Root has patched CVE-2018-14031 in the rootio-hdf5 package for Root:Debian:12. Multiple fixed versions available.
{
"distro_version": "12",
"distro": "debian",
"source": "Root"
}"root.io.6"
"1.10.8+repack1-1"
18.0
true
[
"1.10.8+repack1-1.root.io.6",
"1.10.8+repack1-1.root.io.8",
"1.10.8+repack1-1.root.io.9",
"1.10.8+repack1-1.root.io.10",
"1.10.8+repack1-1.root.io.7",
"1.10.8+repack1-1.root.io.11",
"1.10.8+repack1-1.root.io.12",
"1.10.8+repack1-1.root.io.14",
"1.10.8+repack1-1.root.io.13",
"1.10.8+repack1-1.root.io.15",
"1.10.8+repack1-1.root.io.16",
"1.10.8+repack1-1.root.io.17",
"1.10.8+repack1-1.root.io.18",
"1.10.8+repack1-1.root.io.19",
"1.10.8+repack1-1.root.io.20",
"1.10.8+repack1-1.root.io.21",
"1.10.8+repack1-1.root.io.22",
"1.10.8+repack1-1.root.io.23"
]
"https://api.root.io/external/osv/ROOT-OS-DEBIAN-12-CVE-2018-14031.json"