{"cves":[{"id":"CVE-2026-29079","published":"2026-03-13T19:54:00","updated_at":"2026-03-18T12:17:19.588923+00:00","description":"\nLexbor is a web browser engine library. Prior to 2.7.0, a type‑confusion\nvulnerability exists in Lexbor’s HTML fragment parser. When ns = UNDEF, a\ncomment is created using the “unknown element” constructor. The comment’s\ndata are written into the element’s fields via an unsafe cast, corrupting\nthe qualified_name field. That corrupted value is later used as a pointer\nand dereferenced near the zero page. This vulnerability is fixed in 2.7.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-29079","https://github.com/lexbor/lexbor/security/advisories/GHSA-mrpr-v36q-2vp8"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130747"],"patches":{"lexbor":[]},"tags":{},"packages":[{"name":"lexbor","source":"https://ubuntu.com/security/cve?package=lexbor","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lexbor","debian":"https://tracker.debian.org/pkg/lexbor","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-29078","published":"2026-03-13T19:54:00","updated_at":"2026-03-18T12:16:48.134003+00:00","description":"\nLexbor is a web browser engine library. Prior to 2.7.0, the ISO‑2022‑JP\nencoder in Lexbor fails to reset the temporary size variable between\niterations. The statement ctx->buffer_used -= size with a stale size = 3\ncauses an integer underflow that wraps to SIZE_MAX. Afterwards, memcpy is\ncalled with a negative length, leading to an out‑of‑bounds read from the\nstack and an out‑of‑bounds write to the heap. The source data is partially\ncontrollable via the contents of the DOM tree. This vulnerability is fixed\nin 2.7.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-29078","https://github.com/lexbor/lexbor/security/advisories/GHSA-mrwr-xh7f-96v3"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130747"],"patches":{"lexbor":[]},"tags":{},"packages":[{"name":"lexbor","source":"https://ubuntu.com/security/cve?package=lexbor","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lexbor","debian":"https://tracker.debian.org/pkg/lexbor","statuses":[{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-2859","published":"2026-03-13T19:54:00","updated_at":"2026-08-17T19:18:00.752999+00:00","description":"\nImproper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23,\n2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to\nenumerate existing hosts by observing different HTTP response codes in\ndeploy_agent endpoint, which could lead to information disclosure.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-2859","https://checkmk.com/werk/18994"],"bugs":[""],"patches":{"check-mk":[]},"tags":{},"packages":[{"name":"check-mk","source":"https://ubuntu.com/security/cve?package=check-mk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=check-mk","debian":"https://tracker.debian.org/pkg/check-mk","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-2673","published":"2026-03-13T19:54:00","updated_at":"2026-05-20T19:22:15.497453+00:00","description":"\nIssue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected\npreferred key exchange group when its key exchange group configuration\nincludes\nthe default by using the 'DEFAULT' keyword.\nImpact summary: A less preferred key exchange may be used even when a more\npreferred group is supported by both client and server, if the group\nwas not included among the client's initial predicated keyshares.\nThis will sometimes be the case with the new hybrid post-quantum groups,\nif the client chooses to defer their use until specifically requested by\nthe server.\nIf an OpenSSL TLS 1.3 server's configuration uses the 'DEFAULT' keyword to\ninterpolate the built-in default group list into its own configuration,\nperhaps\nadding or removing specific elements, then an implementation defect causes\nthe\n'DEFAULT' list to lose its 'tuple' structure, and all server-supported\ngroups\nwere treated as a single sufficiently secure 'tuple', with the server not\nsending a Hello Retry Request (HRR) even when a group in a more preferred\ntuple\nwas mutually supported.\nAs a result, the client and server might fail to negotiate a mutually\nsupported\npost-quantum key agreement group, such as 'X25519MLKEM768', if the client's\nconfiguration results in only 'classical' groups (such as 'X25519' being\nthe\nonly ones in the client's initial keyshare prediction).\nOpenSSL 3.5 and later support a new syntax for selecting the most preferred\nTLS\n1.3 key agreement group on TLS servers.  The old syntax had a single 'flat'\nlist of groups, and treated all the supported groups as sufficiently\nsecure.\nIf any of the keyshares predicted by the client were supported by the\nserver\nthe most preferred among these was selected, even if other groups supported\nby\nthe client, but not included in the list of predicted keyshares would have\nbeen\nmore preferred, if included.\nThe new syntax partitions the groups into distinct 'tuples' of roughly\nequivalent security.  Within each tuple the most preferred group included\namong\nthe client's predicted keyshares is chosen, but if the client supports a\ngroup\nfrom a more preferred tuple, but did not predict any corresponding\nkeyshares,\nthe server will ask the client to retry the ClientHello (by issuing a Hello\nRetry Request or HRR) with the most preferred mutually supported group.\nThe above works as expected when the server's configuration uses the\nbuilt-in\ndefault group list, or explicitly defines its own list by directly defining\nthe\nvarious desired groups and group 'tuples'.\nNo OpenSSL FIPS modules are affected by this issue, the code in question\nlies\noutside the FIPS boundary.\nOpenSSL 3.6 and 3.5 are vulnerable to this issue.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.2 once it is released.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.6 once it is released.\nOpenSSL 3.4, 3.3, 3.0, 1.0.2 and 1.1.1 are not affected by this issue.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nOpenSSL developers have rated this as being a low severity issue"},{"author":"mdeslaur","note":"edk2 in jammy embeds OpenSSL 1.1.1j\nedk2 in noble embeds OpenSSL 3.0.9\nedk2 in plucky embeds OpenSSL 3.4.0\nedk2 in questing embeds OpenSSL 3.4.0"}],"codename":null,"priority":"low","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-2673","https://openssl-library.org/news/secadv/20260313.txt","http://www.openwall.com/lists/oss-security/2026/03/13/3","https://ubuntu.com/security/notices/USN-8155-1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130650"],"patches":{"openssl":["upstream: https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f","upstream: https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34"],"openssl-fips":[],"openssl1.0":[],"nodejs":[],"edk2":[]},"tags":{},"packages":[{"name":"edk2","source":"https://ubuntu.com/security/cve?package=edk2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=edk2","debian":"https://tracker.debian.org/pkg/edk2","statuses":[{"release_codename":"resolute","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"}]},{"name":"nodejs","source":"https://ubuntu.com/security/cve?package=nodejs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nodejs","debian":"https://tracker.debian.org/pkg/nodejs","statuses":[{"release_codename":"resolute","status":"not-affected","description":"uses system openssl","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"uses system openssl","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system openssl","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system openssl","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system openssl","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"}]},{"name":"openssl","source":"https://ubuntu.com/security/cve?package=openssl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openssl","debian":"https://tracker.debian.org/pkg/openssl","statuses":[{"release_codename":"resolute","status":"released","description":"3.5.5-1ubuntu3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"3.5.3-1ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"}]},{"name":"openssl-fips","source":"https://ubuntu.com/security/cve?package=openssl-fips","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openssl-fips","debian":"https://tracker.debian.org/pkg/openssl-fips","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"3.5+ only","component":null,"pocket":"fips-updates"},{"release_codename":"noble","status":"not-affected","description":"3.5+ only","component":null,"pocket":"fips-updates"}]},{"name":"openssl1.0","source":"https://ubuntu.com/security/cve?package=openssl1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openssl1.0","debian":"https://tracker.debian.org/pkg/openssl1.0","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.5+ only","component":null,"pocket":"security"}]}],"notices_ids":["USN-8155-1"],"notices":[{"id":"USN-8155-1","title":"OpenSSL vulnerabilities","summary":"Several security issues were fixed in OpenSSL.","instructions":"After a standard system update you need to reboot your computer to make\nall the necessary changes.","references":[],"published":"2026-04-08T11:57:32.637846","description":"Viktor Dukhovni discovered that OpenSSL incorrectly negotiated the expected\npreferred key exchange group when used as a TLS 1.3 server. This could\nresult in a less preferred key exchange being used, contrary to\nexpectations. This issue only affected Ubuntu 25.10. (CVE-2026-2673)\n\nIgor Morgenstern discovered that OpenSSL incorrectly handled certain memory\noperations when used as a DANE client. A remote attacker could use this\nissue to cause OpenSSL to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2026-28387)\n\nIgor Morgenstern discovered that OpenSSL incorrectly handled certain memory\noperations when processing a delta CRL. A remote attacker could possibly\nuse this issue to cause OpenSSL to crash, resulting in a denial of service.\n(CVE-2026-28388)\n\nNathan Sportsman, Daniel Rhea, and Jaeho Nam discovered that OpenSSL\nincorrectly handled certain memory operations when processing a crafted CMS\nEnvelopedData message with KeyAgreeRecipientInfo. A remote attacker could\npossibly use this issue to cause OpenSSL to crash, resulting in a denial\nof service. (CVE-2026-28389)\n\nMuhammad Daffa, Joshua Rogers, and Chanho Kim discovered that OpenSSL\nincorrectly handled processing of a crafted CMS EnvelopedData message with\nKeyTransportRecipientInfo. A remote attacker could possibly use this issue\nto cause OpenSSL to crash, resulting in a denial of service.\n(CVE-2026-28390)\n\nQuoc Tran discovered that OpenSSL incorrectly handled hexadecimal\nconversion on 32-bit platforms. A remote attacker could use this issue to\ncause OpenSSL to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2026-31789)\n\nSimo Sorce discovered that OpenSSL incorrectly handled failures in RSA KEM\nRSASVE Encapsulation. A remote attacker could possibly use this issue to\nobtain sensitive information. (CVE-2026-31790)","is_hidden":false,"release_packages":{"jammy":[{"name":"openssl","version":"3.0.2-0ubuntu1.23","description":"Secure Socket Layer (SSL) cryptographic library and tools","is_source":true},{"name":"libssl-dev","version":"3.0.2-0ubuntu1.23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.23","pocket":"security"},{"name":"libssl-doc","version":"3.0.2-0ubuntu1.23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.23","pocket":"security"},{"name":"libssl3","version":"3.0.2-0ubuntu1.23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.23","pocket":"security"},{"name":"openssl","version":"3.0.2-0ubuntu1.23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.23","pocket":"security"}],"noble":[{"name":"openssl","version":"3.0.13-0ubuntu3.9","description":"Secure Socket Layer (SSL) cryptographic library and tools","is_source":true},{"name":"libssl-dev","version":"3.0.13-0ubuntu3.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.0.13-0ubuntu3.9","pocket":"security"},{"name":"libssl-doc","version":"3.0.13-0ubuntu3.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.0.13-0ubuntu3.9","pocket":"security"},{"name":"libssl3t64","version":"3.0.13-0ubuntu3.9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.0.13-0ubuntu3.9","pocket":"security"},{"name":"openssl","version":"3.0.13-0ubuntu3.9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.0.13-0ubuntu3.9","pocket":"security"}],"questing":[{"name":"openssl","version":"3.5.3-1ubuntu3.3","description":"Secure Socket Layer (SSL) cryptographic library and tools","is_source":true},{"name":"libssl-dev","version":"3.5.3-1ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.5.3-1ubuntu3.3","pocket":"security"},{"name":"libssl-doc","version":"3.5.3-1ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.5.3-1ubuntu3.3","pocket":"security"},{"name":"libssl3t64","version":"3.5.3-1ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.5.3-1ubuntu3.3","pocket":"security"},{"name":"openssl","version":"3.5.3-1ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.5.3-1ubuntu3.3","pocket":"security"},{"name":"openssl-provider-legacy","version":"3.5.3-1ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openssl","version_link":"https://launchpad.net/ubuntu/+source/openssl/3.5.3-1ubuntu3.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-28388","CVE-2026-28390","CVE-2026-28387","CVE-2026-31789","CVE-2026-2673","CVE-2026-31790","CVE-2026-28389"]}]},{"id":"CVE-2026-24097","published":"2026-03-13T19:54:00","updated_at":"2026-08-17T19:18:40.359918+00:00","description":"\nImproper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23,\n2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to\nenumerate existing hosts by observing different HTTP response codes in\nagent-receiver/register_existing endpoint, which could lead to information\ndisclosure.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-24097","https://checkmk.com/werk/18993"],"bugs":[""],"patches":{"check-mk":[]},"tags":{},"packages":[{"name":"check-mk","source":"https://ubuntu.com/security/cve?package=check-mk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=check-mk","debian":"https://tracker.debian.org/pkg/check-mk","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-23943","published":"2026-03-13T19:54:00","updated_at":"2026-08-07T13:59:59.127616+00:00","description":"\nImproper Handling of Highly Compressed Data (Compression Bomb)\nvulnerability in Erlang OTP ssh (ssh_transport modules) allows Denial of\nService via Resource Depletion.\nThe SSH transport layer advertises legacy zlib compression by default and\ninflates attacker-controlled payloads pre-authentication without any size\nlimit, enabling reliable memory exhaustion DoS.\nTwo compression algorithms are affected:\n* zlib: Activates immediately after key exchange, enabling unauthenticated\nattacks\n* zlib@openssh.com: Activates post-authentication, enabling authenticated\nattacks\nEach SSH packet can decompress ~255 MB from 256 KB of wire data (1029:1\namplification ratio). Multiple packets can rapidly exhaust available\nmemory, causing OOM kills in memory-constrained environments.\nThis vulnerability is associated with program files\nlib/ssh/src/ssh_transport.erl and program routines\nssh_transport:decompress/2, ssh_transport:handle_packet_part/4.\nThis issue affects OTP from OTP 17.0 before OTP 28.4.1, OTP 27.3.4.9 and\nOTP 26.2.5.18, corresponding to ssh from 3.0.1 before 5.5.1, 5.2.11.6 and\n5.1.4.14.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-23943","https://github.com/erlang/otp/security/advisories/GHSA-c836-qprm-jw9r","https://github.com/erlang/otp/commit/0c1c04b191f6ab940e8fcfabce39eb5a8a6440a4","https://github.com/erlang/otp/commit/43a87b949bdff12d629a8c34146711d9da93b1b1","https://github.com/erlang/otp/commit/93073c3bd338c60cd2bae715ce6a1d4ffc1a8fd3","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130912"],"patches":{"erlang":[]},"tags":{},"packages":[{"name":"erlang","source":"https://ubuntu.com/security/cve?package=erlang","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=erlang","debian":"https://tracker.debian.org/pkg/erlang","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-23942","published":"2026-03-13T19:54:00","updated_at":"2026-08-07T14:00:03.659004+00:00","description":"\nImproper Limitation of a Pathname to a Restricted Directory ('Path\nTraversal') vulnerability in Erlang OTP (ssh_sftpd module) allows Path\nTraversal.\nThis vulnerability is associated with program files\nlib/ssh/src/ssh_sftpd.erl and program routines ssh_sftpd:is_within_root/2.\nThe SFTP server uses string prefix matching via lists:prefix/2 rather than\nproper path component validation when checking if a path is within the\nconfigured root directory. This allows authenticated users to access\nsibling directories that share a common name prefix with the configured\nroot directory. For example, if root is set to /home/user1, paths like\n/home/user10 or /home/user1_backup would incorrectly be considered within\nthe root.\nThis issue affects OTP from OTP 17.0 before OTP 28.4.1, OTP 27.3.4.9 and\nOTP 26.2.5.18, corresponding to ssh from 3.0.1 before 5.5.1, 5.2.11.6 and\n5.1.4.14.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-23942","https://github.com/erlang/otp/security/advisories/GHSA-4749-w85x-hw9h","https://github.com/erlang/otp/commit/27688a824f753d4c16371dc70e88753fb410590b","https://github.com/erlang/otp/commit/5ed603a1211b83b8be2d1fc06d3f3bf30c3c9759","https://github.com/erlang/otp/commit/9e0ac85d3485e7898e0da88a14be0ee2310a3b28","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130912"],"patches":{"erlang":[]},"tags":{},"packages":[{"name":"erlang","source":"https://ubuntu.com/security/cve?package=erlang","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=erlang","debian":"https://tracker.debian.org/pkg/erlang","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-23941","published":"2026-03-13T19:54:00","updated_at":"2026-08-07T13:59:54.896678+00:00","description":"\nInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')\nvulnerability in Erlang OTP (inets httpd module) allows HTTP Request\nSmuggling.\nThis vulnerability is associated with program files\nlib/inets/src/http_server/httpd_request.erl and program routines\nhttpd_request:parse_headers/7.\nThe server does not reject or normalize duplicate Content-Length headers.\nThe earliest Content-Length in the request is used for body parsing while\ncommon reverse proxies (nginx, Apache httpd, Envoy) honor the last\nContent-Length value. This violates RFC 9112 Section 6.3 and allows\nfront-end/back-end desynchronization, leaving attacker-controlled bytes\nqueued as the start of the next request.\nThis issue affects OTP from OTP 17.0 before OTP 28.4.1, OTP 27.3.4.9 and\nOTP 26.2.5.18, corresponding to inets from 5.10 before 9.6.1, 9.3.2.3 and\n9.1.0.5.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW","baseScore":9.4,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"}},"baseScore":7.0,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-23941","https://github.com/erlang/otp/security/advisories/GHSA-w4jc-9wpv-pqh7","https://github.com/erlang/otp/commit/a4b46336fd25aa100ac602eb9a627aaead7eda18","https://github.com/erlang/otp/commit/a761d391d8d08316cbd7d4a86733ba932b73c45b","https://github.com/erlang/otp/commit/e775a332f623851385ab6ddb866d9b150612ddf6","https://www.erlang.org/doc/system/versions.html#order-of-versions"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130912"],"patches":{"erlang":[]},"tags":{},"packages":[{"name":"erlang","source":"https://ubuntu.com/security/cve?package=erlang","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=erlang","debian":"https://tracker.debian.org/pkg/erlang","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-32597","published":"2026-03-13T00:00:00","updated_at":"2026-03-30T19:28:18.264914+00:00","description":"\nPyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT\ndoes not validate the crit (Critical) Header Parameter defined in RFC 7515\n§4.1.11. When a JWS token contains a crit array listing extensions that\nPyJWT does not understand, the library accepts the token instead of\nrejecting it. This violates the MUST requirement in the RFC. This\nvulnerability is fixed in 2.12.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-32597","https://ubuntu.com/security/notices/USN-8133-1"],"bugs":[""],"patches":{"pyjwt":["upstream: https://github.com/jpadilla/pyjwt/commit/051ea341b5573fe3edcd53042f347929b92c2b92"]},"tags":{},"packages":[{"name":"pyjwt","source":"https://ubuntu.com/security/cve?package=pyjwt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pyjwt","debian":"https://tracker.debian.org/pkg/pyjwt","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.5.3+ds1-1ubuntu0.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"1.7.1-2ubuntu2.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2.3.0-1ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.7.0-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2.10.1-2ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.3.0-1ubuntu0.1+esm1","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-8133-1"],"notices":[{"id":"USN-8133-1","title":"PyJWT vulnerability","summary":"PyJWT could allow unintended access to network services.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-30T15:02:33.601164","description":"It was discovered that PyJWT did not validate the critical header\nparameter, contrary to the RFC specification expectations. A remote\nattacker could possibly use this issue to bypass certain authentication\nchecks and restrictions.","is_hidden":false,"release_packages":{"bionic":[{"name":"pyjwt","version":"1.5.3+ds1-1ubuntu0.1+esm1","description":"Python 3 implementation of JSON Web Token","is_source":true},{"name":"python-jwt","version":"1.5.3+ds1-1ubuntu0.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":null,"pocket":"esm-infra"},{"name":"python3-jwt","version":"1.5.3+ds1-1ubuntu0.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"pyjwt","version":"1.7.1-2ubuntu2.1+esm1","description":"Python 3 implementation of JSON Web Token","is_source":true},{"name":"python3-jwt","version":"1.7.1-2ubuntu2.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"pyjwt","version":"2.3.0-1ubuntu0.3","description":"Python 3 implementation of JSON Web Token","is_source":true},{"name":"python3-jwt","version":"2.3.0-1ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":"https://launchpad.net/ubuntu/+source/pyjwt/2.3.0-1ubuntu0.3","pocket":"security"}],"noble":[{"name":"pyjwt","version":"2.7.0-1ubuntu0.1","description":"Python 3 implementation of JSON Web Token","is_source":true},{"name":"python3-jwt","version":"2.7.0-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":"https://launchpad.net/ubuntu/+source/pyjwt/2.7.0-1ubuntu0.1","pocket":"security"}],"questing":[{"name":"pyjwt","version":"2.10.1-2ubuntu0.1","description":"Python 3 implementation of JSON Web Token","is_source":true},{"name":"python-jwt-doc","version":"2.10.1-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":"https://launchpad.net/ubuntu/+source/pyjwt/2.10.1-2ubuntu0.1","pocket":"security"},{"name":"python3-jwt","version":"2.10.1-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":"https://launchpad.net/ubuntu/+source/pyjwt/2.10.1-2ubuntu0.1","pocket":"security"}],"xenial":[{"name":"pyjwt","version":"1.3.0-1ubuntu0.1+esm1","description":"Python 3 implementation of JSON Web Token","is_source":true},{"name":"python-jwt","version":"1.3.0-1ubuntu0.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":null,"pocket":"esm-infra"},{"name":"python3-jwt","version":"1.3.0-1ubuntu0.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/pyjwt","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2026-32597"]}]},{"id":"CVE-2026-2581","published":"2026-03-12T21:16:00","updated_at":"2026-03-18T12:16:48.134003+00:00","description":"\nThis is an uncontrolled resource consumption vulnerability (CWE-400) that\ncan lead to Denial of Service (DoS).\nIn vulnerable Undici versions, when interceptors.deduplicate() is enabled,\nresponse data for deduplicated requests could be accumulated in memory for\ndownstream handlers. An attacker-controlled or untrusted upstream endpoint\ncan exploit this with large/chunked responses and concurrent identical\nrequests, causing high memory usage and potential OOM process termination.\nImpacted users are applications that use Undici’s deduplication interceptor\nagainst endpoints that may produce large or long-lived response bodies.\nPatchesThe issue has been patched by changing deduplication behavior to\nstream response chunks to downstream handlers as they arrive (instead of\nfull-body accumulation), and by preventing late deduplication when body\nstreaming has already started.\nUsers should upgrade to the first official Undici (and Node.js, where\napplicable) releases that include this patch.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-2581"],"bugs":[""],"patches":{"node-undici":[]},"tags":{},"packages":[{"name":"node-undici","source":"https://ubuntu.com/security/cve?package=node-undici","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-undici","debian":"https://tracker.debian.org/pkg/node-undici","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-2229","published":"2026-03-12T21:16:00","updated_at":"2026-03-18T12:17:36.550225+00:00","description":"\nImpactThe undici WebSocket client is vulnerable to a denial-of-service\nattack due to improper validation of the server_max_window_bits parameter\nin the permessage-deflate extension. When a WebSocket client connects to a\nserver, it automatically advertises support for permessage-deflate\ncompression. A malicious server can respond with an\nout-of-range server_max_window_bits value (outside zlib's valid range of\n8-15). When the server subsequently sends a compressed frame, the client\nattempts to create a zlib InflateRaw instance with the invalid windowBits\nvalue, causing a synchronous RangeError exception that is not caught,\nresulting in immediate process termination.\nThe vulnerability exists because:\n  *  The isValidClientWindowBits() function only validates that the value\ncontains ASCII digits, not that it falls within the valid range 8-15\n  *  The createInflateRaw() call is not wrapped in a try-catch block\n  *  The resulting exception propagates up through the call stack and\ncrashes the Node.js process","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-2229"],"bugs":[""],"patches":{"node-undici":[]},"tags":{},"packages":[{"name":"node-undici","source":"https://ubuntu.com/security/cve?package=node-undici","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-undici","debian":"https://tracker.debian.org/pkg/node-undici","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-1528","published":"2026-03-12T21:16:00","updated_at":"2026-03-18T12:17:36.550225+00:00","description":"\nImpactA server can reply with a WebSocket frame using the 64-bit length\nform and an extremely large length. undici's ByteParser overflows internal\nmath, ends up in an invalid state, and throws a fatal TypeError that\nterminates the process.\nPatches\nPatched in the undici version v7.24.0 and v6.24.0. Users should upgrade to\nthis version or later.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-1528"],"bugs":[""],"patches":{"node-undici":[]},"tags":{},"packages":[{"name":"node-undici","source":"https://ubuntu.com/security/cve?package=node-undici","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-undici","debian":"https://tracker.debian.org/pkg/node-undici","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-1527","published":"2026-03-12T21:16:00","updated_at":"2026-03-18T12:17:56.091663+00:00","description":"\nImpactWhen an application passes user-controlled input to\nthe upgrade option of client.request(), an attacker can inject CRLF\nsequences (\\r\\n) to:\n  *  Inject arbitrary HTTP headers\n  *  Terminate the HTTP request prematurely and smuggle raw data to\nnon-HTTP services (Redis, Memcached, Elasticsearch)\nThe vulnerability exists because undici writes the upgrade value directly\nto the socket without validating for invalid header characters:\n// lib/dispatcher/client-h1.js:1121\nif (upgrade) {\n  header += `connection: upgrade\\r\\nupgrade: ${upgrade}\\r\\n`\n}","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.6,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.6,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-1527"],"bugs":[""],"patches":{"node-undici":[]},"tags":{},"packages":[{"name":"node-undici","source":"https://ubuntu.com/security/cve?package=node-undici","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-undici","debian":"https://tracker.debian.org/pkg/node-undici","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-1526","published":"2026-03-12T21:16:00","updated_at":"2026-03-18T12:17:04.104872+00:00","description":"\nThe undici WebSocket client is vulnerable to a denial-of-service attack via\nunbounded memory consumption during permessage-deflate decompression. When\na WebSocket connection negotiates the permessage-deflate extension, the\nclient decompresses incoming compressed frames without enforcing any limit\non the decompressed data size. A malicious WebSocket server can send a\nsmall compressed frame (a \"decompression bomb\") that expands to an\nextremely large size in memory, causing the Node.js process to exhaust\navailable memory and crash or become unresponsive.\nThe vulnerability exists in the PerMessageDeflate.decompress() method,\nwhich accumulates all decompressed chunks in memory and concatenates them\ninto a single Buffer without checking whether the total size exceeds a safe\nthreshold.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-1526"],"bugs":[""],"patches":{"node-undici":[]},"tags":{},"packages":[{"name":"node-undici","source":"https://ubuntu.com/security/cve?package=node-undici","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-undici","debian":"https://tracker.debian.org/pkg/node-undici","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-32274","published":"2026-03-12T20:16:00","updated_at":"2026-08-07T17:10:55.957397+00:00","description":"\nBlack is the uncompromising Python code formatter. Starting in version\n24.3.0 and prior to version 26.3.1, Black writes a cache file, the name of\nwhich is computed from various formatting options. The value of the\n--python-cell-magics option was placed in the filename without\nsanitization, which allowed an attacker who controls the value of this\nargument to write cache files to arbitrary file system locations. Fixed in\nBlack 26.3.1.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.7,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-32274","https://github.com/psf/black/security/advisories/GHSA-3936-cmfr-pm3m","https://github.com/psf/black/pull/5038"],"bugs":[""],"patches":{"black":[]},"tags":{},"packages":[{"name":"black","source":"https://ubuntu.com/security/cve?package=black","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=black","debian":"https://tracker.debian.org/pkg/black","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-32259","published":"2026-03-12T20:16:00","updated_at":"2026-08-11T14:39:45.517822+00:00","description":"\nImageMagick is free and open-source software used for editing and\nmanipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory\nallocation fails in the sixel encoder it would be possible to write past\nthe end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16\nand 6.9.13-41.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-32259","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-49hx-7656-jpg3","https://ubuntu.com/security/notices/USN-8592-1"],"bugs":[""],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/df934b4721173f8dda33c6d007f9811669640e86","upstream: https://github.com/ImageMagick/ImageMagick6/commit/812ff3ef91967d367aa7a087a31b94f3b2a267ee"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","component":null,"pocket":"esm-apps"},{"release_codename":"resolute","status":"not-affected","description":"8:7.1.2.18+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.16+esm23","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"upstream","status":"released","description":"8:7.1.2.16+dfsg1-1","component":null,"pocket":"security"}]}],"notices_ids":["USN-8592-1"],"notices":[{"id":"USN-8592-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-08-10T20:04:52.267595","description":"Hao Ren discovered that ImageMagick incorrectly handled certain images\nwhen using the wavelet-denoise operation. An attacker could possibly use\nthis issue to trigger an out-of-bounds heap write, resulting in\narbitrary code execution. This issue only affected Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.\n(CVE-2026-30936)\n\nIt was discovered that ImageMagick incorrectly handled extremely large\nXWD images. An attacker could possibly use this issue to trigger an\nout-of-bounds heap write, resulting in arbitrary code execution.\n(CVE-2026-30937)\n\nIt was discovered that ImageMagick incorrectly handled extremely large\nSFW images on 32-bit systems. An attacker could possibly use this issue\nto trigger an integer overflow, resulting in a denial of service.\n(CVE-2026-31853)\n\nIt was discovered that ImageMagick incorrectly handled memory allocation\nfailures in the sixel encoder. An attacker could possibly use this issue\nto trigger a stack buffer overflow, resulting in arbitrary code\nexecution. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.\n(CVE-2026-32259)","is_hidden":false,"release_packages":{"bionic":[{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6-common","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-common","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"imagemagick-doc","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-7","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16hdri-7","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagick++-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-3-extra","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickcore-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6-headers","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16hdri-3","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"libmagickwand-dev","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"},{"name":"perlmagick","version":"8:6.9.7.4+dfsg-16ubuntu6.15+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-common","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-doc","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"imagemagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-common","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-doc","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-8","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-8","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-6-extra","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-6-extra","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-6","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"imagemagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-common","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6-doc","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"imagemagick-6.q16hdri","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libimage-magick-q16hdri-perl","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-9t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-9t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagick++-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-arch-config","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-7-extra","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-7-extra","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickcore-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6-headers","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-7t64","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-6.q16hdri-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"libmagickwand-dev","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"},{"name":"perlmagick","version":"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-apps"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.13+esm24","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.13+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.16+esm23","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.16+esm23","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-30937","CVE-2026-32259","CVE-2026-30936","CVE-2026-31853"]}]},{"id":"CVE-2026-32249","published":"2026-03-12T20:16:00","updated_at":"2026-04-14T18:06:52.945680+00:00","description":"\nVim is an open source, command line text editor. From 9.1.0011 to before\n9.2.0137, Vim's NFA regex compiler, when encountering a collection\ncontaining a combining character as the endpoint of a character range (e.g.\n[0-0\\u05bb]), incorrectly emits the composing bytes of that character as\nseparate NFA states. This corrupts the NFA postfix stack, resulting in\nNFA_START_COLL having a NULL out1 pointer. When nfa_max_width()\nsubsequently traverses the compiled NFA to estimate match width for the\nlook-behind assertion, it dereferences state->out1->out without a NULL\ncheck, causing a segmentation fault. This vulnerability is fixed in\n9.2.0137.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-32249","https://github.com/vim/vim/security/advisories/GHSA-9phh-423r-778r","https://ubuntu.com/security/notices/USN-8171-1"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.2.0137","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.11","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2:9.1.0967-1ubuntu6.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-8171-1"],"notices":[{"id":"USN-8171-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-04-13T16:56:28.892570","description":"Nathan Mills discovered that Vim could crash when parsing certain regular\nexpressions. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10\n(CVE-2026-32249)\n\nIt was discovered that Vim did not properly sanitize user input. An\nattacker could possibly use this issue to execute arbitrary commands.\n(CVE-2026-33412)\n\nAvishay Matayev discovered that Vim's modeline sandbox could be bypassed\nwhen opening a maliciously-crafted file. An attacker could possibly use\nthis issue to execute arbitrary commands. This issue only affected Ubuntu\n20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.10.\n(CVE-2026-34982)","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.32+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.27","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.27","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.27","pocket":"security"}],"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.11","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.11","pocket":"security"}],"questing":[{"name":"vim","version":"2:9.1.0967-1ubuntu6.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu6.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm24","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm30","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2026-34982","CVE-2026-32249","CVE-2026-33412"]}]},{"id":"CVE-2026-32240","published":"2026-03-12T20:16:00","updated_at":"2026-08-19T18:24:08.770154+00:00","description":"\nCap'n Proto is a data interchange format and capability-based RPC system.\nPrior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size\nparsed to a value of 2^64 or larger, it would be truncated to a 64-bit\ninteger. In theory, this bug could enable HTTP request/response smuggling.\nThis vulnerability is fixed in 1.4.0.","ubuntu_description":"","notes":[{"author":"mrmajumder","note":"KJ-HTTP library introduced in capnproto 0.6.0; absent in\n0.4.0 (trusty) and 0.5.3 (xenial)"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-32240","https://github.com/capnproto/capnproto/security/advisories/GHSA-vpcq-mx5v-32wm","https://ubuntu.com/security/notices/USN-8650-1"],"bugs":[""],"patches":{"capnproto":["upstream: https://github.com/capnproto/capnproto/commit/2744b3c012b4aa3c31cefb61ec656829fa5c0e36"]},"tags":{},"packages":[{"name":"capnproto","source":"https://ubuntu.com/security/cve?package=capnproto","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=capnproto","debian":"https://tracker.debian.org/pkg/capnproto","statuses":[{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.4.0","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.6.1-1ubuntu1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"0.7.0-6ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"0.8.0-2ubuntu2+esm1","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"1.0.1-4ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"1.1.0-2.1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-8650-1"],"notices":[{"id":"USN-8650-1","title":"Cap'n Proto vulnerabilities","summary":"Several security issues were fixed in Cap'n Proto.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-08-19T16:00:14.183492","description":"Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly\nhandled negative Content-Length values or excessively large chunk sizes\nwhen processing HTTP messages. An attacker could possibly use these\nissues to cause HTTP messages to be interpreted inconsistently,\nresulting in HTTP request or response smuggling. (CVE-2026-32239,\nCVE-2026-32240)","is_hidden":false,"release_packages":{"bionic":[{"name":"capnproto","version":"0.6.1-1ubuntu1+esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"0.6.1-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"},{"name":"libcapnp-0.6.1","version":"0.6.1-1ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"},{"name":"libcapnp-dev","version":"0.6.1-1ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"capnproto","version":"0.7.0-6ubuntu0.1~esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"0.7.0-6ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"},{"name":"libcapnp-0.7.0","version":"0.7.0-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"},{"name":"libcapnp-dev","version":"0.7.0-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"capnproto","version":"0.8.0-2ubuntu2+esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"0.8.0-2ubuntu2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-0.8.0","version":"0.8.0-2ubuntu2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-dev","version":"0.8.0-2ubuntu2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"capnproto","version":"1.0.1-4ubuntu0.1~esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"1.0.1-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-1.0.1","version":"1.0.1-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-dev","version":"1.0.1-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"}],"resolute":[{"name":"capnproto","version":"1.1.0-2.1ubuntu0.1~esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"1.1.0-2.1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-1.1.0","version":"1.1.0-2.1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-dev","version":"1.1.0-2.1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2026-32240","CVE-2026-32239"]}]},{"id":"CVE-2026-32239","published":"2026-03-12T20:16:00","updated_at":"2026-08-19T18:24:08.770154+00:00","description":"\nCap'n Proto is a data interchange format and capability-based RPC system.\nPrior to 1.4.0, a negative Content-Length value was converted to unsigned,\ntreating it as an impossibly large length instead. In theory, this bug\ncould enable HTTP request/response smuggling. This vulnerability is fixed\nin 1.4.0.","ubuntu_description":"","notes":[{"author":"mrmajumder","note":"KJ-HTTP library introduced in capnproto 0.6.0; absent in\n0.4.0 (trusty) and 0.5.3 (xenial)"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-32239","https://github.com/capnproto/capnproto/security/advisories/GHSA-qjx3-pp3m-9jpm","https://ubuntu.com/security/notices/USN-8650-1"],"bugs":[""],"patches":{"capnproto":["upstream: https://github.com/capnproto/capnproto/commit/2744b3c012b4aa3c31cefb61ec656829fa5c0e36"]},"tags":{},"packages":[{"name":"capnproto","source":"https://ubuntu.com/security/cve?package=capnproto","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=capnproto","debian":"https://tracker.debian.org/pkg/capnproto","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.6.1-1ubuntu1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"0.7.0-6ubuntu0.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.4.0","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"0.8.0-2ubuntu2+esm1","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"1.0.1-4ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"resolute","status":"released","description":"1.1.0-2.1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-8650-1"],"notices":[{"id":"USN-8650-1","title":"Cap'n Proto vulnerabilities","summary":"Several security issues were fixed in Cap'n Proto.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-08-19T16:00:14.183492","description":"Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly\nhandled negative Content-Length values or excessively large chunk sizes\nwhen processing HTTP messages. An attacker could possibly use these\nissues to cause HTTP messages to be interpreted inconsistently,\nresulting in HTTP request or response smuggling. (CVE-2026-32239,\nCVE-2026-32240)","is_hidden":false,"release_packages":{"bionic":[{"name":"capnproto","version":"0.6.1-1ubuntu1+esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"0.6.1-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"},{"name":"libcapnp-0.6.1","version":"0.6.1-1ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"},{"name":"libcapnp-dev","version":"0.6.1-1ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"capnproto","version":"0.7.0-6ubuntu0.1~esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"0.7.0-6ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"},{"name":"libcapnp-0.7.0","version":"0.7.0-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"},{"name":"libcapnp-dev","version":"0.7.0-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"capnproto","version":"0.8.0-2ubuntu2+esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"0.8.0-2ubuntu2+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-0.8.0","version":"0.8.0-2ubuntu2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-dev","version":"0.8.0-2ubuntu2+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"capnproto","version":"1.0.1-4ubuntu0.1~esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"1.0.1-4ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-1.0.1","version":"1.0.1-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-dev","version":"1.0.1-4ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"}],"resolute":[{"name":"capnproto","version":"1.1.0-2.1ubuntu0.1~esm1","description":"Fast data interchange format and capability-based RPC system","is_source":true},{"name":"capnproto","version":"1.1.0-2.1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-1.1.0","version":"1.1.0-2.1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"},{"name":"libcapnp-dev","version":"1.1.0-2.1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/capnproto","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2026-32240","CVE-2026-32239"]}]},{"id":"CVE-2026-1525","published":"2026-03-12T20:16:00","updated_at":"2026-03-18T12:17:19.588923+00:00","description":"\nUndici allows duplicate HTTP Content-Length headers when they are provided\nin an array with case-variant names\n(e.g., Content-Length and content-length). This produces malformed HTTP/1.1\nrequests with multiple conflicting Content-Length values on the wire.\nWho is impacted:\n  *  Applications using undici.request(), undici.Client, or similar\nlow-level APIs with headers passed as flat arrays\n  *  Applications that accept user-controlled header names without\ncase-normalization\nPotential consequences:\n  *  Denial of Service: Strict HTTP parsers (proxies, servers) will reject\nrequests with duplicate Content-Length headers (400 Bad Request)\n  *  HTTP Request Smuggling: In deployments where an intermediary and\nbackend interpret duplicate headers inconsistently (e.g., one uses the\nfirst value, the other uses the last), this can enable request smuggling\nattacks leading to ACL bypass, cache poisoning, or credential hijacking","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-1525"],"bugs":[""],"patches":{"node-undici":[]},"tags":{},"packages":[{"name":"node-undici","source":"https://ubuntu.com/security/cve?package=node-undici","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-undici","debian":"https://tracker.debian.org/pkg/node-undici","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":14820,"limit":20,"total_results":79316}