{"cves":[{"id":"CVE-2024-39289","published":"2025-07-17T20:15:00","updated_at":"2025-07-23T18:11:07.933312+00:00","description":"\nA code execution vulnerability has been discovered in the Robot Operating\nSystem (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys\nand earlier. The vulnerability stems from the use of the eval() function to\nprocess unsanitized, user-supplied parameter values via special converters\nfor angle representations in radians. This flaw allowed attackers to craft\nand execute arbitrary Python code.","ubuntu_description":"","notes":[{"author":"flor-cabral","note":"The affected package is included in ROS ESM."}],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-39289","https://www.ros.org/blog/noetic-eol/"],"bugs":[""],"patches":{"ros-ros-comm":[],"ros-kinetic-ros-comm":[],"ros-melodic-ros-comm":[],"ros-noetic-ros-comm":[]},"tags":{},"packages":[{"name":"ros-ros-comm","source":"https://ubuntu.com/security/cve?package=ros-ros-comm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ros-ros-comm","debian":"https://tracker.debian.org/pkg/ros-ros-comm","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ros-kinetic-ros-comm","source":"https://ubuntu.com/security/cve?package=ros-kinetic-ros-comm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ros-kinetic-ros-comm","debian":"https://tracker.debian.org/pkg/ros-kinetic-ros-comm","statuses":[{"release_codename":"xenial","status":"released","description":"1.12.17+8","component":null,"pocket":"ros-esm"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"ros-melodic-ros-comm","source":"https://ubuntu.com/security/cve?package=ros-melodic-ros-comm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ros-melodic-ros-comm","debian":"https://tracker.debian.org/pkg/ros-melodic-ros-comm","statuses":[{"release_codename":"bionic","status":"released","description":"1.14.13+4","component":null,"pocket":"ros-esm"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"ros-noetic-ros-comm","source":"https://ubuntu.com/security/cve?package=ros-noetic-ros-comm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ros-noetic-ros-comm","debian":"https://tracker.debian.org/pkg/ros-noetic-ros-comm","statuses":[{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.17.4+2","component":null,"pocket":"ros-esm"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-53817","published":"2025-07-17T19:15:00","updated_at":"2025-07-23T18:13:28.083702+00:00","description":"\n7-Zip is a file archiver with a high compression ratio. 7-Zip supports\nextracting from Compound Documents. Prior to version 25.0.0, a null pointer\ndereference in the Compound handler may lead to denial of service. Version\n25.0.0 contains a fix cor the issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53817","https://securitylab.github.com/advisories/GHSL-2025-059_7-Zip/"],"bugs":[""],"patches":{"7zip":[]},"tags":{},"packages":[{"name":"7zip","source":"https://ubuntu.com/security/cve?package=7zip","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=7zip","debian":"https://tracker.debian.org/pkg/7zip","statuses":[{"release_codename":"resolute","status":"not-affected","description":"25.00+dfsg-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"25.0.0","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"25.00+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-53816","published":"2025-07-17T19:15:00","updated_at":"2025-07-23T18:13:28.083702+00:00","description":"\n7-Zip is a file archiver with a high compression ratio. Zeroes written\noutside heap buffer in RAR5 handler may lead to memory corruption and\ndenial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0\ncontains a fix for the issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53816","https://securitylab.github.com/advisories/GHSL-2025-058_7-Zip/"],"bugs":[""],"patches":{"7zip":[]},"tags":{},"packages":[{"name":"7zip","source":"https://ubuntu.com/security/cve?package=7zip","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=7zip","debian":"https://tracker.debian.org/pkg/7zip","statuses":[{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"25.0.0","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"25.00+dfsg-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"25.00+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-53644","published":"2025-07-17T18:15:00","updated_at":"2025-10-01T15:18:05.930943+00:00","description":"\nOpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and\n4.11.0 have an uninitialized pointer variable on stack that may lead to\narbitrary heap buffer write when reading crafted JPEG images. Version\n4.12.0 fixes the vulnerability.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53644","https://github.com/opencv/opencv/commit/a39db41390de546d18962ee1278bd6dbb715f466","https://github.com/opencv/opencv/issues/27271","https://github.com/opencv/opencv/releases/tag/4.12.0","https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV/"],"bugs":["https://bugzilla.redhat.com/show_bug.cgi?id=2381763"],"patches":{"opencv":[]},"tags":{},"packages":[{"name":"opencv","source":"https://ubuntu.com/security/cve?package=opencv","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=opencv","debian":"https://tracker.debian.org/pkg/opencv","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"v4.12.0","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-7339","published":"2025-07-17T16:15:00","updated_at":"2025-07-23T18:13:30.166015+00:00","description":"\non-headers is a node.js middleware for listening to when a response writes\nheaders. A bug in on-headers versions `<1.1.0` may result in response\nheaders being inadvertently modified when an array is passed to\n`response.writeHead()`. Users should upgrade to version 1.1.0 to receive a\npatch. Uses are strongly encouraged to upgrade to `1.1.0`, but this issue\ncan be worked around by passing an object to `response.writeHead()` rather\nthan an array.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":3.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":3.4,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-7339","https://cna.openjsf.org/security-advisories.html","https://github.com/expressjs/morgan/issues/315","https://github.com/jshttp/on-headers/security/advisories/GHSA-76c9-3jph-rj3q"],"bugs":["https://github.com/jshttp/on-headers/issues/15"],"patches":{"node-on-headers":["upstream: https://github.com/jshttp/on-headers/commit/c6e384908c9c6127d18831d16ab0bd96e1231867"]},"tags":{},"packages":[{"name":"node-on-headers","source":"https://ubuntu.com/security/cve?package=node-on-headers","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-on-headers","debian":"https://tracker.debian.org/pkg/node-on-headers","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.1.0","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-1713","published":"2025-07-17T14:15:00","updated_at":"2025-07-23T18:11:09.923818+00:00","description":"\nWhen setting up interrupt remapping for legacy PCI(-X) devices,\nincluding PCI(-X) bridges, a lookup of the upstream bridge is required.\nThis lookup, itself involving acquiring of a lock, is done in a context\nwhere acquiring that lock is unsafe.  This can lead to a deadlock.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"hypervisor packages are in universe. For\nissues in the hypervisor, add appropriate\ntags to each section, ex:\nTags_xen: universe-binary"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-1713","https://xenbits.xen.org/xsa/advisory-467.html"],"bugs":[""],"patches":{"xen":[]},"tags":{"xen":["universe-binary"]},"packages":[{"name":"xen","source":"https://ubuntu.com/security/cve?package=xen","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xen","debian":"https://tracker.debian.org/pkg/xen","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-3415","published":"2025-07-17T11:15:00","updated_at":"2025-07-23T18:11:09.923818+00:00","description":"\nGrafana is an open-source platform for monitoring and observability. The\nGrafana Alerting DingDing integration was not properly protected and could\nbe exposed to users with Viewer permission.\nFixed in versions 10.4.19+security-01, 11.2.10+security-01,\n11.3.7+security-01, 11.4.5+security-01, 11.5.5+security-01,\n11.6.2+security-01 and 12.0.1+security-01","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-3415"],"bugs":[""],"patches":{"grafana":[]},"tags":{},"packages":[{"name":"grafana","source":"https://ubuntu.com/security/cve?package=grafana","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=grafana","debian":"https://tracker.debian.org/pkg/grafana","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-5994","published":"2025-07-17T00:00:00","updated_at":"2025-07-22T19:33:05.213368+00:00","description":"\nA multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has\nbeen discovered in caching resolvers that support EDNS Client Subnet (ECS).\nUnbound is also vulnerable when compiled with ECS support, i.e.,\n'--enable-subnet', AND configured to send ECS information along with\nqueries to upstream name servers, i.e., at least one of the\n'send-client-subnet', 'client-subnet-zone' or\n'client-subnet-always-forward' options is used. Resolvers supporting ECS\nneed to segregate outgoing queries to accommodate for different outgoing\nECS information. This re-opens up resolvers to a birthday paradox attack\n(Rebirthday Attack) that tries to match the DNS transaction ID in order to\ncache non-ECS poisonous replies.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-5994","https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt","https://ubuntu.com/security/notices/USN-7666-1"],"bugs":[""],"patches":{"unbound":["upstream: https://github.com/NLnetLabs/unbound/commit/5bf82f246481098a6473f296b21fc1229d276c0f"]},"tags":{},"packages":[{"name":"unbound","source":"https://ubuntu.com/security/cve?package=unbound","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=unbound","debian":"https://tracker.debian.org/pkg/unbound","statuses":[{"release_codename":"resolute","status":"released","description":"1.22.0-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.23.1,1.22.0-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.13.1-1ubuntu5.11","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.19.2-1ubuntu3.5","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"1.22.0-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"1.22.0-2ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7666-1"],"notices":[{"id":"USN-7666-1","title":"Unbound vulnerabilities","summary":"The Unbound cache could be poisoned if it received specially crafted\nnetwork traffic.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-07-22T15:58:09.898779","description":"Xiang Li discovered that Unbound incorrectly handled EDNS Client Subnet\n(ECS) in certain configurations. A remote attacker could possibly use this\nissue to perform a cache poisoning attack called Rebirthday Attack.","is_hidden":false,"release_packages":{"jammy":[{"name":"unbound","version":"1.13.1-1ubuntu5.11","description":"validating, recursive, caching DNS resolver","is_source":true},{"name":"libunbound-dev","version":"1.13.1-1ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.13.1-1ubuntu5.11","pocket":"security"},{"name":"libunbound8","version":"1.13.1-1ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.13.1-1ubuntu5.11","pocket":"security"},{"name":"python3-unbound","version":"1.13.1-1ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.13.1-1ubuntu5.11","pocket":"security"},{"name":"unbound","version":"1.13.1-1ubuntu5.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.13.1-1ubuntu5.11","pocket":"security"},{"name":"unbound-anchor","version":"1.13.1-1ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.13.1-1ubuntu5.11","pocket":"security"},{"name":"unbound-host","version":"1.13.1-1ubuntu5.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.13.1-1ubuntu5.11","pocket":"security"}],"noble":[{"name":"unbound","version":"1.19.2-1ubuntu3.5","description":"validating, recursive, caching DNS resolver","is_source":true},{"name":"libunbound-dev","version":"1.19.2-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.19.2-1ubuntu3.5","pocket":"security"},{"name":"libunbound8","version":"1.19.2-1ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.19.2-1ubuntu3.5","pocket":"security"},{"name":"python3-unbound","version":"1.19.2-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.19.2-1ubuntu3.5","pocket":"security"},{"name":"unbound","version":"1.19.2-1ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.19.2-1ubuntu3.5","pocket":"security"},{"name":"unbound-anchor","version":"1.19.2-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.19.2-1ubuntu3.5","pocket":"security"},{"name":"unbound-host","version":"1.19.2-1ubuntu3.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.19.2-1ubuntu3.5","pocket":"security"}],"plucky":[{"name":"unbound","version":"1.22.0-1ubuntu1.1","description":"validating, recursive, caching DNS resolver","is_source":true},{"name":"libunbound-dev","version":"1.22.0-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.22.0-1ubuntu1.1","pocket":"security"},{"name":"libunbound8","version":"1.22.0-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.22.0-1ubuntu1.1","pocket":"security"},{"name":"python3-unbound","version":"1.22.0-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.22.0-1ubuntu1.1","pocket":"security"},{"name":"unbound","version":"1.22.0-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.22.0-1ubuntu1.1","pocket":"security"},{"name":"unbound-anchor","version":"1.22.0-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.22.0-1ubuntu1.1","pocket":"security"},{"name":"unbound-host","version":"1.22.0-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/unbound","version_link":"https://launchpad.net/ubuntu/+source/unbound/1.22.0-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-5994"]}]},{"id":"CVE-2025-40924","published":"2025-07-17T00:00:00","updated_at":"2025-07-18T06:11:07.218255+00:00","description":"\nCatalyst::Plugin::Session before version 0.44 for Perl generates session\nids insecurely.\nThe session id is generated from a (usually SHA-1) hash of a simple\ncounter, the epoch time, the built-in rand function, the PID and the\ncurrent Catalyst context. This information is of low entropy. The PID will\ncome from a small set of numbers, and the epoch time may be guessed, if it\nis not leaked from the HTTP Date header. The built-in rand function is\nunsuitable for cryptographic usage.\nPredicable session ids could allow an attacker to gain access to systems.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-40924","https://github.com/perl-catalyst/Catalyst-Plugin-Session/commit/c0e2b4ab1e42ebce1008286db8c571b6ee98c22c.patch","https://github.com/perl-catalyst/Catalyst-Plugin-Session/pull/5","https://metacpan.org/release/HAARG/Catalyst-Plugin-Session-0.43/source/lib/Catalyst/Plugin/Session.pm#L632"],"bugs":[""],"patches":{"libcatalyst-plugin-session-perl":[]},"tags":{},"packages":[{"name":"libcatalyst-plugin-session-perl","source":"https://ubuntu.com/security/cve?package=libcatalyst-plugin-session-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libcatalyst-plugin-session-perl","debian":"https://tracker.debian.org/pkg/libcatalyst-plugin-session-perl","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-53840","published":"2025-07-16T14:15:00","updated_at":"2025-07-23T18:14:25.584757+00:00","description":"\nIcinga DB Web provides a graphical interface for Icinga monitoring.\nStarting in version 1.2.0 and prior to version 1.2.2, users with access to\nIcinga Dependency Views, are allowed to see hosts and services that they\nweren't meant to on the dependency map. However, the name of an object will\nnot be revealed nor does this grant access to a host's or service's detail\nview. Please note that this only affects the restrictions `filter/hosts`\nand `filter/services`. `filter/objects` is not affected by this and\nrestricts objects as it is supposed to. Version 1.2.2 applies these\nrestrictions properly. As a workaround, one may downgrade to version 1.1.3.","ubuntu_description":"","notes":[{"author":"rodrigo-zaiden","note":"affects versions 1.2.x. there is no Ubuntu release with\nsuch version."}],"codename":null,"priority":"medium","cvss3":2.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.4,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53840","https://github.com/Icinga/icingadb-web/security/advisories/GHSA-q2w7-mrx8-5473","https://github.com/Icinga/icingadb-web/commit/93869319b3696c549ce28c90b261fb9bca2223d7 (v1.2.2)","https://github.com/Icinga/icingadb-web/releases/tag/v1.2.2"],"bugs":[""],"patches":{"icingadb-web":[]},"tags":{},"packages":[{"name":"icingadb-web","source":"https://ubuntu.com/security/cve?package=icingadb-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icingadb-web","debian":"https://tracker.debian.org/pkg/icingadb-web","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"debian: Only affects 1.2.0 and later","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-40918","published":"2025-07-16T14:15:00","updated_at":"2025-08-14T14:34:05.134975+00:00","description":"\nAuthen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl\ngenerates the cnonce insecurely.\nThe cnonce (client nonce) is generated from an MD5 hash of the PID, the\nepoch time and the built-in rand function. The PID will come from a small\nset of numbers, and the epoch time may be guessed, if it is not leaked from\nthe HTTP Date header. The built-in rand function is unsuitable for\ncryptographic usage.\nAccording to RFC 2831, The cnonce-value is an opaque quoted string value\nprovided by the client and used by both client and server to avoid chosen\nplaintext attacks, and to provide mutual authentication. The security of\nthe implementation\n depends on a good choice. It is RECOMMENDED that it contain at least 64\nbits of entropy.","ubuntu_description":"","notes":[{"author":"","note":"Priority reason:\nVulnerability in obsolete SASL mechanism"},{"author":"mdeslaur","note":"The upstream fix for this issue would require introducing a new\ndependency on the libcrypt-urandom-perl package, which is in\nuniverse.\n\nThe DIGEST-MD5 mechanism has been marked as OBSOLETE in 2011\nby RFC6331, is insecure, and should not be used in production\nenvironments.\n\nSince this mechanism is insecure, with or without the fix for\nthis vulnerability, marking proority as \"low.\""}],"codename":null,"priority":"low","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"\nThe DIGEST-MD5 SASL mechanism is insecure and has been marked as OBSOLETE\nsince 2011. We recommend using a more recent and secure mechanism in\nproduction environments.","references":["https://www.cve.org/CVERecord?id=CVE-2025-40918","https://lists.security.metacpan.org/cve-announce/msg/31224910/","https://datatracker.ietf.org/doc/html/rfc2831","https://metacpan.org/dist/Authen-SASL/source/lib/Authen/SASL/Perl/DIGEST_MD5.pm#L263"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109406"],"patches":{"libauthen-sasl-perl":["upstream: https://security.metacpan.org/patches/A/Authen-SASL/2.1800/CVE-2025-40918-r1.patch","upstream: https://github.com/gbarr/perl-authen-sasl/pull/22"]},"tags":{},"packages":[{"name":"libauthen-sasl-perl","source":"https://ubuntu.com/security/cve?package=libauthen-sasl-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libauthen-sasl-perl","debian":"https://tracker.debian.org/pkg/libauthen-sasl-perl","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-40776","published":"2025-07-16T14:15:00","updated_at":"2025-07-23T18:14:23.653719+00:00","description":"\nA `named` caching resolver that is configured to send ECS (EDNS Client\nSubnet) options may be vulnerable to a cache-poisoning attack.\nThis issue affects BIND 9 versions 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1\nthrough 9.18.37-S1, and 9.20.9-S1 through 9.20.10-S1.","ubuntu_description":"","notes":[{"author":"alexmurray","note":"As of isc-dhcp-4.4.3-1, isc-dhcp vendors bind9 libs"},{"author":"mdeslaur","note":"in focal and jammy, isc-dhcp uses the bind9-libs package"},{"author":"rodrigo-zaiden","note":"affects subscription edition (-S) versions of bind9"}],"codename":null,"priority":"medium","cvss3":8.6,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-40776","https://kb.isc.org/docs/cve-2025-40776"],"bugs":[""],"patches":{"bind9":[],"isc-dhcp":[],"bind9-libs":[]},"tags":{},"packages":[{"name":"bind9","source":"https://ubuntu.com/security/cve?package=bind9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=bind9","debian":"https://tracker.debian.org/pkg/bind9","statuses":[{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"debian: Only affects BIND Subscription Edition code","component":null,"pocket":"security"}]},{"name":"bind9-libs","source":"https://ubuntu.com/security/cve?package=bind9-libs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=bind9-libs","debian":"https://tracker.debian.org/pkg/bind9-libs","statuses":[{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"isc-dhcp","source":"https://ubuntu.com/security/cve?package=isc-dhcp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=isc-dhcp","debian":"https://tracker.debian.org/pkg/isc-dhcp","statuses":[{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-40923","published":"2025-07-16T13:15:00","updated_at":"2025-07-23T18:11:12.092065+00:00","description":"\nPlack-Middleware-Session before version 0.35 for Perl generates session ids\ninsecurely.\nThe default session id generator returns a SHA-1 hash seeded with the\nbuilt-in rand function, the epoch time, and the PID. The PID will come from\na small set of numbers, and the epoch time may be guessed, if it is not\nleaked from the HTTP Date header. The built-in rand function is unsuitable\nfor cryptographic usage.\nPredicable session ids could allow an attacker to gain access to systems.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-40923","https://lists.security.metacpan.org/cve-announce/msg/31223483/","https://github.com/plack/Plack-Middleware-Session/pull/52","https://metacpan.org/release/MIYAGAWA/Plack-Middleware-Session-0.34/source/lib/Plack/Session/State.pm#L22","https://security.metacpan.org/docs/guides/random-data-for-security.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109405"],"patches":{"libplack-middleware-session-perl":["upstream: https://github.com/plack/Plack-Middleware-Session/commit/1fbfbb355e34e7f4b3906f66cf958cedadd2b9be"]},"tags":{},"packages":[{"name":"libplack-middleware-session-perl","source":"https://ubuntu.com/security/cve?package=libplack-middleware-session-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libplack-middleware-session-perl","debian":"https://tracker.debian.org/pkg/libplack-middleware-session-perl","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"0.36-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.35","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-27465","published":"2025-07-16T09:15:00","updated_at":"2025-07-17T19:33:07.060554+00:00","description":"\nCertain instructions need intercepting and emulating by Xen.  In some\ncases Xen emulates the instruction by replaying it, using an executable\nstub.  Some instructions may raise an exception, which is supposed to be\nhandled gracefully.  Certain replayed instructions have additional logic\nto set up and recover the changes to the arithmetic flags.\nFor replayed instructions where the flags recovery logic is used, the\nmetadata for exception handling was incorrect, preventing Xen from\nhandling the the exception gracefully, treating it as fatal instead.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"hypervisor packages are in universe. For\nissues in the hypervisor, add appropriate\ntags to each section, ex:\nTags_xen: universe-binary"}],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-27465","https://xenbits.xen.org/xsa/advisory-470.html"],"bugs":[""],"patches":{"xen":[]},"tags":{"xen":["universe-binary"]},"packages":[{"name":"xen","source":"https://ubuntu.com/security/cve?package=xen","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xen","debian":"https://tracker.debian.org/pkg/xen","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-40777","published":"2025-07-16T00:00:00","updated_at":"2025-07-23T18:11:12.092065+00:00","description":"\nIf a `named` caching resolver is configured with `serve-stale-enable`\n`yes`, and with `stale-answer-client-timeout` set to `0` (the only\nallowable value other than `disabled`), and if the resolver, in the process\nof resolving a query, encounters a CNAME chain involving a specific\ncombination of cached or authoritative records, the daemon will abort with\nan assertion failure.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.10, 9.21.0 through\n9.21.9, and 9.20.9-S1 through 9.20.10-S1.","ubuntu_description":"","notes":[{"author":"alexmurray","note":"As of isc-dhcp-4.4.3-1, isc-dhcp vendors bind9 libs"},{"author":"mdeslaur","note":"in focal and jammy, isc-dhcp uses the bind9-libs package\n\nonly affects 9.20.x and 9.21.x"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-40777","https://kb.isc.org/docs/cve-2025-40777","https://ubuntu.com/security/notices/USN-7641-1"],"bugs":[""],"patches":{"bind9":[],"isc-dhcp":[],"bind9-libs":[]},"tags":{},"packages":[{"name":"bind9","source":"https://ubuntu.com/security/cve?package=bind9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=bind9","debian":"https://tracker.debian.org/pkg/bind9","statuses":[{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1:9.18.30-0ubuntu0.22.04.2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1:9.18.30-0ubuntu0.24.04.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.20.11,9.21.10","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"1:9.20.4-3ubuntu1.2","component":null,"pocket":"security"}]},{"name":"bind9-libs","source":"https://ubuntu.com/security/cve?package=bind9-libs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=bind9-libs","debian":"https://tracker.debian.org/pkg/bind9-libs","statuses":[{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"9.20+ only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"9.20+ only","component":null,"pocket":"security"}]},{"name":"isc-dhcp","source":"https://ubuntu.com/security/cve?package=isc-dhcp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=isc-dhcp","debian":"https://tracker.debian.org/pkg/isc-dhcp","statuses":[{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"9.20+ only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"9.20+ only","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"9.20+ only","component":null,"pocket":"security"}]}],"notices_ids":["USN-7641-1"],"notices":[{"id":"USN-7641-1","title":"Bind vulnerability","summary":"Bind could be made to crash if it received specially crafted network\ntraffic.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-07-16T17:42:21.769692","description":"It was discovered that Bind incorrectly handled configurations where the\nstale-answer-client-timeout option is set to 0. A remote attacker could\npossibly use this issue to cause Bind to crash, resulting in a denial of\nservice.","is_hidden":false,"release_packages":{"plucky":[{"name":"bind9","version":"1:9.20.4-3ubuntu1.2","description":"Internet Domain Name Server","is_source":true},{"name":"bind9","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"},{"name":"bind9-dev","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"},{"name":"bind9-dnsutils","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"},{"name":"bind9-doc","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"},{"name":"bind9-host","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"},{"name":"bind9-libs","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"},{"name":"bind9-utils","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"},{"name":"bind9utils","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"},{"name":"dnsutils","version":"1:9.20.4-3ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/bind9","version_link":"https://launchpad.net/ubuntu/+source/bind9/1:9.20.4-3ubuntu1.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-40777"]}]},{"id":"CVE-2025-53906","published":"2025-07-15T21:15:00","updated_at":"2025-09-16T17:59:40.363372+00:00","description":"\nVim is an open source, command line text editor. Prior to version 9.1.1551,\na path traversal issue in Vim’s zip.vim plugin can allow overwriting of\narbitrary files when opening specially crafted zip archives. Impact is low\nbecause this exploit requires direct user interaction. However,\nsuccessfully exploitation can lead to overwriting sensitive files or\nplacing executable code in privileged locations, depending on the\npermissions of the process editing the archive. The victim must edit such a\nfile using Vim which will reveal the filename and the file content, a\ncareful user may suspect some strange things going on. Successful\nexploitation could results in the ability to execute arbitrary commands on\nthe underlying operating system. Version 9.1.1551 contains a patch for the\nvulnerability.","ubuntu_description":"","notes":[{"author":"hlibk","note":"On jammy and below, the updates are risky and may introduce\nregressions."}],"codename":null,"priority":"medium","cvss3":4.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":4.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53906","https://www.openwall.com/lists/oss-security/2025/07/15/2","https://github.com/vim/vim/security/advisories/GHSA-r2fw-9cw4-mj86","https://ubuntu.com/security/notices/USN-7748-1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109374"],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/586294a04179d855c3d1d4ee5ea83931963680b8"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"changes too intrusive","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"changes too intrusive","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"changes too intrusive","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.9","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"2:9.1.0967-1ubuntu4.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"changes too intrusive","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [changes too intrusive]","component":null,"pocket":"security"}]}],"notices_ids":["USN-7748-1"],"notices":[{"id":"USN-7748-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-09-15T13:18:35.498214","description":"It was discovered that Vim incorrectly handled file extraction when opening\nmaliciously crafted zip or tar archives. An attacker could possibly use\nthis issue to create or overwrite files on the system and execute arbitrary\ncode.","is_hidden":false,"release_packages":{"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"}],"plucky":[{"name":"vim","version":"2:9.1.0967-1ubuntu4.1","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53906","CVE-2025-53905"]}]},{"id":"CVE-2025-53905","published":"2025-07-15T21:15:00","updated_at":"2025-09-16T11:48:58.398429+00:00","description":"\nVim is an open source, command line text editor. Prior to version 9.1.1552,\na path traversal issue in Vim’s tar.vim plugin can allow overwriting of\narbitrary files when opening specially crafted tar archives. Impact is low\nbecause this exploit requires direct user interaction. However,\nsuccessfully exploitation can lead to overwriting sensitive files or\nplacing executable code in privileged locations, depending on the\npermissions of the process editing the archive. The victim must edit such a\nfile using Vim which will reveal the filename and the file content, a\ncareful user may suspect some strange things going on. Successful\nexploitation could results in the ability to execute arbitrary commands on\nthe underlying operating system. Version 9.1.1552 contains a patch for the\nvulnerability.","ubuntu_description":"","notes":[{"author":"hlibk","note":"On jammy and below, the updates are risky and may introduce\nregressions."}],"codename":null,"priority":"medium","cvss3":4.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":4.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53905","https://www.openwall.com/lists/oss-security/2025/07/15/1","https://github.com/vim/vim/security/advisories/GHSA-74v4-f3x9-ppvr","https://ubuntu.com/security/notices/USN-7748-1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109374"],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/87757c6b0a4b2c1f71c72ea8e1438b8fb116b239"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.9","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"2:9.1.0967-1ubuntu4.1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"changes too intrusive","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"changes too intrusive","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"changes too intrusive","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"changes too intrusive","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [changes too intrusive]","component":null,"pocket":"security"}]}],"notices_ids":["USN-7748-1"],"notices":[{"id":"USN-7748-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-09-15T13:18:35.498214","description":"It was discovered that Vim incorrectly handled file extraction when opening\nmaliciously crafted zip or tar archives. An attacker could possibly use\nthis issue to create or overwrite files on the system and execute arbitrary\ncode.","is_hidden":false,"release_packages":{"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.9","pocket":"security"}],"plucky":[{"name":"vim","version":"2:9.1.0967-1ubuntu4.1","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu4.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-53906","CVE-2025-53905"]}]},{"id":"CVE-2025-30761","published":"2025-07-15T21:15:00","updated_at":"2025-07-29T07:33:09.025610+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: Scripting).  Supported versions that\nare affected are Oracle Java SE: 8u451, 8u451-perf and  11.0.27; Oracle\nGraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability\nallows unauthenticated attacker with network access via multiple protocols\nto compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.\nSuccessful attacks of this vulnerability can result in  unauthorized\ncreation, deletion or modification access to critical data or all Oracle\nJava SE, Oracle GraalVM Enterprise Edition accessible data. Note: This\nvulnerability can be exploited by using APIs in the specified Component,\ne.g., through a web service which supplies data to the APIs. This\nvulnerability also applies to Java deployments, typically in clients\nrunning sandboxed Java Web Start applications or sandboxed Java applets,\nthat load and run untrusted code (e.g., code that comes from the internet)\nand rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9\n(Integrity impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-30761","https://www.openwall.com/lists/oss-security/2025/07/16/1","https://www.oracle.com/security-alerts/cpujul2025.html","https://ubuntu.com/security/notices/USN-7667-1","https://ubuntu.com/security/notices/USN-7674-1"],"bugs":[""],"patches":{"openjdk-8":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-13":[],"openjdk-16":[],"openjdk-17":[],"openjdk-17-crac":[],"openjdk-18":[],"openjdk-19":[],"openjdk-21":[],"openjdk-21-crac":[],"openjdk-24":[],"openjdk-25":[]},"tags":{},"packages":[{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"superseded by openjdk-17","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"superseded by openjdk-17","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"resolute","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"}]},{"name":"openjdk-17-crac","source":"https://ubuntu.com/security/cve?package=openjdk-17-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17-crac","debian":"https://tracker.debian.org/pkg/openjdk-17-crac","statuses":[{"release_codename":"resolute","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-19","source":"https://ubuntu.com/security/cve?package=openjdk-19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-19","debian":"https://tracker.debian.org/pkg/openjdk-19","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-21","source":"https://ubuntu.com/security/cve?package=openjdk-21","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-21","debian":"https://tracker.debian.org/pkg/openjdk-21","statuses":[{"release_codename":"resolute","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"}]},{"name":"openjdk-21-crac","source":"https://ubuntu.com/security/cve?package=openjdk-21-crac","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-21-crac","debian":"https://tracker.debian.org/pkg/openjdk-21-crac","statuses":[{"release_codename":"resolute","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"}]},{"name":"openjdk-24","source":"https://ubuntu.com/security/cve?package=openjdk-24","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-24","debian":"https://tracker.debian.org/pkg/openjdk-24","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-25","source":"https://ubuntu.com/security/cve?package=openjdk-25","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-25","debian":"https://tracker.debian.org/pkg/openjdk-25","statuses":[{"release_codename":"resolute","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8.x and 11.x only","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"resolute","status":"released","description":"8u462-ga~us1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"8u462-ga~us1-0ubuntu2~18.04.2","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"8u462-ga~us1-0ubuntu2~20.04.2","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"8u462-ga~us1-0ubuntu2~22.04.2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8u462-ga~us1-0ubuntu2~24.04.2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"8u462-ga~us1-0ubuntu2~25.04.2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u462-ga~us1-0ubuntu2~16.04.2","component":null,"pocket":"esm-infra"},{"release_codename":"questing","status":"released","description":"8u462-ga~us1-0ubuntu1","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [no longer supported by upstream]","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"resolute","status":"released","description":"11.0.28+6-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"11.0.28+6-1ubuntu1~18.04.1","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"11.0.28+6-1ubuntu1~20.04.1","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"11.0.28+6-1ubuntu1~22.04.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"11.0.28+6-1ubuntu1~25.04.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"11.0.28+6-1ubuntu1~24.04.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"11.0.28+6-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7667-1","USN-7674-1"],"notices":[{"id":"USN-7667-1","title":"OpenJDK 8 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 8.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-07-24T01:21:35.660841","description":"It was discovered that the 2D component of OpenJDK 8 did not properly\nmanage memory under certain circumstances. An attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code.\n(CVE-2025-30749, CVE-2025-50106)\n\nMashroor Hasan Bhuiyan discovered that the JSSE component of OpenJDK 8\ndid not properly manage TLS 1.3 handshakes under certain circumstances.\nAn attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2025-30754)\n\nIt was discovered that the Scripting component of OpenJDK 8 did not\nproperly manage properties under certain circumstances. An attacker\ncould possibly use this issue to cause a denial of service, execute\narbitrary code or bypass Java sandbox restrictions. (CVE-2025-30761)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-07-15","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-8","version":"8u462-ga~us1-0ubuntu2~18.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u462-ga~us1-0ubuntu2~18.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-doc","version":"8u462-ga~us1-0ubuntu2~18.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk","version":"8u462-ga~us1-0ubuntu2~18.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk-headless","version":"8u462-ga~us1-0ubuntu2~18.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre","version":"8u462-ga~us1-0ubuntu2~18.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-headless","version":"8u462-ga~us1-0ubuntu2~18.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-zero","version":"8u462-ga~us1-0ubuntu2~18.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-source","version":"8u462-ga~us1-0ubuntu2~18.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"openjdk-8","version":"8u462-ga~us1-0ubuntu2~20.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u462-ga~us1-0ubuntu2~20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-doc","version":"8u462-ga~us1-0ubuntu2~20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk","version":"8u462-ga~us1-0ubuntu2~20.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jdk-headless","version":"8u462-ga~us1-0ubuntu2~20.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre","version":"8u462-ga~us1-0ubuntu2~20.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-headless","version":"8u462-ga~us1-0ubuntu2~20.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-jre-zero","version":"8u462-ga~us1-0ubuntu2~20.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-8-source","version":"8u462-ga~us1-0ubuntu2~20.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"openjdk-8","version":"8u462-ga~us1-0ubuntu2~22.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u462-ga~us1-0ubuntu2~22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~22.04.2","pocket":"security"},{"name":"openjdk-8-doc","version":"8u462-ga~us1-0ubuntu2~22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~22.04.2","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u462-ga~us1-0ubuntu2~22.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~22.04.2","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u462-ga~us1-0ubuntu2~22.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~22.04.2","pocket":"security"},{"name":"openjdk-8-jre","version":"8u462-ga~us1-0ubuntu2~22.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~22.04.2","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u462-ga~us1-0ubuntu2~22.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~22.04.2","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u462-ga~us1-0ubuntu2~22.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~22.04.2","pocket":"security"},{"name":"openjdk-8-source","version":"8u462-ga~us1-0ubuntu2~22.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~22.04.2","pocket":"security"}],"noble":[{"name":"openjdk-8","version":"8u462-ga~us1-0ubuntu2~24.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u462-ga~us1-0ubuntu2~24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~24.04.2","pocket":"security"},{"name":"openjdk-8-doc","version":"8u462-ga~us1-0ubuntu2~24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~24.04.2","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u462-ga~us1-0ubuntu2~24.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~24.04.2","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u462-ga~us1-0ubuntu2~24.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~24.04.2","pocket":"security"},{"name":"openjdk-8-jre","version":"8u462-ga~us1-0ubuntu2~24.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~24.04.2","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u462-ga~us1-0ubuntu2~24.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~24.04.2","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u462-ga~us1-0ubuntu2~24.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~24.04.2","pocket":"security"},{"name":"openjdk-8-source","version":"8u462-ga~us1-0ubuntu2~24.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~24.04.2","pocket":"security"}],"plucky":[{"name":"openjdk-8","version":"8u462-ga~us1-0ubuntu2~25.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u462-ga~us1-0ubuntu2~25.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~25.04.2","pocket":"security"},{"name":"openjdk-8-doc","version":"8u462-ga~us1-0ubuntu2~25.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~25.04.2","pocket":"security"},{"name":"openjdk-8-jdk","version":"8u462-ga~us1-0ubuntu2~25.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~25.04.2","pocket":"security"},{"name":"openjdk-8-jdk-headless","version":"8u462-ga~us1-0ubuntu2~25.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~25.04.2","pocket":"security"},{"name":"openjdk-8-jre","version":"8u462-ga~us1-0ubuntu2~25.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~25.04.2","pocket":"security"},{"name":"openjdk-8-jre-headless","version":"8u462-ga~us1-0ubuntu2~25.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~25.04.2","pocket":"security"},{"name":"openjdk-8-jre-zero","version":"8u462-ga~us1-0ubuntu2~25.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~25.04.2","pocket":"security"},{"name":"openjdk-8-source","version":"8u462-ga~us1-0ubuntu2~25.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":"https://launchpad.net/ubuntu/+source/openjdk-8/8u462-ga~us1-0ubuntu2~25.04.2","pocket":"security"}],"xenial":[{"name":"openjdk-8","version":"8u462-ga~us1-0ubuntu2~16.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-8-demo","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-doc","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jdk","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jdk-headless","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-headless","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-jamvm","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-jre-zero","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-8-source","version":"8u462-ga~us1-0ubuntu2~16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-8","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2025-30749","CVE-2025-50106","CVE-2025-30754","CVE-2025-30761"]},{"id":"USN-7674-1","title":"OpenJDK 11 vulnerabilities","summary":"Several security issues were fixed in OpenJDK 11.","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart Java\napplications to make all the necessary changes.","references":[],"published":"2025-07-28T08:19:29.462296","description":"It was discovered that the 2D component of OpenJDK 11 did not properly\nmanage memory under certain circumstances. An attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code.\n(CVE-2025-30749, CVE-2025-50106)\n\nVMashroor Hasan Bhuiyan discovered that the JSSE component of OpenJDK 11\ndid not properly manage TLS 1.3 handshakes under certain circumstances.\nAn attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2025-30754)\n\nMartin van Wingerden and Violeta Georgieva of Broadcom discovered\nthat the Networking component of OpenJDK 11 did not properly\nmanage network connections under certain circumstances. An attacker\ncould possibly use this issue to obtain sensitive information.\n(CVE-2025-50059)\n\nIt was discovered that the Scripting component of OpenJDK 11 did not\nproperly manage properties under certain circumstances. An attacker\ncould possibly use this issue to cause a denial of service, execute\narbitrary code or bypass Java sandbox restrictions. (CVE-2025-30761)\n\nIn addition to security fixes, the updated packages contain bug fixes,\nnew features, and possibly incompatible changes.\n\nPlease see the following link for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2025-07-15","is_hidden":false,"release_packages":{"bionic":[{"name":"openjdk-lts","version":"11.0.28+6-1ubuntu1~18.04.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.28+6-1ubuntu1~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-doc","version":"11.0.28+6-1ubuntu1~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk","version":"11.0.28+6-1ubuntu1~18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk-headless","version":"11.0.28+6-1ubuntu1~18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre","version":"11.0.28+6-1ubuntu1~18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-headless","version":"11.0.28+6-1ubuntu1~18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-zero","version":"11.0.28+6-1ubuntu1~18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-source","version":"11.0.28+6-1ubuntu1~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"openjdk-lts","version":"11.0.28+6-1ubuntu1~20.04.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.28+6-1ubuntu1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-doc","version":"11.0.28+6-1ubuntu1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk","version":"11.0.28+6-1ubuntu1~20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jdk-headless","version":"11.0.28+6-1ubuntu1~20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre","version":"11.0.28+6-1ubuntu1~20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-headless","version":"11.0.28+6-1ubuntu1~20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-jre-zero","version":"11.0.28+6-1ubuntu1~20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"},{"name":"openjdk-11-source","version":"11.0.28+6-1ubuntu1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"openjdk-lts","version":"11.0.28+6-1ubuntu1~22.04.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.28+6-1ubuntu1~22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~22.04.1","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.28+6-1ubuntu1~22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~22.04.1","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.28+6-1ubuntu1~22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~22.04.1","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.28+6-1ubuntu1~22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~22.04.1","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.28+6-1ubuntu1~22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~22.04.1","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.28+6-1ubuntu1~22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~22.04.1","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.28+6-1ubuntu1~22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~22.04.1","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.28+6-1ubuntu1~22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~22.04.1","pocket":"security"}],"noble":[{"name":"openjdk-lts","version":"11.0.28+6-1ubuntu1~24.04.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.28+6-1ubuntu1~24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-11-doc","version":"11.0.28+6-1ubuntu1~24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-11-jdk","version":"11.0.28+6-1ubuntu1~24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-11-jdk-headless","version":"11.0.28+6-1ubuntu1~24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-11-jre","version":"11.0.28+6-1ubuntu1~24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-11-jre-headless","version":"11.0.28+6-1ubuntu1~24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-11-jre-zero","version":"11.0.28+6-1ubuntu1~24.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-apps"},{"name":"openjdk-11-source","version":"11.0.28+6-1ubuntu1~24.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":null,"pocket":"esm-apps"}],"plucky":[{"name":"openjdk-lts","version":"11.0.28+6-1ubuntu1~25.04.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-11-demo","version":"11.0.28+6-1ubuntu1~25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~25.04.1","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.28+6-1ubuntu1~25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~25.04.1","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.28+6-1ubuntu1~25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~25.04.1","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.28+6-1ubuntu1~25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~25.04.1","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.28+6-1ubuntu1~25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~25.04.1","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.28+6-1ubuntu1~25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~25.04.1","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.28+6-1ubuntu1~25.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~25.04.1","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.28+6-1ubuntu1~25.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.28+6-1ubuntu1~25.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2025-30749","CVE-2025-50059","CVE-2025-50106","CVE-2025-30761","CVE-2025-30754"]}]},{"id":"CVE-2025-53032","published":"2025-07-15T20:15:00","updated_at":"2025-07-22T16:57:24.759467+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Optimizer).  Supported versions that are affected are 9.0.0-9.1.0.\nEasily exploitable vulnerability allows high privileged attacker with\nnetwork access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"iconstantin","note":"since mysql versions 5.7 and earlier are no longer supported\nupstream, we are unable to update them to address security\nissues,\nmarking as ignored.\nmariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no\nlonger supported upstream - marking as ignored."},{"author":"mdeslaur","note":"MySQL 9.x only"}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53032","https://www.oracle.com/security-alerts/cpujul2025.html"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.7":[],"mysql-8.0":[],"mysql-8.4":[],"mariadb":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.6":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb","source":"https://ubuntu.com/security/cve?package=mariadb","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb","debian":"https://tracker.debian.org/pkg/mariadb","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"focal","status":"ignored","description":"no more upstream support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.6","source":"https://ubuntu.com/security/cve?package=mariadb-10.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.6","debian":"https://tracker.debian.org/pkg/mariadb-10.6","statuses":[{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"trusty","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"ignored","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of ESM support, was ignored [see notes]","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.4","source":"https://ubuntu.com/security/cve?package=mysql-8.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.4","debian":"https://tracker.debian.org/pkg/mysql-8.4","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"9.x only","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"9.x only","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2025-53030","published":"2025-07-15T20:15:00","updated_at":"2025-07-16T14:44:19.657407+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core).   The supported version that is affected is 7.1.10.\nEasily exploitable vulnerability allows high privileged attacker with logon\nto the infrastructure where Oracle VM VirtualBox executes to compromise\nOracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox,\nattacks may significantly impact additional products (scope change).\nSuccessful attacks of this vulnerability can result in  unauthorized access\nto critical data or complete access to all Oracle VM VirtualBox accessible\ndata. CVSS 3.1 Base Score 6.0 (Confidentiality impacts).  CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2025-53030","https://www.oracle.com/security-alerts/cpujul2025.html#AppendixOVIR","https://www.oracle.com/security-alerts/cpujul2025.html"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109373"],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":20640,"limit":20,"total_results":79316}