1.13.0 - Melia-1 and Oak-1 Containers
Version 1.13.0 is now available for the Melia 1 and Oak 1 Container (Batch and Real-Time Transcriber, and GPU Transcription Inference Container). This release includes all changes since 1.3.0.
New
GPU
Melia 1 Realtime transcription: the first on-prem release of Melia 1 for realtime use.
Automatically detects the spoken language and handles mid-stream language switches. A new LanguageInfo message tells the client when a new language is detected.
Optional language_hints to bias recognition towards expected languages.
Support for ForceEndOfUtterance.
output_locale accepts a single locale or a list, with at most one per language (e.g. ["en-GB", "cmn-Hans"]).
Oak 1 medical model (Batch and Real-Time): a new model with the same base accuracy as Melia 1 and improved recognition of medical terminology.
Multiple output locales (Batch): output_locale accepts a list of locales.
Improvements
GPU
Updated Melia 1 model provides:
Improved transcription accuracy
Improved alphanumerics, with output more closely matching written form
Improved Hindi-English code-switching, with far fewer transliteration errors
Also:
Faster and more efficient batch transcription: about 25% higher throughput.
Stricter language_hints validation (Real-Time): a language_hints list containing "multi" is now rejected by request schema validation.
Fixes
GPU
Fixed occasional <unk> tokens and all-caps output in transcripts.
Fixed WAV files occasionally being misidentified during audio probing, which could return an empty transcript. Misidentified audio now returns an error instead of an empty result.
Updated the bundled ffmpeg to include a fix for valid WAV files being misidentified as another format during audio probing.
Fixed batch jobs with multiple output locales failing when a non-json_v2 format (e.g. SRT) was also requested.
Security fixes
Vulnerability Management
Software Bill of Materials (SBOM) is available for download from the corresponding release page in our Support Portal.
OpenVEX statements are also available for each image, download from the corresponding release page in our Support Portal. These encode our assessment of CVEs that don't affect this release.
How to read these tables. Each row is keyed by the package a scanner attributes the advisory to. That attribution comes from the distribution's own security tracker rather than from the advisory's subject, so where an advisory concerns a component bundled by a different project, the tracker may attribute it to a package this image does ship even though the vulnerable component itself is not present. Scanner coverage also differs: not every row below is reported by every tool.
The Usage Reporting Container (asr-usage) ships separately and is versioned independently; it is rescanned at every on-prem release, so its tables below carry its own version (0.5.3).
Patched, but still reported by scanners
The following vulnerabilities are fixed in the versions this release ships. Scanners that identify a package by the distribution's own records will continue to report them, because those records track the distribution's package version rather than the version installed here.
asr-usage-0.5.3
Component | Identified CVEs | Reason |
|---|---|---|
libsqlcipher1 | CVE-2019-8457, CVE-2020-27207 | Fixed in the version this image ships. |
sm-asr-transcriber-1.13.0
Component | Identified CVEs | Reason |
|---|---|---|
ffmpeg | CVE-2023-6601, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2023-49501, CVE-2023-49502, CVE-2023-49528, CVE-2023-50007, CVE-2023-50008, CVE-2024-7055, CVE-2024-31578, CVE-2024-31582, CVE-2024-32228, CVE-2024-32230, CVE-2024-35365, CVE-2024-35366, CVE-2024-35367, CVE-2024-35368, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617, CVE-2024-36618, CVE-2024-36619, CVE-2025-0518, CVE-2025-1594, CVE-2025-7700, CVE-2025-9951, CVE-2025-10256, CVE-2025-12343, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-59734, CVE-2025-63757, CVE-2026-6385, CVE-2026-30754, CVE-2026-30997, CVE-2026-30998, CVE-2026-30999, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348, CVE-2026-38349, CVE-2026-38350, CVE-2026-40962, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-64834, CVE-2026-64835, CVE-2026-65703, CVE-2026-65704, CVE-2026-65705, CVE-2026-65706, CVE-2026-66036, CVE-2026-66038, CVE-2026-66039, CVE-2026-70628, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75146, CVE-2026-75147 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
gstreamer1.0-plugins-bad | CVE-2025-3887 | Fixed in the Speechmatics build. The distribution has not released a fix, so scanners continue to report its own package version. |
gstreamer1.0-plugins-bad | CVE-2025-6663, CVE-2026-1940, CVE-2026-2923, CVE-2026-3081, CVE-2026-3082, CVE-2026-3084, CVE-2026-3086, CVE-2026-12891, CVE-2026-12892, CVE-2026-19387, CVE-2026-52718, CVE-2026-52719, CVE-2026-52720, CVE-2026-52721, CVE-2026-52722, CVE-2026-53701, CVE-2026-53702 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
gstreamer1.0-plugins-base | CVE-2026-85150, CVE-2026-86476, CVE-2026-119842 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
gstreamer1.0-plugins-extra | CVE-2025-3887, CVE-2025-6663, CVE-2026-1940, CVE-2026-2923, CVE-2026-3081, CVE-2026-3082, CVE-2026-3084, CVE-2026-3086, CVE-2026-12891, CVE-2026-12892, CVE-2026-19387, CVE-2026-52718, CVE-2026-52719, CVE-2026-52720, CVE-2026-52721, CVE-2026-52722, CVE-2026-53701, CVE-2026-53702 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
gstreamer1.0-plugins-good | CVE-2026-46471, CVE-2026-111183, CVE-2026-119843 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
gstreamer1.0-plugins-ugly | CVE-2026-2920, CVE-2026-2922, CVE-2026-19389, CVE-2026-53703, CVE-2026-53704 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libavcodec-extra62 | CVE-2023-6601, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2023-49501, CVE-2023-49502, CVE-2023-49528, CVE-2023-50007, CVE-2023-50008, CVE-2024-7055, CVE-2024-31578, CVE-2024-31582, CVE-2024-32228, CVE-2024-32230, CVE-2024-35365, CVE-2024-35366, CVE-2024-35367, CVE-2024-35368, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617, CVE-2024-36618, CVE-2024-36619, CVE-2025-0518, CVE-2025-1594, CVE-2025-7700, CVE-2025-9951, CVE-2025-10256, CVE-2025-12343, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-59734, CVE-2025-63757, CVE-2026-6385, CVE-2026-30754, CVE-2026-30997, CVE-2026-30998, CVE-2026-30999, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348, CVE-2026-38349, CVE-2026-38350, CVE-2026-40962, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-64834, CVE-2026-64835, CVE-2026-65703, CVE-2026-65704, CVE-2026-65705, CVE-2026-65706, CVE-2026-66036, CVE-2026-66038, CVE-2026-66039, CVE-2026-70628, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75146, CVE-2026-75147 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libavdevice62 | CVE-2023-6601, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2023-49501, CVE-2023-49502, CVE-2023-49528, CVE-2023-50007, CVE-2023-50008, CVE-2024-7055, CVE-2024-31578, CVE-2024-31582, CVE-2024-32228, CVE-2024-32230, CVE-2024-35365, CVE-2024-35366, CVE-2024-35367, CVE-2024-35368, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617, CVE-2024-36618, CVE-2024-36619, CVE-2025-0518, CVE-2025-1594, CVE-2025-7700, CVE-2025-9951, CVE-2025-10256, CVE-2025-12343, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-59734, CVE-2025-63757, CVE-2026-6385, CVE-2026-30754, CVE-2026-30997, CVE-2026-30998, CVE-2026-30999, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348, CVE-2026-38349, CVE-2026-38350, CVE-2026-40962, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-64834, CVE-2026-64835, CVE-2026-65703, CVE-2026-65704, CVE-2026-65705, CVE-2026-65706, CVE-2026-66036, CVE-2026-66038, CVE-2026-66039, CVE-2026-70628, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75146, CVE-2026-75147 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libavfilter11 | CVE-2023-6601, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2023-49501, CVE-2023-49502, CVE-2023-49528, CVE-2023-50007, CVE-2023-50008, CVE-2024-7055, CVE-2024-31578, CVE-2024-31582, CVE-2024-32228, CVE-2024-32230, CVE-2024-35365, CVE-2024-35366, CVE-2024-35367, CVE-2024-35368, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617, CVE-2024-36618, CVE-2024-36619, CVE-2025-0518, CVE-2025-1594, CVE-2025-7700, CVE-2025-9951, CVE-2025-10256, CVE-2025-12343, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-59734, CVE-2025-63757, CVE-2026-6385, CVE-2026-30754, CVE-2026-30997, CVE-2026-30998, CVE-2026-30999, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348, CVE-2026-38349, CVE-2026-38350, CVE-2026-40962, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-64834, CVE-2026-64835, CVE-2026-65703, CVE-2026-65704, CVE-2026-65705, CVE-2026-65706, CVE-2026-66036, CVE-2026-66038, CVE-2026-66039, CVE-2026-70628, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75146, CVE-2026-75147 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libavformat62 | CVE-2023-6601, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2023-49501, CVE-2023-49502, CVE-2023-49528, CVE-2023-50007, CVE-2023-50008, CVE-2024-7055, CVE-2024-31578, CVE-2024-31582, CVE-2024-32228, CVE-2024-32230, CVE-2024-35365, CVE-2024-35366, CVE-2024-35367, CVE-2024-35368, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617, CVE-2024-36618, CVE-2024-36619, CVE-2025-0518, CVE-2025-1594, CVE-2025-7700, CVE-2025-9951, CVE-2025-10256, CVE-2025-12343, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-59734, CVE-2025-63757, CVE-2026-6385, CVE-2026-30754, CVE-2026-30997, CVE-2026-30998, CVE-2026-30999, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348, CVE-2026-38349, CVE-2026-38350, CVE-2026-40962, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-64834, CVE-2026-64835, CVE-2026-65703, CVE-2026-65704, CVE-2026-65705, CVE-2026-65706, CVE-2026-66036, CVE-2026-66038, CVE-2026-66039, CVE-2026-70628, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75146, CVE-2026-75147 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libavutil60 | CVE-2023-6601, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2023-49501, CVE-2023-49502, CVE-2023-49528, CVE-2023-50007, CVE-2023-50008, CVE-2024-7055, CVE-2024-31578, CVE-2024-31582, CVE-2024-32228, CVE-2024-32230, CVE-2024-35365, CVE-2024-35366, CVE-2024-35367, CVE-2024-35368, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617, CVE-2024-36618, CVE-2024-36619, CVE-2025-0518, CVE-2025-1594, CVE-2025-7700, CVE-2025-9951, CVE-2025-10256, CVE-2025-12343, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-59734, CVE-2025-63757, CVE-2026-6385, CVE-2026-30754, CVE-2026-30997, CVE-2026-30998, CVE-2026-30999, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348, CVE-2026-38349, CVE-2026-38350, CVE-2026-40962, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-64834, CVE-2026-64835, CVE-2026-65703, CVE-2026-65704, CVE-2026-65705, CVE-2026-65706, CVE-2026-66036, CVE-2026-66038, CVE-2026-66039, CVE-2026-70628, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75146, CVE-2026-75147 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libgstreamer-gl1.0-0 | CVE-2026-85150, CVE-2026-86476, CVE-2026-119842 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libgstreamer-plugins-bad1.0-0 | CVE-2025-3887 | Fixed in the Speechmatics build. The distribution has not released a fix, so scanners continue to report its own package version. |
libgstreamer-plugins-bad1.0-0 | CVE-2025-6663, CVE-2026-1940, CVE-2026-2923, CVE-2026-3081, CVE-2026-3082, CVE-2026-3084, CVE-2026-3086, CVE-2026-12891, CVE-2026-12892, CVE-2026-19387, CVE-2026-52718, CVE-2026-52719, CVE-2026-52720, CVE-2026-52721, CVE-2026-52722, CVE-2026-53701, CVE-2026-53702 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libgstreamer-plugins-base1.0-0 | CVE-2026-85150, CVE-2026-86476, CVE-2026-119842 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libgstreamer-plugins-extra1.0-0 | CVE-2025-3887, CVE-2025-6663, CVE-2026-1940, CVE-2026-2923, CVE-2026-3081, CVE-2026-3082, CVE-2026-3084, CVE-2026-3086, CVE-2026-12891, CVE-2026-12892, CVE-2026-19387, CVE-2026-52718, CVE-2026-52719, CVE-2026-52720, CVE-2026-52721, CVE-2026-52722, CVE-2026-53701, CVE-2026-53702 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libswresample6 | CVE-2023-6601, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2023-49501, CVE-2023-49502, CVE-2023-49528, CVE-2023-50007, CVE-2023-50008, CVE-2024-7055, CVE-2024-31578, CVE-2024-31582, CVE-2024-32228, CVE-2024-32230, CVE-2024-35365, CVE-2024-35366, CVE-2024-35367, CVE-2024-35368, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617, CVE-2024-36618, CVE-2024-36619, CVE-2025-0518, CVE-2025-1594, CVE-2025-7700, CVE-2025-9951, CVE-2025-10256, CVE-2025-12343, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-59734, CVE-2025-63757, CVE-2026-6385, CVE-2026-30754, CVE-2026-30997, CVE-2026-30998, CVE-2026-30999, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348, CVE-2026-38349, CVE-2026-38350, CVE-2026-40962, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-64834, CVE-2026-64835, CVE-2026-65703, CVE-2026-65704, CVE-2026-65705, CVE-2026-65706, CVE-2026-66036, CVE-2026-66038, CVE-2026-66039, CVE-2026-70628, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75146, CVE-2026-75147 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
libswscale9 | CVE-2023-6601, CVE-2023-6602, CVE-2023-6604, CVE-2023-6605, CVE-2023-49501, CVE-2023-49502, CVE-2023-49528, CVE-2023-50007, CVE-2023-50008, CVE-2024-7055, CVE-2024-31578, CVE-2024-31582, CVE-2024-32228, CVE-2024-32230, CVE-2024-35365, CVE-2024-35366, CVE-2024-35367, CVE-2024-35368, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617, CVE-2024-36618, CVE-2024-36619, CVE-2025-0518, CVE-2025-1594, CVE-2025-7700, CVE-2025-9951, CVE-2025-10256, CVE-2025-12343, CVE-2025-22919, CVE-2025-22921, CVE-2025-25473, CVE-2025-59728, CVE-2025-59731, CVE-2025-59732, CVE-2025-59733, CVE-2025-59734, CVE-2025-63757, CVE-2026-6385, CVE-2026-30754, CVE-2026-30997, CVE-2026-30998, CVE-2026-30999, CVE-2026-38344, CVE-2026-38346, CVE-2026-38347, CVE-2026-38348, CVE-2026-38349, CVE-2026-38350, CVE-2026-40962, CVE-2026-64830, CVE-2026-64832, CVE-2026-64833, CVE-2026-64834, CVE-2026-64835, CVE-2026-65703, CVE-2026-65704, CVE-2026-65705, CVE-2026-65706, CVE-2026-66036, CVE-2026-66038, CVE-2026-66039, CVE-2026-70628, CVE-2026-70632, CVE-2026-75141, CVE-2026-75142, CVE-2026-75143, CVE-2026-75144, CVE-2026-75146, CVE-2026-75147 | Fixed upstream in the version this image ships, which is ahead of the distribution's package. Scanners report the distribution's version. |
Non-Applicable CVEs
The following vulnerabilities were reviewed and determined to have no security impact for this release.
asr-usage-0.5.3
Component | Identified CVEs | Reason |
|---|---|---|
apt | CVE-2026-109518 | The affected code is not used at runtime. |
bsdutils | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
gpgv | CVE-2026-118131 | The affected code is not present in the version shipped. |
libapt-pkg6.0t64 | CVE-2026-109518 | The affected code is not used at runtime. |
libblkid1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libc-bin | CVE-2026-84243 | The affected code is not used at runtime. |
libc6 | CVE-2026-84243 | The affected code is not used at runtime. |
libgnutls30t64 | CVE-2026-67693, CVE-2026-88647, CVE-2026-88648, CVE-2026-95184, CVE-2026-95209, CVE-2026-95210 | The affected code is not used at runtime. |
libmount1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libpcre2-8-0 | CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-103111 | The affected code is not used at runtime. |
libsmartcols1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libuuid1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
mount | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
perl-base | CVE-2026-82560 | The affected code is not present in the version shipped. |
ring | CVE-2025-4432 | The affected code is not used at runtime. |
util-linux | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
sm-asr-inference-server-1.13.0
Component | Identified CVEs | Reason |
|---|---|---|
apt | CVE-2026-109518 | The affected code is not used at runtime. |
binutils | CVE-2017-13716, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647, CVE-2026-6844, CVE-2026-6845, CVE-2026-6846, CVE-2026-15003, CVE-2026-19548, CVE-2026-90801, CVE-2026-90802, CVE-2026-90803, CVE-2026-90804, CVE-2026-90828, CVE-2026-90829, CVE-2026-90830, CVE-2026-90831, CVE-2026-91779, CVE-2026-91780, CVE-2026-91781, CVE-2026-91782 | The affected code is not used at runtime. |
binutils-common | CVE-2017-13716, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647, CVE-2026-6844, CVE-2026-6845, CVE-2026-6846, CVE-2026-15003, CVE-2026-19548, CVE-2026-90801, CVE-2026-90802, CVE-2026-90803, CVE-2026-90804, CVE-2026-90828, CVE-2026-90829, CVE-2026-90830, CVE-2026-90831, CVE-2026-91779, CVE-2026-91780, CVE-2026-91781, CVE-2026-91782 | The affected code is not used at runtime. |
binutils-x86-64-linux-gnu | CVE-2017-13716, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647, CVE-2026-6844, CVE-2026-6845, CVE-2026-6846, CVE-2026-15003, CVE-2026-19548, CVE-2026-90801, CVE-2026-90802, CVE-2026-90803, CVE-2026-90804, CVE-2026-90828, CVE-2026-90829, CVE-2026-90830, CVE-2026-90831, CVE-2026-91779, CVE-2026-91780, CVE-2026-91781, CVE-2026-91782 | The affected code is not used at runtime. |
bsdutils | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
cpp | CVE-2026-95619, CVE-2026-102010 | The affected code is not present in the version shipped. |
cpp-13 | CVE-2026-102010 | The affected code is not present in the version shipped. |
cpp-13-x86-64-linux-gnu | CVE-2026-102010 | The affected code is not present in the version shipped. |
cpp-x86-64-linux-gnu | CVE-2026-95619, CVE-2026-102010 | The affected code is not present in the version shipped. |
cuda-compat-13-0 | CVE-2026-47494, CVE-2026-47516, CVE-2026-47587, CVE-2026-47588, CVE-2026-47589, CVE-2026-47590, CVE-2026-47594 | The affected code cannot be reached with externally supplied input. |
cuda-compat-13-0 | CVE-2026-47489, CVE-2026-47491, CVE-2026-47492, CVE-2026-47496, CVE-2026-47500, CVE-2026-47501, CVE-2026-47503, CVE-2026-47504, CVE-2026-47506, CVE-2026-47507, CVE-2026-47508, CVE-2026-47509, CVE-2026-47510, CVE-2026-47511, CVE-2026-47512, CVE-2026-47513, CVE-2026-47514, CVE-2026-47515, CVE-2026-47517, CVE-2026-47518, CVE-2026-47522, CVE-2026-47523, CVE-2026-47524, CVE-2026-47525, CVE-2026-47526, CVE-2026-47527, CVE-2026-47528, CVE-2026-47529, CVE-2026-47530, CVE-2026-47531, CVE-2026-47532, CVE-2026-47533, CVE-2026-47534, CVE-2026-47537, CVE-2026-47538, CVE-2026-47540, CVE-2026-47542, CVE-2026-47543, CVE-2026-47545, CVE-2026-47546, CVE-2026-47547, CVE-2026-47548, CVE-2026-47549, CVE-2026-47551, CVE-2026-47552, CVE-2026-47553, CVE-2026-47554, CVE-2026-47555, CVE-2026-47556, CVE-2026-47557, CVE-2026-47558, CVE-2026-47559, CVE-2026-47560, CVE-2026-47561, CVE-2026-47562, CVE-2026-47563, CVE-2026-47565, CVE-2026-47566, CVE-2026-47567, CVE-2026-47568, CVE-2026-47569, CVE-2026-47573, CVE-2026-47586, CVE-2026-47591, CVE-2026-47592, CVE-2026-47595, CVE-2026-47596, CVE-2026-47597, CVE-2026-47598, CVE-2026-47599, CVE-2026-47600, CVE-2026-47601, CVE-2026-47602, CVE-2026-47603, CVE-2026-47604 | The affected code is not present in the version shipped. |
dirmngr | CVE-2026-118131 | The affected code is not present in the version shipped. |
dirmngr | CVE-2026-105712 | The affected code is not used at runtime. |
gcc | CVE-2026-95619, CVE-2026-102010 | The affected code is not present in the version shipped. |
gcc-13 | CVE-2026-102010 | The affected code is not present in the version shipped. |
gcc-13-base | CVE-2026-102010 | The affected code is not present in the version shipped. |
gcc-13-x86-64-linux-gnu | CVE-2026-102010 | The affected code is not present in the version shipped. |
gcc-x86-64-linux-gnu | CVE-2026-95619, CVE-2026-102010 | The affected code is not present in the version shipped. |
gnupg-utils | CVE-2026-118131 | The affected code is not present in the version shipped. |
gnupg-utils | CVE-2026-105712 | The affected code is not used at runtime. |
gpg | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpg | CVE-2026-105712 | The affected code is not used at runtime. |
gpg-agent | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpg-agent | CVE-2026-105712 | The affected code is not used at runtime. |
gpgconf | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpgconf | CVE-2026-105712 | The affected code is not used at runtime. |
gpgsm | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpgsm | CVE-2026-105712 | The affected code is not used at runtime. |
gpgv | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpgv | CVE-2026-105712 | The affected code is not used at runtime. |
keyboxd | CVE-2026-118131 | The affected code is not present in the version shipped. |
keyboxd | CVE-2026-105712 | The affected code is not used at runtime. |
krb5-locales | CVE-2026-107708, CVE-2026-107778 | The affected code is not used at runtime. |
libapt-pkg6.0t64 | CVE-2026-109518 | The affected code is not used at runtime. |
libbinutils | CVE-2017-13716, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647, CVE-2026-6844, CVE-2026-6845, CVE-2026-6846, CVE-2026-15003, CVE-2026-19548, CVE-2026-90801, CVE-2026-90802, CVE-2026-90803, CVE-2026-90804, CVE-2026-90828, CVE-2026-90829, CVE-2026-90830, CVE-2026-90831, CVE-2026-91779, CVE-2026-91780, CVE-2026-91781, CVE-2026-91782 | The affected code is not used at runtime. |
libblkid1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libc-bin | CVE-2026-84243 | The affected code cannot be reached with externally supplied input. |
libc-dev-bin | CVE-2026-84243 | The affected code cannot be reached with externally supplied input. |
libc-devtools | CVE-2026-84243 | The affected code cannot be reached with externally supplied input. |
libc6 | CVE-2026-84243 | The affected code cannot be reached with externally supplied input. |
libctf-nobfd0 | CVE-2017-13716, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647, CVE-2026-6844, CVE-2026-6845, CVE-2026-6846, CVE-2026-15003, CVE-2026-19548, CVE-2026-90801, CVE-2026-90802, CVE-2026-90803, CVE-2026-90804, CVE-2026-90828, CVE-2026-90829, CVE-2026-90830, CVE-2026-90831, CVE-2026-91779, CVE-2026-91780, CVE-2026-91781, CVE-2026-91782 | The affected code is not used at runtime. |
libctf0 | CVE-2017-13716, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647, CVE-2026-6844, CVE-2026-6845, CVE-2026-6846, CVE-2026-15003, CVE-2026-19548, CVE-2026-90801, CVE-2026-90802, CVE-2026-90803, CVE-2026-90804, CVE-2026-90828, CVE-2026-90829, CVE-2026-90830, CVE-2026-90831, CVE-2026-91779, CVE-2026-91780, CVE-2026-91781, CVE-2026-91782 | The affected code is not used at runtime. |
libexpat1 | CVE-2025-66382, CVE-2026-77214, CVE-2026-93990, CVE-2026-102633, CVE-2026-113351, CVE-2026-115506, CVE-2026-117610, CVE-2026-118370 | The affected code cannot be reached with externally supplied input. |
libfdisk1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libgcc-13-dev | CVE-2026-102010 | The affected code is not present in the version shipped. |
libgnutls30t64 | CVE-2026-67693, CVE-2026-88647, CVE-2026-88648, CVE-2026-95184, CVE-2026-95209, CVE-2026-95210 | The affected code is not used at runtime. |
libgprofng0 | CVE-2017-13716, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647, CVE-2026-6844, CVE-2026-6845, CVE-2026-6846, CVE-2026-15003, CVE-2026-19548, CVE-2026-90801, CVE-2026-90802, CVE-2026-90803, CVE-2026-90804, CVE-2026-90828, CVE-2026-90829, CVE-2026-90830, CVE-2026-90831, CVE-2026-91779, CVE-2026-91780, CVE-2026-91781, CVE-2026-91782 | The affected code is not used at runtime. |
libgssapi-krb5-2 | CVE-2026-107708, CVE-2026-107778 | The affected code is not used at runtime. |
libheif-plugin-aomdec | CVE-2026-120208 | The affected code is not present in the version shipped. |
libheif-plugin-aomenc | CVE-2026-120208 | The affected code is not present in the version shipped. |
libheif1 | CVE-2026-120208 | The affected code is not present in the version shipped. |
libk5crypto3 | CVE-2026-107708, CVE-2026-107778 | The affected code is not used at runtime. |
libkrb5-3 | CVE-2026-107708, CVE-2026-107778 | The affected code is not used at runtime. |
libkrb5support0 | CVE-2026-107708, CVE-2026-107778 | The affected code is not used at runtime. |
libmount1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libpcre2-8-0 | CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161, CVE-2026-103111 | The affected code is not used at runtime. |
libperl5.38t64 | CVE-2026-82560 | The affected code is not used at runtime. |
libpython3.12-minimal | CVE-2026-7210 | The affected code cannot be reached with externally supplied input. |
libpython3.12-minimal | CVE-2026-57178, CVE-2026-84366 | The affected code is not present in the version shipped. |
libpython3.12-minimal | CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049, CVE-2026-115557 | The affected code is not used at runtime. |
libpython3.12-stdlib | CVE-2026-7210 | The affected code cannot be reached with externally supplied input. |
libpython3.12-stdlib | CVE-2026-57178, CVE-2026-84366 | The affected code is not present in the version shipped. |
libpython3.12-stdlib | CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049, CVE-2026-115557 | The affected code is not used at runtime. |
libpython3.12t64 | CVE-2026-7210 | The affected code cannot be reached with externally supplied input. |
libpython3.12t64 | CVE-2026-57178, CVE-2026-84366 | The affected code is not present in the version shipped. |
libpython3.12t64 | CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049, CVE-2026-115557 | The affected code is not used at runtime. |
libsasl2-2 | CVE-2026-107161 | The affected code is not used at runtime. |
libsasl2-modules-db | CVE-2026-107161 | The affected code is not used at runtime. |
libsframe1 | CVE-2017-13716, CVE-2025-1150, CVE-2025-1151, CVE-2025-1152, CVE-2025-66861, CVE-2025-66862, CVE-2025-66863, CVE-2025-66864, CVE-2025-66865, CVE-2025-66866, CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647, CVE-2025-69648, CVE-2025-69651, CVE-2025-69652, CVE-2026-3441, CVE-2026-3442, CVE-2026-4647, CVE-2026-6844, CVE-2026-6845, CVE-2026-6846, CVE-2026-15003, CVE-2026-19548, CVE-2026-90801, CVE-2026-90802, CVE-2026-90803, CVE-2026-90804, CVE-2026-90828, CVE-2026-90829, CVE-2026-90830, CVE-2026-90831, CVE-2026-91779, CVE-2026-91780, CVE-2026-91781, CVE-2026-91782 | The affected code is not used at runtime. |
libsmartcols1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libsqlite3-0 | CVE-2026-119371, CVE-2026-119372, CVE-2026-119373, CVE-2026-119374, CVE-2026-119375, CVE-2026-119376, CVE-2026-119377, CVE-2026-119378, CVE-2026-119379, CVE-2026-119586, CVE-2026-119591 | The affected code is not used at runtime. |
libtiff6 | CVE-2026-4775, CVE-2026-12912, CVE-2026-18495, CVE-2026-36849 | The affected code is not used at runtime. |
libuuid1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
mount | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
patch | CVE-2018-6952, CVE-2019-20633, CVE-2021-45261, CVE-2026-56288, CVE-2026-56289 | The affected code is not used at runtime. |
perl | CVE-2026-82560 | The affected code is not used at runtime. |
perl-base | CVE-2026-82560 | The affected code is not used at runtime. |
perl-modules-5.38 | CVE-2026-82560 | The affected code is not used at runtime. |
python3.12 | CVE-2026-7210 | The affected code cannot be reached with externally supplied input. |
python3.12 | CVE-2026-57178, CVE-2026-84366 | The affected code is not present in the version shipped. |
python3.12 | CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049, CVE-2026-115557 | The affected code is not used at runtime. |
python3.12-minimal | CVE-2026-7210 | The affected code cannot be reached with externally supplied input. |
python3.12-minimal | CVE-2026-57178, CVE-2026-84366 | The affected code is not present in the version shipped. |
python3.12-minimal | CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049, CVE-2026-115557 | The affected code is not used at runtime. |
util-linux | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
sm-asr-transcriber-1.13.0
Component | Identified CVEs | Reason |
|---|---|---|
apt | CVE-2026-109518 | The affected code is not used at runtime. |
autobahn | CVE-2026-77528 | The affected code is not used at runtime. |
bsdutils | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
dirmngr | CVE-2026-118131 | The affected code is not present in the version shipped. |
ffmpeg | CVE-2026-107660, CVE-2026-107675, CVE-2026-107677 | The affected code is not present in the version shipped. |
ffmpeg | CVE-2025-25467, CVE-2026-107676, CVE-2026-107696 | The affected code is not used at runtime. |
glib-networking | CVE-2026-103963 | The affected code is not present in the version shipped. |
glib-networking-common | CVE-2026-103963 | The affected code is not present in the version shipped. |
glib-networking-services | CVE-2026-103963 | The affected code is not present in the version shipped. |
gnupg | CVE-2026-118131 | The affected code is not present in the version shipped. |
gnupg-utils | CVE-2026-118131 | The affected code is not present in the version shipped. |
gnupg2 | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpg | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpg-agent | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpgconf | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpgsm | CVE-2026-118131 | The affected code is not present in the version shipped. |
gpgv | CVE-2026-118131 | The affected code is not present in the version shipped. |
keyboxd | CVE-2026-118131 | The affected code is not present in the version shipped. |
libapt-pkg6.0t64 | CVE-2026-109518 | The affected code is not used at runtime. |
libavcodec-extra62 | CVE-2026-107660, CVE-2026-107675, CVE-2026-107677 | The affected code is not present in the version shipped. |
libavcodec-extra62 | CVE-2025-25467, CVE-2026-107676, CVE-2026-107696 | The affected code is not used at runtime. |
libavdevice62 | CVE-2026-107660, CVE-2026-107675, CVE-2026-107677 | The affected code is not present in the version shipped. |
libavdevice62 | CVE-2025-25467, CVE-2026-107676, CVE-2026-107696 | The affected code is not used at runtime. |
libavfilter11 | CVE-2026-107660, CVE-2026-107675, CVE-2026-107677 | The affected code is not present in the version shipped. |
libavfilter11 | CVE-2025-25467, CVE-2026-107676, CVE-2026-107696 | The affected code is not used at runtime. |
libavformat62 | CVE-2026-107660, CVE-2026-107675, CVE-2026-107677 | The affected code is not present in the version shipped. |
libavformat62 | CVE-2025-25467, CVE-2026-107676, CVE-2026-107696 | The affected code is not used at runtime. |
libavutil60 | CVE-2026-107660, CVE-2026-107675, CVE-2026-107677 | The affected code is not present in the version shipped. |
libavutil60 | CVE-2025-25467, CVE-2026-107676, CVE-2026-107696 | The affected code is not used at runtime. |
libblkid1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libc-bin | CVE-2026-84243 | The affected code cannot be reached with externally supplied input. |
libc6 | CVE-2026-84243 | The affected code cannot be reached with externally supplied input. |
libelf1t64 | CVE-2025-1352, CVE-2025-1376 | The affected code is not present in the version shipped. |
libexpat1 | CVE-2025-66382, CVE-2026-77214, CVE-2026-93990, CVE-2026-102633, CVE-2026-113351, CVE-2026-115506, CVE-2026-117610, CVE-2026-118370 | The affected code is not used at runtime. |
libfaad2 | CVE-2019-5459 | The affected code is not present in the version shipped. |
libfdisk1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libfluidsynth3 | CVE-2025-68617 | The affected code is not present in the version shipped. |
libgssapi-krb5-2 | CVE-2026-107778 | The affected code is not used at runtime. |
libharfbuzz0b | CVE-2026-113679 | The affected code cannot be reached with externally supplied input. |
libjson-glib-1.0-0 | CVE-2026-120194 | The affected code is not used at runtime. |
libjson-glib-1.0-common | CVE-2026-120194 | The affected code is not used at runtime. |
libk5crypto3 | CVE-2026-107778 | The affected code is not used at runtime. |
libkrb5-3 | CVE-2026-107778 | The affected code is not used at runtime. |
libkrb5support0 | CVE-2026-107778 | The affected code is not used at runtime. |
libmount1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libopenexr-3-1-30 | CVE-2021-45942, CVE-2023-5841, CVE-2024-31047, CVE-2025-12495, CVE-2025-12839, CVE-2026-27622, CVE-2026-34380, CVE-2026-34588, CVE-2026-41142, CVE-2026-42216, CVE-2026-42217 | The affected code is not used at runtime. |
libopenh264-7 | CVE-2025-27091 | The affected code is not used at runtime. |
libpcre2-8-0 | CVE-2026-86145, CVE-2026-103111 | The affected code cannot be reached with externally supplied input. |
libpcre2-8-0 | CVE-2026-89157, CVE-2026-89158, CVE-2026-89161 | The affected code is not used at runtime. |
libperl5.38t64 | CVE-2026-82560 | The affected code is not used at runtime. |
libpipewire-0.3-0t64 | CVE-2026-5674 | The affected code is not used at runtime. |
libpixman-1-0 | CVE-2023-37769 | The affected code cannot be reached with externally supplied input. |
libpython3.12-minimal | CVE-2026-57178, CVE-2026-84366, CVE-2026-115557 | The affected code is not present in the version shipped. |
libpython3.12-minimal | CVE-2026-7210, CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049 | The affected code is not used at runtime. |
libpython3.12-stdlib | CVE-2026-57178, CVE-2026-84366, CVE-2026-115557 | The affected code is not present in the version shipped. |
libpython3.12-stdlib | CVE-2026-7210, CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049 | The affected code is not used at runtime. |
libsasl2-2 | CVE-2026-107161 | The affected code is not used at runtime. |
libsasl2-modules-db | CVE-2026-107161 | The affected code is not used at runtime. |
libslang2 | CVE-2023-45927, CVE-2023-45929 | The affected code is not used at runtime. |
libsmartcols1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libsndfile1 | CVE-2025-52194, CVE-2026-37555, CVE-2026-88372 | The affected code is not used at runtime. |
libsoup-3.0-0 | CVE-2025-9901, CVE-2025-14523, CVE-2025-32049, CVE-2026-0716, CVE-2026-0719, CVE-2026-1760, CVE-2026-1761, CVE-2026-2436, CVE-2026-2443, CVE-2026-3099, CVE-2026-3633, CVE-2026-3634, CVE-2026-12478, CVE-2026-12547, CVE-2026-12548, CVE-2026-15709, CVE-2026-15711, CVE-2026-15714, CVE-2026-102555, CVE-2026-102556, CVE-2026-102557, CVE-2026-102558, CVE-2026-102559, CVE-2026-102560, CVE-2026-103399 | The affected code is not used at runtime. |
libsoup-3.0-common | CVE-2025-9901, CVE-2025-14523, CVE-2025-32049, CVE-2026-0716, CVE-2026-0719, CVE-2026-1760, CVE-2026-1761, CVE-2026-2436, CVE-2026-2443, CVE-2026-3099, CVE-2026-3633, CVE-2026-3634, CVE-2026-12478, CVE-2026-12547, CVE-2026-12548, CVE-2026-15709, CVE-2026-15711, CVE-2026-15714, CVE-2026-102555, CVE-2026-102556, CVE-2026-102557, CVE-2026-102558, CVE-2026-102559, CVE-2026-102560, CVE-2026-103399 | The affected code is not used at runtime. |
libspa-0.2-modules | CVE-2026-5674 | The affected code is not used at runtime. |
libspeex1 | CVE-2026-116741 | The affected code is not used at runtime. |
libsqlite3-0 | CVE-2026-119373, CVE-2026-119374, CVE-2026-119379, CVE-2026-119586 | The affected code is not used at runtime. |
libswresample6 | CVE-2026-107660, CVE-2026-107675, CVE-2026-107677 | The affected code is not present in the version shipped. |
libswresample6 | CVE-2025-25467, CVE-2026-107676, CVE-2026-107696 | The affected code is not used at runtime. |
libswscale9 | CVE-2026-107660, CVE-2026-107675, CVE-2026-107677 | The affected code is not present in the version shipped. |
libswscale9 | CVE-2025-25467, CVE-2026-107676, CVE-2026-107696 | The affected code is not used at runtime. |
libtag1v5 | CVE-2023-47466 | The affected code is not used at runtime. |
libtag1v5-vanilla | CVE-2023-47466 | The affected code is not used at runtime. |
libtiff6 | CVE-2026-4775, CVE-2026-12912 | The affected code is not used at runtime. |
libuuid1 | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
libvo-amrwbenc0 | CVE-2019-2128 | The affected code is not used at runtime. |
libx264-164 | CVE-2025-25467 | The affected code is not used at runtime. |
libxi6 | CVE-2026-93543, CVE-2026-109089, CVE-2026-109090 | The affected code is not used at runtime. |
libzvbi-common | CVE-2025-2173, CVE-2025-2174, CVE-2025-2175, CVE-2025-2176, CVE-2025-2177 | The affected code is not used at runtime. |
libzvbi0t64 | CVE-2025-2173, CVE-2025-2174, CVE-2025-2175, CVE-2025-2176, CVE-2025-2177 | The affected code is not used at runtime. |
mount | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
opentelemetry-api | CVE-2026-114603 | The affected code is not used at runtime. |
perl | CVE-2026-82560 | The affected code is not used at runtime. |
perl-base | CVE-2026-82560 | The affected code is not used at runtime. |
perl-modules-5.38 | CVE-2026-82560 | The affected code is not used at runtime. |
pyjwt | CVE-2026-101918, CVE-2026-102275 | The affected code is not used at runtime. |
python3-pip | CVE-2024-35195, CVE-2025-8869, CVE-2025-66418, CVE-2025-66471, CVE-2026-1703, CVE-2026-3219, CVE-2026-6357, CVE-2026-8643, CVE-2026-13346, CVE-2026-21441, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409 | The affected code is not used at runtime. |
python3-setuptools | CVE-2024-6345, CVE-2025-47273 | The affected code is not used at runtime. |
python3-wheel | CVE-2026-24049 | The affected code is not used at runtime. |
python3.12 | CVE-2026-57178, CVE-2026-84366, CVE-2026-115557 | The affected code is not present in the version shipped. |
python3.12 | CVE-2026-7210, CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049 | The affected code is not used at runtime. |
python3.12-minimal | CVE-2026-57178, CVE-2026-84366, CVE-2026-115557 | The affected code is not present in the version shipped. |
python3.12-minimal | CVE-2026-7210, CVE-2026-11940, CVE-2026-11972, CVE-2026-19445, CVE-2026-19553, CVE-2026-82049 | The affected code is not used at runtime. |
requests | CVE-2026-25645 | The affected code is not used at runtime. |
setuptools | GHSA-xmj3-9gf7-h52w, CVE-2026-59890 | The affected code is not used at runtime. |
util-linux | CVE-2026-76642, CVE-2026-78408, CVE-2026-78409, CVE-2026-78410 | The affected code is not used at runtime. |
zipp | CVE-2024-5569 | The affected code is not used at runtime. |
Reviewed, no upstream fix available
The following vulnerabilities were reviewed and do apply to this release, with no fix released upstream at the time of writing. They are tracked and will be taken up when a fix becomes available.
sm-asr-transcriber-1.13.0
Component | Identified CVEs |
|---|---|
ffmpeg | CVE-2026-107678 |
glib-networking | CVE-2026-10028 |
glib-networking-common | CVE-2026-10028 |
glib-networking-services | CVE-2026-10028 |
libavcodec-extra62 | CVE-2026-107678 |
libavdevice62 | CVE-2026-107678 |
libavfilter11 | CVE-2026-107678 |
libavformat62 | CVE-2026-107678 |
libavutil60 | CVE-2026-107678 |
libfluidsynth3 | CVE-2025-56225 |
libgnutls30t64 | CVE-2026-67693, CVE-2026-88647, CVE-2026-88648, CVE-2026-95184, CVE-2026-95209, CVE-2026-95210 |
libopenjp2-7 | CVE-2023-39328, CVE-2023-39329 |
libsoup-3.0-0 | CVE-2025-4035, CVE-2026-2369, CVE-2026-2708, CVE-2026-3632, CVE-2026-15712, CVE-2026-15713, CVE-2026-66337, CVE-2026-66338 |
libsoup-3.0-common | CVE-2025-4035, CVE-2026-2369, CVE-2026-2708, CVE-2026-3632, CVE-2026-15712, CVE-2026-15713, CVE-2026-66337, CVE-2026-66338 |
libswresample6 | CVE-2026-107678 |
libswscale9 | CVE-2026-107678 |