{"cves":[{"id":"CVE-2026-35193","published":"2026-06-03T13:00:00","updated_at":"2026-06-18T18:44:09.927646+00:00","description":"\nAn issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.\n`django.middleware.cache.UpdateCacheMiddleware` in Django does not add\n`Authorization` to the `Vary` response header for requests bearing that\nheader without `Cache-Control: public`, which allows remote attackers to\nread private cached responses via unauthenticated requests to the same URL.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were\nnot evaluated and may also be affected.\nDjango would like to thank Shai Berger for reporting this issue.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nThe Django developers have rated this issue as being low severity"}],"codename":null,"priority":"low","cvss3":3.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.3,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-35193"],"bugs":[""],"patches":{"python-django":[]},"tags":{},"packages":[{"name":"python-django","source":"https://ubuntu.com/security/cve?package=python-django","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-django","debian":"https://tracker.debian.org/pkg/python-django","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-47065","published":"2026-06-03T11:16:00","updated_at":"2026-06-18T18:49:17.004283+00:00","description":"\nZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass\nvia java.lang.reflect.Proxy\nAssessment: Fully addressed.\nWhen the serialised stream contains a TC_PROXYCLASSDESC (the marker\nfor a java.lang.reflect.Proxy ), JDK’s ObjectInputStream.readProxyDesc()\n is\ndispatched. JDK then calls the default\nObjectInputStream.resolveProxyClass(interfaces) implementation, which\nperforms Class.forName(intf, false, latestUserDefinedLoader()) for EACH\ninterface name and constructs the proxy class — bypassing the accepted\n classes list .\nZDRES-233: Class.forName(name, initialize=true, classLoader) in\nreadClassDescriptor Triggers Static Initialiser of Allow-Listed Classes\nAssessment: Fully addressed.\nFor ANY class on the allow-list, deserialising a stream that names it\ntriggers the class’s\n (static initialiser) BEFORE any instance is constructed. This means an\nattacker who supplies a class name on the allow-list (e.g., the\ndeveloper wrote accept(“com.myapp.*\") , attacker supplies\ncom.myapp.SomeClass ) causes <clinit> of SomeClass — and many\nreal-world classes have side-effecting static initialisers\nBoth issues have been fixed.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-47065"],"bugs":[""],"patches":{"mina2":[]},"tags":{},"packages":[{"name":"mina2","source":"https://ubuntu.com/security/cve?package=mina2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mina2","debian":"https://tracker.debian.org/pkg/mina2","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8465-1"],"notices":[{"id":"USN-8465-1","title":"Apache MINA vulnerabilities","summary":"Apache MINA could be made to run programs if it received specially crafted\nnetwork traffic.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-06-23T15:35:56.329703","description":"It was discovered that Apache MINA lacked an acceptMatchers allowlist\nmechanism to restrict which classes could be deserialized. An attacker\ncould use this to execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-52046)\n\nIt was discovered that Apache MINA's deserialization filter could be\nbypassed via multiple code paths. An attacker could use this to execute\narbitrary code by sending a specially crafted serialized object over the\nnetwork. (CVE-2026-42778, CVE-2026-42779, CVE-2026-47065)","is_hidden":false,"release_packages":{"jammy":[{"name":"mina2","version":"2.1.5-1ubuntu0.1~esm1","description":"Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily","is_source":true},{"name":"libmina2-java","version":"2.1.5-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mina2","version_link":null,"pocket":"esm-apps"},{"name":"libmina2-java-doc","version":"2.1.5-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mina2","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"mina2","version":"2.2.1-3ubuntu0.1~esm1","description":"Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily","is_source":true},{"name":"libmina2-java","version":"2.2.1-3ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mina2","version_link":null,"pocket":"esm-apps"}],"resolute":[{"name":"mina2","version":"2.2.1-4ubuntu0.1~esm1","description":"Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily","is_source":true},{"name":"libmina2-java","version":"2.2.1-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mina2","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2026-47065","CVE-2026-42779","CVE-2024-52046","CVE-2026-42778"]}]},{"id":"CVE-2026-5078","published":"2026-06-03T08:16:00","updated_at":"2026-06-18T18:50:18.015983+00:00","description":"\nImpact: The morgan logging middleware's :remote-user token extracts the\nBasic auth username from the Authorization request header and writes it to\nthe log stream without neutralizing control characters. An unauthenticated\nattacker can send a crafted Authorization Basic header containing CR or LF\nbytes to inject forged log lines, breaking the one-request-per-line\nstructure of access logs and enabling log forgery against downstream log\nconsumers. The built-in combined, common, default, and short formats are\naffected, as well as any custom format that references :remote-user.\nAffected versions: morgan 1.2.0 through 1.10.1. Patches: upgrade to morgan\n1.11.0, which neutralizes control characters in the :remote-user token\noutput. Workarounds: use a custom format string that does not include\n:remote-user.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-5078","https://cna.openjsf.org/security-advisories.html","https://github.com/expressjs/morgan/security/advisories/GHSA-4vj7-5mj6-jm8m"],"bugs":[""],"patches":{"node-morgan":[]},"tags":{},"packages":[{"name":"node-morgan","source":"https://ubuntu.com/security/cve?package=node-morgan","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-morgan","debian":"https://tracker.debian.org/pkg/node-morgan","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-9516","published":"2026-06-03T01:16:00","updated_at":"2026-06-18T18:50:57.591090+00:00","description":"\nCpanel::JSON::XS versions before 4.41 for Perl allow denial of service via\nUTF-8 BOM prefixed input when a decode filter callback throws.\nTo skip a leading 3-byte UTF-8 BOM, decode_json() advances the input\nscalar's string pointer past the mark with SvPV_set() and restores it only\non the normal return path. When decoding aborts through a Perl exception,\nfor example a filter_json_object callback that croaks, the restore is\nskipped and the scalar is left with its string pointer offset into its own\nbuffer and a shortened length.\nWhen that scalar is later freed, the allocator receives an invalid pointer\nand the interpreter aborts. A single BOM prefixed document decoded with a\nthrowing filter callback crashes any caller.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-9516"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138273"],"patches":{"libcpanel-json-xs-perl":[]},"tags":{},"packages":[{"name":"libcpanel-json-xs-perl","source":"https://ubuntu.com/security/cve?package=libcpanel-json-xs-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libcpanel-json-xs-perl","debian":"https://tracker.debian.org/pkg/libcpanel-json-xs-perl","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.41-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-9334","published":"2026-06-03T01:16:00","updated_at":"2026-06-18T18:50:57.591090+00:00","description":"\nCpanel::JSON::XS versions before 4.41 for Perl allow type confusion via\nduplicate object keys when dupkeys_as_arrayref is enabled.\ndecode_hv() collapses duplicate object keys into an array reference under\ndupkeys_as_arrayref. The branch reached for a duplicate key tests `SvTYPE\n(old_value) != SVt_RV && SvTYPE (SvRV (old_value)) != SVt_PVAV`, which\nevaluates SvRV(old_value) before establishing that old_value is a\nreference. When the existing value is a plain scalar rather than an array\nreference, a non-reference scalar is dereferenced as a reference.\nA caller decoding untrusted JSON with dupkeys_as_arrayref enabled is\ncrashed, and the incompatible access follows a pointer taken from attacker\ncontrolled scalar contents.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-9334"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138273"],"patches":{"libcpanel-json-xs-perl":[]},"tags":{},"packages":[{"name":"libcpanel-json-xs-perl","source":"https://ubuntu.com/security/cve?package=libcpanel-json-xs-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libcpanel-json-xs-perl","debian":"https://tracker.debian.org/pkg/libcpanel-json-xs-perl","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.41-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-50052","published":"2026-06-03T00:00:00","updated_at":"2026-06-18T18:50:05.638346+00:00","description":"\nIn Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in\nHTTP/2 request parsing can be exploited to launch a backend request desync\nattack (request smuggling), which in turn can be used for cache poisoning,\nauthentication bypass, or possibly even information disclosure and\nmanipulation. The attack vector only exists if HTTP/2 support is enabled by\nsetting the\nfeature parameter to contain +http2. HTTP/2 support is disabled by\ndefault.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:N/AU:N/R:A/V:D/RE:L/U:Green","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.3,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-50052"],"bugs":[""],"patches":{"varnish":[]},"tags":{},"packages":[{"name":"varnish","source":"https://ubuntu.com/security/cve?package=varnish","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=varnish","debian":"https://tracker.debian.org/pkg/varnish","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-50031","published":"2026-06-03T00:00:00","updated_at":"2026-08-07T07:43:45.063305+00:00","description":"\nipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on\nresponse messages. The Intelligent Platform Management Interface (IPMI)\nspecification defines a set of interfaces for platform management. It is\nimplemented by a large number of hardware manufacturers to support system\nmanagement. It is most commonly used for sensor reading (e.g., CPU\ntemperatures through the ipmi-sensors command within FreeIPMI) and remote\npower control (the ipmipower command). The ipmi-oem client command\nimplements a set of a IPMI OEM commands for specific hardware vendors. If a\nuser has supported hardware, they may wish to use the ipmi-oem command to\nsend a request to a server to retrieve specific information. Two\nsubcommands \"ipmi-oem dell get-active-directory-config\" and \"ipmi-oem\nfujitsu get-sel-entry-long-text\" were found to have exploitable buffer\noverflows on response messages.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-50031","https://ubuntu.com/security/notices/USN-8613-1"],"bugs":[""],"patches":{"freeipmi":["upstream: https://github.com/chu11/freeipmi-mirror/commit/f49a6076b640d802a9a80064089e772b4baa5335","upstream: https://github.com/chu11/freeipmi-mirror/commit/60dd7014c0b1402c881ef389f4e79ebb7a9e26c4"]},"tags":{},"packages":[{"name":"freeipmi","source":"https://ubuntu.com/security/cve?package=freeipmi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freeipmi","debian":"https://tracker.debian.org/pkg/freeipmi","statuses":[{"release_codename":"upstream","status":"released","description":"1.6.18-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.4.11-1.1ubuntu4.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"1.6.4-3ubuntu1.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"1.6.9-2ubuntu0.22.04.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.6.13-3ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"1.6.16-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.1.5-3ubuntu3.3+esm1","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8613-1"],"notices":[{"id":"USN-8613-1","title":"FreeIPMI vulnerabilities","summary":"Several security issues were fixed in FreeIPMI.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-27T14:28:55.289377","description":"Zhihan Zheng discovered that FreeIPMI had several buffer overflow\nvulnerabilities in ipmi-oem response message handling. A local attacker\nwith control a malicious IPMI device or simulator could possibly cause\nFreeIPMI to crash, resulting in a denial of service. (CVE-2026-33554,\nCVE-2026-50031)","is_hidden":false,"release_packages":{"bionic":[{"name":"freeipmi","version":"1.4.11-1.1ubuntu4.1+esm1","description":"in-band and out-of-band Intelligent Platform Management Interface","is_source":true},{"name":"freeipmi","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-bmc-watchdog","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-common","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-ipmidetect","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-ipmiseld","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-tools","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libfreeipmi-dev","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libfreeipmi16","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmiconsole-dev","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmiconsole2","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmidetect-dev","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmidetect0","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmimonitoring-dev","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmimonitoring5a","version":"1.4.11-1.1ubuntu4.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"freeipmi","version":"1.6.4-3ubuntu1.1+esm1","description":"in-band and out-of-band Intelligent Platform Management Interface","is_source":true},{"name":"freeipmi","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-bmc-watchdog","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-common","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-ipmidetect","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-ipmiseld","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"freeipmi-tools","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libfreeipmi-dev","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libfreeipmi17","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmiconsole-dev","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmiconsole2","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmidetect-dev","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmidetect0","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmimonitoring-dev","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"},{"name":"libipmimonitoring6","version":"1.6.4-3ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"freeipmi","version":"1.6.9-2ubuntu0.22.04.3","description":"in-band and out-of-band Intelligent Platform Management Interface","is_source":true},{"name":"freeipmi","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"freeipmi-bmc-watchdog","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"freeipmi-common","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"freeipmi-ipmidetect","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"freeipmi-ipmiseld","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"freeipmi-tools","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"libfreeipmi-dev","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"libfreeipmi17","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"libipmiconsole-dev","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"libipmiconsole2","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"libipmidetect-dev","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"libipmidetect0","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"libipmimonitoring-dev","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"},{"name":"libipmimonitoring6","version":"1.6.9-2ubuntu0.22.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.9-2ubuntu0.22.04.3","pocket":"security"}],"noble":[{"name":"freeipmi","version":"1.6.13-3ubuntu0.1","description":"in-band and out-of-band Intelligent Platform Management Interface","is_source":true},{"name":"freeipmi","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"freeipmi-bmc-watchdog","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"freeipmi-common","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"freeipmi-ipmidetect","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"freeipmi-ipmiseld","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"freeipmi-tools","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"libfreeipmi-dev","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"libfreeipmi17","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"libipmiconsole-dev","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"libipmiconsole2","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"libipmidetect-dev","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"libipmidetect0","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"libipmimonitoring-dev","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"},{"name":"libipmimonitoring6","version":"1.6.13-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.13-3ubuntu0.1","pocket":"security"}],"resolute":[{"name":"freeipmi","version":"1.6.16-1ubuntu0.1","description":"in-band and out-of-band Intelligent Platform Management Interface","is_source":true},{"name":"freeipmi","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"freeipmi-bmc-watchdog","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"freeipmi-common","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"freeipmi-ipmidetect","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"freeipmi-ipmiseld","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"freeipmi-tools","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"libfreeipmi-dev","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"libfreeipmi17","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"libipmiconsole-dev","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"libipmiconsole2","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"libipmidetect-dev","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"libipmidetect0","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"libipmimonitoring-dev","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"},{"name":"libipmimonitoring6","version":"1.6.16-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":"https://launchpad.net/ubuntu/+source/freeipmi/1.6.16-1ubuntu0.1","pocket":"security"}],"trusty":[{"name":"freeipmi","version":"1.1.5-3ubuntu3.3+esm1","description":"in-band and out-of-band Intelligent Platform Management Interface","is_source":true},{"name":"freeipmi","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-bmc-watchdog","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-common","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-ipmidetect","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-tools","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libfreeipmi-dev","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libfreeipmi12","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmiconsole-dev","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmiconsole2","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmidetect-dev","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmidetect0","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmimonitoring-dev","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmimonitoring5","version":"1.1.5-3ubuntu3.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"freeipmi","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","description":"in-band and out-of-band Intelligent Platform Management Interface","is_source":true},{"name":"freeipmi","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-bmc-watchdog","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-common","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-ipmidetect","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-ipmiseld","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"freeipmi-tools","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libfreeipmi-dev","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libfreeipmi16","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmiconsole-dev","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmiconsole2","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmidetect-dev","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmidetect0","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmimonitoring-dev","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libipmimonitoring5a","version":"1.4.11-1.1ubuntu4.1~0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/freeipmi","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-33554","CVE-2026-50031"]}]},{"id":"CVE-2026-49975","published":"2026-06-03T00:00:00","updated_at":"2026-08-25T08:58:18.345270+00:00","description":"\nMemory Allocation with Excessive Size Value vulnerability in Apache HTTP\nServer's mod_http leads to denial of service via malicious HTTP requests.\nThis issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"nginx fixed this by releasing 1.29.8 with a max_headers\ndirective with a default of 1000. They did not mention this\nrelease on their security page, and did not assign an nginx\nspecific CVE to this issue.\n\nThe nginx fix for this issue breaks ABI and introduced a\nregression causing nginx to crash when being used with external\nmodules. The CVE fix was reverted in 8398-2.\nUSN-8398-3 provided a complete fix for this issue."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-49975","https://blog.calif.io/p/codex-discovered-a-hidden-http2-bomb","https://github.com/icing/mod_h2/pull/324","https://ubuntu.com/security/notices/USN-8384-1","https://ubuntu.com/security/notices/USN-8398-1","https://ubuntu.com/security/notices/USN-8398-2","https://ubuntu.com/security/notices/USN-8398-3","https://ubuntu.com/security/notices/USN-8571-1","https://ubuntu.com/security/notices/USN-8398-4"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138750","https://bugs.launchpad.net/ubuntu/stonking/+source/nginx/+bug/2155992 (regression)"],"patches":{"apache2":["upstream: https://github.com/icing/mod_h2/commit/35c6e405390ed361189a82acd96675401ea5947c","upstream: https://github.com/apache/httpd/commit/47d3100b252dc6668a9e46ae885242be9eeca9cd"],"nginx":["upstream: https://github.com/nginx/nginx/commit/365694160a85229a7cb006738de9260d49ff5fa2"]},"tags":{},"packages":[{"name":"apache2","source":"https://ubuntu.com/security/cve?package=apache2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=apache2","debian":"https://tracker.debian.org/pkg/apache2","statuses":[{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.4.29-1ubuntu4.27+esm10","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2.4.41-4ubuntu3.23+esm5","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2.4.18-2ubuntu3.17+esm19","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"jammy","status":"released","description":"2.4.52-1ubuntu4.21","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.4.58-1ubuntu8.13","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2.4.64-1ubuntu3.5","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2.4.66-2ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"nginx","source":"https://ubuntu.com/security/cve?package=nginx","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nginx","debian":"https://tracker.debian.org/pkg/nginx","statuses":[{"release_codename":"bionic","status":"released","description":"1.14.0-0ubuntu1.11+esm4","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"1.18.0-0ubuntu1.7+esm3","component":null,"pocket":"esm-infra"},{"release_codename":"trusty","status":"released","description":"1.4.6-1ubuntu3.9+esm8","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"1.10.3-0ubuntu0.16.04.5+esm9","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"jammy","status":"released","description":"1.18.0-6ubuntu14.15","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.0-2ubuntu7.12","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"1.28.0-6ubuntu1.7","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"1.28.3-2ubuntu1.5","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-8384-1","USN-8398-1","USN-8398-3","USN-8398-4","USN-8571-1"],"notices":[{"id":"USN-8384-1","title":"Apache HTTP Server vulnerability","summary":"Apache HTTP Server could be made to consume excessive resources if it\nreceived specially crafted network traffic.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-06-04T12:29:41.353975","description":"It was discovered that Apache HTTP Server incorrectly handled certain\ncookie headers in the HTTP/2 implementation. A remote attacker could\npossibly use this issue to cause Apache HTTP Server to consume excessive\nresources, resulting in a denial of service.","is_hidden":false,"release_packages":{"jammy":[{"name":"apache2","version":"2.4.52-1ubuntu4.21","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"apache2-bin","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"apache2-data","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"apache2-dev","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"apache2-doc","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"apache2-ssl-dev","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"apache2-suexec-custom","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"apache2-suexec-pristine","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"apache2-utils","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"libapache2-mod-md","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"},{"name":"libapache2-mod-proxy-uwsgi","version":"2.4.52-1ubuntu4.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.21","pocket":"security"}],"noble":[{"name":"apache2","version":"2.4.58-1ubuntu8.13","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"apache2-bin","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"apache2-data","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"apache2-dev","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"apache2-doc","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"apache2-ssl-dev","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"apache2-suexec-custom","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"apache2-suexec-pristine","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"apache2-utils","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"libapache2-mod-md","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"},{"name":"libapache2-mod-proxy-uwsgi","version":"2.4.58-1ubuntu8.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.58-1ubuntu8.13","pocket":"security"}],"questing":[{"name":"apache2","version":"2.4.64-1ubuntu3.5","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"},{"name":"apache2-bin","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"},{"name":"apache2-data","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"},{"name":"apache2-dev","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"},{"name":"apache2-doc","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"},{"name":"apache2-ssl-dev","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"},{"name":"apache2-suexec-custom","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"},{"name":"apache2-suexec-pristine","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"},{"name":"apache2-utils","version":"2.4.64-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.64-1ubuntu3.5","pocket":"security"}],"resolute":[{"name":"apache2","version":"2.4.66-2ubuntu2.2","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"},{"name":"apache2-bin","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"},{"name":"apache2-data","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"},{"name":"apache2-dev","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"},{"name":"apache2-doc","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"},{"name":"apache2-ssl-dev","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"},{"name":"apache2-suexec-custom","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"},{"name":"apache2-suexec-pristine","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"},{"name":"apache2-utils","version":"2.4.66-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":"https://launchpad.net/ubuntu/+source/apache2/2.4.66-2ubuntu2.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-49975"]},{"id":"USN-8398-1","title":"nginx vulnerability","summary":"nginx could be made to consume excessive resources if it received specially\ncrafted network traffic.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-06-08T12:32:23.246170","description":"It was discovered that nginx incorrectly handled certain cookie headers in\nthe HTTP/2 implementation. A remote attacker could possibly use this issue\nto cause nginx to consume excessive resources, resulting in a denial of\nservice.","is_hidden":false,"release_packages":{"jammy":[{"name":"nginx","version":"1.18.0-6ubuntu14.13","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-auth-pam","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-cache-purge","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-dav-ext","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-echo","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-fancyindex","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-geoip","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-geoip2","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-headers-more-filter","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-image-filter","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-ndk","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-perl","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-subs-filter","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-uploadprogress","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-upstream-fair","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-http-xslt-filter","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-mail","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-nchan","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-rtmp","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-stream","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-stream-geoip","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"libnginx-mod-stream-geoip2","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"nginx","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"nginx-common","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"nginx-core","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"nginx-doc","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"nginx-extras","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"nginx-full","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"},{"name":"nginx-light","version":"1.18.0-6ubuntu14.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.13","pocket":"security"}],"noble":[{"name":"nginx","version":"1.24.0-2ubuntu7.10","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-geoip","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"libnginx-mod-http-image-filter","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"libnginx-mod-http-perl","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"libnginx-mod-http-xslt-filter","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"libnginx-mod-mail","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"libnginx-mod-stream","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"libnginx-mod-stream-geoip","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"nginx","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"nginx-common","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"nginx-core","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"nginx-dev","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"nginx-doc","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"nginx-extras","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"nginx-full","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"},{"name":"nginx-light","version":"1.24.0-2ubuntu7.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.10","pocket":"security"}],"questing":[{"name":"nginx","version":"1.28.0-6ubuntu1.5","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-geoip","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-http-image-filter","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-http-perl","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-http-xslt-filter","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-mail","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-stream","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-stream-geoip","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"nginx","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"nginx-common","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"nginx-core","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"nginx-dev","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"nginx-doc","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"nginx-extras","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"nginx-full","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"},{"name":"nginx-light","version":"1.28.0-6ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.5","pocket":"security"}],"resolute":[{"name":"nginx","version":"1.28.3-2ubuntu1.3","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-geoip","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"libnginx-mod-http-image-filter","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"libnginx-mod-http-perl","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"libnginx-mod-http-xslt-filter","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"libnginx-mod-mail","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"libnginx-mod-stream","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"libnginx-mod-stream-geoip","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"nginx","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"nginx-common","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"nginx-core","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"nginx-dev","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"nginx-doc","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"nginx-extras","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"nginx-full","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"},{"name":"nginx-light","version":"1.28.3-2ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-49975"]},{"id":"USN-8398-3","title":"nginx vulnerability","summary":"nginx could be made to consume excessive resources if it received specially\ncrafted network traffic.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-06-15T12:44:22.982846","description":"USN-8398-1 fixed a vulnerability in nginx. The update caused a regression\nand was temporarily reverted in USN-8398-2. This update introduces a\ncomplete fix for CVE-2026-49975.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that nginx incorrectly handled certain cookie headers in\n the HTTP/2 implementation. A remote attacker could possibly use this issue\n to cause nginx to consume excessive resources, resulting in a denial of\n service.","is_hidden":false,"release_packages":{"jammy":[{"name":"nginx","version":"1.18.0-6ubuntu14.15","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-auth-pam","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-cache-purge","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-dav-ext","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-echo","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-fancyindex","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-geoip","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-geoip2","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-headers-more-filter","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-image-filter","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-ndk","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-perl","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-subs-filter","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-uploadprogress","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-upstream-fair","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-http-xslt-filter","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-mail","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-nchan","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-rtmp","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-stream","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-stream-geoip","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"libnginx-mod-stream-geoip2","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"nginx","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"nginx-common","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"nginx-core","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"nginx-doc","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"nginx-extras","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"nginx-full","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"},{"name":"nginx-light","version":"1.18.0-6ubuntu14.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.18.0-6ubuntu14.15","pocket":"security"}],"noble":[{"name":"nginx","version":"1.24.0-2ubuntu7.12","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-geoip","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"libnginx-mod-http-image-filter","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"libnginx-mod-http-perl","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"libnginx-mod-http-xslt-filter","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"libnginx-mod-mail","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"libnginx-mod-stream","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"libnginx-mod-stream-geoip","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"nginx","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"nginx-common","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"nginx-core","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"nginx-dev","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"nginx-doc","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"nginx-extras","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"nginx-full","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"},{"name":"nginx-light","version":"1.24.0-2ubuntu7.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.24.0-2ubuntu7.12","pocket":"security"}],"questing":[{"name":"nginx","version":"1.28.0-6ubuntu1.7","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-geoip","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"libnginx-mod-http-image-filter","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"libnginx-mod-http-perl","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"libnginx-mod-http-xslt-filter","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"libnginx-mod-mail","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"libnginx-mod-stream","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"libnginx-mod-stream-geoip","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"nginx","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"nginx-common","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"nginx-core","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"nginx-dev","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"nginx-doc","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"nginx-extras","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"nginx-full","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"},{"name":"nginx-light","version":"1.28.0-6ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.0-6ubuntu1.7","pocket":"security"}],"resolute":[{"name":"nginx","version":"1.28.3-2ubuntu1.5","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-geoip","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-http-image-filter","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-http-perl","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-http-xslt-filter","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-mail","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-stream","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"libnginx-mod-stream-geoip","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"nginx","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"nginx-common","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"nginx-core","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"nginx-dev","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"nginx-doc","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"nginx-extras","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"nginx-full","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"},{"name":"nginx-light","version":"1.28.3-2ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":"https://launchpad.net/ubuntu/+source/nginx/1.28.3-2ubuntu1.5","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-49975"]},{"id":"USN-8398-4","title":"nginx vulnerability","summary":"nginx could be made to consume excessive resources if it received specially crafted\nnetwork traffic.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-02T12:03:17.528578","description":"USN-8398-3 fixed a vulnerability in nginx. This update provides the\ncorresponding fix for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, and Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that nginx incorrectly handled certain cookie headers in\n the HTTP/2 implementation. A remote attacker could possibly use this issue\n to cause nginx to consume excessive resources, resulting in a denial of\n service.","is_hidden":false,"release_packages":{"bionic":[{"name":"nginx","version":"1.14.0-0ubuntu1.11+esm4","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-auth-pam","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-cache-purge","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-dav-ext","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-echo","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-fancyindex","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-geoip","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-headers-more-filter","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-image-filter","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-lua","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-ndk","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-perl","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-subs-filter","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-uploadprogress","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-upstream-fair","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-xslt-filter","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-mail","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-nchan","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-rtmp","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-stream","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-common","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-core","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-doc","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-extras","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-full","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-light","version":"1.14.0-0ubuntu1.11+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"nginx","version":"1.18.0-0ubuntu1.7+esm3","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"libnginx-mod-http-auth-pam","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-cache-purge","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-dav-ext","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-echo","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-fancyindex","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-geoip","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-geoip2","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-headers-more-filter","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-image-filter","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-lua","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-ndk","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-perl","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-subs-filter","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-uploadprogress","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-upstream-fair","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-http-xslt-filter","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-mail","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-nchan","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-rtmp","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"libnginx-mod-stream","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-common","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-core","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-doc","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-extras","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-full","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"},{"name":"nginx-light","version":"1.18.0-0ubuntu1.7+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra"}],"trusty":[{"name":"nginx","version":"1.4.6-1ubuntu3.9+esm8","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"nginx","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-common","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-core","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-doc","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-extras","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-full","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-light","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-naxsi","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-naxsi-ui","version":"1.4.6-1ubuntu3.9+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"nginx","version":"1.10.3-0ubuntu0.16.04.5+esm9","description":"small, powerful, scalable web/proxy server","is_source":true},{"name":"nginx","version":"1.10.3-0ubuntu0.16.04.5+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-common","version":"1.10.3-0ubuntu0.16.04.5+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-core","version":"1.10.3-0ubuntu0.16.04.5+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-doc","version":"1.10.3-0ubuntu0.16.04.5+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-extras","version":"1.10.3-0ubuntu0.16.04.5+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-full","version":"1.10.3-0ubuntu0.16.04.5+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"},{"name":"nginx-light","version":"1.10.3-0ubuntu0.16.04.5+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/nginx","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-49975"]},{"id":"USN-8571-1","title":"Apache HTTP Server vulnerabilities","summary":"Several security issues were fixed in Apache HTTP Server.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-20T19:03:33.143152","description":"Pavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server\nincorrectly handled certain memory operations in mod_authn_socache. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2026-33007)\n\nHaruki Oyama, Merih Mengisteab, and Dawit Jeong discovered that Apache\nHTTP Server had an HTTP response splitting vulnerability in multiple\nmodules when used with untrusted or compromised backend servers. An\nattacker could possibly use this issue to inject arbitrary HTTP headers.\n(CVE-2026-33523)\n\nElhanan Haenel discovered that Apache HTTP Server incorrectly handled\ncertain memory operations in mod_proxy_ajp. A remote attacker could\npossibly use this issue to cause a denial of service. (CVE-2026-33857)\n\nTianshuo Han and Jérôme Djouder discovered that Apache HTTP Server\nincorrectly handled certain string operations in mod_proxy_ajp. A remote\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2026-34032)\n\nIt was discovered that Apache HTTP Server's mod_proxy_html module\nincorrectly handled certain content from an untrusted backend. A remote\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2026-34355)\n\nIt was discovered that Apache HTTP Server incorrectly handled\nProxyPassReverseCookie directives with a malicious backend server. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2026-34356)\n\nIt was discovered that Apache HTTP Server's mod_dav_fs module incorrectly\nhandled certain path operations. An authenticated user could possibly use\nthis issue to manipulate trusted WebDAV property databases or cause a\ndenial of service. (CVE-2026-42535)\n\nIt was discovered that Apache HTTP Server's mod_xml2enc module incorrectly\nhandled certain content from an untrusted backend. A remote attacker could\npossibly use this issue to cause a denial of service. (CVE-2026-42536)\n\nIt was discovered that Apache HTTP Server incorrectly handled response\nheaders when multiple content languages were configured. A remote\nattacker could possibly use this issue to obtain sensitive information.\n(CVE-2026-43951)\n\nIt was discovered that Apache HTTP Server incorrectly restricted certain\nfile functions in expressions within .htaccess files. A local attacker\nwith .htaccess write access could possibly use this issue to obtain\nsensitive information. (CVE-2026-44119)\n\nIt was discovered that Apache HTTP Server's mod_ssl module incorrectly\nhandled OCSP responses from an attacker-controlled server. A remote\nattacker could possibly use this issue to obtain sensitive information or\ncause a denial of service. (CVE-2026-44185)\n\nIt was discovered that Apache HTTP Server's mod_proxy_ftp module\nincorrectly handled responses from an attacker-controlled backend FTP\nserver. A remote attacker could possibly use this issue to cause a denial\nof service. (CVE-2026-44186)\n\nIt was discovered that Apache HTTP Server incorrectly handled crafted\nregular expressions in the server configuration. An attacker could\npossibly use this issue to execute arbitrary code or cause a denial of\nservice. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and\nUbuntu 20.04 LTS. (CVE-2026-44631)\n\nIt was discovered that Apache HTTP Server's mod_http2 module had a\nuse-after-free vulnerability when file handles were exhausted. A remote\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 20.04 LTS. (CVE-2026-48913)","is_hidden":false,"release_packages":{"bionic":[{"name":"apache2","version":"2.4.29-1ubuntu4.27+esm10","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-bin","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-data","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-dev","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-doc","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-ssl-dev","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-suexec-custom","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-suexec-pristine","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-utils","version":"2.4.29-1ubuntu4.27+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"apache2","version":"2.4.41-4ubuntu3.23+esm5","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-bin","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-data","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-dev","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-doc","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-ssl-dev","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-suexec-custom","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-suexec-pristine","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"apache2-utils","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"libapache2-mod-md","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"},{"name":"libapache2-mod-proxy-uwsgi","version":"2.4.41-4ubuntu3.23+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra"}],"trusty":[{"name":"apache2","version":"2.4.7-1ubuntu4.22+esm14","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-bin","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-data","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-dev","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-doc","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-mpm-event","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-mpm-itk","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-mpm-prefork","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-mpm-worker","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-suexec","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-suexec-custom","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-suexec-pristine","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-utils","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2.2-bin","version":"2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libapache2-mod-macro","version":"1:2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libapache2-mod-proxy-html","version":"1:2.4.7-1ubuntu4.22+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"apache2","version":"2.4.18-2ubuntu3.17+esm19","description":"Apache HTTP server","is_source":true},{"name":"apache2","version":"2.4.18-2ubuntu3.17+esm19","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-bin","version":"2.4.18-2ubuntu3.17+esm19","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-data","version":"2.4.18-2ubuntu3.17+esm19","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-dev","version":"2.4.18-2ubuntu3.17+esm19","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-doc","version":"2.4.18-2ubuntu3.17+esm19","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-suexec-custom","version":"2.4.18-2ubuntu3.17+esm19","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-suexec-pristine","version":"2.4.18-2ubuntu3.17+esm19","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"},{"name":"apache2-utils","version":"2.4.18-2ubuntu3.17+esm19","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/apache2","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-34032","CVE-2026-33523","CVE-2026-42536","CVE-2026-43951","CVE-2026-34356","CVE-2026-34355","CVE-2026-33857","CVE-2026-44631","CVE-2026-48913","CVE-2026-44186","CVE-2026-49975","CVE-2026-42535","CVE-2026-44185","CVE-2026-44119","CVE-2026-33007"]}]},{"id":"CVE-2026-38978","published":"2026-06-03T00:00:00","updated_at":"2026-06-18T18:44:09.927646+00:00","description":"\ntransmission through 4.1.1 was found to have a clickjacking weakness in the\nbrowser-facing WebUI and RPC response paths.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-38978","https://ubuntu.com/security/notices/USN-8404-1"],"bugs":["https://github.com/transmission/transmission/issues/8726"],"patches":{"transmission":["upstream: https://github.com/transmission/transmission/commit/6b24c1c214ec6a44fa5fdff0ce7da6b16d8ecaa8","upstream: https://github.com/transmission/transmission/commit/e51d77e202206ee1389cbd6d9ab154421942b530"]},"tags":{},"packages":[{"name":"transmission","source":"https://ubuntu.com/security/cve?package=transmission","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=transmission","debian":"https://tracker.debian.org/pkg/transmission","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.1.2+dfsg-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"3.00-2ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"4.0.5-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"4.1.0~beta2+dfsg-3ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"4.1.1+dfsg-1ubuntu1.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-8404-1"],"notices":[{"id":"USN-8404-1","title":"Transmission vulnerability","summary":"Transmission could allow unintended actions if a user visited a malicious\nwebsite.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-06-08T15:15:55.277528","description":"It was discovered that Transmission had a clickjacking weakness in the\nbrowser-facing WebUI and RPC response paths. An attacker could possibly use\nthis issue to trick users into performing unintended actions.","is_hidden":false,"release_packages":{"jammy":[{"name":"transmission","version":"3.00-2ubuntu2.2","description":"lightweight BitTorrent client","is_source":true},{"name":"transmission","version":"3.00-2ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/3.00-2ubuntu2.2","pocket":"security"},{"name":"transmission-cli","version":"3.00-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/3.00-2ubuntu2.2","pocket":"security"},{"name":"transmission-common","version":"3.00-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/3.00-2ubuntu2.2","pocket":"security"},{"name":"transmission-daemon","version":"3.00-2ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/3.00-2ubuntu2.2","pocket":"security"},{"name":"transmission-gtk","version":"3.00-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/3.00-2ubuntu2.2","pocket":"security"},{"name":"transmission-qt","version":"3.00-2ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/3.00-2ubuntu2.2","pocket":"security"}],"noble":[{"name":"transmission","version":"4.0.5-1ubuntu0.1","description":"lightweight BitTorrent client","is_source":true},{"name":"transmission","version":"4.0.5-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.0.5-1ubuntu0.1","pocket":"security"},{"name":"transmission-cli","version":"4.0.5-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.0.5-1ubuntu0.1","pocket":"security"},{"name":"transmission-common","version":"4.0.5-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.0.5-1ubuntu0.1","pocket":"security"},{"name":"transmission-daemon","version":"4.0.5-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.0.5-1ubuntu0.1","pocket":"security"},{"name":"transmission-gtk","version":"4.0.5-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.0.5-1ubuntu0.1","pocket":"security"},{"name":"transmission-qt","version":"4.0.5-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.0.5-1ubuntu0.1","pocket":"security"}],"questing":[{"name":"transmission","version":"4.1.0~beta2+dfsg-3ubuntu1.1","description":"lightweight BitTorrent client","is_source":true},{"name":"libtransmission-dev","version":"4.1.0~beta2+dfsg-3ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.0~beta2+dfsg-3ubuntu1.1","pocket":"security"},{"name":"transmission","version":"4.1.0~beta2+dfsg-3ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.0~beta2+dfsg-3ubuntu1.1","pocket":"security"},{"name":"transmission-cli","version":"4.1.0~beta2+dfsg-3ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.0~beta2+dfsg-3ubuntu1.1","pocket":"security"},{"name":"transmission-common","version":"4.1.0~beta2+dfsg-3ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.0~beta2+dfsg-3ubuntu1.1","pocket":"security"},{"name":"transmission-daemon","version":"4.1.0~beta2+dfsg-3ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.0~beta2+dfsg-3ubuntu1.1","pocket":"security"},{"name":"transmission-gtk","version":"4.1.0~beta2+dfsg-3ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.0~beta2+dfsg-3ubuntu1.1","pocket":"security"},{"name":"transmission-qt","version":"4.1.0~beta2+dfsg-3ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.0~beta2+dfsg-3ubuntu1.1","pocket":"security"}],"resolute":[{"name":"transmission","version":"4.1.1+dfsg-1ubuntu1.1","description":"lightweight BitTorrent client","is_source":true},{"name":"libtransmission-dev","version":"4.1.1+dfsg-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.1+dfsg-1ubuntu1.1","pocket":"security"},{"name":"transmission","version":"4.1.1+dfsg-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.1+dfsg-1ubuntu1.1","pocket":"security"},{"name":"transmission-cli","version":"4.1.1+dfsg-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.1+dfsg-1ubuntu1.1","pocket":"security"},{"name":"transmission-common","version":"4.1.1+dfsg-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.1+dfsg-1ubuntu1.1","pocket":"security"},{"name":"transmission-daemon","version":"4.1.1+dfsg-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.1+dfsg-1ubuntu1.1","pocket":"security"},{"name":"transmission-gtk","version":"4.1.1+dfsg-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.1+dfsg-1ubuntu1.1","pocket":"security"},{"name":"transmission-qt","version":"4.1.1+dfsg-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/4.1.1+dfsg-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-38978"]}]},{"id":"CVE-2026-10705","published":"2026-06-03T00:00:00","updated_at":"2026-06-18T18:33:48.186255+00:00","description":"\nA flaw has been found in dask up to 3.0. Affected by this issue is the\nfunction nunique_approx of the file dask/dataframe/hyperloglog.py of the\ncomponent HLL Handler. This manipulation causes resource consumption. The\nattack is possible to be carried out remotely. A high degree of complexity\nis needed for the attack. The exploitation is known to be difficult. The\npull request to fix this issue awaits acceptance.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":3.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.1,"baseSeverity":"LOW"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.3,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-10705"],"bugs":[""],"patches":{"dask":[]},"tags":{},"packages":[{"name":"dask","source":"https://ubuntu.com/security/cve?package=dask","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=dask","debian":"https://tracker.debian.org/pkg/dask","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-42507","published":"2026-06-02T23:16:00","updated_at":"2026-06-18T18:44:53.551797+00:00","description":"\nWhen returning errors, functions in the net/textproto package would include\nits input as part of the error. This might allow an attacker to inject\nmisleading content to errors that are printed or logged.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-42507","https://github.com/golang/go/issues/79346","https://github.com/golang/go/commit/ec1c380418ec6a0da28d4519872e2b81ba9152ba (go1.26.4)","https://github.com/golang/go/commit/449dafea7264878e73acc58cbd330e0ee6630030 (go1.25.11)"],"bugs":[""],"patches":{"golang-1.24":[],"golang-1.25":[],"golang-1.26":[]},"tags":{},"packages":[{"name":"golang-1.24","source":"https://ubuntu.com/security/cve?package=golang-1.24","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.24","debian":"https://tracker.debian.org/pkg/golang-1.24","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"golang-1.25","source":"https://ubuntu.com/security/cve?package=golang-1.25","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.25","debian":"https://tracker.debian.org/pkg/golang-1.25","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"golang-1.26","source":"https://ubuntu.com/security/cve?package=golang-1.26","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.26","debian":"https://tracker.debian.org/pkg/golang-1.26","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-42504","published":"2026-06-02T23:16:00","updated_at":"2026-06-18T18:44:53.551797+00:00","description":"\nDecoding a maliciously-crafted MIME header containing many invalid\nencoded-words can consume excessive CPU.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-42504","https://github.com/golang/go/issues/79217","https://github.com/golang/go/commit/7f24db453a60faf6a3546d60bb02917a0a7aace0 (go1.26.4)","https://github.com/golang/go/commit/b79e0339290e14b3b2de1dc4942b8a88701ddb02 (go1.25.11)"],"bugs":[""],"patches":{"golang-1.24":[],"golang-1.25":[],"golang-1.26":[]},"tags":{},"packages":[{"name":"golang-1.24","source":"https://ubuntu.com/security/cve?package=golang-1.24","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.24","debian":"https://tracker.debian.org/pkg/golang-1.24","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"golang-1.25","source":"https://ubuntu.com/security/cve?package=golang-1.25","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.25","debian":"https://tracker.debian.org/pkg/golang-1.25","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"golang-1.26","source":"https://ubuntu.com/security/cve?package=golang-1.26","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.26","debian":"https://tracker.debian.org/pkg/golang-1.26","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-40108","published":"2026-06-02T23:16:00","updated_at":"2026-06-18T18:44:09.927646+00:00","description":"\nGLPI is a free asset and IT management software package. In versions 11.0.0\nthrough 11.0.6, a technician can store an XSS payload in a ITIL costs. This\nissue has been fixed in version 11.0.7.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"ACTIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":7.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-40108"],"bugs":[""],"patches":{"glpi":[]},"tags":{},"packages":[{"name":"glpi","source":"https://ubuntu.com/security/cve?package=glpi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=glpi","debian":"https://tracker.debian.org/pkg/glpi","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-27145","published":"2026-06-02T23:16:00","updated_at":"2026-06-18T18:43:46.616545+00:00","description":"\n(*x509.Certificate).VerifyHostname previously called matchHostnames in a\nloop over all DNS Subject Alternative Name (SAN) entries. This caused\nstrings.Split(host, \".\") to execute repeatedly on the same input hostname.\nWith a large DNS SAN list, verification costs scaled quadratically based on\nthe number of SAN entries multiplied by the hostname's label count. Because\nx509.Verify validates hostnames before building the certificate chain, this\noverhead occurred even for untrusted certificates.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-27145","https://github.com/golang/go/issues/79694","https://github.com/golang/go/commit/ce5a3e718cac440defae617dc6ed72a6e94cd0af (go1.26.4)","https://github.com/golang/go/commit/c5d18e479475e251c8593b1113fb53836117d5d3 (go1.25.11)"],"bugs":[""],"patches":{"golang-1.24":[],"golang-1.25":[],"golang-1.26":[]},"tags":{},"packages":[{"name":"golang-1.24","source":"https://ubuntu.com/security/cve?package=golang-1.24","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.24","debian":"https://tracker.debian.org/pkg/golang-1.24","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"golang-1.25","source":"https://ubuntu.com/security/cve?package=golang-1.25","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.25","debian":"https://tracker.debian.org/pkg/golang-1.25","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"golang-1.26","source":"https://ubuntu.com/security/cve?package=golang-1.26","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-1.26","debian":"https://tracker.debian.org/pkg/golang-1.26","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-10650","published":"2026-06-02T22:16:00","updated_at":"2026-06-18T18:33:37.954810+00:00","description":"\nA flaw has been found in warmcat libwebsockets up to 4.5.8. This issue\naffects the function lws_ssh_parse_plaintext of the file\nplugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler.\nExecuting a manipulation of the argument msg_len can lead to resource\nconsumption. The attack may be launched remotely. The exploit has been\npublished and may be used. This patch is called\n3f9f0c6ecaf0e6f3f219d30632c5d1f2479d7498. A patch should be applied to\nremediate this issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-10650"],"bugs":[""],"patches":{"libwebsockets":[]},"tags":{},"packages":[{"name":"libwebsockets","source":"https://ubuntu.com/security/cve?package=libwebsockets","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libwebsockets","debian":"https://tracker.debian.org/pkg/libwebsockets","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-5385","published":"2026-06-02T20:16:00","updated_at":"2026-06-18T18:50:34.770567+00:00","description":"\nAn unauthenticated user with write access to the knowledge base can store\nan XSS payload in a knowledge base item.\nThis issue affects glpi: before 11.0.7.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":{"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"HIGH","userInteraction":"ACTIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-5385"],"bugs":[""],"patches":{"glpi":[]},"tags":{},"packages":[{"name":"glpi","source":"https://ubuntu.com/security/cve?package=glpi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=glpi","debian":"https://tracker.debian.org/pkg/glpi","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-48682","published":"2026-06-02T20:16:00","updated_at":"2026-06-18T18:49:44.837917+00:00","description":"\nFastNetMon Community Edition through 1.2.9 contains an out-of-bounds read\nin the IPv4 packet parser. In src/simple_packet_parser_ng.cpp, after\nvalidating that the packet contains at least sizeof(ipv4_header_t) bytes\n(20 bytes), the code advances the local_pointer by '4 *\nipv4_header->get_ihl()' (line 164) without validating that (a) IHL >= 5\n(the minimum valid value per RFC 791), or (b) 4 * IHL bytes are actually\navailable in the packet. The IHL field is 4 bits, allowing values 0-15, so\nthe advance can be 0-60 bytes. An IHL value of 15 with only 20 bytes\nvalidated causes a 40-byte over-read. An IHL of 0-4 causes the pointer to\nnot advance past the IP header, resulting in the TCP/UDP header being\nparsed from IP header data (type confusion). This vulnerability is\nreachable via any packet capture interface.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-48682"],"bugs":[""],"patches":{"fastnetmon":[]},"tags":{},"packages":[{"name":"fastnetmon","source":"https://ubuntu.com/security/cve?package=fastnetmon","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=fastnetmon","debian":"https://tracker.debian.org/pkg/fastnetmon","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-47265","published":"2026-06-02T20:16:00","updated_at":"2026-06-18T18:49:17.004283+00:00","description":"\nAIOHTTP is an asynchronous HTTP client/server framework for asyncio and\nPython. Prior to version 3.14.0, cookies set with the `cookies` parameter\non requests are sent after following a cross-origin redirect. If a\ndeveloper uses the `cookies` parameter on a per-request basis then\nsensitive data might be leaked to an attacker if they manage to control a\nredirect. Version 3.14.0 patches the issue. If unable to upgrade, using a\n`Cookie` header in the `headers` parameter is not vulnerable.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.6,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-47265"],"bugs":[""],"patches":{"python-aiohttp":[]},"tags":{},"packages":[{"name":"python-aiohttp","source":"https://ubuntu.com/security/cve?package=python-aiohttp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-aiohttp","debian":"https://tracker.debian.org/pkg/python-aiohttp","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-34993","published":"2026-06-02T20:16:00","updated_at":"2026-06-18T18:43:58.127575+00:00","description":"\nAIOHTTP is an asynchronous HTTP client/server framework for asyncio and\nPython. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted\ninput may allow arbitrary code execution. Most applications using this\nfunction will be doing so with the user's own data, so this is unlikely to\naffect many applications. Version 3.14.0 patches the issue. If an\napplication does allow attacker controlled files to be loaded, a workaround\non older releases would be to sanitize the files before loading.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:H/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"LOW","baseScore":6.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-34993"],"bugs":[""],"patches":{"python-aiohttp":[]},"tags":{},"packages":[{"name":"python-aiohttp","source":"https://ubuntu.com/security/cve?package=python-aiohttp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-aiohttp","debian":"https://tracker.debian.org/pkg/python-aiohttp","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-10702","published":"2026-06-02T20:16:00","updated_at":"2026-06-18T18:33:48.186255+00:00","description":"\nJIT miscompilation in the JavaScript Engine: JIT component. This\nvulnerability was fixed in Firefox 151.0.3.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"mozjs* contain a copy of the SpiderMonkey JavaScript engine. It\nis not feasible to backport security fixes to the mozjs*\npackages, as such, marking them as ignored.\nstarting with Ubuntu 22.04, the firefox package is just a script\nthat installs the Firefox snap\nstarting with Ubuntu 24.04, the thunderbird package is just a\nscript that installs the Thunderbird snap"}],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-10702","https://www.mozilla.org/en-US/security/advisories/mfsa2026-54/#CVE-2026-10702"],"bugs":[""],"patches":{"firefox":[],"thunderbird":[],"mozjs38":[],"mozjs52":[],"mozjs68":[],"mozjs78":[],"mozjs91":[],"mozjs102":[],"mozjs115":[]},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs102","source":"https://ubuntu.com/security/cve?package=mozjs102","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs102","debian":"https://tracker.debian.org/pkg/mozjs102","statuses":[{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs115","source":"https://ubuntu.com/security/cve?package=mozjs115","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs115","debian":"https://tracker.debian.org/pkg/mozjs115","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs38","source":"https://ubuntu.com/security/cve?package=mozjs38","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs38","debian":"https://tracker.debian.org/pkg/mozjs38","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs52","source":"https://ubuntu.com/security/cve?package=mozjs52","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs52","debian":"https://tracker.debian.org/pkg/mozjs52","statuses":[{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs68","source":"https://ubuntu.com/security/cve?package=mozjs68","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs68","debian":"https://tracker.debian.org/pkg/mozjs68","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs78","source":"https://ubuntu.com/security/cve?package=mozjs78","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs78","debian":"https://tracker.debian.org/pkg/mozjs78","statuses":[{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs91","source":"https://ubuntu.com/security/cve?package=mozjs91","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs91","debian":"https://tracker.debian.org/pkg/mozjs91","statuses":[{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":10620,"limit":20,"total_results":79316}