{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* SECURITY UPDATE: integer overflow in new_x_NC_var() and unbounded ndims in\n v1h_get_NC_var() (CVE-2025-14933)\n * SECURITY UPDATE: stack buffer overflow in NC3_inq_var() (CVE-2025-14934)\n * SECURITY UPDATE: heap buffer overflow in NC3_inq_dim() (CVE-2025-14935)\n * SECURITY UPDATE: stack buffer overflow in NC3_inq_attname() (CVE-2025-14936)", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian11els/advisories/2026/clsa-2026_1789661255.json" } ], "tracking": { "current_release_date": "2026-09-17T16:08:39Z", "generator": { "date": "2026-09-17T16:08:39Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1789661255", "initial_release_date": "2026-09-17T16:08:39Z", "revision_history": [ { "date": "2026-09-17T16:08:39Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix CVE(s): CVE-2025-14933, CVE-2025-14934, CVE-2025-14935, CVE-2025-14936" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 11", "product": { "name": "Debian 11", "product_id": "Debian-11", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:11:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "product": { "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "product_id": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnetcdf-dev@1:4.7.4-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "product": { "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "product_id": "libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnetcdf18@1:4.7.4-1%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "product": { "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "product_id": "netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netcdf-bin@1:4.7.4-1%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "product": { "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "product_id": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnetcdf-dev@1:4.7.4-1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "product": { "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "product_id": "libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnetcdf18@1:4.7.4-1%2Btuxcare.els1?arch=arm64" } } }, { "category": "product_version", "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "product": { "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "product_id": "netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netcdf-bin@1:4.7.4-1%2Btuxcare.els1?arch=arm64" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "product": { "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "product_id": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnetcdf-dev@1:4.7.4-1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "product": { "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "product_id": "libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnetcdf18@1:4.7.4-1%2Btuxcare.els1?arch=armel" } } }, { "category": "product_version", "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "product": { "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "product_id": "netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netcdf-bin@1:4.7.4-1%2Btuxcare.els1?arch=armel" } } } ], "category": "architecture", "name": "armel" }, { "branches": [ { "category": "product_version", "name": "netcdf-doc-1:4.7.4-1+tuxcare.els1.all", "product": { "name": "netcdf-doc-1:4.7.4-1+tuxcare.els1.all", "product_id": "netcdf-doc-1:4.7.4-1+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/netcdf-doc@1:4.7.4-1%2Btuxcare.els1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64" }, "product_reference": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64" }, "product_reference": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel" }, "product_reference": "libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64" }, "product_reference": "libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64" }, "product_reference": "libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "libnetcdf18-1:4.7.4-1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel" }, "product_reference": "libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64 as a component of Debian 11", "product_id": "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64" }, "product_reference": "netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64 as a component of Debian 11", "product_id": "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64" }, "product_reference": "netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "netcdf-bin-1:4.7.4-1+tuxcare.els1.armel as a component of Debian 11", "product_id": "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel" }, "product_reference": "netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "netcdf-doc-1:4.7.4-1+tuxcare.els1.all as a component of Debian 11", "product_id": "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" }, "product_reference": "netcdf-doc-1:4.7.4-1+tuxcare.els1.all", "relates_to_product_reference": "Debian-11" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-14936", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of attribute names. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27269.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14936" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-25-1155/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1155/" } ], "release_date": "2025-12-23T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T16:07:36.945129Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255", "product_ids": [ "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-14933", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of NC variables. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27266.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14933" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-25-1151/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1151/" } ], "release_date": "2025-12-23T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T16:07:36.945129Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255", "product_ids": [ "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-14934", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of variable names. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27267.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14934" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-25-1152/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1152/" } ], "release_date": "2025-12-23T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T16:07:36.945129Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255", "product_ids": [ "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-14935", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of dimension names. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27168.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-14935" }, { "category": "external", "summary": "https://www.zerodayinitiative.com/advisories/ZDI-25-1154/", "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1154/" } ], "release_date": "2025-12-23T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-17T16:07:36.945129Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255", "product_ids": [ "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf-dev-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:libnetcdf18-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.amd64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.arm64", "Debian-11:netcdf-bin-1:4.7.4-1+tuxcare.els1.armel", "Debian-11:netcdf-doc-1:4.7.4-1+tuxcare.els1.all" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789661255" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }