Package: qgit (2.10-2+b2)

Qt application for viewing GIT trees

Other Packages Related to qgit:

  • dep: [libc6] (>= 2.34)

    GNU C Library: Shared libraries

  • dep: [libgcc-s1] (>= 3.0)

    GCC support library

  • dep: [libqt5core5t64] (>= 5.15.1)

    Qt 5 core module

  • dep: [libqt5gui5t64] (>= 5.14.1)

    Qt 5 GUI module

  • dep: [libqt5gui5-gles] (>= 5.14.1)

    Qt 5 GUI module — OpenGL ES variant

  • dep: [libqt5widgets5t64] (>= 5.14.1)

    Qt 5 widgets module

  • dep: [libstdc++6] (>= 14)

    GNU Standard C++ Library v3

  • dep: [git]

    fast, scalable, distributed revision control system

Download qgit

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64414 KiB1.4 MiBlist of filesDownload
arm64373 KiB1.4 MiBlist of filesDownload

Package file paths (13)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/qgit
  • /usr/share/applications/qgit.desktop
  • /usr/share/doc/qgit/changelog.Debian.amd64.gz
  • /usr/share/doc/qgit/changelog.Debian.arm64.gz
  • /usr/share/doc/qgit/changelog.Debian.gz
  • /usr/share/doc/qgit/copyright
  • /usr/share/doc/qgit/exception_manager.txt.gz
  • /usr/share/doc/qgit/README.adoc.gz
  • /usr/share/doc/qgit/TODO.txt
  • /usr/share/icons/hicolor/48x48/apps/qgit.png
  • /usr/share/icons/hicolor/scalable/apps/qgit.svg
  • /usr/share/man/man1/qgit.1.gz
  • /usr/share/metainfo/qgit.appdata.xml

Field source: Debian 13 (Trixie) main arm64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.10-2+b2trixie / mainarm64Debian 13 · main · arm64338 KiB1.3 MiBpool/main/q/qgit/qgit_2.10-2+b2_arm64.deb
2.10-2+b1trixie / mainamd64Debian 13 · main · amd64371 KiB1.2 MiBpool/main/q/qgit/qgit_2.10-2+b1_amd64.deb
2.13-1~bpo13+1trixie-backports / mainamd64Debian 13 backports · main · amd64414 KiB1.4 MiBpool/main/q/qgit/qgit_2.13-1~bpo13+1_amd64.deb
2.13-1~bpo13+1trixie-backports / mainarm64Debian 13 backports · main · arm64373 KiB1.4 MiBpool/main/q/qgit/qgit_2.13-1~bpo13+1_arm64.deb

Field source: Debian 13 (Trixie) main arm64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

Fixed and unaffected versions (1)
CVESeverityVersion impact
[CVE-2007-4631]

Published:

qgit: CVE-2007-4631

MediumFixed
Details (4)
  • 2.10-2+b1 · amd64 · trixie

    Fixed · Fixed: 1.5.5-1.1

    dsa · qgit · debian · 13

  • 2.10-2+b2 · arm64 · trixie

    Fixed · Fixed: 1.5.5-1.1

    dsa · qgit · debian · 13

  • 2.13-1~bpo13+1 · amd64 · trixie-backports

    Fixed · Fixed: 1.5.5-1.1

    dsa · qgit · debian · 13

  • 2.13-1~bpo13+1 · arm64 · trixie-backports

    Fixed · Fixed: 1.5.5-1.1

    dsa · qgit · debian · 13

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.10-2+b2 / arm64Observed Sep 1, 2026sha256 58036ea53068…d0b2c125Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 58036ea53068cbe47810956f6be67f026ffeb8a2bc42c4de330d0b55d0b2c125

Verify download

printf '%s %s\n' '58036ea53068cbe47810956f6be67f026ffeb8a2bc42c4de330d0b55d0b2c125' 'qgit_2.10-2+b2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

2.10-2+b1 / amd64Observed Sep 1, 2026sha256 234744bf8244…55efb9f2Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 234744bf8244771fe8eeb286f0099ace456cb783f13a2f2ac65a4fb455efb9f2

Verify download

printf '%s %s\n' '234744bf8244771fe8eeb286f0099ace456cb783f13a2f2ac65a4fb455efb9f2' 'qgit_2.10-2+b1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

2.13-1~bpo13+1 / amd64Observed Sep 1, 2026sha256 85a8f133a01b…3ce222dcSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 85a8f133a01b68083e14227cf82c4f725af8ee8f8cfcd64a389401bc3ce222dc

Verify download

printf '%s %s\n' '85a8f133a01b68083e14227cf82c4f725af8ee8f8cfcd64a389401bc3ce222dc' 'qgit_2.13-1~bpo13+1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main amd64

2.13-1~bpo13+1 / arm64Observed Sep 1, 2026sha256 1c7dfeabbf76…4e135db3Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 1c7dfeabbf76911b079bfc236f2680232203bddc67d2d59d50bc655d4e135db3

Verify download

printf '%s %s\n' '1c7dfeabbf76911b079bfc236f2680232203bddc67d2d59d50bc655d4e135db3' 'qgit_2.13-1~bpo13+1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) backports main arm64

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Observed SHA-256
    d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357

    Repository-signature verification record
    Signed-object SHA-256
    d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Observed SHA-256
    acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified