Package: godot3-runner (3.2.3-stable-1+b3) Godot game engine run-time Other Packages Related to godot3-runner: [libasound2 ] (>= 1.0.16)
shared library for ALSA applications
[libc6 ] (>= 2.33)
GNU C Library: Shared libraries
[libenet7 ]
thin network communication layer on top of UDP
[libfreetype6 ] (>= 2.2.1)
FreeType 2 font engine, shared library files
[libgcc-s1 ] (>= 3.0)
GCC support library
[libgl1 ]
Vendor neutral GL dispatch library -- legacy GL support
[libogg0 ] (>= 1.0rc3)
Ogg bitstream library
[libopus0 ] (>= 1.1)
Opus codec runtime library
[libpcre2-32-0 ] (>= 10.22)
New Perl Compatible Regular Expression Library - 32 bit runtime files
[libpng16-16 ] (>= 1.6.2-1)
PNG library - runtime (version 1.6)
[libpulse0 ] (>= 0.99.1)
PulseAudio client libraries
[libsquish0 ]
DXT texture compression library
[libstdc++6 ] (>= 11)
GNU Standard C++ Library v3
[libtheora0 ] (>= 1.0)
Theora Video Compression Codec
[libvorbis0a ] (>= 1.1.2)
decoder library for Vorbis General Audio Compression Codec
[libvpx7 ] (>= 1.10.0)
VP8 and VP9 video codec (shared library)
[libwebp7 ]
Lossy compression of digital photographic images
[libx11-6 ] (>= 2:1.2.99.901)
X11 client-side library
[libxcursor1 ] (>> 1.1.2)
X cursor management library
[libxi6 ] (>= 2:1.2.99.4)
X11 Input extension library
[libxinerama1 ] (>= 2:1.1.4)
X11 Xinerama extension library
[libxrandr2 ]
X11 RandR extension library
[libxrender1 ]
X Rendering Extension client library
[zlib1g ] (>= 1:1.2.0)
compression library - runtime
Package file paths (6) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/godot3-runner /usr/share/doc/godot3-runner/changelog.Debian.amd64.gz /usr/share/doc/godot3-runner/changelog.Debian.arm64.gz /usr/share/doc/godot3-runner/changelog.Debian.gz /usr/share/doc/godot3-runner/changelog.gz /usr/share/doc/godot3-runner/copyright Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-110736 ] Published: Oct 14, 2026, 3:53:29 PM UTC
Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message). Offsets read from the hash table of
Low(3.6) Affected Details (2) 3.2.3-stable-1+b2 · arm64 · bookworm
Affected
nvd · godot · debian · bookworm; nvd · godot · debian · 12
3.2.3-stable-1+b3 · amd64 · bookworm
Affected
nvd · godot · debian · bookworm; nvd · godot · debian · 12
[CVE-2026-110735 ] Published: Oct 14, 2026, 3:41:50 PM UTC
Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string). A string length is read from the
Low(2.5) Affected Details (2) 3.2.3-stable-1+b2 · arm64 · bookworm
Affected
nvd · godot · debian · bookworm; nvd · godot · debian · 12
3.2.3-stable-1+b3 · amd64 · bookworm
Affected
nvd · godot · debian · bookworm; nvd · godot · debian · 12
[CVE-2026-110734 ] Published: Oct 14, 2026, 3:36:08 PM UTC
Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands RLE instructions read from t
Low(2.5) Affected Details (2) 3.2.3-stable-1+b2 · arm64 · bookworm
Affected
nvd · godot · debian · bookworm; nvd · godot · debian · 12
3.2.3-stable-1+b3 · amd64 · bookworm
Affected
nvd · godot · debian · bookworm; nvd · godot · debian · 12
[CVE-2021-26826 ] Published: Feb 8, 2021, 3:15:12 PM UTC
Godot Engine vulnerabilities
High(7.8) Affected Details (2) 3.2.3-stable-1+b2 · arm64 · bookworm
Affected
usn · godot · debian · bookworm; usn · godot · debian · 12
3.2.3-stable-1+b3 · amd64 · bookworm
Affected
usn · godot · debian · bookworm; usn · godot · debian · 12
[CVE-2021-26825 ] Published: Feb 8, 2021, 3:15:12 PM UTC
Godot Engine vulnerabilities
High(7.8) Affected Details (2) 3.2.3-stable-1+b2 · arm64 · bookworm
Affected
usn · godot · debian · bookworm; usn · godot · debian · 12
3.2.3-stable-1+b3 · amd64 · bookworm
Affected
usn · godot · debian · bookworm; usn · godot · debian · 12
Fixed and unaffected versions (2) CVE Severity Version impact [CVE-2019-10069 ] Published: May 31, 2019, 10:29:00 PM UTC
godot: CVE-2019-10069
Medium Fixed Details (2) 3.2.3-stable-1+b2 · arm64 · bookworm
Fixed · Fixed: 3.2-stable-1
dsa · godot · debian · bookworm; dsa · godot · debian · 12
3.2.3-stable-1+b3 · amd64 · bookworm
Fixed · Fixed: 3.2-stable-1
dsa · godot · debian · bookworm; dsa · godot · debian · 12
[CVE-2018-1000224 ] Published: Not reported
godot: CVE-2018-1000224
Low Not affected Details (2) 3.2.3-stable-1+b2 · arm64 · bookworm
Not affected
dsa · godot · debian · bookworm
3.2.3-stable-1+b3 · amd64 · bookworm
Not affected
dsa · godot · debian · bookworm
Last synced: Oct 28, 2026, 3:50:41 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
3.2.3-stable-1+b3 / amd64 Observed Sep 1, 2026 sha256 ca0a86e92e75…6150f0e6Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): ca0a86e92e759c7a7b5a8abed7d633d0202bc5980e5bc69046ff5a866150f0e6
Verify download
printf '%s %s\n' 'ca0a86e92e759c7a7b5a8abed7d633d0202bc5980e5bc69046ff5a866150f0e6' 'godot3-runner_3.2.3-stable-1+b3_amd64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
3.2.3-stable-1+b2 / arm64 Observed Sep 1, 2026 sha256 41487a31c89b…660ccf0dSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 41487a31c89b5a5385aba209695a6eb20eae475c157ac612ec870466660ccf0d
Verify download
printf '%s %s\n' '41487a31c89b5a5385aba209695a6eb20eae475c157ac612ec870466660ccf0d' 'godot3-runner_3.2.3-stable-1+b2_arm64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
