# Runtime purge list (see final stage in Dockerfile): optional libs not needed in the container.
# Go stdlib CVEs: use audit-go-binaries.sh / rebuild-go-binaries.sh (not apt purge).
# FreeRDP / WinPR v2 and v3 (large CVE surface from RDP client stack pulled in as deps)
libwinpr2-2
libfreerdp2-2
libwinpr3-3
libfreerdp3-3
libfreerdp-client3-3
libgbm1
libgl1-mesa-dri
libglx-mesa0
mesa-libgallium
# steghide: no Debian security fix for CVE-2021-27211; use binwalk/foremost instead
steghide
linux-libc-dev
# CUPS printing stack (CLI-only container; no print services)
libcups2t64
