Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    BELL-CVE-2026-36849 (CVE-2026-36849)

    Vulnerability from osv_bellsoft – Published: 2026-06-19 06:12 – Updated: 2026-09-05 10:49 – Source website
    VLAI

    {
      "affected": [
        {
          "package": {
            "ecosystem": "Alpaquita:stream",
            "name": "tiff",
            "purl": "pkg:apk/alpaquita/tiff?arch=source\u0026distro=stream"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "4.4.0-r1"
                },
                {
                  "fixed": "4.7.2-r0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ]
        },
        {
          "package": {
            "ecosystem": "BellSoft Hardened Containers:stream",
            "name": "tiff",
            "purl": "pkg:apk/bellsoft-hardened-containers/tiff?arch=source\u0026distro=stream"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "4.4.0-r1"
                },
                {
                  "fixed": "4.7.2-r0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ]
        }
      ],
      "id": "BELL-CVE-2026-36849",
      "modified": "2026-09-05T10:49:21.398176Z",
      "published": "2026-06-19T06:12:41.972043Z",
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://docs.bell-sw.com/security/cves/CVE-2026-36849"
        }
      ],
      "schema_version": "1.7.4",
      "upstream": [
        "CVE-2026-36849"
      ]
    }

    OESA-2026-2834 (CVE-2026-36849)

    Vulnerability from osv_openeuler – Published: 2026-07-06 11:11 – Updated: 2026-08-06 11:11 – Source website
    VLAI
    Summary
    libtiff security update
    Details

    This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

    Security Fix(es):

    'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in libtiff v4.7.1 allows an attacker to cause a denial of service\nvia a crafted TIFF file containing a large SamplesPerPixel tag value.\n\n== Affected Versions ==\n\nlibtiff v4.7.1 and prior\n\n== Patch ==', '== References ==\n\n- CVE: CVE-2026-36849\n- Issue:', 'Regards,\nSatriyo Utomo\n(aleens-lab)'


    {
      "affected": [
        {
          "ecosystem_specific": {
            "aarch64": [
              "libtiff-4.3.0-37.oe2003sp4.aarch64.rpm",
              "libtiff-debuginfo-4.3.0-37.oe2003sp4.aarch64.rpm",
              "libtiff-debugsource-4.3.0-37.oe2003sp4.aarch64.rpm",
              "libtiff-devel-4.3.0-37.oe2003sp4.aarch64.rpm"
            ],
            "noarch": [
              "libtiff-help-4.3.0-37.oe2003sp4.noarch.rpm"
            ],
            "src": [
              "libtiff-4.3.0-37.oe2003sp4.src.rpm"
            ],
            "x86_64": [
              "libtiff-4.3.0-37.oe2003sp4.x86_64.rpm",
              "libtiff-debuginfo-4.3.0-37.oe2003sp4.x86_64.rpm",
              "libtiff-debugsource-4.3.0-37.oe2003sp4.x86_64.rpm",
              "libtiff-devel-4.3.0-37.oe2003sp4.x86_64.rpm"
            ]
          },
          "package": {
            "ecosystem": "openEuler:20.03-LTS-SP4",
            "name": "libtiff",
            "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-20.03-LTS-SP4"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.3.0-37.oe2003sp4"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ]
        }
      ],
      "database_specific": {
        "severity": "Medium"
      },
      "details": "This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\n[\u0026apos;Hi,\\n\\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\\nin libtiff.\\n\\n== Summary ==\\n\\nAn issue in libtiff v4.7.1 allows an attacker to cause a denial of service\\nvia a crafted TIFF file containing a large SamplesPerPixel tag value.\\n\\n== Affected Versions ==\\n\\nlibtiff v4.7.1 and prior\\n\\n== Patch ==\u0026apos;, \u0026apos;== References ==\\n\\n- CVE: CVE-2026-36849\\n- Issue:\u0026apos;, \u0026apos;Regards,\\nSatriyo Utomo\\n(aleens-lab)\u0026apos;](CVE-2026-36849)",
      "id": "OESA-2026-2834",
      "modified": "2026-08-06T11:11:45Z",
      "published": "2026-07-06T11:11:45Z",
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2834"
        },
        {
          "type": "ADVISORY",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-36849"
        }
      ],
      "schema_version": "1.7.2",
      "severity": [
        {
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "type": "CVSS_V3"
        }
      ],
      "summary": "libtiff security update",
      "upstream": [
        "CVE-2026-36849"
      ]
    }

    OESA-2026-2835 (CVE-2026-36849)

    Vulnerability from osv_openeuler – Published: 2026-07-06 11:11 – Updated: 2026-08-06 11:11 – Source website
    VLAI
    Summary
    libtiff security update
    Details

    This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

    Security Fix(es):

    'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in libtiff v4.7.1 allows an attacker to cause a denial of service\nvia a crafted TIFF file containing a large SamplesPerPixel tag value.\n\n== Affected Versions ==\n\nlibtiff v4.7.1 and prior\n\n== Patch ==', '== References ==\n\n- CVE: CVE-2026-36849\n- Issue:', 'Regards,\nSatriyo Utomo\n(aleens-lab)'


    {
      "affected": [
        {
          "ecosystem_specific": {
            "aarch64": [
              "libtiff-4.3.0-51.oe2203sp4.aarch64.rpm",
              "libtiff-debuginfo-4.3.0-51.oe2203sp4.aarch64.rpm",
              "libtiff-debugsource-4.3.0-51.oe2203sp4.aarch64.rpm",
              "libtiff-devel-4.3.0-51.oe2203sp4.aarch64.rpm",
              "libtiff-static-4.3.0-51.oe2203sp4.aarch64.rpm",
              "libtiff-tools-4.3.0-51.oe2203sp4.aarch64.rpm"
            ],
            "noarch": [
              "libtiff-help-4.3.0-51.oe2203sp4.noarch.rpm"
            ],
            "src": [
              "libtiff-4.3.0-51.oe2203sp4.src.rpm"
            ],
            "x86_64": [
              "libtiff-4.3.0-51.oe2203sp4.x86_64.rpm",
              "libtiff-debuginfo-4.3.0-51.oe2203sp4.x86_64.rpm",
              "libtiff-debugsource-4.3.0-51.oe2203sp4.x86_64.rpm",
              "libtiff-devel-4.3.0-51.oe2203sp4.x86_64.rpm",
              "libtiff-static-4.3.0-51.oe2203sp4.x86_64.rpm",
              "libtiff-tools-4.3.0-51.oe2203sp4.x86_64.rpm"
            ]
          },
          "package": {
            "ecosystem": "openEuler:22.03-LTS-SP4",
            "name": "libtiff",
            "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-22.03-LTS-SP4"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.3.0-51.oe2203sp4"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ]
        }
      ],
      "database_specific": {
        "severity": "Medium"
      },
      "details": "This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\n[\u0026apos;Hi,\\n\\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\\nin libtiff.\\n\\n== Summary ==\\n\\nAn issue in libtiff v4.7.1 allows an attacker to cause a denial of service\\nvia a crafted TIFF file containing a large SamplesPerPixel tag value.\\n\\n== Affected Versions ==\\n\\nlibtiff v4.7.1 and prior\\n\\n== Patch ==\u0026apos;, \u0026apos;== References ==\\n\\n- CVE: CVE-2026-36849\\n- Issue:\u0026apos;, \u0026apos;Regards,\\nSatriyo Utomo\\n(aleens-lab)\u0026apos;](CVE-2026-36849)",
      "id": "OESA-2026-2835",
      "modified": "2026-08-06T11:11:45Z",
      "published": "2026-07-06T11:11:45Z",
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2835"
        },
        {
          "type": "ADVISORY",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-36849"
        }
      ],
      "schema_version": "1.7.2",
      "severity": [
        {
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "type": "CVSS_V3"
        }
      ],
      "summary": "libtiff security update",
      "upstream": [
        "CVE-2026-36849"
      ]
    }

    OESA-2026-2836 (CVE-2026-36849)

    Vulnerability from osv_openeuler – Published: 2026-07-06 11:11 – Updated: 2026-08-06 11:11 – Source website
    VLAI
    Summary
    libtiff security update
    Details

    This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

    Security Fix(es):

    'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in libtiff v4.7.1 allows an attacker to cause a denial of service\nvia a crafted TIFF file containing a large SamplesPerPixel tag value.\n\n== Affected Versions ==\n\nlibtiff v4.7.1 and prior\n\n== Patch ==', '== References ==\n\n- CVE: CVE-2026-36849\n- Issue:', 'Regards,\nSatriyo Utomo\n(aleens-lab)'


    {
      "affected": [
        {
          "ecosystem_specific": {
            "aarch64": [
              "libtiff-4.6.0-10.oe2403sp1.aarch64.rpm",
              "libtiff-debuginfo-4.6.0-10.oe2403sp1.aarch64.rpm",
              "libtiff-debugsource-4.6.0-10.oe2403sp1.aarch64.rpm",
              "libtiff-devel-4.6.0-10.oe2403sp1.aarch64.rpm",
              "libtiff-static-4.6.0-10.oe2403sp1.aarch64.rpm",
              "libtiff-tools-4.6.0-10.oe2403sp1.aarch64.rpm"
            ],
            "noarch": [
              "libtiff-help-4.6.0-10.oe2403sp1.noarch.rpm"
            ],
            "src": [
              "libtiff-4.6.0-10.oe2403sp1.src.rpm"
            ],
            "x86_64": [
              "libtiff-4.6.0-10.oe2403sp1.x86_64.rpm",
              "libtiff-debuginfo-4.6.0-10.oe2403sp1.x86_64.rpm",
              "libtiff-debugsource-4.6.0-10.oe2403sp1.x86_64.rpm",
              "libtiff-devel-4.6.0-10.oe2403sp1.x86_64.rpm",
              "libtiff-static-4.6.0-10.oe2403sp1.x86_64.rpm",
              "libtiff-tools-4.6.0-10.oe2403sp1.x86_64.rpm"
            ]
          },
          "package": {
            "ecosystem": "openEuler:24.03-LTS-SP1",
            "name": "libtiff",
            "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-24.03-LTS-SP1"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.6.0-10.oe2403sp1"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ]
        }
      ],
      "database_specific": {
        "severity": "Medium"
      },
      "details": "This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\n[\u0026apos;Hi,\\n\\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\\nin libtiff.\\n\\n== Summary ==\\n\\nAn issue in libtiff v4.7.1 allows an attacker to cause a denial of service\\nvia a crafted TIFF file containing a large SamplesPerPixel tag value.\\n\\n== Affected Versions ==\\n\\nlibtiff v4.7.1 and prior\\n\\n== Patch ==\u0026apos;, \u0026apos;== References ==\\n\\n- CVE: CVE-2026-36849\\n- Issue:\u0026apos;, \u0026apos;Regards,\\nSatriyo Utomo\\n(aleens-lab)\u0026apos;](CVE-2026-36849)",
      "id": "OESA-2026-2836",
      "modified": "2026-08-06T11:11:45Z",
      "published": "2026-07-06T11:11:45Z",
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2836"
        },
        {
          "type": "ADVISORY",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-36849"
        }
      ],
      "schema_version": "1.7.2",
      "severity": [
        {
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "type": "CVSS_V3"
        }
      ],
      "summary": "libtiff security update",
      "upstream": [
        "CVE-2026-36849"
      ]
    }

    OESA-2026-2837 (CVE-2026-36849)

    Vulnerability from osv_openeuler – Published: 2026-07-06 11:11 – Updated: 2026-08-06 11:11 – Source website
    VLAI
    Summary
    libtiff security update
    Details

    This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

    Security Fix(es):

    'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in libtiff v4.7.1 allows an attacker to cause a denial of service\nvia a crafted TIFF file containing a large SamplesPerPixel tag value.\n\n== Affected Versions ==\n\nlibtiff v4.7.1 and prior\n\n== Patch ==', '== References ==\n\n- CVE: CVE-2026-36849\n- Issue:', 'Regards,\nSatriyo Utomo\n(aleens-lab)'


    {
      "affected": [
        {
          "ecosystem_specific": {
            "aarch64": [
              "libtiff-4.6.0-10.oe2403sp3.aarch64.rpm",
              "libtiff-debuginfo-4.6.0-10.oe2403sp3.aarch64.rpm",
              "libtiff-debugsource-4.6.0-10.oe2403sp3.aarch64.rpm",
              "libtiff-devel-4.6.0-10.oe2403sp3.aarch64.rpm",
              "libtiff-static-4.6.0-10.oe2403sp3.aarch64.rpm",
              "libtiff-tools-4.6.0-10.oe2403sp3.aarch64.rpm"
            ],
            "noarch": [
              "libtiff-help-4.6.0-10.oe2403sp3.noarch.rpm"
            ],
            "src": [
              "libtiff-4.6.0-10.oe2403sp3.src.rpm"
            ],
            "x86_64": [
              "libtiff-4.6.0-10.oe2403sp3.x86_64.rpm",
              "libtiff-debuginfo-4.6.0-10.oe2403sp3.x86_64.rpm",
              "libtiff-debugsource-4.6.0-10.oe2403sp3.x86_64.rpm",
              "libtiff-devel-4.6.0-10.oe2403sp3.x86_64.rpm",
              "libtiff-static-4.6.0-10.oe2403sp3.x86_64.rpm",
              "libtiff-tools-4.6.0-10.oe2403sp3.x86_64.rpm"
            ]
          },
          "package": {
            "ecosystem": "openEuler:24.03-LTS-SP3",
            "name": "libtiff",
            "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-24.03-LTS-SP3"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.6.0-10.oe2403sp3"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ]
        }
      ],
      "database_specific": {
        "severity": "Medium"
      },
      "details": "This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\n[\u0026apos;Hi,\\n\\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\\nin libtiff.\\n\\n== Summary ==\\n\\nAn issue in libtiff v4.7.1 allows an attacker to cause a denial of service\\nvia a crafted TIFF file containing a large SamplesPerPixel tag value.\\n\\n== Affected Versions ==\\n\\nlibtiff v4.7.1 and prior\\n\\n== Patch ==\u0026apos;, \u0026apos;== References ==\\n\\n- CVE: CVE-2026-36849\\n- Issue:\u0026apos;, \u0026apos;Regards,\\nSatriyo Utomo\\n(aleens-lab)\u0026apos;](CVE-2026-36849)",
      "id": "OESA-2026-2837",
      "modified": "2026-08-06T11:11:45Z",
      "published": "2026-07-06T11:11:45Z",
      "references": [
        {
          "type": "ADVISORY",
          "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2837"
        },
        {
          "type": "ADVISORY",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-36849"
        }
      ],
      "schema_version": "1.7.2",
      "severity": [
        {
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "type": "CVSS_V3"
        }
      ],
      "summary": "libtiff security update",
      "upstream": [
        "CVE-2026-36849"
      ]
    }

    OPENSUSE-SU-2026:11225-1

    Vulnerability from csaf_opensuse - Published: 2026-07-08 00:00 - Updated: 2026-09-17 17:13
    Summary
    libtiff-devel-32bit-4.7.2-1.1 on GA media
    Severity
    Moderate
    Scope
    2 vulnerabilities in this advisory, including CVE-2026-36849.
    CVE-2026-36849
    Recommended: 20 products
    Open the full advisory

    OPENSUSE-SU-2026:21289-1

    Vulnerability from csaf_opensuse - Published: 2026-07-10 08:42 - Updated: 2026-09-17 17:38
    Summary
    Security update for tiff
    Severity
    Important
    Scope
    3 vulnerabilities in this advisory, including CVE-2026-36849.
    CVE-2026-36849
    Recommended: 14 products
    Open the full advisory

    SUSE-SU-2026:22590-1

    Vulnerability from csaf_suse - Published: 2026-07-10 08:42 - Updated: 2026-10-12 17:26
    Summary
    Security update for tiff
    Severity
    Important
    Scope
    3 vulnerabilities in this advisory, including CVE-2026-36849.
    CVE-2026-36849
    Recommended: 4 products
    Open the full advisory

    SUSE-SU-2026:22616-1

    Vulnerability from csaf_suse - Published: 2026-07-10 08:42 - Updated: 2026-09-17 16:00
    Summary
    Security update for tiff
    Severity
    Important
    Scope
    3 vulnerabilities in this advisory, including CVE-2026-36849.
    CVE-2026-36849
    Recommended: 24 products
    Open the full advisory

    SUSE-SU-2026:22796-1

    Vulnerability from csaf_suse - Published: 2026-07-17 12:18 - Updated: 2026-09-20 18:40
    Summary
    Security update for tiff
    Severity
    Important
    Scope
    2 vulnerabilities in this advisory, including CVE-2026-36849.
    CVE-2026-36849
    Recommended: 3 products
    Open the full advisory

    SUSE-SU-2026:22886-1

    Vulnerability from csaf_suse - Published: 2026-07-21 16:29 - Updated: 2026-09-17 16:06
    Summary
    Security update for tiff
    Severity
    Important
    Scope
    2 vulnerabilities in this advisory, including CVE-2026-36849.
    CVE-2026-36849
    Recommended: 4 products
    Open the full advisory

    SUSE-SU-2026:3027-1

    Vulnerability from csaf_suse - Published: 2026-07-15 09:49 - Updated: 2026-09-17 16:31
    Summary
    Security update for tiff
    Severity
    Important
    Scope
    2 vulnerabilities in this advisory, including CVE-2026-36849.
    CVE-2026-36849
    Recommended: 60 products
    Open the full advisory

    UBUNTU-CVE-2026-36849 (CVE-2026-36849)

    Vulnerability from osv_ubuntu – Published: 2026-06-18 00:00 – Updated: 2026-09-24 15:57 – Source website
    VLAI
    Details

    [Denial of Service via large SamplesPerPixel tag]

    Severity
    N/A (UNKNOWN)

    {
      "affected": [
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "gdal-bin",
                "binary_version": "1.10.1+dfsg-5ubuntu1+esm3"
              },
              {
                "binary_name": "libgdal-java",
                "binary_version": "1.10.1+dfsg-5ubuntu1+esm3"
              },
              {
                "binary_name": "libgdal-perl",
                "binary_version": "1.10.1+dfsg-5ubuntu1+esm3"
              },
              {
                "binary_name": "libgdal1h",
                "binary_version": "1.10.1+dfsg-5ubuntu1+esm3"
              },
              {
                "binary_name": "python-gdal",
                "binary_version": "1.10.1+dfsg-5ubuntu1+esm3"
              },
              {
                "binary_name": "python3-gdal",
                "binary_version": "1.10.1+dfsg-5ubuntu1+esm3"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:14.04:LTS",
            "name": "gdal",
            "purl": "pkg:deb/ubuntu/gdal@1.10.1+dfsg-5ubuntu1+esm3?arch=source\u0026distro=esm-infra-legacy/trusty"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "1.9.0-3.1ubuntu4",
            "1.9.0-3.1ubuntu6",
            "1.10.1+dfsg-2",
            "1.10.1+dfsg-2build1",
            "1.10.1+dfsg-3",
            "1.10.1+dfsg-3build1",
            "1.10.1+dfsg-3build2",
            "1.10.1+dfsg-3ubuntu1",
            "1.10.1+dfsg-3ubuntu2",
            "1.10.1+dfsg-5ubuntu1",
            "1.10.1+dfsg-5ubuntu1+esm1",
            "1.10.1+dfsg-5ubuntu1+esm2",
            "1.10.1+dfsg-5ubuntu1+esm3"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libtiff-opengl",
                "binary_version": "4.0.3-7ubuntu0.11+esm17"
              },
              {
                "binary_name": "libtiff-tools",
                "binary_version": "4.0.3-7ubuntu0.11+esm17"
              },
              {
                "binary_name": "libtiff5",
                "binary_version": "4.0.3-7ubuntu0.11+esm17"
              },
              {
                "binary_name": "libtiffxx5",
                "binary_version": "4.0.3-7ubuntu0.11+esm17"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:14.04:LTS",
            "name": "tiff",
            "purl": "pkg:deb/ubuntu/tiff@4.0.3-7ubuntu0.11+esm17?arch=source\u0026distro=esm-infra-legacy/trusty"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.0.2-4ubuntu3",
            "4.0.3-5ubuntu1",
            "4.0.3-6",
            "4.0.3-6ubuntu1",
            "4.0.3-7",
            "4.0.3-7ubuntu0.1",
            "4.0.3-7ubuntu0.2",
            "4.0.3-7ubuntu0.3",
            "4.0.3-7ubuntu0.4",
            "4.0.3-7ubuntu0.6",
            "4.0.3-7ubuntu0.7",
            "4.0.3-7ubuntu0.8",
            "4.0.3-7ubuntu0.9",
            "4.0.3-7ubuntu0.10",
            "4.0.3-7ubuntu0.11",
            "4.0.3-7ubuntu0.11+esm1",
            "4.0.3-7ubuntu0.11+esm2",
            "4.0.3-7ubuntu0.11+esm3",
            "4.0.3-7ubuntu0.11+esm4",
            "4.0.3-7ubuntu0.11+esm5",
            "4.0.3-7ubuntu0.11+esm6",
            "4.0.3-7ubuntu0.11+esm7",
            "4.0.3-7ubuntu0.11+esm8",
            "4.0.3-7ubuntu0.11+esm9",
            "4.0.3-7ubuntu0.11+esm10",
            "4.0.3-7ubuntu0.11+esm11",
            "4.0.3-7ubuntu0.11+esm12",
            "4.0.3-7ubuntu0.11+esm13",
            "4.0.3-7ubuntu0.11+esm14",
            "4.0.3-7ubuntu0.11+esm15",
            "4.0.3-7ubuntu0.11+esm16",
            "4.0.3-7ubuntu0.11+esm17"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libtiff-opengl",
                "binary_version": "4.0.6-1ubuntu0.8+esm20"
              },
              {
                "binary_name": "libtiff-tools",
                "binary_version": "4.0.6-1ubuntu0.8+esm20"
              },
              {
                "binary_name": "libtiff5",
                "binary_version": "4.0.6-1ubuntu0.8+esm20"
              },
              {
                "binary_name": "libtiffxx5",
                "binary_version": "4.0.6-1ubuntu0.8+esm20"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:16.04:LTS",
            "name": "tiff",
            "purl": "pkg:deb/ubuntu/tiff@4.0.6-1ubuntu0.8+esm20?arch=source\u0026distro=esm-infra/xenial"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.0.3-12.3ubuntu2",
            "4.0.5-1",
            "4.0.6-1",
            "4.0.6-1ubuntu0.1",
            "4.0.6-1ubuntu0.2",
            "4.0.6-1ubuntu0.3",
            "4.0.6-1ubuntu0.4",
            "4.0.6-1ubuntu0.5",
            "4.0.6-1ubuntu0.6",
            "4.0.6-1ubuntu0.7",
            "4.0.6-1ubuntu0.8",
            "4.0.6-1ubuntu0.8+esm1",
            "4.0.6-1ubuntu0.8+esm2",
            "4.0.6-1ubuntu0.8+esm3",
            "4.0.6-1ubuntu0.8+esm4",
            "4.0.6-1ubuntu0.8+esm6",
            "4.0.6-1ubuntu0.8+esm7",
            "4.0.6-1ubuntu0.8+esm8",
            "4.0.6-1ubuntu0.8+esm9",
            "4.0.6-1ubuntu0.8+esm10",
            "4.0.6-1ubuntu0.8+esm11",
            "4.0.6-1ubuntu0.8+esm12",
            "4.0.6-1ubuntu0.8+esm13",
            "4.0.6-1ubuntu0.8+esm14",
            "4.0.6-1ubuntu0.8+esm15",
            "4.0.6-1ubuntu0.8+esm16",
            "4.0.6-1ubuntu0.8+esm17",
            "4.0.6-1ubuntu0.8+esm18",
            "4.0.6-1ubuntu0.8+esm19",
            "4.0.6-1ubuntu0.8+esm20"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "gdal-bin",
                "binary_version": "1.11.3+dfsg-3ubuntu0.1~esm2"
              },
              {
                "binary_name": "libgdal-java",
                "binary_version": "1.11.3+dfsg-3ubuntu0.1~esm2"
              },
              {
                "binary_name": "libgdal-perl",
                "binary_version": "1.11.3+dfsg-3ubuntu0.1~esm2"
              },
              {
                "binary_name": "libgdal1i",
                "binary_version": "1.11.3+dfsg-3ubuntu0.1~esm2"
              },
              {
                "binary_name": "python-gdal",
                "binary_version": "1.11.3+dfsg-3ubuntu0.1~esm2"
              },
              {
                "binary_name": "python3-gdal",
                "binary_version": "1.11.3+dfsg-3ubuntu0.1~esm2"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:16.04:LTS",
            "name": "gdal",
            "purl": "pkg:deb/ubuntu/gdal@1.11.3+dfsg-3ubuntu0.1~esm2?arch=source\u0026distro=esm-apps-legacy/xenial"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "1.11.2+dfsg-3ubuntu3",
            "1.11.2+dfsg-3ubuntu4",
            "1.11.3+dfsg-2build1",
            "1.11.3+dfsg-2build2",
            "1.11.3+dfsg-2build3",
            "1.11.3+dfsg-3",
            "1.11.3+dfsg-3build1",
            "1.11.3+dfsg-3build2",
            "1.11.3+dfsg-3ubuntu0.1~esm1",
            "1.11.3+dfsg-3ubuntu0.1~esm2"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libtiff-opengl",
                "binary_version": "4.0.9-5ubuntu0.10+esm10"
              },
              {
                "binary_name": "libtiff-tools",
                "binary_version": "4.0.9-5ubuntu0.10+esm10"
              },
              {
                "binary_name": "libtiff5",
                "binary_version": "4.0.9-5ubuntu0.10+esm10"
              },
              {
                "binary_name": "libtiffxx5",
                "binary_version": "4.0.9-5ubuntu0.10+esm10"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:18.04:LTS",
            "name": "tiff",
            "purl": "pkg:deb/ubuntu/tiff@4.0.9-5ubuntu0.10+esm10?arch=source\u0026distro=esm-infra/bionic"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.0.8-5",
            "4.0.8-6",
            "4.0.9-1",
            "4.0.9-2",
            "4.0.9-3",
            "4.0.9-4",
            "4.0.9-4ubuntu1",
            "4.0.9-5",
            "4.0.9-5ubuntu0.1",
            "4.0.9-5ubuntu0.2",
            "4.0.9-5ubuntu0.3",
            "4.0.9-5ubuntu0.4",
            "4.0.9-5ubuntu0.5",
            "4.0.9-5ubuntu0.6",
            "4.0.9-5ubuntu0.7",
            "4.0.9-5ubuntu0.8",
            "4.0.9-5ubuntu0.9",
            "4.0.9-5ubuntu0.10",
            "4.0.9-5ubuntu0.10+esm1",
            "4.0.9-5ubuntu0.10+esm2",
            "4.0.9-5ubuntu0.10+esm3",
            "4.0.9-5ubuntu0.10+esm4",
            "4.0.9-5ubuntu0.10+esm5",
            "4.0.9-5ubuntu0.10+esm6",
            "4.0.9-5ubuntu0.10+esm7",
            "4.0.9-5ubuntu0.10+esm8",
            "4.0.9-5ubuntu0.10+esm9",
            "4.0.9-5ubuntu0.10+esm10"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "neuron",
                "binary_version": "7.5-1"
              },
              {
                "binary_name": "python3-neuron",
                "binary_version": "7.5-1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:18.04:LTS",
            "name": "neuron",
            "purl": "pkg:deb/ubuntu/neuron@7.5-1?arch=source\u0026distro=bionic"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "7.5-1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libqt5webengine-data",
                "binary_version": "5.9.5+dfsg-0ubuntu2+esm1"
              },
              {
                "binary_name": "libqt5webengine5",
                "binary_version": "5.9.5+dfsg-0ubuntu2+esm1"
              },
              {
                "binary_name": "libqt5webenginecore5",
                "binary_version": "5.9.5+dfsg-0ubuntu2+esm1"
              },
              {
                "binary_name": "libqt5webenginewidgets5",
                "binary_version": "5.9.5+dfsg-0ubuntu2+esm1"
              },
              {
                "binary_name": "qml-module-qtwebengine",
                "binary_version": "5.9.5+dfsg-0ubuntu2+esm1"
              },
              {
                "binary_name": "qtwebengine5-dev-tools",
                "binary_version": "5.9.5+dfsg-0ubuntu2+esm1"
              },
              {
                "binary_name": "qtwebengine5-doc-html",
                "binary_version": "5.9.5+dfsg-0ubuntu2+esm1"
              },
              {
                "binary_name": "qtwebengine5-examples",
                "binary_version": "5.9.5+dfsg-0ubuntu2+esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:18.04:LTS",
            "name": "qtwebengine-opensource-src",
            "purl": "pkg:deb/ubuntu/qtwebengine-opensource-src@5.9.5+dfsg-0ubuntu2+esm1?arch=source\u0026distro=esm-apps/bionic"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.9.1+dfsg-4",
            "5.9.1+dfsg-4ubuntu1",
            "5.9.2+dfsg-2ubuntu1",
            "5.9.3+dfsg-0ubuntu1",
            "5.9.4+dfsg-0ubuntu1",
            "5.9.5+dfsg-0ubuntu2",
            "5.9.5+dfsg-0ubuntu2+esm1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "texmaker",
                "binary_version": "5.0.2-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "texmaker-data",
                "binary_version": "5.0.2-1ubuntu0.1~esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:18.04:LTS",
            "name": "texmaker",
            "purl": "pkg:deb/ubuntu/texmaker@5.0.2-1ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/bionic"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.5-1",
            "5.0.2-1",
            "5.0.2-1build1",
            "5.0.2-1build2",
            "5.0.2-1ubuntu0.1~esm1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libtiff-opengl",
                "binary_version": "4.1.0+git191117-2ubuntu0.20.04.14+esm3"
              },
              {
                "binary_name": "libtiff-tools",
                "binary_version": "4.1.0+git191117-2ubuntu0.20.04.14+esm3"
              },
              {
                "binary_name": "libtiff5",
                "binary_version": "4.1.0+git191117-2ubuntu0.20.04.14+esm3"
              },
              {
                "binary_name": "libtiffxx5",
                "binary_version": "4.1.0+git191117-2ubuntu0.20.04.14+esm3"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:20.04:LTS",
            "name": "tiff",
            "purl": "pkg:deb/ubuntu/tiff@4.1.0+git191117-2ubuntu0.20.04.14+esm3?arch=source\u0026distro=esm-infra/focal"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.0.10+git191003-1",
            "4.1.0+git191117-1",
            "4.1.0+git191117-2",
            "4.1.0+git191117-2build1",
            "4.1.0+git191117-2ubuntu0.20.04.1",
            "4.1.0+git191117-2ubuntu0.20.04.2",
            "4.1.0+git191117-2ubuntu0.20.04.3",
            "4.1.0+git191117-2ubuntu0.20.04.4",
            "4.1.0+git191117-2ubuntu0.20.04.5",
            "4.1.0+git191117-2ubuntu0.20.04.6",
            "4.1.0+git191117-2ubuntu0.20.04.7",
            "4.1.0+git191117-2ubuntu0.20.04.8",
            "4.1.0+git191117-2ubuntu0.20.04.9",
            "4.1.0+git191117-2ubuntu0.20.04.10",
            "4.1.0+git191117-2ubuntu0.20.04.11",
            "4.1.0+git191117-2ubuntu0.20.04.12",
            "4.1.0+git191117-2ubuntu0.20.04.13",
            "4.1.0+git191117-2ubuntu0.20.04.14",
            "4.1.0+git191117-2ubuntu0.20.04.14+esm1",
            "4.1.0+git191117-2ubuntu0.20.04.14+esm2",
            "4.1.0+git191117-2ubuntu0.20.04.14+esm3"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "neuron",
                "binary_version": "7.6.3-1build4"
              },
              {
                "binary_name": "python3-neuron",
                "binary_version": "7.6.3-1build4"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:20.04:LTS",
            "name": "neuron",
            "purl": "pkg:deb/ubuntu/neuron@7.6.3-1build4?arch=source\u0026distro=focal"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "7.6.3-1build2",
            "7.6.3-1build3",
            "7.6.3-1build4"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libqt5webengine-data",
                "binary_version": "5.12.8+dfsg-0ubuntu1.1+esm1"
              },
              {
                "binary_name": "libqt5webengine5",
                "binary_version": "5.12.8+dfsg-0ubuntu1.1+esm1"
              },
              {
                "binary_name": "libqt5webenginecore5",
                "binary_version": "5.12.8+dfsg-0ubuntu1.1+esm1"
              },
              {
                "binary_name": "libqt5webenginewidgets5",
                "binary_version": "5.12.8+dfsg-0ubuntu1.1+esm1"
              },
              {
                "binary_name": "qml-module-qtwebengine",
                "binary_version": "5.12.8+dfsg-0ubuntu1.1+esm1"
              },
              {
                "binary_name": "qtwebengine5-dev-tools",
                "binary_version": "5.12.8+dfsg-0ubuntu1.1+esm1"
              },
              {
                "binary_name": "qtwebengine5-doc-html",
                "binary_version": "5.12.8+dfsg-0ubuntu1.1+esm1"
              },
              {
                "binary_name": "qtwebengine5-examples",
                "binary_version": "5.12.8+dfsg-0ubuntu1.1+esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:20.04:LTS",
            "name": "qtwebengine-opensource-src",
            "purl": "pkg:deb/ubuntu/qtwebengine-opensource-src@5.12.8+dfsg-0ubuntu1.1+esm1?arch=source\u0026distro=esm-apps/focal"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.12.4+dfsg-1ubuntu1",
            "5.12.4+dfsg-1ubuntu3",
            "5.12.5+dfsg-3ubuntu1",
            "5.12.5+dfsg-6ubuntu2",
            "5.12.5+dfsg-7",
            "5.12.5+dfsg-7build1",
            "5.12.8+dfsg-0ubuntu1",
            "5.12.8+dfsg-0ubuntu1.1",
            "5.12.8+dfsg-0ubuntu1.1+esm1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "texmaker",
                "binary_version": "5.0.3-1ubuntu0.20.04.1~esm1"
              },
              {
                "binary_name": "texmaker-data",
                "binary_version": "5.0.3-1ubuntu0.20.04.1~esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:20.04:LTS",
            "name": "texmaker",
            "purl": "pkg:deb/ubuntu/texmaker@5.0.3-1ubuntu0.20.04.1~esm1?arch=source\u0026distro=esm-apps/focal"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.0.3-1build2",
            "5.0.3-1build3",
            "5.0.3-1build4",
            "5.0.3-1build5",
            "5.0.3-1ubuntu0.20.04.1~esm1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "neuron",
                "binary_version": "7.6.3-1build6"
              },
              {
                "binary_name": "python3-neuron",
                "binary_version": "7.6.3-1build6"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:22.04:LTS",
            "name": "neuron",
            "purl": "pkg:deb/ubuntu/neuron@7.6.3-1build6?arch=source\u0026distro=jammy"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "7.6.3-1build5",
            "7.6.3-1build6"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libtiff-opengl",
                "binary_version": "4.3.0-6ubuntu0.13"
              },
              {
                "binary_name": "libtiff-tools",
                "binary_version": "4.3.0-6ubuntu0.13"
              },
              {
                "binary_name": "libtiff5",
                "binary_version": "4.3.0-6ubuntu0.13"
              },
              {
                "binary_name": "libtiffxx5",
                "binary_version": "4.3.0-6ubuntu0.13"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:22.04:LTS",
            "name": "tiff",
            "purl": "pkg:deb/ubuntu/tiff@4.3.0-6ubuntu0.13?arch=source\u0026distro=jammy"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.3.0-1",
            "4.3.0-2",
            "4.3.0-3",
            "4.3.0-3build1",
            "4.3.0-4",
            "4.3.0-5",
            "4.3.0-6",
            "4.3.0-6ubuntu0.1",
            "4.3.0-6ubuntu0.2",
            "4.3.0-6ubuntu0.3",
            "4.3.0-6ubuntu0.4",
            "4.3.0-6ubuntu0.5",
            "4.3.0-6ubuntu0.6",
            "4.3.0-6ubuntu0.7",
            "4.3.0-6ubuntu0.8",
            "4.3.0-6ubuntu0.9",
            "4.3.0-6ubuntu0.10",
            "4.3.0-6ubuntu0.11",
            "4.3.0-6ubuntu0.12",
            "4.3.0-6ubuntu0.13"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libqt5pdf5",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5pdfwidgets5",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webengine-data",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webengine5",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webenginecore5",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webenginewidgets5",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "qml-module-qtquick-pdf",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "qml-module-qtwebengine",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "qt5-image-formats-plugin-pdf",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtpdf5-doc-html",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtpdf5-examples",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-dev-tools",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-doc-html",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-examples",
                "binary_version": "5.15.9+dfsg-1ubuntu0.1~esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:22.04:LTS",
            "name": "qtwebengine-opensource-src",
            "purl": "pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.9+dfsg-1ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/jammy"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.15.6+dfsg-1",
            "5.15.6+dfsg-2",
            "5.15.7+dfsg-2",
            "5.15.8+dfsg-1",
            "5.15.8+dfsg-1build1",
            "5.15.8+dfsg-1build2",
            "5.15.8+dfsg-2",
            "5.15.9+dfsg-1",
            "5.15.9+dfsg-1ubuntu0.1~esm1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "texmaker",
                "binary_version": "5.0.3-1ubuntu0.22.04.1~esm1"
              },
              {
                "binary_name": "texmaker-data",
                "binary_version": "5.0.3-1ubuntu0.22.04.1~esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:22.04:LTS",
            "name": "texmaker",
            "purl": "pkg:deb/ubuntu/texmaker@5.0.3-1ubuntu0.22.04.1~esm1?arch=source\u0026distro=esm-apps/jammy"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.0.3-1build8",
            "5.0.3-1build9",
            "5.0.3-1ubuntu0.22.04.1~esm1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libtiff-opengl",
                "binary_version": "4.5.1+git230720-4ubuntu2.5"
              },
              {
                "binary_name": "libtiff-tools",
                "binary_version": "4.5.1+git230720-4ubuntu2.5"
              },
              {
                "binary_name": "libtiff6",
                "binary_version": "4.5.1+git230720-4ubuntu2.5"
              },
              {
                "binary_name": "libtiffxx6",
                "binary_version": "4.5.1+git230720-4ubuntu2.5"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:24.04:LTS",
            "name": "tiff",
            "purl": "pkg:deb/ubuntu/tiff@4.5.1+git230720-4ubuntu2.5?arch=source\u0026distro=noble"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.5.1+git230720-1ubuntu1",
            "4.5.1+git230720-3ubuntu1",
            "4.5.1+git230720-4ubuntu1",
            "4.5.1+git230720-4ubuntu2",
            "4.5.1+git230720-4ubuntu2.1",
            "4.5.1+git230720-4ubuntu2.2",
            "4.5.1+git230720-4ubuntu2.3",
            "4.5.1+git230720-4ubuntu2.4",
            "4.5.1+git230720-4ubuntu2.5"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libqt5pdf5",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5pdfwidgets5",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webengine-data",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webengine5",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webenginecore5",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webenginewidgets5",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "qml-module-qtquick-pdf",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "qml-module-qtwebengine",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "qt5-image-formats-plugin-pdf",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtpdf5-doc-html",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtpdf5-examples",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-dev-tools",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-doc-html",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-examples",
                "binary_version": "5.15.16+dfsg-3ubuntu0.1~esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:24.04:LTS",
            "name": "qtwebengine-opensource-src",
            "purl": "pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.16+dfsg-3ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/noble"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.15.15+dfsg-2",
            "5.15.15+dfsg-2build2",
            "5.15.15+dfsg-2ubuntu1",
            "5.15.16+dfsg-1",
            "5.15.16+dfsg-1ubuntu2",
            "5.15.16+dfsg-1ubuntu4",
            "5.15.16+dfsg-3",
            "5.15.16+dfsg-3ubuntu0.1~esm1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "texmaker",
                "binary_version": "5.1.3+dfsg-1ubuntu0.1~esm1"
              },
              {
                "binary_name": "texmaker-data",
                "binary_version": "5.1.3+dfsg-1ubuntu0.1~esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:24.04:LTS",
            "name": "texmaker",
            "purl": "pkg:deb/ubuntu/texmaker@5.1.3+dfsg-1ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/noble"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.1.3+dfsg-1build4",
            "5.1.3+dfsg-1build5",
            "5.1.3+dfsg-1build6",
            "5.1.3+dfsg-1build7",
            "5.1.3+dfsg-1build8",
            "5.1.3+dfsg-1ubuntu0.1~esm1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libqt5pdf5",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "libqt5pdfwidgets5",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "libqt5webengine-data",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "libqt5webengine5",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "libqt5webenginecore5",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "libqt5webenginewidgets5",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "qml-module-qtquick-pdf",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "qml-module-qtwebengine",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "qt5-image-formats-plugin-pdf",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "qtpdf5-doc-html",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "qtpdf5-examples",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "qtwebengine5-dev-tools",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "qtwebengine5-doc-html",
                "binary_version": "5.15.19+dfsg2-1"
              },
              {
                "binary_name": "qtwebengine5-examples",
                "binary_version": "5.15.19+dfsg2-1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:25.10",
            "name": "qtwebengine-opensource-src",
            "purl": "pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.19+dfsg2-1?arch=source\u0026distro=questing"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.15.18+dfsg-2",
            "5.15.18+dfsg-2build1",
            "5.15.19+dfsg-1",
            "5.15.19+dfsg2-1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "texmaker",
                "binary_version": "5.1.3+dfsg-3build1"
              },
              {
                "binary_name": "texmaker-data",
                "binary_version": "5.1.3+dfsg-3build1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:25.10",
            "name": "texmaker",
            "purl": "pkg:deb/ubuntu/texmaker@5.1.3+dfsg-3build1?arch=source\u0026distro=questing"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.1.3+dfsg-3",
            "5.1.3+dfsg-3build1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libtiff-opengl",
                "binary_version": "4.7.0-3ubuntu3.1"
              },
              {
                "binary_name": "libtiff-tools",
                "binary_version": "4.7.0-3ubuntu3.1"
              },
              {
                "binary_name": "libtiff6",
                "binary_version": "4.7.0-3ubuntu3.1"
              },
              {
                "binary_name": "libtiffxx6",
                "binary_version": "4.7.0-3ubuntu3.1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:25.10",
            "name": "tiff",
            "purl": "pkg:deb/ubuntu/tiff@4.7.0-3ubuntu3.1?arch=source\u0026distro=questing"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.5.1+git230720-4ubuntu4",
            "4.7.0-3ubuntu1",
            "4.7.0-3ubuntu2",
            "4.7.0-3ubuntu3",
            "4.7.0-3ubuntu3.1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libtiff-opengl",
                "binary_version": "4.7.0-3ubuntu5"
              },
              {
                "binary_name": "libtiff-tools",
                "binary_version": "4.7.0-3ubuntu5"
              },
              {
                "binary_name": "libtiff6",
                "binary_version": "4.7.0-3ubuntu5"
              },
              {
                "binary_name": "libtiffxx6",
                "binary_version": "4.7.0-3ubuntu5"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:26.04:LTS",
            "name": "tiff",
            "purl": "pkg:deb/ubuntu/tiff@4.7.0-3ubuntu5?arch=source\u0026distro=resolute"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.7.0-3ubuntu3",
            "4.7.0-3ubuntu4",
            "4.7.0-3ubuntu5"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libqt5webengine-data",
                "binary_version": "5.15.19+dfsg2-4ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webengine5",
                "binary_version": "5.15.19+dfsg2-4ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webenginecore5",
                "binary_version": "5.15.19+dfsg2-4ubuntu0.1~esm1"
              },
              {
                "binary_name": "libqt5webenginewidgets5",
                "binary_version": "5.15.19+dfsg2-4ubuntu0.1~esm1"
              },
              {
                "binary_name": "qml-module-qtwebengine",
                "binary_version": "5.15.19+dfsg2-4ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-dev-tools",
                "binary_version": "5.15.19+dfsg2-4ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-doc-html",
                "binary_version": "5.15.19+dfsg2-4ubuntu0.1~esm1"
              },
              {
                "binary_name": "qtwebengine5-examples",
                "binary_version": "5.15.19+dfsg2-4ubuntu0.1~esm1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:Pro:26.04:LTS",
            "name": "qtwebengine-opensource-src",
            "purl": "pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.19+dfsg2-4ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/resolute"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "5.15.19+dfsg2-1",
            "5.15.19+dfsg2-1build1",
            "5.15.19+dfsg2-2",
            "5.15.19+dfsg2-3",
            "5.15.19+dfsg2-4",
            "5.15.19+dfsg2-4ubuntu0.1~esm1"
          ]
        }
      ],
      "aliases": [],
      "details": "[Denial of Service via large SamplesPerPixel tag]",
      "id": "UBUNTU-CVE-2026-36849",
      "modified": "2026-09-24T15:57:19Z",
      "published": "2026-06-18T00:00:00Z",
      "references": [
        {
          "type": "REPORT",
          "url": "https://ubuntu.com/security/CVE-2026-36849"
        },
        {
          "type": "REPORT",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-36849"
        },
        {
          "type": "REPORT",
          "url": "https://www.openwall.com/lists/oss-security/2026/06/17/1"
        }
      ],
      "related": [],
      "schema_version": "1.7.0",
      "severity": [
        {
          "score": "medium",
          "type": "Ubuntu"
        }
      ],
      "upstream": [
        "CVE-2026-36849"
      ]
    }

    WID-SEC-W-2026-1964

    Vulnerability from csaf_certbund - Published: 2026-06-16 22:00 - Updated: 2026-07-27 22:00
    Summary
    libTIFF: Schwachstelle ermöglicht Denial of Service
    Severity
    Mittel
    Scope
    1 vulnerability in this advisory, including CVE-2026-36849.
    CVE-2026-36849
    Known affected: 3 products
    Open the full advisory