~ /^(AF|SOCK|SO|SOL|IPPROTO|IP|IPV6|TCP|MCAST|EVFILT|NOTE|SHUT|PROT|MAP|MREMAP|MFD|T?PACKET|MSG|SCM|MCL|DT|MADV|PR|LOCAL|TCPOPT|UDP)_/ || + $2 ~ /^(AF|SOCK|SO|SOL|IPPROTO|IP|IPV6|TCP|MCAST|EVFILT|NOTE|SHUT|PROT|MAP|MREMAP|MFD|MLOCK|T?PACKET|MSG|SCM|MCL|DT|MADV|PR|LOCAL|TCPOPT|UDP)_/ || $2 ~ /^NFC_(GENL|PROTO|COMM|RF|SE|DIRECTION|LLCP|SOCKPROTO)_/ || $2 ~ /^NFC_.*_(MAX)?SIZE$/ || $2 ~ /^PTP_/ || diff --git a/vendor/golang.org/x/sys/unix/syscall.go b/vendor/golang.org/x/sys/unix/syscall.go index 5ea74da9..8f27e7ec 100644 --- a/vendor/golang.org/x/sys/unix/syscall.go +++ b/vendor/golang.org/x/sys/unix/syscall.go @@ -76,7 +76,7 @@ func BytePtrToString(p *byte) string { // Find NUL terminator. n := 0 for ptr := unsafe.Pointer(p); *(*byte)(ptr) != 0; n++ { - ptr = unsafe.Pointer(uintptr(ptr) + 1) + ptr = unsafe.Add(ptr, 1) } return string(unsafe.Slice(p, n)) diff --git a/vendor/golang.org/x/sys/unix/syscall_bsd.go b/vendor/golang.org/x/sys/unix/syscall_bsd.go index a00c3e54..035c2cd9 100644 --- a/vendor/golang.org/x/sys/unix/syscall_bsd.go +++ b/vendor/golang.org/x/sys/unix/syscall_bsd.go @@ -188,7 +188,7 @@ func (sa *SockaddrUnix) sockaddr() (unsafe.Pointer, _Socklen, error) { } sa.raw.Len = byte(3 + n) // 2 for Family, Len; 1 for NUL sa.raw.Family = AF_UNIX - for i := 0; i < n; i++ { + for i := range n { sa.raw.Path[i] = int8(name[i]) } return unsafe.Pointer(&sa.raw), _Socklen(sa.raw.Len), nil diff --git a/vendor/golang.org/x/sys/unix/syscall_linux.go b/vendor/golang.org/x/sys/unix/syscall_linux.go index 21e2bfa3..6926057e 100644 --- a/vendor/golang.org/x/sys/unix/syscall_linux.go +++ b/vendor/golang.org/x/sys/unix/syscall_linux.go @@ -2363,7 +2363,7 @@ func (fh *FileHandle) Bytes() []byte { if n == 0 { return nil } - return unsafe.Slice((*byte)(unsafe.Pointer(uintptr(unsafe.Pointer(&fh.fileHandle.Type))+4)), n) + return unsafe.Slice((*byte)(unsafe.Add(unsafe.Pointer(&fh.fileHandle.Type), 4)), n) } // NameToHandleAt wraps the name_to_handle_at system call; it obtains diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux.go b/vendor/golang.org/x/sys/unix/zerrors_linux.go index 5bb51d7a..45feb124 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux.go @@ -2048,6 +2048,7 @@ const ( MINIX3_SUPER_MAGIC = 0x4d5a MINIX_SUPER_MAGIC = 0x137f MINIX_SUPER_MAGIC2 = 0x138f + MLOCK_ONFAULT = 0x1 MNT_DETACH = 0x2 MNT_EXPIRE = 0x4 MNT_FORCE = 0x1 @@ -3862,6 +3863,7 @@ const ( TIOCPKT_NOSTOP = 0x10 TIOCPKT_START = 0x8 TIOCPKT_STOP = 0x4 + TIOCSER_TEMT = 0x1 TIPC_ADDR_ID = 0x3 TIPC_ADDR_MCAST = 0x1 TIPC_ADDR_NAME = 0x2 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_386.go b/vendor/golang.org/x/sys/unix/zerrors_linux_386.go index c0a8ea1d..6f74d4a0 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_386.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_386.go @@ -483,7 +483,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETD = 0x5423 TIOCSIG = 0x40045436 TIOCSISO7816 = 0xc0285443 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go b/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go index ff927c83..36c1f0b6 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go @@ -484,7 +484,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETD = 0x5423 TIOCSIG = 0x40045436 TIOCSISO7816 = 0xc0285443 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go b/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go index 55294eda..c5512dbe 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_arm.go @@ -489,7 +489,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETD = 0x5423 TIOCSIG = 0x40045436 TIOCSISO7816 = 0xc0285443 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go b/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go index 5dac54c3..4dabfae0 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go @@ -483,7 +483,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETD = 0x5423 TIOCSIG = 0x40045436 TIOCSISO7816 = 0xc0285443 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_loong64.go b/vendor/golang.org/x/sys/unix/zerrors_linux_loong64.go index 46ac1fcb..ea97930f 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_loong64.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_loong64.go @@ -476,7 +476,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETD = 0x5423 TIOCSIG = 0x40045436 TIOCSISO7816 = 0xc0285443 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go b/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go index b55483e8..0826a929 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_mips.go @@ -481,7 +481,6 @@ const ( TIOCSERGWILD = 0x5489 TIOCSERSETMULTI = 0x5490 TIOCSERSWILD = 0x548a - TIOCSER_TEMT = 0x1 TIOCSETD = 0x7401 TIOCSETN = 0x740a TIOCSETP = 0x7409 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go b/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go index 71890c98..139deedd 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go @@ -481,7 +481,6 @@ const ( TIOCSERGWILD = 0x5489 TIOCSERSETMULTI = 0x5490 TIOCSERSWILD = 0x548a - TIOCSER_TEMT = 0x1 TIOCSETD = 0x7401 TIOCSETN = 0x740a TIOCSETP = 0x7409 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go b/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go index a78b6cc1..b8018af3 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go @@ -481,7 +481,6 @@ const ( TIOCSERGWILD = 0x5489 TIOCSERSETMULTI = 0x5490 TIOCSERSWILD = 0x548a - TIOCSER_TEMT = 0x1 TIOCSETD = 0x7401 TIOCSETN = 0x740a TIOCSETP = 0x7409 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go b/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go index d0e38ca7..deb5c2e6 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go @@ -481,7 +481,6 @@ const ( TIOCSERGWILD = 0x5489 TIOCSERSETMULTI = 0x5490 TIOCSERSWILD = 0x548a - TIOCSER_TEMT = 0x1 TIOCSETD = 0x7401 TIOCSETN = 0x740a TIOCSETP = 0x7409 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_ppc.go b/vendor/golang.org/x/sys/unix/zerrors_linux_ppc.go index c883e14c..0603bf3a 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_ppc.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_ppc.go @@ -535,7 +535,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETC = 0x80067411 TIOCSETD = 0x5423 TIOCSETN = 0x8006740a diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go b/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go index 1834273d..5fa8a5d3 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go @@ -539,7 +539,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETC = 0x80067411 TIOCSETD = 0x5423 TIOCSETN = 0x8006740a diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go b/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go index 39945dd9..2733e999 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go @@ -539,7 +539,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETC = 0x80067411 TIOCSETD = 0x5423 TIOCSETN = 0x8006740a diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go b/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go index bc0f3724..1470172f 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go @@ -486,7 +486,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETD = 0x5423 TIOCSIG = 0x40045436 TIOCSISO7816 = 0xc0285443 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go b/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go index 6e87bd65..1871579c 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go @@ -545,7 +545,6 @@ const ( TIOCSERGWILD = 0x5454 TIOCSERSETMULTI = 0x545b TIOCSERSWILD = 0x5455 - TIOCSER_TEMT = 0x1 TIOCSETD = 0x5423 TIOCSIG = 0x40045436 TIOCSISO7816 = 0xc0285443 diff --git a/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go b/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go index 7e2b2e8a..10881cf6 100644 --- a/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go +++ b/vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go @@ -14,21 +14,21 @@ const ( ASI_LEON_DFLUSH = 0x11 ASI_LEON_IFLUSH = 0x10 ASI_LEON_MMUFLUSH = 0x18 - B1000000 = 0x1008 + B1000000 = 0x100c B115200 = 0x1002 - B1152000 = 0x1009 - B1500000 = 0x100a - B2000000 = 0x100b + B1152000 = 0x100d + B1500000 = 0x100e + B153600 = 0x1006 + B2000000 = 0x100f B230400 = 0x1003 - B2500000 = 0x100c - B3000000 = 0x100d - B3500000 = 0x100e - B4000000 = 0x100f + B307200 = 0x1007 B460800 = 0x1004 - B500000 = 0x1005 + B500000 = 0x100a B57600 = 0x1001 - B576000 = 0x1006 - B921600 = 0x1007 + B576000 = 0x100b + B614400 = 0x1008 + B76800 = 0x1005 + B921600 = 0x1009 BLKALIGNOFF = 0x2000127a BLKBSZGET = 0x40081270 BLKBSZSET = 0x80081271 @@ -91,7 +91,7 @@ const ( FFDLY = 0x8000 FICLONE = 0x80049409 FICLONERANGE = 0x8020940d - FLUSHO = 0x1000 + FLUSHO = 0x2000 FS_IOC_ENABLE_VERITY = 0x80806685 FS_IOC_GETFLAGS = 0x40086601 FS_IOC_GET_ENCRYPTION_NONCE = 0x4010661b @@ -563,6 +563,9 @@ const ( TIOCM_CD = 0x40 TIOCM_CTS = 0x20 TIOCM_DSR = 0x100 + TIOCM_LOOP = 0x8000 + TIOCM_OUT1 = 0x2000 + TIOCM_OUT2 = 0x4000 TIOCM_RI = 0x80 TIOCM_RNG = 0x80 TIOCM_SR = 0x10 @@ -641,10 +644,11 @@ const ( UBI_IOCVOLRMBLK = 0x20004f08 UBI_IOCVOLUP = 0x80084f00 VDISCARD = 0xd + VDSUSP = 0xb VEOF = 0x4 - VEOL = 0xb - VEOL2 = 0x10 - VMIN = 0x6 + VEOL = 0x5 + VEOL2 = 0x6 + VMIN = 0x4 VREPRINT = 0xc VSTART = 0x8 VSTOP = 0x9 @@ -664,6 +668,7 @@ const ( WDIOC_KEEPALIVE = 0x40045705 WDIOC_SETOPTIONS = 0x40045704 WORDSIZE = 0x40 + WRAP = 0x20000 XCASE = 0x4 XTABS = 0x1800 _HIDIOCGRAWNAME = 0x40804804 diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux.go b/vendor/golang.org/x/sys/unix/ztypes_linux.go index 526a0d5f..538a18f2 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux.go @@ -4264,19 +4264,29 @@ type HwTstampConfig struct { } const ( - HWTSTAMP_FILTER_NONE = 0x0 - HWTSTAMP_FILTER_ALL = 0x1 - HWTSTAMP_FILTER_SOME = 0x2 - HWTSTAMP_FILTER_PTP_V1_L4_EVENT = 0x3 - HWTSTAMP_FILTER_PTP_V2_L4_EVENT = 0x6 - HWTSTAMP_FILTER_PTP_V2_L2_EVENT = 0x9 - HWTSTAMP_FILTER_PTP_V2_EVENT = 0xc + HWTSTAMP_FILTER_NONE = 0x0 + HWTSTAMP_FILTER_ALL = 0x1 + HWTSTAMP_FILTER_SOME = 0x2 + HWTSTAMP_FILTER_PTP_V1_L4_EVENT = 0x3 + HWTSTAMP_FILTER_PTP_V1_L4_SYNC = 0x4 + HWTSTAMP_FILTER_PTP_V1_L4_DELAY_REQ = 0x5 + HWTSTAMP_FILTER_PTP_V2_L4_EVENT = 0x6 + HWTSTAMP_FILTER_PTP_V2_L4_SYNC = 0x7 + HWTSTAMP_FILTER_PTP_V2_L4_DELAY_REQ = 0x8 + HWTSTAMP_FILTER_PTP_V2_L2_EVENT = 0x9 + HWTSTAMP_FILTER_PTP_V2_L2_SYNC = 0xa + HWTSTAMP_FILTER_PTP_V2_L2_DELAY_REQ = 0xb + HWTSTAMP_FILTER_PTP_V2_EVENT = 0xc + HWTSTAMP_FILTER_PTP_V2_SYNC = 0xd + HWTSTAMP_FILTER_PTP_V2_DELAY_REQ = 0xe + HWTSTAMP_FILTER_NTP_ALL = 0xf ) const ( HWTSTAMP_TX_OFF = 0x0 HWTSTAMP_TX_ON = 0x1 HWTSTAMP_TX_ONESTEP_SYNC = 0x2 + HWTSTAMP_TX_ONESTEP_P2P = 0x3 ) type ( @@ -4541,6 +4551,48 @@ const ( LANDLOCK_RULE_PATH_BENEATH = 0x1 ) +const ( + PIDFD_SIGNAL_THREAD = 0x1 + PIDFD_SIGNAL_THREAD_GROUP = 0x2 + PIDFD_SIGNAL_PROCESS_GROUP = 0x4 + PIDFD_SELF_THREAD = -0x2710 + PIDFD_SELF_THREAD_GROUP = -0x2711 + PIDFD_SELF = -0x2710 + PIDFD_SELF_PROCESS = -0x2711 + PIDFD_INFO_PID = 0x1 + PIDFD_INFO_CREDS = 0x2 + PIDFD_INFO_CGROUPID = 0x4 + PIDFD_INFO_EXIT = 0x8 + PIDFD_INFO_COREDUMP = 0x10 + PIDFD_COREDUMPED = 0x1 + PIDFD_COREDUMP_SKIP = 0x2 + PIDFD_COREDUMP_USER = 0x4 + PIDFD_COREDUMP_ROOT = 0x8 + PIDFD_INFO_SIZE_VER0 = 0x40 + PIDFD_GET_INFO = 0xc048ff0b +) + +const SizeofPidfdInfo = 0x48 + +type PidfdInfo struct { + Mask uint64 + Cgroupid uint64 + Pid uint32 + Tgid uint32 + Ppid uint32 + Ruid uint32 + Rgid uint32 + Euid uint32 + Egid uint32 + Suid uint32 + Sgid uint32 + Fsuid uint32 + Fsgid uint32 + Exit_code int32 + Coredump_mask uint32 + _ uint32 +} + const ( IPC_CREAT = 0x200 IPC_EXCL = 0x400 @@ -6473,3 +6525,23 @@ type GPIOV2LineEvent struct { Line_seqno uint32 _ [6]uint32 } + +const ( + IPMI_MAX_ADDR_SIZE = 0x20 + IPMI_SYSTEM_INTERFACE_ADDR_TYPE = 0xc + IPMI_BMC_CHANNEL = 0xf + IPMI_RESPONSE_RECV_TYPE = 0x1 +) + +type IPMISystemInterfaceAddr struct { + Type int32 + Channel int16 + Lun uint8 + _ [1]byte +} +type IPMIMsg struct { + Netfn uint8 + Cmd uint8 + Len uint16 + Data *uint8 +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_386.go b/vendor/golang.org/x/sys/unix/ztypes_linux_386.go index aede1de7..38658a34 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_386.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_386.go @@ -680,7 +680,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0xff01 + PIDFD_GET_IPC_NAMESPACE = 0xff02 + PIDFD_GET_MNT_NAMESPACE = 0xff03 + PIDFD_GET_NET_NAMESPACE = 0xff04 + PIDFD_GET_PID_NAMESPACE = 0xff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0xff06 + PIDFD_GET_TIME_NAMESPACE = 0xff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0xff08 + PIDFD_GET_USER_NAMESPACE = 0xff09 + PIDFD_GET_UTS_NAMESPACE = 0xff0a ) type SysvIpcPerm struct { @@ -715,3 +726,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x8044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x8014690d + IPMICTL_RECEIVE_MSG = 0xc018690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int32 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int32 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go b/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go index bb3bc4dc..267ffe05 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go @@ -697,7 +697,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0xff01 + PIDFD_GET_IPC_NAMESPACE = 0xff02 + PIDFD_GET_MNT_NAMESPACE = 0xff03 + PIDFD_GET_NET_NAMESPACE = 0xff04 + PIDFD_GET_PID_NAMESPACE = 0xff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0xff06 + PIDFD_GET_TIME_NAMESPACE = 0xff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0xff08 + PIDFD_GET_USER_NAMESPACE = 0xff09 + PIDFD_GET_UTS_NAMESPACE = 0xff0a ) type SysvIpcPerm struct { @@ -729,3 +740,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x8044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x8028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go b/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go index 1fdf4c51..ec459d5f 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_arm.go @@ -674,7 +674,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0xff01 + PIDFD_GET_IPC_NAMESPACE = 0xff02 + PIDFD_GET_MNT_NAMESPACE = 0xff03 + PIDFD_GET_NET_NAMESPACE = 0xff04 + PIDFD_GET_PID_NAMESPACE = 0xff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0xff06 + PIDFD_GET_TIME_NAMESPACE = 0xff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0xff08 + PIDFD_GET_USER_NAMESPACE = 0xff09 + PIDFD_GET_UTS_NAMESPACE = 0xff0a ) type SysvIpcPerm struct { @@ -709,3 +720,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x8044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x8014690d + IPMICTL_RECEIVE_MSG = 0xc018690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int32 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int32 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go b/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go index 063e6f0b..fa45ab7d 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go @@ -676,7 +676,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0xff01 + PIDFD_GET_IPC_NAMESPACE = 0xff02 + PIDFD_GET_MNT_NAMESPACE = 0xff03 + PIDFD_GET_NET_NAMESPACE = 0xff04 + PIDFD_GET_PID_NAMESPACE = 0xff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0xff06 + PIDFD_GET_TIME_NAMESPACE = 0xff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0xff08 + PIDFD_GET_USER_NAMESPACE = 0xff09 + PIDFD_GET_UTS_NAMESPACE = 0xff0a ) type SysvIpcPerm struct { @@ -708,3 +719,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x8044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x8028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_loong64.go b/vendor/golang.org/x/sys/unix/ztypes_linux_loong64.go index 9cf836c7..3da72ccd 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_loong64.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_loong64.go @@ -677,7 +677,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0xff01 + PIDFD_GET_IPC_NAMESPACE = 0xff02 + PIDFD_GET_MNT_NAMESPACE = 0xff03 + PIDFD_GET_NET_NAMESPACE = 0xff04 + PIDFD_GET_PID_NAMESPACE = 0xff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0xff06 + PIDFD_GET_TIME_NAMESPACE = 0xff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0xff08 + PIDFD_GET_USER_NAMESPACE = 0xff09 + PIDFD_GET_UTS_NAMESPACE = 0xff0a ) type SysvIpcPerm struct { @@ -709,3 +720,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x8044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x8028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go b/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go index 1d222fcb..78f8c6d5 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_mips.go @@ -680,7 +680,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x80 + PIDFD_NONBLOCK = 0x80 + PIDFD_THREAD = 0x400 + PIDFD_GET_CGROUP_NAMESPACE = 0x2000ff01 + PIDFD_GET_IPC_NAMESPACE = 0x2000ff02 + PIDFD_GET_MNT_NAMESPACE = 0x2000ff03 + PIDFD_GET_NET_NAMESPACE = 0x2000ff04 + PIDFD_GET_PID_NAMESPACE = 0x2000ff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0x2000ff06 + PIDFD_GET_TIME_NAMESPACE = 0x2000ff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0x2000ff08 + PIDFD_GET_USER_NAMESPACE = 0x2000ff09 + PIDFD_GET_UTS_NAMESPACE = 0x2000ff0a ) type SysvIpcPerm struct { @@ -714,3 +725,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x4044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x4014690d + IPMICTL_RECEIVE_MSG = 0xc018690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int32 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int32 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go b/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go index 912cc4ab..bbd4c6c2 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go @@ -679,7 +679,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x80 + PIDFD_NONBLOCK = 0x80 + PIDFD_THREAD = 0x400 + PIDFD_GET_CGROUP_NAMESPACE = 0x2000ff01 + PIDFD_GET_IPC_NAMESPACE = 0x2000ff02 + PIDFD_GET_MNT_NAMESPACE = 0x2000ff03 + PIDFD_GET_NET_NAMESPACE = 0x2000ff04 + PIDFD_GET_PID_NAMESPACE = 0x2000ff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0x2000ff06 + PIDFD_GET_TIME_NAMESPACE = 0x2000ff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0x2000ff08 + PIDFD_GET_USER_NAMESPACE = 0x2000ff09 + PIDFD_GET_UTS_NAMESPACE = 0x2000ff0a ) type SysvIpcPerm struct { @@ -711,3 +722,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x4044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x4028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go b/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go index 1e358ef3..644d31d6 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go @@ -679,7 +679,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x80 + PIDFD_NONBLOCK = 0x80 + PIDFD_THREAD = 0x400 + PIDFD_GET_CGROUP_NAMESPACE = 0x2000ff01 + PIDFD_GET_IPC_NAMESPACE = 0x2000ff02 + PIDFD_GET_MNT_NAMESPACE = 0x2000ff03 + PIDFD_GET_NET_NAMESPACE = 0x2000ff04 + PIDFD_GET_PID_NAMESPACE = 0x2000ff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0x2000ff06 + PIDFD_GET_TIME_NAMESPACE = 0x2000ff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0x2000ff08 + PIDFD_GET_USER_NAMESPACE = 0x2000ff09 + PIDFD_GET_UTS_NAMESPACE = 0x2000ff0a ) type SysvIpcPerm struct { @@ -711,3 +722,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x4044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x4028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go b/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go index df59f32f..a976f626 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go @@ -680,7 +680,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x80 + PIDFD_NONBLOCK = 0x80 + PIDFD_THREAD = 0x400 + PIDFD_GET_CGROUP_NAMESPACE = 0x2000ff01 + PIDFD_GET_IPC_NAMESPACE = 0x2000ff02 + PIDFD_GET_MNT_NAMESPACE = 0x2000ff03 + PIDFD_GET_NET_NAMESPACE = 0x2000ff04 + PIDFD_GET_PID_NAMESPACE = 0x2000ff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0x2000ff06 + PIDFD_GET_TIME_NAMESPACE = 0x2000ff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0x2000ff08 + PIDFD_GET_USER_NAMESPACE = 0x2000ff09 + PIDFD_GET_UTS_NAMESPACE = 0x2000ff0a ) type SysvIpcPerm struct { @@ -714,3 +725,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x4044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x4014690d + IPMICTL_RECEIVE_MSG = 0xc018690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int32 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int32 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_ppc.go b/vendor/golang.org/x/sys/unix/ztypes_linux_ppc.go index 29355aa0..46324695 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_ppc.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_ppc.go @@ -686,7 +686,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0x2000ff01 + PIDFD_GET_IPC_NAMESPACE = 0x2000ff02 + PIDFD_GET_MNT_NAMESPACE = 0x2000ff03 + PIDFD_GET_NET_NAMESPACE = 0x2000ff04 + PIDFD_GET_PID_NAMESPACE = 0x2000ff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0x2000ff06 + PIDFD_GET_TIME_NAMESPACE = 0x2000ff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0x2000ff08 + PIDFD_GET_USER_NAMESPACE = 0x2000ff09 + PIDFD_GET_UTS_NAMESPACE = 0x2000ff0a ) type SysvIpcPerm struct { @@ -722,3 +733,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x4044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x4014690d + IPMICTL_RECEIVE_MSG = 0xc018690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int32 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int32 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go b/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go index c6083a15..cbc30397 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go @@ -686,7 +686,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0x2000ff01 + PIDFD_GET_IPC_NAMESPACE = 0x2000ff02 + PIDFD_GET_MNT_NAMESPACE = 0x2000ff03 + PIDFD_GET_NET_NAMESPACE = 0x2000ff04 + PIDFD_GET_PID_NAMESPACE = 0x2000ff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0x2000ff06 + PIDFD_GET_TIME_NAMESPACE = 0x2000ff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0x2000ff08 + PIDFD_GET_USER_NAMESPACE = 0x2000ff09 + PIDFD_GET_UTS_NAMESPACE = 0x2000ff0a ) type SysvIpcPerm struct { @@ -717,3 +728,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x4044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x4028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go b/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go index 6321cc76..b47f7b49 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go @@ -686,7 +686,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0x2000ff01 + PIDFD_GET_IPC_NAMESPACE = 0x2000ff02 + PIDFD_GET_MNT_NAMESPACE = 0x2000ff03 + PIDFD_GET_NET_NAMESPACE = 0x2000ff04 + PIDFD_GET_PID_NAMESPACE = 0x2000ff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0x2000ff06 + PIDFD_GET_TIME_NAMESPACE = 0x2000ff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0x2000ff08 + PIDFD_GET_USER_NAMESPACE = 0x2000ff09 + PIDFD_GET_UTS_NAMESPACE = 0x2000ff0a ) type SysvIpcPerm struct { @@ -717,3 +728,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x4044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x4028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go b/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go index b44f402f..cb16add5 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go @@ -704,7 +704,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0xff01 + PIDFD_GET_IPC_NAMESPACE = 0xff02 + PIDFD_GET_MNT_NAMESPACE = 0xff03 + PIDFD_GET_NET_NAMESPACE = 0xff04 + PIDFD_GET_PID_NAMESPACE = 0xff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0xff06 + PIDFD_GET_TIME_NAMESPACE = 0xff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0xff08 + PIDFD_GET_USER_NAMESPACE = 0xff09 + PIDFD_GET_UTS_NAMESPACE = 0xff0a ) type SysvIpcPerm struct { @@ -796,3 +807,22 @@ const ( const ( GPIO_GET_CHIPINFO_IOCTL = 0x8044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x8028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go b/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go index b22c795a..a57ab8fa 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go @@ -700,7 +700,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x800 + PIDFD_NONBLOCK = 0x800 + PIDFD_THREAD = 0x80 + PIDFD_GET_CGROUP_NAMESPACE = 0xff01 + PIDFD_GET_IPC_NAMESPACE = 0xff02 + PIDFD_GET_MNT_NAMESPACE = 0xff03 + PIDFD_GET_NET_NAMESPACE = 0xff04 + PIDFD_GET_PID_NAMESPACE = 0xff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0xff06 + PIDFD_GET_TIME_NAMESPACE = 0xff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0xff08 + PIDFD_GET_USER_NAMESPACE = 0xff09 + PIDFD_GET_UTS_NAMESPACE = 0xff0a ) type SysvIpcPerm struct { @@ -731,3 +742,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x8044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x8028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go b/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go index 0b18075b..bf99635d 100644 --- a/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go +++ b/vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go @@ -681,7 +681,18 @@ const ( ) const ( - PIDFD_NONBLOCK = 0x4000 + PIDFD_NONBLOCK = 0x4000 + PIDFD_THREAD = 0x800 + PIDFD_GET_CGROUP_NAMESPACE = 0x2000ff01 + PIDFD_GET_IPC_NAMESPACE = 0x2000ff02 + PIDFD_GET_MNT_NAMESPACE = 0x2000ff03 + PIDFD_GET_NET_NAMESPACE = 0x2000ff04 + PIDFD_GET_PID_NAMESPACE = 0x2000ff05 + PIDFD_GET_PID_FOR_CHILDREN_NAMESPACE = 0x2000ff06 + PIDFD_GET_TIME_NAMESPACE = 0x2000ff07 + PIDFD_GET_TIME_FOR_CHILDREN_NAMESPACE = 0x2000ff08 + PIDFD_GET_USER_NAMESPACE = 0x2000ff09 + PIDFD_GET_UTS_NAMESPACE = 0x2000ff0a ) type SysvIpcPerm struct { @@ -712,3 +723,22 @@ type SysvShmDesc struct { const ( GPIO_GET_CHIPINFO_IOCTL = 0x4044b401 ) + +const ( + IPMICTL_SEND_COMMAND = 0x4028690d + IPMICTL_RECEIVE_MSG = 0xc030690c +) + +type IPMIReq struct { + Addr *uint8 + Len uint32 + Msgid int64 + Msg IPMIMsg +} +type IPMIRecv struct { + Recv_type int32 + Addr *uint8 + Addr_len uint32 + Msgid int64 + Msg IPMIMsg +} diff --git a/vendor/golang.org/x/sys/windows/types_windows.go b/vendor/golang.org/x/sys/windows/types_windows.go index 75a50b31..643737d4 100644 --- a/vendor/golang.org/x/sys/windows/types_windows.go +++ b/vendor/golang.org/x/sys/windows/types_windows.go @@ -1065,6 +1065,7 @@ const ( SO_BROADCAST = 32 SO_LINGER = 128 SO_RCVBUF = 0x1002 + SO_SNDTIMEO = 0x1005 SO_RCVTIMEO = 0x1006 SO_SNDBUF = 0x1001 SO_UPDATE_ACCEPT_CONTEXT = 0x700b diff --git a/vendor/modules.txt b/vendor/modules.txt index 434231b7..c3291ea6 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -232,8 +232,8 @@ github.com/valyala/fasttemplate # github.com/waynz0r/go-powerdns v1.1.1 ## explicit github.com/waynz0r/go-powerdns -# golang.org/x/net v0.58.0 -## explicit; go 1.25.0 +# golang.org/x/net v0.60.0 +## explicit; go 1.26.0 golang.org/x/net/bpf golang.org/x/net/context golang.org/x/net/internal/iana @@ -248,8 +248,8 @@ golang.org/x/net/publicsuffix golang.org/x/oauth2 golang.org/x/oauth2/clientcredentials golang.org/x/oauth2/internal -# golang.org/x/sys v0.47.0 -## explicit; go 1.25.0 +# golang.org/x/sys v0.48.0 +## explicit; go 1.26.0 golang.org/x/sys/unix golang.org/x/sys/windows # golang.org/x/time v0.15.0