{"cves":[{"id":"CVE-2026-0878","published":"2026-01-13T14:16:00","updated_at":"2026-09-16T10:39:50.811337+00:00","description":"\nSandbox escape due to incorrect boundary conditions in the Graphics:\nCanvasWebGL component. This vulnerability was fixed in Firefox 147, Firefox\nESR 140.7, Thunderbird 147, and Thunderbird 140.7.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"mozjs* contain a copy of the SpiderMonkey JavaScript engine. It\nis not feasible to backport security fixes to the mozjs*\npackages, as such, marking them as ignored.\nstarting with Ubuntu 22.04, the firefox package is just a script\nthat installs the Firefox snap\nstarting with Ubuntu 24.04, the thunderbird package is just a\nscript that installs the Thunderbird snap"}],"codename":null,"priority":"medium","cvss3":8.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":8.0,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-0878","https://www.mozilla.org/en-US/security/advisories/mfsa2026-01/#CVE-2026-0878","https://www.mozilla.org/en-US/security/advisories/mfsa2026-03/#CVE-2026-0878","https://bugzilla.mozilla.org/show_bug.cgi?id=2003989","https://www.mozilla.org/security/advisories/mfsa2026-01/","https://www.mozilla.org/security/advisories/mfsa2026-03/","https://ubuntu.com/security/notices/USN-7991-1"],"bugs":[""],"patches":{"firefox":[],"thunderbird":[],"mozjs38":[],"mozjs52":[],"mozjs68":[],"mozjs78":[],"mozjs91":[],"mozjs102":[],"mozjs115":[]},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs102","source":"https://ubuntu.com/security/cve?package=mozjs102","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs102","debian":"https://tracker.debian.org/pkg/mozjs102","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs115","source":"https://ubuntu.com/security/cve?package=mozjs115","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs115","debian":"https://tracker.debian.org/pkg/mozjs115","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs38","source":"https://ubuntu.com/security/cve?package=mozjs38","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs38","debian":"https://tracker.debian.org/pkg/mozjs38","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs52","source":"https://ubuntu.com/security/cve?package=mozjs52","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs52","debian":"https://tracker.debian.org/pkg/mozjs52","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs68","source":"https://ubuntu.com/security/cve?package=mozjs68","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs68","debian":"https://tracker.debian.org/pkg/mozjs68","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs78","source":"https://ubuntu.com/security/cve?package=mozjs78","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs78","debian":"https://tracker.debian.org/pkg/mozjs78","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs91","source":"https://ubuntu.com/security/cve?package=mozjs91","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs91","debian":"https://tracker.debian.org/pkg/mozjs91","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1:140.7.1+build1-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-7991-1"],"notices":[{"id":"USN-7991-1","title":"Thunderbird vulnerabilities","summary":"Several security issues were fixed in Thunderbird.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-02T12:11:46.119395","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked into opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service,\nobtain sensitive information, bypass security restrictions, cross-site\ntracing, or execute arbitrary code.","is_hidden":false,"release_packages":{"jammy":[{"name":"thunderbird","version":"1:140.7.1+build1-0ubuntu0.22.04.1","description":"Mozilla Open Source mail and newsgroup client","is_source":true},{"name":"thunderbird","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-dev","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-gnome-support","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-af","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ar","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ast","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-be","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-bg","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-bn","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-bn-bd","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-br","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ca","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-cak","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-cs","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-cy","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-da","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-de","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-dsb","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-el","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-en","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-en-gb","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-en-us","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-es","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-es-ar","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-es-es","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-et","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-eu","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fa","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fi","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fr","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fy","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fy-nl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ga","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ga-ie","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-gd","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-gl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-he","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-hr","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-hsb","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-hu","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-hy","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-id","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-is","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-it","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ja","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ka","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-kab","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-kk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ko","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-lt","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-lv","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-mk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ms","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nb","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nb-no","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nn","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nn-no","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pa","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pa-in","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pt","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pt-br","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pt-pt","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-rm","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ro","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ru","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-si","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sq","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sr","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sv","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sv-se","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ta","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ta-lk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-th","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-tr","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-uk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-uz","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-vi","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-zh-cn","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-zh-hans","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-zh-hant","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-zh-tw","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-mozsymbols","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"xul-ext-calendar-timezones","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"xul-ext-gdata-provider","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"xul-ext-lightning","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-8031","CVE-2024-50336","CVE-2024-9403","CVE-2025-9181","CVE-2025-5270","CVE-2024-10464","CVE-2025-13019","CVE-2025-4088","CVE-2025-8036","CVE-2025-1019","CVE-2025-1018","CVE-2025-10533","CVE-2025-10537","CVE-2025-14331","CVE-2025-11709","CVE-2025-4085","CVE-2026-0882","CVE-2025-9184","CVE-2025-1020","CVE-2026-0877","CVE-2025-9180","CVE-2025-1943","CVE-2025-14330","CVE-2025-9185","CVE-2025-3031","CVE-2026-0887","CVE-2025-5271","CVE-2025-13013","CVE-2025-10528","CVE-2025-11712","CVE-2024-10462","CVE-2025-11710","CVE-2025-14322","CVE-2025-6433","CVE-2025-14325","CVE-2024-10460","CVE-2025-5283","CVE-2025-8030","CVE-2025-8038","CVE-2025-11711","CVE-2024-9402","CVE-2025-4092","CVE-2024-10468","CVE-2025-14328","CVE-2025-10536","CVE-2026-0886","CVE-2024-10461","CVE-2025-8039","CVE-2025-10532","CVE-2025-10529","CVE-2025-8040","CVE-2024-9399","CVE-2025-0243","CVE-2025-6427","CVE-2025-6435","CVE-2025-8028","CVE-2025-13017","CVE-2025-13018","CVE-2024-9396","CVE-2025-13014","CVE-2025-14324","CVE-2026-0891","CVE-2025-9179","CVE-2025-6436","CVE-2025-14329","CVE-2025-0240","CVE-2025-9182","CVE-2026-0885","CVE-2025-8037","CVE-2026-0879","CVE-2025-14321","CVE-2025-0247","CVE-2025-3032","CVE-2025-13020","CVE-2025-14327","CVE-2025-8035","CVE-2025-0239","CVE-2024-9398","CVE-2024-10465","CVE-2025-11715","CVE-2026-0890","CVE-2025-6432","CVE-2025-13012","CVE-2025-8034","CVE-2025-4089","CVE-2025-0241","CVE-2025-11714","CVE-2025-14323","CVE-2025-1942","CVE-2025-11708","CVE-2025-13015","CVE-2026-0818","CVE-2025-3034","CVE-2024-10467","CVE-2025-6434","CVE-2025-8032","CVE-2024-10466","CVE-2024-9397","CVE-2025-8029","CVE-2025-10527","CVE-2025-8027","CVE-2026-0880","CVE-2024-9400","CVE-2026-0884","CVE-2025-5272","CVE-2026-0883","CVE-2025-0237","CVE-2025-8033","CVE-2026-0878","CVE-2025-13016","CVE-2025-11713"]}]},{"id":"CVE-2026-0877","published":"2026-01-13T14:16:00","updated_at":"2026-09-16T10:34:44.243337+00:00","description":"\nMitigation bypass in the DOM: Security component. This vulnerability was\nfixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird\n147, and Thunderbird 140.7.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"mozjs* contain a copy of the SpiderMonkey JavaScript engine. It\nis not feasible to backport security fixes to the mozjs*\npackages, as such, marking them as ignored.\nstarting with Ubuntu 22.04, the firefox package is just a script\nthat installs the Firefox snap\nstarting with Ubuntu 24.04, the thunderbird package is just a\nscript that installs the Thunderbird snap"}],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-0877","https://www.mozilla.org/en-US/security/advisories/mfsa2026-01/#CVE-2026-0877","https://www.mozilla.org/en-US/security/advisories/mfsa2026-03/#CVE-2026-0877","https://bugzilla.mozilla.org/show_bug.cgi?id=1999257","https://www.mozilla.org/security/advisories/mfsa2026-01/","https://www.mozilla.org/security/advisories/mfsa2026-02/","https://www.mozilla.org/security/advisories/mfsa2026-03/","https://ubuntu.com/security/notices/USN-7991-1"],"bugs":[""],"patches":{"firefox":[],"thunderbird":[],"mozjs38":[],"mozjs52":[],"mozjs68":[],"mozjs78":[],"mozjs91":[],"mozjs102":[],"mozjs115":[]},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs102","source":"https://ubuntu.com/security/cve?package=mozjs102","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs102","debian":"https://tracker.debian.org/pkg/mozjs102","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs115","source":"https://ubuntu.com/security/cve?package=mozjs115","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs115","debian":"https://tracker.debian.org/pkg/mozjs115","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs38","source":"https://ubuntu.com/security/cve?package=mozjs38","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs38","debian":"https://tracker.debian.org/pkg/mozjs38","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs52","source":"https://ubuntu.com/security/cve?package=mozjs52","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs52","debian":"https://tracker.debian.org/pkg/mozjs52","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs68","source":"https://ubuntu.com/security/cve?package=mozjs68","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs68","debian":"https://tracker.debian.org/pkg/mozjs68","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs78","source":"https://ubuntu.com/security/cve?package=mozjs78","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs78","debian":"https://tracker.debian.org/pkg/mozjs78","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mozjs91","source":"https://ubuntu.com/security/cve?package=mozjs91","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs91","debian":"https://tracker.debian.org/pkg/mozjs91","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1:140.7.1+build1-0ubuntu0.22.04.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7991-1"],"notices":[{"id":"USN-7991-1","title":"Thunderbird vulnerabilities","summary":"Several security issues were fixed in Thunderbird.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-02T12:11:46.119395","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked into opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service,\nobtain sensitive information, bypass security restrictions, cross-site\ntracing, or execute arbitrary code.","is_hidden":false,"release_packages":{"jammy":[{"name":"thunderbird","version":"1:140.7.1+build1-0ubuntu0.22.04.1","description":"Mozilla Open Source mail and newsgroup client","is_source":true},{"name":"thunderbird","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-dev","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-gnome-support","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-af","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ar","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ast","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-be","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-bg","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-bn","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-bn-bd","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-br","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ca","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-cak","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-cs","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-cy","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-da","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-de","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-dsb","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-el","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-en","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-en-gb","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-en-us","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-es","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-es-ar","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-es-es","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-et","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-eu","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fa","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fi","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fr","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fy","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-fy-nl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ga","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ga-ie","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-gd","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-gl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-he","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-hr","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-hsb","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-hu","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-hy","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-id","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-is","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-it","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ja","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ka","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-kab","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-kk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ko","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-lt","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-lv","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-mk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ms","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nb","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nb-no","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nn","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-nn-no","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pa","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pa-in","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pt","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pt-br","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-pt-pt","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-rm","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ro","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ru","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-si","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sl","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sq","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sr","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sv","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-sv-se","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ta","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-ta-lk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-th","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-tr","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-uk","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-uz","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-vi","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-zh-cn","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-zh-hans","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-zh-hant","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-locale-zh-tw","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"thunderbird-mozsymbols","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"xul-ext-calendar-timezones","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"xul-ext-gdata-provider","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"},{"name":"xul-ext-lightning","version":"1:140.7.1+build1-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/thunderbird","version_link":"https://launchpad.net/ubuntu/+source/thunderbird/1:140.7.1+build1-0ubuntu0.22.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-8031","CVE-2024-50336","CVE-2024-9403","CVE-2025-9181","CVE-2025-5270","CVE-2024-10464","CVE-2025-13019","CVE-2025-4088","CVE-2025-8036","CVE-2025-1019","CVE-2025-1018","CVE-2025-10533","CVE-2025-10537","CVE-2025-14331","CVE-2025-11709","CVE-2025-4085","CVE-2026-0882","CVE-2025-9184","CVE-2025-1020","CVE-2026-0877","CVE-2025-9180","CVE-2025-1943","CVE-2025-14330","CVE-2025-9185","CVE-2025-3031","CVE-2026-0887","CVE-2025-5271","CVE-2025-13013","CVE-2025-10528","CVE-2025-11712","CVE-2024-10462","CVE-2025-11710","CVE-2025-14322","CVE-2025-6433","CVE-2025-14325","CVE-2024-10460","CVE-2025-5283","CVE-2025-8030","CVE-2025-8038","CVE-2025-11711","CVE-2024-9402","CVE-2025-4092","CVE-2024-10468","CVE-2025-14328","CVE-2025-10536","CVE-2026-0886","CVE-2024-10461","CVE-2025-8039","CVE-2025-10532","CVE-2025-10529","CVE-2025-8040","CVE-2024-9399","CVE-2025-0243","CVE-2025-6427","CVE-2025-6435","CVE-2025-8028","CVE-2025-13017","CVE-2025-13018","CVE-2024-9396","CVE-2025-13014","CVE-2025-14324","CVE-2026-0891","CVE-2025-9179","CVE-2025-6436","CVE-2025-14329","CVE-2025-0240","CVE-2025-9182","CVE-2026-0885","CVE-2025-8037","CVE-2026-0879","CVE-2025-14321","CVE-2025-0247","CVE-2025-3032","CVE-2025-13020","CVE-2025-14327","CVE-2025-8035","CVE-2025-0239","CVE-2024-9398","CVE-2024-10465","CVE-2025-11715","CVE-2026-0890","CVE-2025-6432","CVE-2025-13012","CVE-2025-8034","CVE-2025-4089","CVE-2025-0241","CVE-2025-11714","CVE-2025-14323","CVE-2025-1942","CVE-2025-11708","CVE-2025-13015","CVE-2026-0818","CVE-2025-3034","CVE-2024-10467","CVE-2025-6434","CVE-2025-8032","CVE-2024-10466","CVE-2024-9397","CVE-2025-8029","CVE-2025-10527","CVE-2025-8027","CVE-2026-0880","CVE-2024-9400","CVE-2026-0884","CVE-2025-5272","CVE-2026-0883","CVE-2025-0237","CVE-2025-8033","CVE-2026-0878","CVE-2025-13016","CVE-2025-11713"]}]},{"id":"CVE-2026-22801","published":"2026-01-12T23:15:00","updated_at":"2026-02-12T15:51:17.076007+00:00","description":"\nLIBPNG is a reference library for use in applications that read, create,\nand manipulate PNG (Portable Network Graphics) raster image files. From\n1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified\nwrite API functions png_write_image_16bit and png_write_image_8bit causes\nheap buffer over-read when the caller provides a negative row stride (for\nbottom-up image layouts) or a stride exceeding 65535 bytes. The bug was\nintroduced in libpng 1.6.26 (October 2016) by casts added to silence\ncompiler warnings on 16-bit systems. This vulnerability is fixed in 1.6.54.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22801","https://www.openwall.com/lists/oss-security/2026/01/12/7","https://github.com/pnggroup/libpng/security/advisories/GHSA-vgjq-8cw5-ggw8","https://ubuntu.com/security/notices/USN-7963-1","https://ubuntu.com/security/notices/USN-8035-1"],"bugs":["https://github.com/pnggroup/libpng/issues/778"],"patches":{"libpng":[],"libpng1.6":["upstream: https://github.com/pnggroup/libpng/commit/cf155de014"],"firefox":[],"thunderbird":[],"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"","component":null,"pocket":"security"}]},{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"libpng","source":"https://ubuntu.com/security/cve?package=libpng","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libpng","debian":"https://tracker.debian.org/pkg/libpng","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"libpng1.6","source":"https://ubuntu.com/security/cve?package=libpng1.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libpng1.6","debian":"https://tracker.debian.org/pkg/libpng1.6","statuses":[{"release_codename":"resolute","status":"released","description":"1.6.54-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.6.54","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.6.37-3ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.6.43-5ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"1.6.47-1.1ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"1.6.50-1ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.6.34-1ubuntu0.18.04.2+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"1.6.37-2ubuntu0.1~esm2","component":null,"pocket":"esm-infra"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-7963-1","USN-8035-1"],"notices":[{"id":"USN-7963-1","title":"libpng vulnerabilities","summary":"Several security issues were fixed in libpng.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-01-14T16:45:48.581978","description":"It was discovered that the libpng simplified API incorrectly processed\npalette PNG images with partial transparency and gamma correction. If a\nuser or automated system were tricked into opening a specially crafted PNG\nfile, an attacker could use this issue to cause libpng to crash, resulting\nin a denial of service. (CVE-2025-66293)\n\nPetr Simecek, Stanislav Fort and Pavel Kohout discovered that the libpng\nsimplified API incorrectly processed interlaced 16-bit PNGs with 8-bit\noutput format and non-minimal row strides. If a user or automated system\nwere tricked into opening a specially crafted PNG file, an attacker could\nuse this issue to cause libpng to crash, resulting in a denial of service.\n(CVE-2026-22695)\n\nCosmin Truta discovered that the libpng simplified API incorrectly handled\ninvalid row strides. If a user or automated system were tricked into\nopening a specially crafted PNG file, an attacker could use this issue to\ncause libpng to crash, resulting in a denial of service. (CVE-2026-22801)","is_hidden":false,"release_packages":{"jammy":[{"name":"libpng1.6","version":"1.6.37-3ubuntu0.3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.37-3ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.37-3ubuntu0.3","pocket":"security"},{"name":"libpng-tools","version":"1.6.37-3ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.37-3ubuntu0.3","pocket":"security"},{"name":"libpng16-16","version":"1.6.37-3ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.37-3ubuntu0.3","pocket":"security"}],"noble":[{"name":"libpng1.6","version":"1.6.43-5ubuntu0.3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.43-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.43-5ubuntu0.3","pocket":"security"},{"name":"libpng-tools","version":"1.6.43-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.43-5ubuntu0.3","pocket":"security"},{"name":"libpng16-16t64","version":"1.6.43-5ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.43-5ubuntu0.3","pocket":"security"}],"plucky":[{"name":"libpng1.6","version":"1.6.47-1.1ubuntu0.3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.47-1.1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.47-1.1ubuntu0.3","pocket":"security"},{"name":"libpng-tools","version":"1.6.47-1.1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.47-1.1ubuntu0.3","pocket":"security"},{"name":"libpng16-16t64","version":"1.6.47-1.1ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.47-1.1ubuntu0.3","pocket":"security"}],"questing":[{"name":"libpng1.6","version":"1.6.50-1ubuntu0.3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.50-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.50-1ubuntu0.3","pocket":"security"},{"name":"libpng-tools","version":"1.6.50-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.50-1ubuntu0.3","pocket":"security"},{"name":"libpng16-16t64","version":"1.6.50-1ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.50-1ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-66293","CVE-2026-22695","CVE-2026-22801"]},{"id":"USN-8035-1","title":"libpng vulnerabilities","summary":"Several security issues were fixed in libpng.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-12T13:37:00.461457","description":"It was discovered that the libpng simplified API incorrectly processed\npalette PNG images with partial transparency and gamma correction. If a\nuser or automated system were tricked into opening a specially crafted PNG\nfile, an attacker could use this issue to cause libpng to crash, resulting\nin a denial of service. (CVE-2025-66293)\n\nPetr Simecek, Stanislav Fort and Pavel Kohout discovered that the libpng\nsimplified API incorrectly processed interlaced 16-bit PNGs with 8-bit\noutput format and non-minimal row strides. If a user or automated system\nwere tricked into opening a specially crafted PNG file, an attacker could\nuse this issue to cause libpng to crash, resulting in a denial of service.\n(CVE-2026-22695)\n\nCosmin Truta discovered that the libpng simplified API incorrectly handled\ninvalid row strides. If a user or automated system were tricked into\nopening a specially crafted PNG file, an attacker could use this issue to\ncause libpng to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-22801)\n\nIt was discovered that the libpng simplified API incorrectly handled\nquantizing RGB images. If a user or automated system were tricked into\nopening a specially crafted PNG file, an attacker could use this issue to\ncause libpng to crash, resulting in a denial of service. (CVE-2026-25646)","is_hidden":false,"release_packages":{"bionic":[{"name":"libpng1.6","version":"1.6.34-1ubuntu0.18.04.2+esm2","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.34-1ubuntu0.18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"},{"name":"libpng-tools","version":"1.6.34-1ubuntu0.18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"},{"name":"libpng16-16","version":"1.6.34-1ubuntu0.18.04.2+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"libpng1.6","version":"1.6.37-2ubuntu0.1~esm2","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.37-2ubuntu0.1~esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"},{"name":"libpng-tools","version":"1.6.37-2ubuntu0.1~esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"},{"name":"libpng16-16","version":"1.6.37-2ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"libpng1.6","version":"1.6.20-2ubuntu0.1~esm3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng16-16","version":"1.6.20-2ubuntu0.1~esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-apps"},{"name":"libpng16-dev","version":"1.6.20-2ubuntu0.1~esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-apps"},{"name":"libpng16-devtools","version":"1.6.20-2ubuntu0.1~esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-apps"},{"name":"libpng16-tools","version":"1.6.20-2ubuntu0.1~esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2025-66293","CVE-2026-22801","CVE-2026-25646","CVE-2026-22695"]}]},{"id":"CVE-2026-22695","published":"2026-01-12T23:15:00","updated_at":"2026-02-12T15:51:17.076007+00:00","description":"\nLIBPNG is a reference library for use in applications that read, create,\nand manipulate PNG (Portable Network Graphics) raster image files. From\n1.6.51 to 1.6.53, there is a heap buffer over-read in the libpng simplified\nAPI function png_image_finish_read when processing interlaced 16-bit PNGs\nwith 8-bit output format and non-minimal row stride. This is a regression\nintroduced by the fix for CVE-2025-65018. This vulnerability is fixed in\n1.6.54.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"regression from CVE-2025-65018 fix"},{"author":"john-breton","note":"This is conjoined with CVE-2025-65018. Once CVE-2025-65018\nhad been fixed for libpng in trusty and xenial, the fix\nfor this CVE must be applied as well."}],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22695","https://www.openwall.com/lists/oss-security/2026/01/12/7","https://github.com/pnggroup/libpng/security/advisories/GHSA-mmq5-27w3-rxpp","https://ubuntu.com/security/notices/USN-7963-1","https://ubuntu.com/security/notices/USN-8035-1"],"bugs":[""],"patches":{"libpng":[],"libpng1.6":["upstream: https://github.com/pnggroup/libpng/commit/e4f7ad4ea2"],"firefox":[],"thunderbird":[],"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"","component":null,"pocket":"security"}]},{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"libpng","source":"https://ubuntu.com/security/cve?package=libpng","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libpng","debian":"https://tracker.debian.org/pkg/libpng","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"libpng1.6","source":"https://ubuntu.com/security/cve?package=libpng1.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libpng1.6","debian":"https://tracker.debian.org/pkg/libpng1.6","statuses":[{"release_codename":"bionic","status":"released","description":"1.6.34-1ubuntu0.18.04.2+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"1.6.37-2ubuntu0.1~esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"1.6.54","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.6.37-3ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.6.43-5ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"1.6.47-1.1ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"1.6.50-1ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.6.20-2ubuntu0.1~esm3","component":null,"pocket":"esm-apps"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-7963-1","USN-8035-1"],"notices":[{"id":"USN-7963-1","title":"libpng vulnerabilities","summary":"Several security issues were fixed in libpng.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-01-14T16:45:48.581978","description":"It was discovered that the libpng simplified API incorrectly processed\npalette PNG images with partial transparency and gamma correction. If a\nuser or automated system were tricked into opening a specially crafted PNG\nfile, an attacker could use this issue to cause libpng to crash, resulting\nin a denial of service. (CVE-2025-66293)\n\nPetr Simecek, Stanislav Fort and Pavel Kohout discovered that the libpng\nsimplified API incorrectly processed interlaced 16-bit PNGs with 8-bit\noutput format and non-minimal row strides. If a user or automated system\nwere tricked into opening a specially crafted PNG file, an attacker could\nuse this issue to cause libpng to crash, resulting in a denial of service.\n(CVE-2026-22695)\n\nCosmin Truta discovered that the libpng simplified API incorrectly handled\ninvalid row strides. If a user or automated system were tricked into\nopening a specially crafted PNG file, an attacker could use this issue to\ncause libpng to crash, resulting in a denial of service. (CVE-2026-22801)","is_hidden":false,"release_packages":{"jammy":[{"name":"libpng1.6","version":"1.6.37-3ubuntu0.3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.37-3ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.37-3ubuntu0.3","pocket":"security"},{"name":"libpng-tools","version":"1.6.37-3ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.37-3ubuntu0.3","pocket":"security"},{"name":"libpng16-16","version":"1.6.37-3ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.37-3ubuntu0.3","pocket":"security"}],"noble":[{"name":"libpng1.6","version":"1.6.43-5ubuntu0.3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.43-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.43-5ubuntu0.3","pocket":"security"},{"name":"libpng-tools","version":"1.6.43-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.43-5ubuntu0.3","pocket":"security"},{"name":"libpng16-16t64","version":"1.6.43-5ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.43-5ubuntu0.3","pocket":"security"}],"plucky":[{"name":"libpng1.6","version":"1.6.47-1.1ubuntu0.3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.47-1.1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.47-1.1ubuntu0.3","pocket":"security"},{"name":"libpng-tools","version":"1.6.47-1.1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.47-1.1ubuntu0.3","pocket":"security"},{"name":"libpng16-16t64","version":"1.6.47-1.1ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.47-1.1ubuntu0.3","pocket":"security"}],"questing":[{"name":"libpng1.6","version":"1.6.50-1ubuntu0.3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.50-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.50-1ubuntu0.3","pocket":"security"},{"name":"libpng-tools","version":"1.6.50-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.50-1ubuntu0.3","pocket":"security"},{"name":"libpng16-16t64","version":"1.6.50-1ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":"https://launchpad.net/ubuntu/+source/libpng1.6/1.6.50-1ubuntu0.3","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-66293","CVE-2026-22695","CVE-2026-22801"]},{"id":"USN-8035-1","title":"libpng vulnerabilities","summary":"Several security issues were fixed in libpng.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-12T13:37:00.461457","description":"It was discovered that the libpng simplified API incorrectly processed\npalette PNG images with partial transparency and gamma correction. If a\nuser or automated system were tricked into opening a specially crafted PNG\nfile, an attacker could use this issue to cause libpng to crash, resulting\nin a denial of service. (CVE-2025-66293)\n\nPetr Simecek, Stanislav Fort and Pavel Kohout discovered that the libpng\nsimplified API incorrectly processed interlaced 16-bit PNGs with 8-bit\noutput format and non-minimal row strides. If a user or automated system\nwere tricked into opening a specially crafted PNG file, an attacker could\nuse this issue to cause libpng to crash, resulting in a denial of service.\n(CVE-2026-22695)\n\nCosmin Truta discovered that the libpng simplified API incorrectly handled\ninvalid row strides. If a user or automated system were tricked into\nopening a specially crafted PNG file, an attacker could use this issue to\ncause libpng to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-22801)\n\nIt was discovered that the libpng simplified API incorrectly handled\nquantizing RGB images. If a user or automated system were tricked into\nopening a specially crafted PNG file, an attacker could use this issue to\ncause libpng to crash, resulting in a denial of service. (CVE-2026-25646)","is_hidden":false,"release_packages":{"bionic":[{"name":"libpng1.6","version":"1.6.34-1ubuntu0.18.04.2+esm2","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.34-1ubuntu0.18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"},{"name":"libpng-tools","version":"1.6.34-1ubuntu0.18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"},{"name":"libpng16-16","version":"1.6.34-1ubuntu0.18.04.2+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"libpng1.6","version":"1.6.37-2ubuntu0.1~esm2","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng-dev","version":"1.6.37-2ubuntu0.1~esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"},{"name":"libpng-tools","version":"1.6.37-2ubuntu0.1~esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"},{"name":"libpng16-16","version":"1.6.37-2ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"libpng1.6","version":"1.6.20-2ubuntu0.1~esm3","description":"PNG (Portable Network Graphics) file library","is_source":true},{"name":"libpng16-16","version":"1.6.20-2ubuntu0.1~esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-apps"},{"name":"libpng16-dev","version":"1.6.20-2ubuntu0.1~esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-apps"},{"name":"libpng16-devtools","version":"1.6.20-2ubuntu0.1~esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-apps"},{"name":"libpng16-tools","version":"1.6.20-2ubuntu0.1~esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libpng1.6","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2025-66293","CVE-2026-22801","CVE-2026-25646","CVE-2026-22695"]}]},{"id":"CVE-2026-22772","published":"2026-01-12T21:15:00","updated_at":"2026-01-13T14:38:44.740934+00:00","description":"\nFulcio is a certificate authority for issuing code signing certificates for\nan OpenID Connect (OIDC) identity. Prior to 1.8.5, Fulcio's metaRegex()\nfunction uses unanchored regex, allowing attackers to bypass MetaIssuer URL\nvalidation and trigger SSRF to arbitrary internal services. Since the SSRF\nonly can trigger GET requests, the request cannot mutate state. The\nresponse from the GET request is not returned to the caller so data\nexfiltration is not possible. A malicious actor could attempt to probe an\ninternal network through Blind SSRF. This vulnerability is fixed in 1.8.5.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22772","https://github.com/sigstore/fulcio/commit/eaae2f2be56df9dea5f9b439ec81bedae4c0978d","https://github.com/sigstore/fulcio/security/advisories/GHSA-59jp-pj84-45mr"],"bugs":[""],"patches":{"golang-github-sigstore-fulcio":[]},"tags":{},"packages":[{"name":"golang-github-sigstore-fulcio","source":"https://ubuntu.com/security/cve?package=golang-github-sigstore-fulcio","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=golang-github-sigstore-fulcio","debian":"https://tracker.debian.org/pkg/golang-github-sigstore-fulcio","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-22776","published":"2026-01-12T19:16:00","updated_at":"2026-07-10T19:28:42.385022+00:00","description":"\ncpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS\nlibrary. Prior to version 0.30.1, a Denial of Service (DoS) vulnerability\nexists in cpp-httplib due to the unsafe handling of compressed HTTP request\nbodies (Content-Encoding: gzip, br, etc.). The library validates the\npayload_max_length against the compressed data size received from the\nnetwork, but does not limit the size of the decompressed data stored in\nmemory.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.7,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22776","https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-h934-98h4-j43q"],"bugs":[""],"patches":{"cpp-httplib":["upstream: https://github.com/yhirose/cpp-httplib/commit/2e2e47bab1ae6a853476eecbc4bf279dd1fef792"]},"tags":{},"packages":[{"name":"cpp-httplib","source":"https://ubuntu.com/security/cve?package=cpp-httplib","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cpp-httplib","debian":"https://tracker.debian.org/pkg/cpp-httplib","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.30.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-22251","published":"2026-01-12T18:15:00","updated_at":"2026-01-29T16:17:16.309312+00:00","description":"\nwlc is a Weblate command-line client using Weblate's REST API. Prior to\n1.17.0, wlc supported providing unscoped API keys in the setting. This\npractice was discouraged for years, but the code was never removed. This\nmight cause the API key to be leaked to different servers.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22251","https://github.com/WeblateOrg/wlc/security/advisories/GHSA-9rp8-h4g8-8766","https://github.com/WeblateOrg/wlc/pull/1098","https://ubuntu.com/security/notices/USN-7981-1"],"bugs":[""],"patches":{"wlc":["upstream: https://github.com/WeblateOrg/wlc/commit/aafdb507a9e66574ade1f68c50c4fe75dbe80797"]},"tags":{},"packages":[{"name":"wlc","source":"https://ubuntu.com/security/cve?package=wlc","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wlc","debian":"https://tracker.debian.org/pkg/wlc","statuses":[{"release_codename":"upstream","status":"released","description":"1.17.0","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"1.15-2ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.8-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"1.2-1ubuntu0.20.04.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"1.2-1ubuntu0.22.04.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"1.13-2ubuntu0.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-7981-1"],"notices":[{"id":"USN-7981-1","title":"wlc vulnerabilities","summary":"Several security issues were fixed in wlc.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-01-27T18:14:03.433962","description":"It was discovered that wlc did not correctly handle SSL verification. An\nattacker could possibly use this issue to access sensitive resources.\n(CVE-2026-22250)\n\nIt was discovered that wlc did not correctly handle API keys. An attacker\ncould possibly use this issue to leak API keys to a malicious server.\n(CVE-2026-22251)","is_hidden":false,"release_packages":{"bionic":[{"name":"wlc","version":"0.8-1ubuntu0.1~esm1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"0.8-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"wlc","version":"1.2-1ubuntu0.20.04.1~esm1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"1.2-1ubuntu0.20.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"wlc","version":"1.2-1ubuntu0.22.04.1~esm1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"1.2-1ubuntu0.22.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"wlc","version":"1.13-2ubuntu0.1~esm1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"1.13-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":null,"pocket":"esm-apps"}],"questing":[{"name":"wlc","version":"1.15-2ubuntu0.1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"1.15-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":"https://launchpad.net/ubuntu/+source/wlc/1.15-2ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-22251","CVE-2026-22250"]}]},{"id":"CVE-2026-22250","published":"2026-01-12T18:15:00","updated_at":"2026-01-29T16:17:16.309312+00:00","description":"\nwlc is a Weblate command-line client using Weblate's REST API. Prior to\n1.17.0, the SSL verification would be skipped for some crafted URLs. This\nvulnerability is fixed in 1.17.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":2.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.5,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22250","https://github.com/WeblateOrg/wlc/security/advisories/GHSA-2mmv-7rrp-g8xh","https://github.com/WeblateOrg/wlc/pull/1097","https://ubuntu.com/security/notices/USN-7981-1"],"bugs":[""],"patches":{"wlc":["upstream: https://github.com/WeblateOrg/wlc/commit/a513864ec4daad00146e6d6e039559726e256fa3"]},"tags":{},"packages":[{"name":"wlc","source":"https://ubuntu.com/security/cve?package=wlc","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wlc","debian":"https://tracker.debian.org/pkg/wlc","statuses":[{"release_codename":"upstream","status":"released","description":"1.17.0","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.8-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"1.2-1ubuntu0.20.04.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"1.2-1ubuntu0.22.04.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"1.13-2ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"questing","status":"released","description":"1.15-2ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-7981-1"],"notices":[{"id":"USN-7981-1","title":"wlc vulnerabilities","summary":"Several security issues were fixed in wlc.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-01-27T18:14:03.433962","description":"It was discovered that wlc did not correctly handle SSL verification. An\nattacker could possibly use this issue to access sensitive resources.\n(CVE-2026-22250)\n\nIt was discovered that wlc did not correctly handle API keys. An attacker\ncould possibly use this issue to leak API keys to a malicious server.\n(CVE-2026-22251)","is_hidden":false,"release_packages":{"bionic":[{"name":"wlc","version":"0.8-1ubuntu0.1~esm1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"0.8-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"wlc","version":"1.2-1ubuntu0.20.04.1~esm1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"1.2-1ubuntu0.20.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"wlc","version":"1.2-1ubuntu0.22.04.1~esm1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"1.2-1ubuntu0.22.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"wlc","version":"1.13-2ubuntu0.1~esm1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"1.13-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":null,"pocket":"esm-apps"}],"questing":[{"name":"wlc","version":"1.15-2ubuntu0.1","description":"A Weblate command-line client using Weblate's REST API","is_source":true},{"name":"wlc","version":"1.15-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/wlc","version_link":"https://launchpad.net/ubuntu/+source/wlc/1.15-2ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2026-22251","CVE-2026-22250"]}]},{"id":"CVE-2025-68471","published":"2026-01-12T18:15:00","updated_at":"2026-01-19T17:35:41.265274+00:00","description":"\nAvahi is a system which facilitates service discovery on a local network\nvia the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon\ncan be crashed by sending 2 unsolicited announcements with CNAME resource\nrecords 2 seconds apart.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-68471","https://github.com/avahi/avahi/security/advisories/GHSA-56rf-42xr-qmmg","https://github.com/avahi/avahi/issues/678","https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1","https://ubuntu.com/security/notices/USN-7967-1"],"bugs":[""],"patches":{"avahi":["upstream: https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1"]},"tags":{},"packages":[{"name":"avahi","source":"https://ubuntu.com/security/cve?package=avahi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=avahi","debian":"https://tracker.debian.org/pkg/avahi","statuses":[{"release_codename":"bionic","status":"released","description":"0.7-3.1ubuntu1.3+esm3","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"0.8-16ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"0.7-4ubuntu7.3+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"0.8-5ubuntu5.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"0.8-13ubuntu6.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.6.31-4ubuntu1.3+esm4","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-7967-1"],"notices":[{"id":"USN-7967-1","title":"Avahi vulnerabilities","summary":"Several security issues were fixed in Avahi.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-01-19T12:30:55.846108","description":"It was discovered that Avahi incorrectly terminated when processing browser\nrecords with wide-area disabled. An attacker could possibly use this issue\nto cause Avahi to crash, resulting in a denial of service. (CVE-2025-68276)\n\nIt was discovered that Avahi incorrectly terminated when processing\nunsolicited CNAME records pointing to resource records with short TTLs. An\nattacker could possibly use this issue to cause Avahi to crash, resulting\nin a denial of service. (CVE-2025-68468)\n\nIt was discovered that Avahi incorrectly terminated when processing\nunsolicited CNAME records in quick succession. An attacker could possibly\nuse this issue to cause Avahi to crash, resulting in a denial of service.\n(CVE-2025-68471)","is_hidden":false,"release_packages":{"bionic":[{"name":"avahi","version":"0.7-3.1ubuntu1.3+esm3","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"gir1.2-avahi-0.6","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"avahi","version":"0.7-4ubuntu7.3+esm1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"gir1.2-avahi-0.6","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"avahi","version":"0.8-5ubuntu5.4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-daemon","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-discover","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-utils","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-client3","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common3","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-core7","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"python3-avahi","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"}],"noble":[{"name":"avahi","version":"0.8-13ubuntu6.1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-daemon","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-discover","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-utils","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-client3","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common3","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-core7","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"python3-avahi","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"}],"questing":[{"name":"avahi","version":"0.8-16ubuntu3.1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-daemon","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-discover","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-utils","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-client3","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common3","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-core7","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"python3-avahi","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"}],"trusty":[{"name":"avahi","version":"0.6.31-4ubuntu1.3+esm4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-daemon","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-discover","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-dnsconfd","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-ui-utils","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-utils","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-client-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-client3","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common-data","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common3","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-compat-libdnssd-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-compat-libdnssd1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-core-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-core7","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-glib-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-glib1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-gobject-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-gobject0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-qt4-1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-qt4-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-gtk3-0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-gtk3-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"python-avahi","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"avahi","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-qt4-1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-qt4-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-68471","CVE-2025-68276","CVE-2025-68468"]}]},{"id":"CVE-2025-68468","published":"2026-01-12T18:15:00","updated_at":"2026-01-19T17:35:41.265274+00:00","description":"\nAvahi is a system which facilitates service discovery on a local network\nvia the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon\ncan be crashed by sending unsolicited announcements containing CNAME\nresource records pointing it to resource records with short TTLs. As soon\nas they expire avahi-daemon crashes.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-68468","https://github.com/avahi/avahi/security/advisories/GHSA-cp79-r4x9-vf52","https://github.com/avahi/avahi/issues/683","https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a","https://ubuntu.com/security/notices/USN-7967-1"],"bugs":[""],"patches":{"avahi":["upstream: https://github.com/avahi/avahi/commit/f66be13d7f31a3ef806d226bf8b67240179d309a"]},"tags":{},"packages":[{"name":"avahi","source":"https://ubuntu.com/security/cve?package=avahi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=avahi","debian":"https://tracker.debian.org/pkg/avahi","statuses":[{"release_codename":"noble","status":"released","description":"0.8-13ubuntu6.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"0.8-16ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.7-3.1ubuntu1.3+esm3","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"0.7-4ubuntu7.3+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"0.8-5ubuntu5.4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.6.31-4ubuntu1.3+esm4","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-7967-1"],"notices":[{"id":"USN-7967-1","title":"Avahi vulnerabilities","summary":"Several security issues were fixed in Avahi.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-01-19T12:30:55.846108","description":"It was discovered that Avahi incorrectly terminated when processing browser\nrecords with wide-area disabled. An attacker could possibly use this issue\nto cause Avahi to crash, resulting in a denial of service. (CVE-2025-68276)\n\nIt was discovered that Avahi incorrectly terminated when processing\nunsolicited CNAME records pointing to resource records with short TTLs. An\nattacker could possibly use this issue to cause Avahi to crash, resulting\nin a denial of service. (CVE-2025-68468)\n\nIt was discovered that Avahi incorrectly terminated when processing\nunsolicited CNAME records in quick succession. An attacker could possibly\nuse this issue to cause Avahi to crash, resulting in a denial of service.\n(CVE-2025-68471)","is_hidden":false,"release_packages":{"bionic":[{"name":"avahi","version":"0.7-3.1ubuntu1.3+esm3","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"gir1.2-avahi-0.6","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"avahi","version":"0.7-4ubuntu7.3+esm1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"gir1.2-avahi-0.6","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"avahi","version":"0.8-5ubuntu5.4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-daemon","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-discover","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-utils","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-client3","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common3","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-core7","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"python3-avahi","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"}],"noble":[{"name":"avahi","version":"0.8-13ubuntu6.1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-daemon","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-discover","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-utils","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-client3","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common3","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-core7","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"python3-avahi","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"}],"questing":[{"name":"avahi","version":"0.8-16ubuntu3.1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-daemon","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-discover","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-utils","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-client3","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common3","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-core7","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"python3-avahi","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"}],"trusty":[{"name":"avahi","version":"0.6.31-4ubuntu1.3+esm4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-daemon","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-discover","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-dnsconfd","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-ui-utils","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-utils","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-client-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-client3","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common-data","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common3","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-compat-libdnssd-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-compat-libdnssd1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-core-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-core7","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-glib-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-glib1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-gobject-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-gobject0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-qt4-1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-qt4-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-gtk3-0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-gtk3-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"python-avahi","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"avahi","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-qt4-1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-qt4-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-68471","CVE-2025-68276","CVE-2025-68468"]}]},{"id":"CVE-2025-68276","published":"2026-01-12T18:15:00","updated_at":"2026-01-19T17:35:41.265274+00:00","description":"\nAvahi is a system which facilitates service discovery on a local network\nvia the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged\nlocal users can crash avahi-daemon (with wide-area disabled) by creating\nrecord browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus.\nThis can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service\nresolvers/browsers that create those browsers internally themselves.","ubuntu_description":"","notes":[{"author":"hlibk","note":"The referenced commit in the CVE is not correct."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-68276","https://github.com/avahi/avahi/security/advisories/GHSA-mhf3-865v-g5rc","https://github.com/avahi/avahi/pull/806","https://github.com/avahi/avahi/commit/ede7048475c5d47d53890e3bc1350dda8e0b3688","https://ubuntu.com/security/notices/USN-7967-1"],"bugs":[""],"patches":{"avahi":["upstream: https://github.com/avahi/avahi/pull/806/commits/0c013e2e819be3bda74cecf48b5f64956cf8a760"]},"tags":{},"packages":[{"name":"avahi","source":"https://ubuntu.com/security/cve?package=avahi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=avahi","debian":"https://tracker.debian.org/pkg/avahi","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.7-3.1ubuntu1.3+esm3","component":null,"pocket":"esm-infra"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"0.7-4ubuntu7.3+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"0.8-5ubuntu5.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"0.8-13ubuntu6.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"0.8-16ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.6.31-4ubuntu1.3+esm4","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-7967-1"],"notices":[{"id":"USN-7967-1","title":"Avahi vulnerabilities","summary":"Several security issues were fixed in Avahi.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-01-19T12:30:55.846108","description":"It was discovered that Avahi incorrectly terminated when processing browser\nrecords with wide-area disabled. An attacker could possibly use this issue\nto cause Avahi to crash, resulting in a denial of service. (CVE-2025-68276)\n\nIt was discovered that Avahi incorrectly terminated when processing\nunsolicited CNAME records pointing to resource records with short TTLs. An\nattacker could possibly use this issue to cause Avahi to crash, resulting\nin a denial of service. (CVE-2025-68468)\n\nIt was discovered that Avahi incorrectly terminated when processing\nunsolicited CNAME records in quick succession. An attacker could possibly\nuse this issue to cause Avahi to crash, resulting in a denial of service.\n(CVE-2025-68471)","is_hidden":false,"release_packages":{"bionic":[{"name":"avahi","version":"0.7-3.1ubuntu1.3+esm3","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"gir1.2-avahi-0.6","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.7-3.1ubuntu1.3+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"avahi","version":"0.7-4ubuntu7.3+esm1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"gir1.2-avahi-0.6","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.7-4ubuntu7.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"avahi","version":"0.8-5ubuntu5.4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-daemon","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-discover","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"avahi-utils","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-client3","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-common3","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-core7","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"},{"name":"python3-avahi","version":"0.8-5ubuntu5.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-5ubuntu5.4","pocket":"security"}],"noble":[{"name":"avahi","version":"0.8-13ubuntu6.1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-daemon","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-discover","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"avahi-utils","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-client3","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-common3","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-core7","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"},{"name":"python3-avahi","version":"0.8-13ubuntu6.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-13ubuntu6.1","pocket":"security"}],"questing":[{"name":"avahi","version":"0.8-16ubuntu3.1","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-daemon","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-discover","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-dnsconfd","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-ui-utils","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"avahi-utils","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"gir1.2-avahi-0.6","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-client-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-client3","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common-data","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-common3","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-compat-libdnssd-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-compat-libdnssd1","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-core-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-core7","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-glib-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-glib1","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-gobject-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-gobject0","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-ui-gtk3-0","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"libavahi-ui-gtk3-dev","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"},{"name":"python3-avahi","version":"0.8-16ubuntu3.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":"https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu3.1","pocket":"security"}],"trusty":[{"name":"avahi","version":"0.6.31-4ubuntu1.3+esm4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-daemon","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-discover","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-dnsconfd","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-ui-utils","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"avahi-utils","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-client-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-client3","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common-data","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-common3","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-compat-libdnssd-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-compat-libdnssd1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-core-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-core7","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-glib-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-glib1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-gobject-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-gobject0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-qt4-1","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-qt4-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-gtk3-0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui-gtk3-dev","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"libavahi-ui0","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"},{"name":"python-avahi","version":"0.6.31-4ubuntu1.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"avahi","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","description":"IPv4LL network address configuration daemon","is_source":true},{"name":"avahi-autoipd","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-daemon","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-discover","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-dnsconfd","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-ui-utils","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"avahi-utils","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-client3","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-data","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-common3","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-compat-libdnssd1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-core7","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-glib1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-gobject0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-qt4-1","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-qt4-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui-gtk3-dev","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"libavahi-ui0","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"},{"name":"python-avahi","version":"0.6.32~rc+dfsg-1ubuntu2.3+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/avahi","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-68471","CVE-2025-68276","CVE-2025-68468"]}]},{"id":"CVE-2025-71063","published":"2026-01-12T16:16:00","updated_at":"2026-01-13T14:38:44.740934+00:00","description":"\nErrands before 46.2.10 does not verify TLS certificates for CalDAV servers.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","attackVector":"ADJACENT","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-71063","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123738","https://github.com/mrvladus/Errands/compare/46.2.9...46.2.10","https://github.com/mrvladus/Errands/releases/tag/46.2.10"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123738","https://github.com/mrvladus/Errands/issues/401"],"patches":{"errands":["upstream: https://github.com/mrvladus/Errands/commit/04e567b432083fc798ea2249363ea6c83ff01099"]},"tags":{},"packages":[{"name":"errands","source":"https://ubuntu.com/security/cve?package=errands","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=errands","debian":"https://tracker.debian.org/pkg/errands","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"46.2.10-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"46.2.10-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-15506","published":"2026-01-11T11:15:00","updated_at":"2026-09-11T06:58:14.640877+00:00","description":"\nA vulnerability was found in AcademySoftwareFoundation OpenColorIO up to\n2.5.0. This issue affects the function ConvertToRegularExpression of the\nfile src/OpenColorIO/FileRules.cpp. Performing a manipulation results in\nout-of-bounds read. The attack needs to be approached locally. The exploit\nhas been made public and could be used. The patch is named\nebdbb75123c9d5f4643e041314e2bc988a13f20d. To fix this issue, it is\nrecommended to deploy a patch. The fix was added to the 2.5.1 milestone.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":3.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.3,"baseSeverity":"LOW"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":1.9,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-15506","https://github.com/AcademySoftwareFoundation/OpenColorIO/issues/2228","https://github.com/AcademySoftwareFoundation/OpenColorIO/pull/2231","https://github.com/AcademySoftwareFoundation/OpenColorIO/milestone/11","https://github.com/cozdas/OpenColorIO/commit/ebdbb75123c9d5f4643e041314e2bc988a13f20d","https://github.com/oneafter/1225/blob/main/uaf","https://vuldb.com/?ctiid.340444","https://vuldb.com/?id.340444","https://vuldb.com/?submit.733332"],"bugs":[""],"patches":{"opencolorio":[]},"tags":{},"packages":[{"name":"opencolorio","source":"https://ubuntu.com/security/cve?package=opencolorio","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opencolorio","debian":"https://tracker.debian.org/pkg/opencolorio","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-0822","published":"2026-01-10T14:15:00","updated_at":"2026-09-11T06:58:20.975525+00:00","description":"\nA vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This\nissue affects the function js_typed_array_sort of the file quickjs.c. The\nmanipulation leads to heap-based buffer overflow. Remote exploitation of\nthe attack is possible. The exploit is publicly available and might be\nused. The identifier of the patch is\n53eefbcd695165a3bd8c584813b472cb4a69fbf5. To fix this issue, it is\nrecommended to deploy a patch.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.1,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-0822","https://github.com/quickjs-ng/quickjs/pull/1298","https://github.com/quickjs-ng/quickjs/issues/1297#issue-3780006202","https://vuldb.com/?ctiid.340356","https://vuldb.com/?id.340356","https://vuldb.com/?submit.731783"],"bugs":["https://github.com/quickjs-ng/quickjs/issues/1297"],"patches":{"quickjs":["upstream: https://github.com/quickjs-ng/quickjs/commit/53eefbcd695165a3bd8c584813b472cb4a69fbf5"]},"tags":{},"packages":[{"name":"quickjs","source":"https://ubuntu.com/security/cve?package=quickjs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=quickjs","debian":"https://tracker.debian.org/pkg/quickjs","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.12.1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-0821","published":"2026-01-10T13:15:00","updated_at":"2026-09-11T06:54:53.657103+00:00","description":"\nA vulnerability was determined in quickjs-ng quickjs up to 0.11.0. This\nvulnerability affects the function js_typed_array_constructor of the file\nquickjs.c. Executing a manipulation can lead to heap-based buffer overflow.\nThe attack may be launched remotely. The exploit has been publicly\ndisclosed and may be utilized. This patch is called\nc5d80831e51e48a83eab16ea867be87f091783c5. A patch should be applied to\nremediate this issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-0821","https://github.com/quickjs-ng/quickjs/pull/1299","https://github.com/quickjs-ng/quickjs/issues/1296#issue-3780003395","https://vuldb.com/?ctiid.340355","https://vuldb.com/?id.340355","https://vuldb.com/?submit.731780"],"bugs":["https://github.com/quickjs-ng/quickjs/issues/1296"],"patches":{"quickjs":["upstream: https://github.com/quickjs-ng/quickjs/commit/c5d80831e51e48a83eab16ea867be87f091783c5"]},"tags":{},"packages":[{"name":"quickjs","source":"https://ubuntu.com/security/cve?package=quickjs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=quickjs","debian":"https://tracker.debian.org/pkg/quickjs","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.12.1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-22703","published":"2026-01-10T07:16:00","updated_at":"2026-01-13T14:50:55.810913+00:00","description":"\nCosign provides code signing and transparency for containers and binaries.\nPrior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to\nsuccessfully verify an artifact even if the embedded Rekor entry does not\nreference the artifact's digest, signature or public key. When verifying a\nRekor entry, Cosign verifies the Rekor entry signature, and also compares\nthe artifact's digest, the user's public key from either a Fulcio\ncertificate or provided by the user, and the artifact signature to the\nRekor entry contents. Without these comparisons, Cosign would accept any\nresponse from Rekor as valid. A malicious actor that has compromised a\nuser's identity or signing key could construct a valid Cosign bundle by\nincluding any arbitrary Rekor entry, thus preventing the user from being\nable to audit the signing event. This issue has been patched in versions\n2.6.2 and 3.0.4.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22703","https://github.com/sigstore/cosign/security/advisories/GHSA-whqx-f9j3-ch6m","https://github.com/sigstore/cosign/pull/4623","https://github.com/sigstore/cosign/commit/6832fba4928c1ad69400235bbc41212de5006176"],"bugs":[""],"patches":{"cosign":[]},"tags":{},"packages":[{"name":"cosign","source":"https://ubuntu.com/security/cve?package=cosign","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cosign","debian":"https://tracker.debian.org/pkg/cosign","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-22702","published":"2026-01-10T07:16:00","updated_at":"2026-01-13T14:39:20.808751+00:00","description":"\nvirtualenv is a tool for creating isolated virtual python environments.\nPrior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use)\nvulnerabilities in virtualenv allow local attackers to perform\nsymlink-based attacks on directory creation operations. An attacker with\nlocal access can exploit a race condition between directory existence\nchecks and creation to redirect virtualenv's app_data and lock file\noperations to attacker-controlled locations. This issue has been patched in\nversion 20.36.1.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":4.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22702","https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986","https://github.com/pypa/virtualenv/pull/3013","https://github.com/pypa/virtualenv/commit/dec4cec5d16edaf83a00a658f32d1e032661cebc"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125191"],"patches":{"python-virtualenv":[]},"tags":{},"packages":[{"name":"python-virtualenv","source":"https://ubuntu.com/security/cve?package=python-virtualenv","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-virtualenv","debian":"https://tracker.debian.org/pkg/python-virtualenv","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"20.36.1+ds-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-22701","published":"2026-01-10T06:15:00","updated_at":"2026-02-04T16:34:14.909267+00:00","description":"\nfilelock is a platform-independent file lock for Python. Prior to version\n3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock\nimplementation of the filelock package. An attacker with local filesystem\naccess and permission to create symlinks can exploit a race condition\nbetween the permission validation and file creation to cause lock\noperations to fail or behave unexpectedly. The vulnerability occurs in the\n_acquire() method between raise_on_not_writable_file() (permission check)\nand os.open() (file creation). During this race window, an attacker can\ncreate a symlink at the lock file path, potentially causing the lock to\noperate on an unintended target file or leading to denial of service. This\nissue has been patched in version 3.20.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22701","https://github.com/tox-dev/filelock/security/advisories/GHSA-qmgc-5h2g-mvrw","https://github.com/tox-dev/filelock/commit/255ed068bc85d1ef406e50a135e1459170dd1bf0","https://github.com/tox-dev/filelock/commit/41b42dd2c72aecf7da83dbda5903b8087dddc4d5","https://ubuntu.com/security/notices/USN-7999-1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125190"],"patches":{"python-filelock":[]},"tags":{},"packages":[{"name":"python-filelock","source":"https://ubuntu.com/security/cve?package=python-filelock","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-filelock","debian":"https://tracker.debian.org/pkg/python-filelock","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.0.4-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"3.0.12-2ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"3.6.0-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"released","description":"3.13.1-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-7999-1"],"notices":[{"id":"USN-7999-1","title":"Filelock vulnerabilities","summary":"Several security issues were fixed in Filelock.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-02-02T20:26:28.686724","description":"It was discovered that Filelock incorrectly handled symlinks in temp files.\nA local attacker could possibly use this issue to cause lock operations to\nfail or behave unexpectedly. (CVE-2026-22701)\n\nIt was discovered that the file locking implementation in the Filelock\npackage contained a race condition. A local attacker could possibly use\nthis to cause a denial of service or corrupt arbitrary user files.\n(CVE-2025-68146)","is_hidden":false,"release_packages":{"bionic":[{"name":"python-filelock","version":"3.0.4-1ubuntu0.1~esm1","description":"A platform-independent file lock for Python","is_source":true},{"name":"python-filelock","version":"3.0.4-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-filelock","version_link":null,"pocket":"esm-apps"},{"name":"python3-filelock","version":"3.0.4-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-filelock","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"python-filelock","version":"3.0.12-2ubuntu0.1~esm1","description":"A platform-independent file lock for Python","is_source":true},{"name":"python3-filelock","version":"3.0.12-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-filelock","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"python-filelock","version":"3.6.0-1ubuntu0.1~esm1","description":"A platform-independent file lock for Python","is_source":true},{"name":"python3-filelock","version":"3.6.0-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-filelock","version_link":null,"pocket":"esm-apps"}],"noble":[{"name":"python-filelock","version":"3.13.1-1ubuntu0.1~esm1","description":"A platform-independent file lock for Python","is_source":true},{"name":"python3-filelock","version":"3.13.1-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-filelock","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2025-68146","CVE-2026-22701"]}]},{"id":"CVE-2026-22693","published":"2026-01-10T06:15:00","updated_at":"2026-01-15T14:04:38.620339+00:00","description":"\nHarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer\ndereference vulnerability exists in the SubtableUnicodesCache::create\nfunction located in src/hb-ot-cmap-table.hh. The function fails to check if\nhb_malloc returns NULL before using placement new to construct an object at\nthe returned pointer address. When hb_malloc fails to allocate memory\n(which can occur in low-memory conditions or when using custom allocators\nthat simulate allocation failures), it returns NULL. The code then attempts\nto call the constructor on this null pointer using placement new syntax,\nresulting in undefined behavior and a Segmentation Fault. This issue has\nbeen patched in version 12.3.0.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nThis is a DoS that isn't attacker-controlled"}],"codename":null,"priority":"low","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22693","https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww","http://www.openwall.com/lists/oss-security/2026/01/11/1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125189"],"patches":{"harfbuzz":["upstream: https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae"]},"tags":{},"packages":[{"name":"harfbuzz","source":"https://ubuntu.com/security/cve?package=harfbuzz","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=harfbuzz","debian":"https://tracker.debian.org/pkg/harfbuzz","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"12.3.0-4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"12.3.0-4","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-22691","published":"2026-01-10T05:16:00","updated_at":"2026-07-10T19:28:17.983363+00:00","description":"\npypdf is a free and open-source pure-python PDF library. Prior to version\n6.6.0, pypdf has possible long runtimes for malformed startxref. An\nattacker who uses this vulnerability can craft a PDF which leads to\npossibly long runtimes for invalid startxref entries. When rebuilding the\ncross-reference table, PDF files with lots of whitespace characters become\nproblematic. Only the non-strict reading mode is affected. Only the\nnon-strict reading mode is affected. This issue has been patched in version\n6.6.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.7,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-22691","https://github.com/py-pdf/pypdf/security/advisories/GHSA-4f6g-68pf-7vhv","https://github.com/py-pdf/pypdf/pull/3594","https://github.com/py-pdf/pypdf/commit/294165726b646bb7799be1cc787f593f2fdbcf45","https://github.com/py-pdf/pypdf/releases/tag/6.6.0"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125187"],"patches":{"pypdf":[],"pypdf2":[]},"tags":{},"packages":[{"name":"pypdf","source":"https://ubuntu.com/security/cve?package=pypdf","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pypdf","debian":"https://tracker.debian.org/pkg/pypdf","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"pypdf2","source":"https://ubuntu.com/security/cve?package=pypdf2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pypdf2","debian":"https://tracker.debian.org/pkg/pypdf2","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":16280,"limit":20,"total_results":79316}