Package: tomb (2.9+dfsg1-2) Other Packages Related to tomb: [libc6 ] (>= 2.34)
GNU C Library: Shared libraries
[libgcrypt20 ] (>= 1.10.0)
LGPL Crypto library - runtime library
[cryptsetup-bin ]
disk encryption support - command line tools
[e2fsprogs ]
ext2/ext3/ext4 file system utilities
[file ]
Recognize the type of data in a file using "magic" numbers
[gettext-base ]
GNU Internationalization utilities for the base system
[gnupg ]
GNU privacy guard - a free PGP replacement
[pinentry-curses ]
curses-based PIN or pass-phrase entry dialog for GnuPG
Package not available
[sudo ]
Provide limited super user privileges to specific users
[zsh ]
shell with lots of features
[btrfs-progs ]
Checksumming Copy on Write Filesystem utilities
[dcfldd ]
enhanced version of dd for forensics and security
[qrencode ]
QR Code encoder into PNG image
[unoconv ]
converter between LibreOffice document formats
[steghide ]
steganography hiding tool
[swish-e ]
Simple Web Indexing System for Humans - Enhanced
Package file paths (9) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/tomb /usr/libexec/tomb/tomb-kdb-pbkdf2 /usr/libexec/tomb/tomb-kdb-pbkdf2-gensalt /usr/libexec/tomb/tomb-kdb-pbkdf2-getiter /usr/share/doc/tomb/changelog.Debian.gz /usr/share/doc/tomb/changelog.gz /usr/share/doc/tomb/copyright /usr/share/doc/tomb/NEWS.Debian.gz /usr/share/man/man1/tomb.1.gz Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2020-28638 ] Published: Nov 13, 2020, 9:15:00 PM UTC
tomb: CVE-2020-28638
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:12 PM UTC
Details (2) 2.9+dfsg1-2 · amd64 · bookworm
Fixed · Fixed: 2.8+dfsg1-1
dsa · tomb · debian · bookworm; dsa · tomb · debian · 12
2.9+dfsg1-2 · arm64 · bookworm
Fixed · Fixed: 2.8+dfsg1-1
dsa · tomb · debian · bookworm; dsa · tomb · debian · 12
Last synced: Oct 29, 2026, 4:27:16 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
2.9+dfsg1-2 / amd64 Observed Sep 1, 2026 sha256 0be02f9c154d…abc31c4fSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 0be02f9c154dfecdde8cba092545bc28c03985ed45d11c53ce32b000abc31c4f
Verify download
printf '%s %s\n' '0be02f9c154dfecdde8cba092545bc28c03985ed45d11c53ce32b000abc31c4f' 'tomb_2.9+dfsg1-2_amd64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
2.9+dfsg1-2 / arm64 Observed Sep 1, 2026 sha256 144b66007fd2…de097f10Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 144b66007fd29596a1f93cf4d3f84a3f12b0b7deada88f158b9d8593de097f10
Verify download
printf '%s %s\n' '144b66007fd29596a1f93cf4d3f84a3f12b0b7deada88f158b9d8593de097f10' 'tomb_2.9+dfsg1-2_arm64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
