Packages / Debian 13 (Trixie) / python / python3-ironic

Package: python3-ironic (1:29.0.5-0+deb13u2)

bare metal hypervisor API for OpenStack - Python lib

Other Packages Related to python3-ironic:

  • rec: [python3-scciclient] (>= 0.16.0)

    Python ServerView Common Command Interface (SCCI) Client Library - Python 3.x

Download python3-ironic

ArchitecturePackage sizeInstalled sizeFilesPackage
all1.1 MiB12 MiBlist of filesDownload

Package file paths (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1:29.0.5-0+deb13u2trixie / mainallDebian 13 · main · amd641.1 MiB12 MiBpool/main/i/ironic/python3-ironic_29.0.5-0+deb13u2_all.deb
1:29.0.5-0+deb13u2trixie / mainallDebian 13 · main · arm641.1 MiB12 MiBpool/main/i/ironic/python3-ironic_29.0.5-0+deb13u2_all.deb
1:29.0.5-0+deb13u3trixie-security / mainallDebian 13 security · main · arm641.1 MiB12 MiBpool/updates/main/i/ironic/python3-ironic_29.0.5-0+deb13u3_all.deb
1:29.0.5-0+deb13u3trixie-security / mainallDebian 13 security · main · amd641.1 MiB12 MiBpool/updates/main/i/ironic/python3-ironic_29.0.5-0+deb13u3_all.deb
1:29.0.5-0+deb13u2 (withdrawn)trixie-security / mainallDebian 13 security · main · amd641.1 MiB12 MiBpool/updates/main/i/ironic/python3-ironic_29.0.5-0+deb13u2_all.deb

Field source: Debian 13 (Trixie) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-115638]

ironic: CVE-2026-115638

Medium(4.3)Affected
Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Affected

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Affected

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Affected

    dsa · ironic · debian · 13

[CVE-2026-90461]

OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is configured for HTTP(S) Basic Authentication.

Medium(6.3)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Affected

    nvd · ironic · debian · 13

[CVE-2026-74250]

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

Medium(6.3)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Affected

    nvd · ironic · debian · 13

[CVE-2026-71201]

In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.

Medium(5)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Affected

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Affected

    nvd · ironic · debian · 13

[CVE-2026-54423]

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node,

High(8.2)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

[CVE-2026-44918]

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.

High(8.7)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

[CVE-2026-54421]

In OpenStack Ironic before 37.0.1, when applying a PATCH to update fields in volume properties the user is authorized for, Ironic can return unredacted sensitive information (such as iSCSI credentials

Medium(6.8)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

[CVE-2026-48681]

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image.

Medium(5.9)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

[CVE-2026-44917]

OpenStack Ironic before 35.0.2 allows a malicious authenticated project admin or manager to read local files on the Ironic conductor via a pxe_template.

Medium(4.9)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

[CVE-2026-46447]

OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or node.instance_info.

Medium(5.8)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u2

    nvd · ironic · debian · 13

[CVE-2026-44919]

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.

Medium(4.3)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

[CVE-2026-44916]

In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.

Low(3)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

[CVE-2026-42997]

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-l

High(7.7)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

[CVE-2026-43003]

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading t

High(8.5)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Affected · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u3

    nvd · ironic · debian · 13

[CVE-2026-42510]

OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.

Medium(6.6)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:29.0.5-0+deb13u1

    nvd · ironic · debian · 13

[CVE-2015-7514]

ironic: CVE-2015-7514

MediumUnknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:4.2.2-1

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:4.2.2-1

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:4.2.2-1

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:4.2.2-1

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:4.2.2-1

    dsa · ironic · debian · 13

[CVE-2016-4985]

ironic: CVE-2016-4985

Medium(5.9)Unknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (5)
  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:5.1.2-1

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie

    Fixed · Fixed: 1:5.1.2-1

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u2 · all · trixie-security · Historical version

    Fixed · Fixed: 1:5.1.2-1

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:5.1.2-1

    dsa · ironic · debian · 13

  • 1:29.0.5-0+deb13u3 · all · trixie-security

    Fixed · Fixed: 1:5.1.2-1

    dsa · ironic · debian · 13

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:29.0.5-0+deb13u2 / allObserved Sep 1, 2026sha256 d1edc23ff5dc…21e806a9Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): d1edc23ff5dc5183976b83d60e45a20b79691c149c830c739f246f3421e806a9

Verify download

printf '%s %s\n' 'd1edc23ff5dc5183976b83d60e45a20b79691c149c830c739f246f3421e806a9' 'python3-ironic_29.0.5-0+deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

1:29.0.5-0+deb13u2 / allObserved Sep 1, 2026sha256 d1edc23ff5dc…21e806a9Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): d1edc23ff5dc5183976b83d60e45a20b79691c149c830c739f246f3421e806a9

Verify download

printf '%s %s\n' 'd1edc23ff5dc5183976b83d60e45a20b79691c149c830c739f246f3421e806a9' 'python3-ironic_29.0.5-0+deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

1:29.0.5-0+deb13u3 / allObserved Sep 1, 2026sha256 2a11aabd9a73…3fe8084dSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 2a11aabd9a7378c870eae181583b7bd9560f06b03b985e59a701eeba3fe8084d

Verify download

printf '%s %s\n' '2a11aabd9a7378c870eae181583b7bd9560f06b03b985e59a701eeba3fe8084d' 'python3-ironic_29.0.5-0+deb13u3_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

1:29.0.5-0+deb13u3 / allObserved Aug 17, 2026 – Oct 24, 2026sha256 2a11aabd9a73…3fe8084dSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 2a11aabd9a7378c870eae181583b7bd9560f06b03b985e59a701eeba3fe8084d

Verify download

printf '%s %s\n' '2a11aabd9a7378c870eae181583b7bd9560f06b03b985e59a701eeba3fe8084d' 'python3-ironic_29.0.5-0+deb13u3_all.deb' | sha256sum --check --strict -

Field source: Debian Security

1:29.0.5-0+deb13u2 / allObserved Aug 10, 2026 – Aug 16, 2026sha256 d1edc23ff5dc…21e806a9Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): d1edc23ff5dc5183976b83d60e45a20b79691c149c830c739f246f3421e806a9

Verify download

printf '%s %s\n' 'd1edc23ff5dc5183976b83d60e45a20b79691c149c830c739f246f3421e806a9' 'python3-ironic_29.0.5-0+deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian Security

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-amd64:80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0

    Repository-signature verification record
    Signed-object SHA-256
    2dc86861c04386d3c511340d4f011a37acfd1cccdf3dbd3e054d6fe8e4118ebc
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Observed SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Result
    match verified
  • Debian SecurityAug 16, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-amd64:93b50125d5194aa1e8d7ae2152d44d685e40e43fb6ba24f598f984590fcf9bcd

    Repository-signature verification record
    Signed-object SHA-256
    7c1d4d3bac3066805a8f917d45cab035f9da07bc89d376d68c085a48873c9ca8
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Aug 17, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    93b50125d5194aa1e8d7ae2152d44d685e40e43fb6ba24f598f984590fcf9bcd
    Observed SHA-256
    93b50125d5194aa1e8d7ae2152d44d685e40e43fb6ba24f598f984590fcf9bcd
    Result
    match verified