{"cves":[{"id":"CVE-2023-24809","published":"2023-02-17T20:15:00","updated_at":"2025-07-11T07:54:04.172119+00:00","description":"\nNetHack is a single player dungeon exploration game. Starting with version\n3.6.2 and prior to version 3.6.7, illegal input to the \"C\" (call) command\ncan cause a buffer overflow and crash the NetHack process. This\nvulnerability may be a security issue for systems that have NetHack\ninstalled suid/sgid and for shared systems. For all systems, it may result\nin a process crash. This issue is resolved in NetHack 3.6.7. There are no\nknown workarounds.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/NetHack/NetHack/security/advisories/GHSA-2cqv-5w4v-mgch","https://nethack.org/security/CVE-2023-24809.html","https://www.cve.org/CVERecord?id=CVE-2023-24809"],"bugs":[""],"patches":{"nethack":[]},"tags":{},"packages":[{"name":"nethack","source":"https://ubuntu.com/security/cve?package=nethack","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nethack","debian":"https://tracker.debian.org/pkg/nethack","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-23923","published":"2023-02-17T20:15:00","updated_at":"2025-08-26T17:40:27.266990+00:00","description":"\nThe vulnerability was found Moodle which exists due to insufficient\nlimitations on the \"start page\" preference. A remote attacker can set that\npreference for another user. The vulnerability allows a remote attacker to\ngain unauthorized access to otherwise restricted functionality.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://moodle.org/mod/forum/discuss.php?d=443274#p1782023","https://www.cve.org/CVERecord?id=CVE-2023-23923"],"bugs":[""],"patches":{"moodle":[]},"tags":{},"packages":[{"name":"moodle","source":"https://ubuntu.com/security/cve?package=moodle","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=moodle","debian":"https://tracker.debian.org/pkg/moodle","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-23922","published":"2023-02-17T20:15:00","updated_at":"2025-08-26T18:51:16.417515+00:00","description":"\nThe vulnerability was found Moodle which exists due to insufficient\nsanitization of user-supplied data in blog search. A remote attacker can\ntrick the victim to follow a specially crafted link and execute arbitrary\nHTML and script code in user's browser in context of vulnerable website.\nThis flaw allows a remote attacker to perform cross-site scripting (XSS)\nattacks.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://moodle.org/mod/forum/discuss.php?d=443273#p1782022","https://www.cve.org/CVERecord?id=CVE-2023-23922"],"bugs":[""],"patches":{"moodle":[]},"tags":{},"packages":[{"name":"moodle","source":"https://ubuntu.com/security/cve?package=moodle","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=moodle","debian":"https://tracker.debian.org/pkg/moodle","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-23921","published":"2023-02-17T20:15:00","updated_at":"2025-08-26T18:21:45.925098+00:00","description":"\nThe vulnerability was found Moodle which exists due to insufficient\nsanitization of user-supplied data in some returnurl parameters. A remote\nattacker can trick the victim to follow a specially crafted link and\nexecute arbitrary HTML and script code in user's browser in context of\nvulnerable website. This flaw allows a remote attacker to perform\ncross-site scripting (XSS) attacks.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://moodle.org/mod/forum/discuss.php?d=443272#p1782021","https://www.cve.org/CVERecord?id=CVE-2023-23921"],"bugs":[""],"patches":{"moodle":[]},"tags":{},"packages":[{"name":"moodle","source":"https://ubuntu.com/security/cve?package=moodle","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=moodle","debian":"https://tracker.debian.org/pkg/moodle","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-20803","published":"2023-02-17T18:15:00","updated_at":"2025-08-25T23:49:53.094408+00:00","description":"\nA vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions\n0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to\ncause a denial of service condition on an affected device.The vulnerability\nis due to incorrect use of the realloc function that may result in a\ndouble-free. An attacker could exploit this vulnerability by submitting a\ncrafted OLE2 file to be scanned by ClamAV on the affected device. An\nexploit could allow the attacker to cause the ClamAV scanning process to\ncrash, resulting in a denial of service condition.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"per upstream, only affects 0.104.0 to 0.104.2"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html","https://www.cve.org/CVERecord?id=CVE-2022-20803"],"bugs":[""],"patches":{"clamav":[]},"tags":{},"packages":[{"name":"clamav","source":"https://ubuntu.com/security/cve?package=clamav","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=clamav","debian":"https://tracker.debian.org/pkg/clamav","statuses":[{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.103.6,0.104.3,0.105.0","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-34182","published":"2023-02-17T18:15:00","updated_at":"2025-07-11T07:47:30.796307+00:00","description":"\nAn issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via\ndefault configuration permissions.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/tsl0922/ttyd/issues/692","https://www.cve.org/CVERecord?id=CVE-2021-34182"],"bugs":[""],"patches":{"ttyd":[]},"tags":{},"packages":[{"name":"ttyd","source":"https://ubuntu.com/security/cve?package=ttyd","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ttyd","debian":"https://tracker.debian.org/pkg/ttyd","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-33391","published":"2023-02-17T18:15:00","updated_at":"2025-08-18T17:15:50.129983+00:00","description":"\nAn issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary\ncode via the -g option of the CleanNode() function in gdoc.c.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"the commit below is just one of a long list of commits that\nare required to remove recursion from tidy-html5."}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-6483-1","https://www.cve.org/CVERecord?id=CVE-2021-33391"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032665","https://github.com/htacg/tidy-html5/issues/946"],"patches":{"tidy-html5":["upstream: https://github.com/htacg/tidy-html5/commit/e56716f154f13b14fc5585146a85000fdd26d319","upstream: https://github.com/htacg/tidy-html5/commit/efa61528aa500a1efbd2768121820742d3bb709b"]},"tags":{},"packages":[{"name":"tidy-html5","source":"https://ubuntu.com/security/cve?package=tidy-html5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tidy-html5","debian":"https://tracker.debian.org/pkg/tidy-html5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2:5.6.0-11ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:5.6.0-11ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2:5.6.0-11ubuntu0.23.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2:5.6.0-11ubuntu0.23.10.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:5.6.0-11ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"2:5.6.0-11ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"2:5.6.0-11ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2:5.6.0-11ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2:5.6.0-11ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-6483-1"],"notices":[{"id":"USN-6483-1","title":"HTML Tidy vulnerability","summary":"tidy-html5 could be made to crash or run programs if it opened a specially\ncrafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-11-15T14:31:49.301734","description":"Neeraj Pal discovered that HTML Tidy incorrectly handled parsing certain\nHTML data. If a user or automated system were tricked into parsing\nspecially crafted HTML data, a remote attacker could cause HTML Tidy to\nconsume resources, leading to a denial of service, or possibly execute\narbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"tidy-html5","version":"2:5.6.0-11ubuntu0.20.04.1","description":"HTML/XML syntax checker and reformatter","is_source":true},{"name":"libtidy-dev","version":"2:5.6.0-11ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.20.04.1","pocket":"security"},{"name":"libtidy5deb1","version":"2:5.6.0-11ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.20.04.1","pocket":"security"},{"name":"tidy","version":"2:5.6.0-11ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.20.04.1","pocket":"security"}],"jammy":[{"name":"tidy-html5","version":"2:5.6.0-11ubuntu0.22.04.1","description":"HTML/XML syntax checker and reformatter","is_source":true},{"name":"libtidy-dev","version":"2:5.6.0-11ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.22.04.1","pocket":"security"},{"name":"libtidy5deb1","version":"2:5.6.0-11ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.22.04.1","pocket":"security"},{"name":"tidy","version":"2:5.6.0-11ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.22.04.1","pocket":"security"}],"lunar":[{"name":"tidy-html5","version":"2:5.6.0-11ubuntu0.23.04.1","description":"HTML/XML syntax checker and reformatter","is_source":true},{"name":"libtidy-dev","version":"2:5.6.0-11ubuntu0.23.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.23.04.1","pocket":"security"},{"name":"libtidy5deb1","version":"2:5.6.0-11ubuntu0.23.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.23.04.1","pocket":"security"},{"name":"tidy","version":"2:5.6.0-11ubuntu0.23.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.23.04.1","pocket":"security"}],"mantic":[{"name":"tidy-html5","version":"2:5.6.0-11ubuntu0.23.10.1","description":"HTML/XML syntax checker and reformatter","is_source":true},{"name":"libtidy-dev","version":"2:5.6.0-11ubuntu0.23.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.23.10.1","pocket":"security"},{"name":"libtidy5deb1","version":"2:5.6.0-11ubuntu0.23.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.23.10.1","pocket":"security"},{"name":"tidy","version":"2:5.6.0-11ubuntu0.23.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tidy-html5","version_link":"https://launchpad.net/ubuntu/+source/tidy-html5/2:5.6.0-11ubuntu0.23.10.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2021-33391"]}]},{"id":"CVE-2021-32419","published":"2023-02-17T18:15:00","updated_at":"2025-07-11T07:47:05.429862+00:00","description":"\nAn issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to\nobtain sensitive information via the fmt_mtm_load_song function in\nfmt/mtm.c.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/schismtracker/schismtracker/commit/1e2cc389a2a058fd13d99460c11115a6f7f7a6a4","https://github.com/schismtracker/schismtracker/issues/249","https://www.cve.org/CVERecord?id=CVE-2021-32419"],"bugs":[""],"patches":{"schism":[]},"tags":{},"packages":[{"name":"schism","source":"https://ubuntu.com/security/cve?package=schism","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=schism","debian":"https://tracker.debian.org/pkg/schism","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-32142","published":"2023-02-17T18:15:00","updated_at":"2025-07-11T07:46:59.185784+00:00","description":"\nBuffer Overflow vulnerability in LibRaw linux/unix v0.20.0 allows attacker\nto escalate privileges via the LibRaw_buffer_datastream::gets(char*, int)\nin /src/libraw/src/libraw_datastream.cpp.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"This is a stack overflow and is limited to a denial of service\non Ubuntu because of compiler hardening features."}],"codename":null,"priority":"low","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/gtt1995","https://ubuntu.com/security/notices/USN-6137-1","https://www.cve.org/CVERecord?id=CVE-2021-32142","https://ubuntu.com/security/notices/USN-7266-1"],"bugs":["https://github.com/LibRaw/LibRaw/issues/400"],"patches":{"libraw":["upstream: https://github.com/LibRaw/LibRaw/commit/bc3aaf4223fdb70d52d470dae65c5a7923ea2a49"],"ufraw":[],"darktable":[],"exactimage":[],"dcraw":[],"rawtherapee":[],"xbmc":[],"kodi":[],"digikam":[]},"tags":{"libraw":["stack-protector"]},"packages":[{"name":"ufraw","source":"https://ubuntu.com/security/cve?package=ufraw","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ufraw","debian":"https://tracker.debian.org/pkg/ufraw","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"darktable","source":"https://ubuntu.com/security/cve?package=darktable","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=darktable","debian":"https://tracker.debian.org/pkg/darktable","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"exactimage","source":"https://ubuntu.com/security/cve?package=exactimage","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=exactimage","debian":"https://tracker.debian.org/pkg/exactimage","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"dcraw","source":"https://ubuntu.com/security/cve?package=dcraw","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=dcraw","debian":"https://tracker.debian.org/pkg/dcraw","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"rawtherapee","source":"https://ubuntu.com/security/cve?package=rawtherapee","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=rawtherapee","debian":"https://tracker.debian.org/pkg/rawtherapee","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"kodi","source":"https://ubuntu.com/security/cve?package=kodi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kodi","debian":"https://tracker.debian.org/pkg/kodi","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"digikam","source":"https://ubuntu.com/security/cve?package=digikam","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=digikam","debian":"https://tracker.debian.org/pkg/digikam","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"4:6.4.0+dfsg-3ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.3.0","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"","component":null,"pocket":"security"}]},{"name":"libraw","source":"https://ubuntu.com/security/cve?package=libraw","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libraw","debian":"https://tracker.debian.org/pkg/libraw","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"0.19.5-1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"0.20.2-2ubuntu2.22.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"0.20.2-2ubuntu2.22.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.20.2-2.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"0.20.2-2ubuntu2.23.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"0.20.2-2.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"0.20.2-2.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"0.20.2-2.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"0.20.2-2.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"released","description":"0.20.2-2.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"0.20.2-2.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"xbmc","source":"https://ubuntu.com/security/cve?package=xbmc","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xbmc","debian":"https://tracker.debian.org/pkg/xbmc","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-6137-1","USN-7266-1"],"notices":[{"id":"USN-6137-1","title":"LibRaw vulnerabilities","summary":"Several security issues were fixed in LibRaw.\n","instructions":"After a standard system update you need to restart your session to make all\nthe necessary changes.\n","references":[],"published":"2023-06-05T13:59:03.479111","description":"It was discovered that LibRaw incorrectly handled photo files. If a user or\nautomated system were tricked into processing a specially crafted photo\nfile, a remote attacker could cause applications linked against LibRaw to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","is_hidden":false,"release_packages":{"kinetic":[{"name":"libraw","version":"0.20.2-2ubuntu2.22.10.1","description":"raw image decoder library","is_source":true},{"name":"libraw-doc","version":"0.20.2-2ubuntu2.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.22.10.1","pocket":"security"},{"name":"libraw-bin","version":"0.20.2-2ubuntu2.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.22.10.1","pocket":"security"},{"name":"libraw-dev","version":"0.20.2-2ubuntu2.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.22.10.1","pocket":"security"},{"name":"libraw20","version":"0.20.2-2ubuntu2.22.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.22.10.1","pocket":"security"}],"jammy":[{"name":"libraw","version":"0.20.2-2ubuntu2.22.04.1","description":"raw image decoder library","is_source":true},{"name":"libraw-doc","version":"0.20.2-2ubuntu2.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.22.04.1","pocket":"security"},{"name":"libraw-bin","version":"0.20.2-2ubuntu2.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.22.04.1","pocket":"security"},{"name":"libraw-dev","version":"0.20.2-2ubuntu2.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.22.04.1","pocket":"security"},{"name":"libraw20","version":"0.20.2-2ubuntu2.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.22.04.1","pocket":"security"}],"lunar":[{"name":"libraw","version":"0.20.2-2ubuntu2.23.04.1","description":"raw image decoder library","is_source":true},{"name":"libraw-doc","version":"0.20.2-2ubuntu2.23.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.23.04.1","pocket":"security"},{"name":"libraw-bin","version":"0.20.2-2ubuntu2.23.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.23.04.1","pocket":"security"},{"name":"libraw-dev","version":"0.20.2-2ubuntu2.23.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.23.04.1","pocket":"security"},{"name":"libraw20","version":"0.20.2-2ubuntu2.23.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.20.2-2ubuntu2.23.04.1","pocket":"security"}],"focal":[{"name":"libraw","version":"0.19.5-1ubuntu1.2","description":"raw image decoder library","is_source":true},{"name":"libraw-doc","version":"0.19.5-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.19.5-1ubuntu1.2","pocket":"security"},{"name":"libraw-bin","version":"0.19.5-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.19.5-1ubuntu1.2","pocket":"security"},{"name":"libraw19","version":"0.19.5-1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.19.5-1ubuntu1.2","pocket":"security"},{"name":"libraw-dev","version":"0.19.5-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libraw","version_link":"https://launchpad.net/ubuntu/+source/libraw/0.19.5-1ubuntu1.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2023-1729","CVE-2021-32142"]},{"id":"USN-7266-1","title":"digiKam vulnerabilities","summary":"Several security issues were fixed in digiKam.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2025-02-13T03:28:13.403305","description":"Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in\ndigiKam, did not correctly parse certain files. An attacker could possibly\nuse this issue to execute arbitrary code. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2017-0691)\n\nIt was discovered that Platinum Upnp SDK, vendored in digiKam, was\nvulnerable to a path traversal attack. An attacker could possibly use this\nissue to leak sensitive information. This issue only affected \nUbuntu 20.04 LTS. (CVE-2020-19858)\n\nIt was discovered that LibRaw, vendored in digiKam, did not correctly\nhandle certain memory operations. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to leak sensitive information. This issue only affected\nUbuntu 20.04 LTS. (CVE-2020-22628)\n\nIt was discovered that LibRaw, vendored in digiKam, did not correctly\nhandle certain memory operations. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-35530,\nCVE-2020-35531, CVE-2020-35532, CVE-2020-35533)\n\nIt was discovered that LibRaw, vendored in digiKam, did not correctly\nhandle certain memory operations. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code.\nThis issue only affected Ubuntu 20.04 LTS. (CVE-2021-32142)\n\nIt was discovered that LibRaw, vendored in digiKam, did not correctly\nhandle certain memory operations. If a user or automated system were\ntricked into opening a specially crafted file, an attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code.\nThis issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2023-1729)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"digikam","version":"4:5.6.0-0ubuntu10+esm1","description":"digital photo management application for KDE","is_source":true},{"name":"digikam","version":"4:5.6.0-0ubuntu10+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-data","version":"4:5.6.0-0ubuntu10+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-doc","version":"4:5.6.0-0ubuntu10+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-private-libs","version":"4:5.6.0-0ubuntu10+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"kipi-plugins","version":"4:5.6.0-0ubuntu10+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"kipi-plugins-common","version":"4:5.6.0-0ubuntu10+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"showfoto","version":"4:5.6.0-0ubuntu10+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"digikam","version":"4:6.4.0+dfsg-3ubuntu0.1~esm1","description":"digital photo management application for KDE","is_source":true},{"name":"digikam","version":"4:6.4.0+dfsg-3ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-data","version":"4:6.4.0+dfsg-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-private-libs","version":"4:6.4.0+dfsg-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"showfoto","version":"4:6.4.0+dfsg-3ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"digikam","version":"4:7.5.0-3ubuntu0.1~esm1","description":"digital photo management application for KDE","is_source":true},{"name":"digikam","version":"4:7.5.0-3ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-data","version":"4:7.5.0-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-private-libs","version":"4:7.5.0-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"showfoto","version":"4:7.5.0-3ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"}],"xenial":[{"name":"digikam","version":"4:4.12.0-0ubuntu7+esm1","description":"digital photo management application for KDE","is_source":true},{"name":"digikam","version":"4:4.12.0-0ubuntu7+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-data","version":"4:4.12.0-0ubuntu7+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"digikam-doc","version":"4:4.12.0-0ubuntu7+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"kipi-plugins","version":"4:4.12.0-0ubuntu7+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"kipi-plugins-common","version":"4:4.12.0-0ubuntu7+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"libkvkontakte1","version":"1.0~digikam4.12.0-0ubuntu7+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"libmediawiki1","version":"1.0~digikam4.12.0-0ubuntu7+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"},{"name":"showfoto","version":"4:4.12.0-0ubuntu7+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/digikam","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2020-35531","CVE-2020-35530","CVE-2017-0691","CVE-2021-32142","CVE-2020-22628","CVE-2020-19858","CVE-2020-35533","CVE-2020-35532","CVE-2023-1729"]}]},{"id":"CVE-2020-19824","published":"2023-02-17T18:15:00","updated_at":"2025-07-11T07:43:58.255628+00:00","description":"\nAn issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute\narbitrary code and crash program via the ao_c parameter.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/mpv-player/mpv/issues/6808","https://www.cve.org/CVERecord?id=CVE-2020-19824"],"bugs":[""],"patches":{"mpv":[]},"tags":{},"packages":[{"name":"mpv","source":"https://ubuntu.com/security/cve?package=mpv","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mpv","debian":"https://tracker.debian.org/pkg/mpv","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-24329","published":"2023-02-17T15:15:00","updated_at":"2025-08-18T17:21:31.651860+00:00","description":"\nAn issue in the urllib.parse component of Python before 3.11.4 allows\nattackers to bypass blocklisting methods by supplying a URL that starts\nwith blank characters.","ubuntu_description":"","notes":[{"author":"leosilva","note":"there are some discussions around that issue\nthat raises doubts about if it was properly fixed\nor not.\ntill further investigation it'll be marked as needed again."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://pointernull.com/security/python-url-parse-problem.html","https://github.com/python/cpython/pull/99421","https://github.com/python/cpython/pull/99446 (backport for 3.11 branch)","https://ubuntu.com/security/notices/USN-5888-1","https://ubuntu.com/security/notices/USN-5960-1","https://ubuntu.com/security/notices/USN-6139-1","https://www.cve.org/CVERecord?id=CVE-2023-24329","https://ubuntu.com/security/notices/USN-6891-1","https://ubuntu.com/security/notices/USN-7180-1"],"bugs":["https://github.com/python/cpython/issues/102153"],"patches":{"python2.7":[],"python3.4":[],"python3.5":[],"python3.6":[],"python3.7":[],"python3.8":[],"python3.9":[],"python3.10":[],"python3.11":["upstream: https://github.com/python/cpython/commit/72d356e3584ebfb8e813a8e9f2cd3dccf233c0d9"]},"tags":{},"packages":[{"name":"python2.7","source":"https://ubuntu.com/security/cve?package=python2.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python2.7","debian":"https://tracker.debian.org/pkg/python2.7","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.7.18-1~20.04.7","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.7.17-1~18.04ubuntu1.13","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.7.6-8ubuntu0.6+esm15","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2.7.12-1ubuntu0~16.04.18+esm5","component":null,"pocket":"esm-infra"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.7.18-13ubuntu1.5","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"python3.10","source":"https://ubuntu.com/security/cve?package=python3.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.10","debian":"https://tracker.debian.org/pkg/python3.10","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"3.10.6-1~22.04.2ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"3.10.7-1ubuntu0.4","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"python3.11","source":"https://ubuntu.com/security/cve?package=python3.11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.11","debian":"https://tracker.debian.org/pkg/python3.11","statuses":[{"release_codename":"kinetic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.11.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"3.11.1-2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"3.11.1-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"3.11.0~rc1-1~22.04.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"python3.4","source":"https://ubuntu.com/security/cve?package=python3.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.4","debian":"https://tracker.debian.org/pkg/python3.4","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"}]},{"name":"python3.5","source":"https://ubuntu.com/security/cve?package=python3.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.5","debian":"https://tracker.debian.org/pkg/python3.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"3.5.2-2ubuntu0~16.04.13+esm8","component":null,"pocket":"esm-infra"},{"release_codename":"trusty","status":"released","description":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","component":null,"pocket":"esm-infra"}]},{"name":"python3.6","source":"https://ubuntu.com/security/cve?package=python3.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.6","debian":"https://tracker.debian.org/pkg/python3.6","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.6.9-1~18.04ubuntu1.13","component":null,"pocket":"security"}]},{"name":"python3.7","source":"https://ubuntu.com/security/cve?package=python3.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.7","debian":"https://tracker.debian.org/pkg/python3.7","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.7.5-2ubuntu1~18.04.2+esm3","component":null,"pocket":"esm-apps"}]},{"name":"python3.8","source":"https://ubuntu.com/security/cve?package=python3.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.8","debian":"https://tracker.debian.org/pkg/python3.8","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"3.8.10-0ubuntu1~20.04.8","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.8.0-3ubuntu1~18.04.2+esm2","component":null,"pocket":"esm-apps"}]},{"name":"python3.9","source":"https://ubuntu.com/security/cve?package=python3.9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.9","debian":"https://tracker.debian.org/pkg/python3.9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"3.9.5-3ubuntu0~20.04.1+esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-5888-1","USN-5960-1","USN-6139-1","USN-6891-1","USN-7180-1"],"notices":[{"id":"USN-5888-1","title":"Python vulnerabilities","summary":"Several security issues were fixed in Python.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-02-27T17:08:31.229248","description":"It was discovered that Python incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a specially\ncrafted input file, a remote attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2015-20107)\n\nHamza Avvan discovered that Python incorrectly handled certain inputs. If a\nuser or an automated system were tricked into running a specially\ncrafted input, a remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2021-28861)\n\nIt was discovered that Python incorrectly handled certain inputs. If a\nuser or an automated system were tricked into running a specially\ncrafted input, a remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2022-37454, CVE-2022-42919)\n\nIt was discovered that Python incorrectly handled certain inputs. If a\nuser or an automated system were tricked into running a specially\ncrafted input, a remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2022-45061, CVE-2023-24329)\n","is_hidden":false,"release_packages":{"focal":[{"name":"python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.9-dev","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-examples","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-minimal","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-full","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-venv","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-doc","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-dev","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-minimal","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"idle-python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-testsuite","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-stdlib","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-42919","CVE-2022-37454","CVE-2021-28861","CVE-2022-45061","CVE-2015-20107","CVE-2023-24329"]},{"id":"USN-5960-1","title":"Python vulnerability","summary":"Python could be made to bypass blocklisting methods if a specially\ncrafted URL was provided.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-03-16T14:21:43.373945","description":"Yebo Cao discovered that Python incorrectly handled certain URLs.\nAn attacker could possibly use this issue to bypass blocklisting\nmethods by supplying a URL that starts with blank characters.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"python2.7","version":"2.7.6-8ubuntu0.6+esm14","description":"An interactive high-level object-oriented language","is_source":true},{"name":"libpython2.7-minimal","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"idle-python2.7","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-testsuite","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-dev","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-minimal","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-doc","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-dev","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-examples","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-stdlib","version":"2.7.6-8ubuntu0.6+esm14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"python3.10","version":"3.10.6-1~22.04.2ubuntu1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"libpython3.10-minimal","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"python3.10","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"idle-python3.10","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"python3.10-doc","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"python3.10-minimal","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"python3.10-examples","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"libpython3.10","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"libpython3.10-dev","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"libpython3.10-testsuite","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"python3.10-dev","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"libpython3.10-stdlib","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"python3.10-venv","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"python3.10-nopie","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"},{"name":"python3.10-full","version":"3.10.6-1~22.04.2ubuntu1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1","pocket":"security"}],"xenial":[{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm7","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python2.7","version":"2.7.12-1ubuntu0~16.04.18+esm4","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python2.7-dev","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-doc","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-stdlib","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-minimal","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-stdlib","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-venv","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-testsuite","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-doc","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-dev","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-dev","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-minimal","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python2.7","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"idle-python2.7","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"idle-python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-testsuite","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-examples","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-examples","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-dev","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-minimal","version":"2.7.12-1ubuntu0~16.04.18+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-minimal","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5","version":"3.5.2-2ubuntu0~16.04.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"}],"bionic":[{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.12","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python2.7","version":"2.7.17-1~18.04ubuntu1.11","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.6-dev","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"python2.7-dev","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"python2.7-doc","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"libpython3.6-dev","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"libpython3.6-stdlib","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"libpython2.7","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"libpython2.7-stdlib","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"libpython2.7-testsuite","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"libpython3.6-minimal","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"python3.6-examples","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"libpython2.7-minimal","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"python3.6-venv","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"python2.7","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"python3.6-minimal","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"idle-python2.7","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"idle-python3.6","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"python2.7-examples","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"python3.6-doc","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"libpython3.6-testsuite","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"},{"name":"libpython2.7-dev","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"python2.7-minimal","version":"2.7.17-1~18.04ubuntu1.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.11","pocket":"security"},{"name":"libpython3.6","version":"3.6.9-1~18.04ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.12","pocket":"security"}],"kinetic":[{"name":"python3.10","version":"3.10.7-1ubuntu0.3","description":"An interactive high-level object-oriented language","is_source":true},{"name":"libpython3.10-minimal","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"python3.10","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"idle-python3.10","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"python3.10-doc","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"python3.10-minimal","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"python3.10-examples","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"libpython3.10","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"libpython3.10-dev","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"libpython3.10-testsuite","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"python3.10-dev","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"libpython3.10-stdlib","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"python3.10-venv","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"python3.10-nopie","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"},{"name":"python3.10-full","version":"3.10.7-1ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.3","pocket":"security"}],"focal":[{"name":"python3.8","version":"3.8.10-0ubuntu1~20.04.7","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.8-minimal","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"python3.8-full","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"libpython3.8-minimal","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"python3.8-examples","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"python3.8-dev","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"libpython3.8-stdlib","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"python3.8-venv","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"libpython3.8","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"idle-python3.8","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"libpython3.8-testsuite","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"libpython3.8-dev","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"python3.8","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"},{"name":"python3.8-doc","version":"3.8.10-0ubuntu1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.7","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2023-24329"]},{"id":"USN-6139-1","title":"Python vulnerability","summary":"Python could be made to bypass blocklisting methods if a specially crafted URL was provided\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-06-05T16:55:11.560959","description":"Yebo Cao discovered that Python incorrectly handled certain URLs.\nAn attacker could use this issue to bypass blockinglisting methods.\nThis issue was first addressed in USN-5960-1, but was incomplete.\nHere we address an additional fix to that issue. (CVE-2023-24329)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"python2.7","version":"2.7.6-8ubuntu0.6+esm15","description":"An interactive high-level object-oriented language","is_source":true},{"name":"libpython2.7-minimal","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-dev","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-testsuite","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-dev","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-minimal","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"idle-python2.7","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-doc","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-examples","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-stdlib","version":"2.7.6-8ubuntu0.6+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"python3.10","version":"3.10.6-1~22.04.2ubuntu1.1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"libpython3.10-minimal","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"python3.10","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"idle-python3.10","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"python3.10-doc","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"python3.10-minimal","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"python3.10-examples","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"libpython3.10","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"libpython3.10-dev","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"libpython3.10-testsuite","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"python3.10-dev","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"libpython3.10-stdlib","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"python3.10-venv","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"python3.10-nopie","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"},{"name":"python3.10-full","version":"3.10.6-1~22.04.2ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.6-1~22.04.2ubuntu1.1","pocket":"security"}],"xenial":[{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm8","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python2.7","version":"2.7.12-1ubuntu0~16.04.18+esm5","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python2.7-dev","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-doc","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-stdlib","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-minimal","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-stdlib","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-venv","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-testsuite","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-doc","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-dev","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-dev","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-minimal","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python2.7","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"idle-python2.7","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"idle-python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-testsuite","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-examples","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-examples","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-dev","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-minimal","version":"2.7.12-1ubuntu0~16.04.18+esm5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-minimal","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5","version":"3.5.2-2ubuntu0~16.04.13+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"}],"lunar":[{"name":"python3.11","version":"3.11.2-6ubuntu0.1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.11-doc","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"python3.11","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"idle-python3.11","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"libpython3.11-testsuite","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"libpython3.11-minimal","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"python3.11-examples","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"python3.11-venv","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"libpython3.11","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"libpython3.11-stdlib","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"python3.11-nopie","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"python3.11-dev","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"libpython3.11-dev","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"python3.11-full","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"},{"name":"python3.11-minimal","version":"3.11.2-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.2-6ubuntu0.1","pocket":"security"}],"bionic":[{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.13","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python2.7","version":"2.7.17-1~18.04ubuntu1.13","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.6-dev","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-dev","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-doc","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-dev","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-minimal","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-stdlib","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-testsuite","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-minimal","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-examples","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-stdlib","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-venv","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python2.7","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-minimal","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"idle-python2.7","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"idle-python3.6","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-examples","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-doc","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-testsuite","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython2.7-dev","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"python2.7-minimal","version":"2.7.17-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6","version":"3.6.9-1~18.04ubuntu1.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"}],"kinetic":[{"name":"python3.10","version":"3.10.7-1ubuntu0.4","description":"An interactive high-level object-oriented language","is_source":true},{"name":"libpython3.10-minimal","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"python3.10","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"idle-python3.10","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"python3.10-doc","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"python3.10-minimal","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"python3.10-examples","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"libpython3.10","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"libpython3.10-dev","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"libpython3.10-testsuite","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"python3.10-dev","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"libpython3.10-stdlib","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"python3.10-venv","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"python3.10-nopie","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"},{"name":"python3.10-full","version":"3.10.7-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.7-1ubuntu0.4","pocket":"security"}],"focal":[{"name":"python3.8","version":"3.8.10-0ubuntu1~20.04.8","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.8-minimal","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"python3.8-full","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"libpython3.8-minimal","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"python3.8-examples","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"python3.8-dev","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"libpython3.8-dev","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"python3.8-venv","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"libpython3.8","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"idle-python3.8","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"libpython3.8-testsuite","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"libpython3.8-stdlib","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"python3.8","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"},{"name":"python3.8-doc","version":"3.8.10-0ubuntu1~20.04.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.8","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2023-24329"]},{"id":"USN-6891-1","title":"Python vulnerabilities","summary":"Several security issues were fixed in Python.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-07-11T11:54:39.304153","description":"It was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2015-20107)\n\nIt was discovered that Python incorrectly used regular expressions\nvulnerable to catastrophic backtracking. A remote attacker could possibly\nuse this issue to cause a denial of service. This issue only affected\nUbuntu 14.04 LTS. (CVE-2018-1060, CVE-2018-1061)\n\nIt was discovered that Python failed to initialize Expat’s hash salt. A\nremote attacker could possibly use this issue to cause hash collisions,\nleading to a denial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-14647)\n\nIt was discovered that Python incorrectly handled certain pickle files. An\nattacker could possibly use this issue to consume memory, leading to a\ndenial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-20406)\n\nIt was discovered that Python incorrectly validated the domain when\nhandling cookies. An attacker could possibly trick Python into sending\ncookies to the wrong domain. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-20852)\n\nJonathan Birch and Panayiotis Panayiotou discovered that Python incorrectly\nhandled Unicode encoding during NFKC normalization. An attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-9636, CVE-2019-10160)\n\nIt was discovered that Python incorrectly parsed certain email addresses. A\nremote attacker could possibly use this issue to trick Python applications\ninto accepting email addresses that should be denied. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-16056)\n\nIt was discovered that the Python documentation XML-RPC server incorrectly\nhandled certain fields. A remote attacker could use this issue to execute a\ncross-site scripting (XSS) attack. This issue only affected Ubuntu 14.04\nLTS. (CVE-2019-16935)\n\nIt was discovered that Python documentation had a misleading information.\nA security issue could be possibly caused by wrong assumptions of this\ninformation. This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04\nLTS. (CVE-2019-17514)\n\nIt was discovered that Python incorrectly stripped certain characters from\nrequests. A remote attacker could use this issue to perform CRLF injection.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2019-18348)\n\nIt was discovered that Python incorrectly handled certain TAR archives.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2019-20907)\n\nColin Read and Nicolas Edet discovered that Python incorrectly handled\nparsing certain X509 certificates. An attacker could possibly use this\nissue to cause Python to crash, resulting in a denial of service. This\nissue only affected Ubuntu 14.04 LTS. (CVE-2019-5010)\n\nIt was discovered that incorrectly handled certain ZIP files. An attacker\ncould possibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-9674)\n\nIt was discovered that Python incorrectly handled certain urls. A remote\nattacker could possibly use this issue to perform CRLF injection attacks.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2019-9740, CVE-2019-9947)\n\nSihoon Lee discovered that Python incorrectly handled the local_file:\nscheme. A remote attacker could possibly use this issue to bypass blocklist\nmeschanisms. This issue only affected Ubuntu 14.04 LTS. (CVE-2019-9948)\n\nIt was discovered that Python incorrectly handled certain IP values.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2020-14422)\n\nIt was discovered that Python incorrectly handled certain character\nsequences. A remote attacker could possibly use this issue to perform\nCRLF injection. This issue only affected Ubuntu 14.04 LTS and Ubuntu\n18.04 LTS. (CVE-2020-26116)\n\nIt was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code\nor cause a denial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2020-27619, CVE-2021-3177)\n\nIt was discovered that Python incorrectly handled certain HTTP requests.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2020-8492)\n\nIt was discovered that the Python stdlib ipaddress API incorrectly handled\noctal strings. A remote attacker could possibly use this issue to perform a\nwide variety of attacks, including bypassing certain access restrictions.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2021-29921)\n\nDavid Schwörer discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2021-3426)\n\nIt was discovered that Python incorrectly handled certain RFCs.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2021-3733)\n\nIt was discovered that Python incorrectly handled certain server\nresponses. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 14.04 LTS. (CVE-2021-3737)\n\nIt was discovered that Python incorrectly handled certain FTP requests.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2021-4189)\n\nIt was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2022-0391)\n\nDevin Jeanpierre discovered that Python incorrectly handled sockets when\nthe multiprocessing module was being used. A local attacker could possibly\nuse this issue to execute arbitrary code and escalate privileges.\nThis issue only affected Ubuntu 22.04 LTS. (CVE-2022-42919)\n\nIt was discovered that Python incorrectly handled certain inputs. If a\nuser or an automated system were tricked into running a specially\ncrafted input, a remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 18.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-45061, CVE-2023-24329)\n\nIt was discovered that Python incorrectly handled certain scripts.\nAn attacker could possibly use this issue to execute arbitrary code\nor cause a crash. This issue only affected Ubuntu 14.04 LTS and\nUbuntu 18.04 LTS. (CVE-2022-48560)\n\nIt was discovered that Python incorrectly handled certain plist files.\nIf a user or an automated system were tricked into processing a specially\ncrafted plist file, an attacker could possibly use this issue to consume\nresources, resulting in a denial of service. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-48564)\n\nIt was discovered that Python did not properly handle XML entity\ndeclarations in plist files. An attacker could possibly use this\nvulnerability to perform an XML External Entity (XXE) injection,\nresulting in a denial of service or information disclosure. This issue\nonly affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-48565)\n\nIt was discovered that Python did not properly provide constant-time\nprocessing for a crypto operation. An attacker could possibly use this\nissue to perform a timing attack and recover sensitive information. This\nissue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2022-48566)\n\nIt was discovered that Python instances of ssl.SSLSocket were vulnerable\nto a bypass of the TLS handshake. An attacker could possibly use this\nissue to cause applications to treat unauthenticated received data before\nTLS handshake as authenticated data after TLS handshake. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu\n22.04 LTS. (CVE-2023-40217)\n\nIt was discovered that Python incorrectly handled null bytes when\nnormalizing pathnames. An attacker could possibly use this issue to bypass\ncertain filename checks. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2023-41105)\n\nIt was discovered that Python incorrectly handled privilege with certain\nparameters. An attacker could possibly use this issue to maintain the\noriginal processes' groups before starting the new process. This issue\nonly affected Ubuntu 23.10. (CVE-2023-6507)\n\nIt was discovered that Python incorrectly handled symlinks in temp files.\nAn attacker could possibly use this issue to modify the permissions of\nfiles. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS and Ubuntu 23.10. (CVE-2023-6597)\n\nIt was discovered that Python incorrectly handled certain crafted zip\nfiles. An attacker could possibly use this issue to crash the program,\nresulting in a denial of service. (CVE-2024-0450)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.13+esm2","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.7","version":"3.7.5-2ubuntu1~18.04.2+esm3","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.8","version":"3.8.0-3ubuntu1~18.04.2+esm2","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.6","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"idle-python3.7","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"idle-python3.8","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.6","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-dev","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-minimal","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-stdlib","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-testsuite","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.7","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.7-dev","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.7-minimal","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.7-stdlib","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.7-testsuite","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8-dev","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8-minimal","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8-stdlib","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8-testsuite","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-dev","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-doc","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-examples","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-minimal","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-venv","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.7","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-dev","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-doc","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-examples","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-minimal","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-venv","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.8","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.8-dev","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.8-examples","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.8-minimal","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.8-venv","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"python3.8","version":"3.8.10-0ubuntu1~20.04.10","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm2","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.8","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"idle-python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.8-dev","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.8-minimal","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.8-stdlib","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.8-testsuite","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.9","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-dev","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-minimal","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-stdlib","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-testsuite","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.8","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-dev","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-doc","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-examples","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-full","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-minimal","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-venv","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-dev","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-doc","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-examples","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-full","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-minimal","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-venv","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"python3.10","version":"3.10.12-1~22.04.4","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.11","version":"3.11.0~rc1-1~22.04.1~esm1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.10","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"idle-python3.11","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.10","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.10-dev","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.10-minimal","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.10-stdlib","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.10-testsuite","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.11","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.11-dev","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.11-minimal","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.11-stdlib","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.11-testsuite","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.10","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-dev","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-doc","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-examples","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-full","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-minimal","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-nopie","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-venv","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.11","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-dev","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-doc","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-examples","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-full","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-minimal","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-nopie","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-venv","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"}],"mantic":[{"name":"python3.11","version":"3.11.6-3ubuntu0.1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.12","version":"3.12.0-1ubuntu0.1","description":"Interactive high-level object-oriented language (version 3.12)","is_source":true},{"name":"idle-python3.11","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"idle-python3.12","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.11","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.11-dev","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.11-minimal","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.11-stdlib","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.11-testsuite","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.12","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.12-dev","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.12-minimal","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.12-stdlib","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.12-testsuite","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.11","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-dev","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-doc","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-examples","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-full","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-minimal","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-nopie","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-venv","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.12","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-dev","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-doc","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-examples","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-full","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-minimal","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-nopie","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-venv","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"}],"trusty":[{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.5","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-dev","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-minimal","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-stdlib","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-testsuite","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-dev","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-doc","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-examples","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-minimal","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-venv","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm13","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-dev","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-minimal","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-stdlib","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-testsuite","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-dev","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-doc","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-examples","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-minimal","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-venv","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2021-29921","CVE-2021-3733","CVE-2022-48560","CVE-2019-5010","CVE-2020-26116","CVE-2019-16056","CVE-2019-16935","CVE-2018-14647","CVE-2018-20406","CVE-2019-10160","CVE-2015-20107","CVE-2020-27619","CVE-2022-48564","CVE-2021-4189","CVE-2022-0391","CVE-2019-17514","CVE-2019-9740","CVE-2023-6507","CVE-2019-18348","CVE-2018-20852","CVE-2018-1061","CVE-2019-9674","CVE-2019-9636","CVE-2020-8492","CVE-2019-20907","CVE-2019-9947","CVE-2023-41105","CVE-2023-6597","CVE-2021-3737","CVE-2022-48566","CVE-2018-1060","CVE-2022-45061","CVE-2023-40217","CVE-2022-42919","CVE-2022-48565","CVE-2024-0450","CVE-2019-9948","CVE-2020-14422","CVE-2021-3426","CVE-2021-3177","CVE-2023-24329"]},{"id":"USN-7180-1","title":"Python vulnerabilities","summary":"Several security issues were fixed in Python 2.7.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2025-01-06T11:34:16.201517","description":"It was discovered that Python incorrectly handled certain scripts.\nAn attacker could possibly use this issue to execute arbitrary code\nor cause a crash. (CVE-2022-48560)\n\nIt was discovered that Python did not properly handle XML entity\ndeclarations in plist files. An attacker could possibly use this\nvulnerability to perform an XML External Entity (XXE) injection,\nresulting in a denial of service or information disclosure.\n(CVE-2022-48565)\n\nIt was discovered that Python did not properly provide constant-time\nprocessing for a crypto operation. An attacker could possibly use this\nissue to perform a timing attack and recover sensitive information.\n(CVE-2022-48566)\n\nIt was discovered that Python incorrectly handled certain inputs. If a\nuser or an automated system were tricked into running a specially\ncrafted input, a remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2023-24329)\n\nIt was discovered that Python instances of ssl.SSLSocket were vulnerable\nto a bypass of the TLS handshake. An attacker could possibly use this\nissue to cause applications to treat unauthenticated received data before\nTLS handshake as authenticated data after TLS handshake.\n(CVE-2023-40217)\n","is_hidden":false,"release_packages":{"focal":[{"name":"python2.7","version":"2.7.18-1~20.04.7","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python2.7","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"libpython2.7","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"libpython2.7-dev","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"libpython2.7-minimal","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"libpython2.7-stdlib","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"libpython2.7-testsuite","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"python2.7","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"python2.7-dev","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"python2.7-doc","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"python2.7-examples","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"},{"name":"python2.7-minimal","version":"2.7.18-1~20.04.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.7","pocket":"security"}],"jammy":[{"name":"python2.7","version":"2.7.18-13ubuntu1.5","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python2.7","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"libpython2.7","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"libpython2.7-dev","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"libpython2.7-minimal","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"libpython2.7-stdlib","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"libpython2.7-testsuite","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"python2.7","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"python2.7-dev","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"python2.7-doc","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"python2.7-examples","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"},{"name":"python2.7-minimal","version":"2.7.18-13ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-13ubuntu1.5","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-48560","CVE-2023-24329","CVE-2022-48566","CVE-2023-40217","CVE-2022-48565"]}]},{"id":"CVE-2023-23586","published":"2023-02-17T13:15:00","updated_at":"2026-07-04T08:03:55.862651+00:00","description":"\nDue to a vulnerability in the io_uring subsystem, it is possible to leak\nkernel memory information to the user process. timens_install calls\ncurrent_is_single_threaded to determine if the current process is\nsingle-threaded, but this call does not consider io_uring's io_worker\nthreads, thus it is possible to insert a time namespace's vvar page to\nprocess's memory space via a page fault. When this time namespace is\ndestroyed, the vvar page is also freed, but not removed from the process'\nmemory, and a next page allocated by the kernel will be still available\nfrom the user-space process and can leak memory contents via this\n(read-only) use-after-free vulnerability. We recommend upgrading past\nversion 5.10.161 or commit  788d0824269bef539fe31a785b1517882eafed93\nhttps://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"possibly a dupe of CVE-2023-0240"},{"author":"sbeattie","note":"according to linuxkernelcves, fixed by 4379bf8bd70b\n(\"io_uring: remove io_identity\"), but also they ave the CVE marked\nas rejected / withdrawn. This would also indicate it is a likely\nduplicate of CVE-2022-1786."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://kernel.dance/#788d0824269bef539fe31a785b1517882eafed93","https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring?h=linux-5.10.y&id=788d0824269bef539fe31a785b1517882eafed93","https://www.linuxkernelcves.com/cves/CVE-2022-20424","https://www.cve.org/CVERecord?id=CVE-2023-23586"],"bugs":[""],"patches":{"linux":["break-fix: 500a373d731ac506612db12631ec21295c1ff360 4379bf8bd70b5de6bba7d53015b0c36c57a634ee|29f077d070519a88a793fbc70f1e6484dc6d9e35"],"linux-hwe":[],"linux-hwe-5.4":[],"linux-hwe-5.8":[],"linux-hwe-5.11":[],"linux-hwe-5.13":[],"linux-hwe-5.15":[],"linux-hwe-5.19":[],"linux-hwe-edge":[],"linux-lts-xenial":[],"linux-kvm":[],"linux-aws":[],"linux-aws-5.0":[],"linux-aws-5.3":[],"linux-aws-5.4":[],"linux-aws-5.8":[],"linux-aws-5.11":[],"linux-aws-5.13":[],"linux-aws-5.15":[],"linux-aws-hwe":[],"linux-azure":[],"linux-azure-4.15":[],"linux-azure-5.3":[],"linux-azure-5.4":[],"linux-azure-5.8":[],"linux-azure-5.11":[],"linux-azure-5.13":[],"linux-azure-5.15":[],"linux-azure-fde":[],"linux-azure-fde-5.15":[],"linux-bluefield":[],"linux-dell300x":[],"linux-azure-edge":[],"linux-fips":[],"linux-gcp":[],"linux-gcp-4.15":[],"linux-gcp-5.3":[],"linux-gcp-5.4":[],"linux-gcp-5.8":[],"linux-gcp-5.11":[],"linux-gcp-5.13":[],"linux-gcp-5.15":[],"linux-gke":[],"linux-gke-4.15":[],"linux-gke-5.0":[],"linux-gke-5.3":[],"linux-gke-5.4":[],"linux-gke-5.15":[],"linux-gkeop":[],"linux-gkeop-5.4":[],"linux-ibm":[],"linux-ibm-5.4":[],"linux-intel-5.13":[],"linux-intel-iotg":[],"linux-intel-iotg-5.15":[],"linux-lowlatency":[],"linux-lowlatency-hwe-5.15":[],"linux-oracle":[],"linux-oracle-5.0":[],"linux-oracle-5.3":[],"linux-oracle-5.4":[],"linux-oracle-5.8":[],"linux-oracle-5.11":[],"linux-oracle-5.13":[],"linux-oracle-5.15":[],"linux-oem":[],"linux-oem-5.6":[],"linux-oem-5.10":[],"linux-oem-5.13":[],"linux-oem-5.14":[],"linux-oem-5.17":[],"linux-oem-6.0":[],"linux-oem-6.1":[],"linux-oem-osp1":[],"linux-raspi":[],"linux-raspi2":[],"linux-raspi2-5.3":[],"linux-raspi-5.4":[],"linux-riscv":[],"linux-riscv-5.8":[],"linux-riscv-5.11":[],"linux-snapdragon":[],"linux-iot":[],"linux-riscv-5.15":[],"linux-azure-fde-5.19":[],"linux-xilinx-zynqmp":[],"linux-nvidia":[],"linux-gkeop-5.15":[],"linux-aws-5.19":[],"linux-gcp-5.19":[],"linux-riscv-5.19":[],"linux-allwinner":[],"linux-allwinner-5.19":[],"linux-starfive":[],"linux-starfive-5.19":[],"linux-aws-6.2":[],"linux-hwe-6.2":[],"linux-lowlatency-hwe-6.2":[],"linux-ibm-5.15":[],"linux-gcp-6.2":[],"linux-azure-6.2":[],"linux-azure-fde-6.2":[],"linux-nvidia-6.2":[],"linux-starfive-6.2":[],"linux-laptop":[],"linux-oem-6.5":[],"linux-hwe-6.5":[],"linux-lowlatency-hwe-6.5":[],"linux-riscv-6.5":[],"linux-starfive-6.5":[],"linux-aws-6.5":[],"linux-azure-6.5":[],"linux-gcp-6.5":[],"linux-oracle-6.5":[],"linux-nvidia-6.5":[],"linux-aws-fips":[],"linux-azure-fips":[],"linux-gcp-fips":[],"linux-oem-6.8":[],"linux-intel":[]},"tags":{"linux":["binary-exclude:linux-libc-dev"]},"packages":[{"name":"linux","source":"https://ubuntu.com/security/cve?package=linux","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux","debian":"https://tracker.debian.org/pkg/linux","statuses":[{"release_codename":"lunar","status":"not-affected","description":"5.19.0-21.21","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.13.0-16.19","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-9.12","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.13.0-19.19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-25.25","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"3.11.0-12.19","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-2.16","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.2.0-20.20","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-9.9","component":null,"pocket":"security"}]},{"name":"linux-allwinner","source":"https://ubuntu.com/security/cve?package=linux-allwinner","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-allwinner","debian":"https://tracker.debian.org/pkg/linux-allwinner","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-allwinner-5.19","source":"https://ubuntu.com/security/cve?package=linux-allwinner-5.19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-allwinner-5.19","debian":"https://tracker.debian.org/pkg/linux-allwinner-5.19","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-aws","source":"https://ubuntu.com/security/cve?package=linux-aws","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws","debian":"https://tracker.debian.org/pkg/linux-aws","statuses":[{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1009.9","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1001.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1005.5","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.13.0-1005.6","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-1004.6","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"4.4.0-1002.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1001.10","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.2.0-1003.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-1008.8","component":null,"pocket":"security"}]},{"name":"linux-aws-5.0","source":"https://ubuntu.com/security/cve?package=linux-aws-5.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.0","debian":"https://tracker.debian.org/pkg/linux-aws-5.0","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"}]},{"name":"linux-aws-5.11","source":"https://ubuntu.com/security/cve?package=linux-aws-5.11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.11","debian":"https://tracker.debian.org/pkg/linux-aws-5.11","statuses":[{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-aws-5.13]","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-aws-5.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-aws-5.13","source":"https://ubuntu.com/security/cve?package=linux-aws-5.13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.13","debian":"https://tracker.debian.org/pkg/linux-aws-5.13","statuses":[{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-aws-5.15]","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-aws-5.15","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-aws-5.15","source":"https://ubuntu.com/security/cve?package=linux-aws-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.15","debian":"https://tracker.debian.org/pkg/linux-aws-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1014.18~20.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"}]},{"name":"linux-aws-5.19","source":"https://ubuntu.com/security/cve?package=linux-aws-5.19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.19","debian":"https://tracker.debian.org/pkg/linux-aws-5.19","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-aws-5.3","source":"https://ubuntu.com/security/cve?package=linux-aws-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.3","debian":"https://tracker.debian.org/pkg/linux-aws-5.3","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-aws-5.4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-aws-5.4","source":"https://ubuntu.com/security/cve?package=linux-aws-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.4","debian":"https://tracker.debian.org/pkg/linux-aws-5.4","statuses":[{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1018.18~18.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"}]},{"name":"linux-aws-5.8","source":"https://ubuntu.com/security/cve?package=linux-aws-5.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-5.8","debian":"https://tracker.debian.org/pkg/linux-aws-5.8","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-aws-5.11","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-aws-5.11]","component":null,"pocket":"security"}]},{"name":"linux-aws-6.2","source":"https://ubuntu.com/security/cve?package=linux-aws-6.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-6.2","debian":"https://tracker.debian.org/pkg/linux-aws-6.2","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.2.0-1005.5~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-aws-6.5","source":"https://ubuntu.com/security/cve?package=linux-aws-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-6.5","debian":"https://tracker.debian.org/pkg/linux-aws-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-1008.8~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-aws-fips","source":"https://ubuntu.com/security/cve?package=linux-aws-fips","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-fips","debian":"https://tracker.debian.org/pkg/linux-aws-fips","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.15.0-2000.4","component":null,"pocket":"fips"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1021.21+fips2","component":null,"pocket":"fips"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"}]},{"name":"linux-aws-hwe","source":"https://ubuntu.com/security/cve?package=linux-aws-hwe","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws-hwe","debian":"https://tracker.debian.org/pkg/linux-aws-hwe","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.15.0-1030.31~16.04.1","component":null,"pocket":"security"}]},{"name":"linux-azure","source":"https://ubuntu.com/security/cve?package=linux-azure","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure","debian":"https://tracker.debian.org/pkg/linux-azure","statuses":[{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1008.8","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1006.6","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.13.0-1006.7","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-1003.4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"4.15.0-1023.24~14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.11.0-1009.9","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.2.0-1003.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-1007.7","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-azure-4.15","source":"https://ubuntu.com/security/cve?package=linux-azure-4.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-4.15","debian":"https://tracker.debian.org/pkg/linux-azure-4.15","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1082.92","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-5.11","source":"https://ubuntu.com/security/cve?package=linux-azure-5.11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-5.11","debian":"https://tracker.debian.org/pkg/linux-azure-5.11","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-azure-5.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-azure-5.13]","component":null,"pocket":"security"}]},{"name":"linux-azure-5.13","source":"https://ubuntu.com/security/cve?package=linux-azure-5.13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-5.13","debian":"https://tracker.debian.org/pkg/linux-azure-5.13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-azure-5.15","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-azure-5.15]","component":null,"pocket":"security"}]},{"name":"linux-azure-5.15","source":"https://ubuntu.com/security/cve?package=linux-azure-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-5.15","debian":"https://tracker.debian.org/pkg/linux-azure-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1007.8~20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-5.3","source":"https://ubuntu.com/security/cve?package=linux-azure-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-5.3","debian":"https://tracker.debian.org/pkg/linux-azure-5.3","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-azure-5.4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-azure-5.4","source":"https://ubuntu.com/security/cve?package=linux-azure-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-5.4","debian":"https://tracker.debian.org/pkg/linux-azure-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1020.20~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-5.8","source":"https://ubuntu.com/security/cve?package=linux-azure-5.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-5.8","debian":"https://tracker.debian.org/pkg/linux-azure-5.8","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-azure-5.11","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-azure-5.11]","component":null,"pocket":"security"}]},{"name":"linux-azure-6.2","source":"https://ubuntu.com/security/cve?package=linux-azure-6.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-6.2","debian":"https://tracker.debian.org/pkg/linux-azure-6.2","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.2.0-1005.5~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-6.5","source":"https://ubuntu.com/security/cve?package=linux-azure-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-6.5","debian":"https://tracker.debian.org/pkg/linux-azure-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-1007.7~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-edge","source":"https://ubuntu.com/security/cve?package=linux-azure-edge","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-edge","debian":"https://tracker.debian.org/pkg/linux-azure-edge","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-fde","source":"https://ubuntu.com/security/cve?package=linux-azure-fde","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-fde","debian":"https://tracker.debian.org/pkg/linux-azure-fde","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1006.6","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-1019.24.1","component":null,"pocket":"security"}]},{"name":"linux-azure-fde-5.15","source":"https://ubuntu.com/security/cve?package=linux-azure-fde-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-fde-5.15","debian":"https://tracker.debian.org/pkg/linux-azure-fde-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1019.24~20.04.1.1","component":null,"pocket":"security"}]},{"name":"linux-azure-fde-5.19","source":"https://ubuntu.com/security/cve?package=linux-azure-fde-5.19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-fde-5.19","debian":"https://tracker.debian.org/pkg/linux-azure-fde-5.19","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by linux-azure-fde-6.2, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-fde-6.2","source":"https://ubuntu.com/security/cve?package=linux-azure-fde-6.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-fde-6.2","debian":"https://tracker.debian.org/pkg/linux-azure-fde-6.2","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.2.0-1005.5~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-azure-fips","source":"https://ubuntu.com/security/cve?package=linux-azure-fips","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-azure-fips","debian":"https://tracker.debian.org/pkg/linux-azure-fips","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1002.2","component":null,"pocket":"fips"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1022.22+fips1","component":null,"pocket":"fips"}]},{"name":"linux-bluefield","source":"https://ubuntu.com/security/cve?package=linux-bluefield","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-bluefield","debian":"https://tracker.debian.org/pkg/linux-bluefield","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1007.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-1011.13","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-dell300x","source":"https://ubuntu.com/security/cve?package=linux-dell300x","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-dell300x","debian":"https://tracker.debian.org/pkg/linux-dell300x","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1005.8","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-fips","source":"https://ubuntu.com/security/cve?package=linux-fips","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-fips","debian":"https://tracker.debian.org/pkg/linux-fips","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1011.12","component":null,"pocket":"fips"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1001.1","component":null,"pocket":"fips"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1007.8","component":null,"pocket":"fips"}]},{"name":"linux-gcp","source":"https://ubuntu.com/security/cve?package=linux-gcp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp","debian":"https://tracker.debian.org/pkg/linux-gcp","statuses":[{"release_codename":"focal","status":"not-affected","description":"5.4.0-1005.5","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.13.0-1005.6","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-1003.6","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1008.8","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.10.0-1004.4","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.2.0-1005.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-1007.7","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-gcp-4.15","source":"https://ubuntu.com/security/cve?package=linux-gcp-4.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-4.15","debian":"https://tracker.debian.org/pkg/linux-gcp-4.15","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1071.81","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.11","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.11","debian":"https://tracker.debian.org/pkg/linux-gcp-5.11","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-gcp-5.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-gcp-5.13]","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.13","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.13","debian":"https://tracker.debian.org/pkg/linux-gcp-5.13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-gcp-5.15","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-gcp-5.15]","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.15","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.15","debian":"https://tracker.debian.org/pkg/linux-gcp-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1006.9~20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.19","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.19","debian":"https://tracker.debian.org/pkg/linux-gcp-5.19","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.3","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.3","debian":"https://tracker.debian.org/pkg/linux-gcp-5.3","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-gcp-5.4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.4","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.4","debian":"https://tracker.debian.org/pkg/linux-gcp-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1019.19~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gcp-5.8","source":"https://ubuntu.com/security/cve?package=linux-gcp-5.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-5.8","debian":"https://tracker.debian.org/pkg/linux-gcp-5.8","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-gcp-5.11","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-gcp-5.11]","component":null,"pocket":"security"}]},{"name":"linux-gcp-6.2","source":"https://ubuntu.com/security/cve?package=linux-gcp-6.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-6.2","debian":"https://tracker.debian.org/pkg/linux-gcp-6.2","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.2.0-1009.9~22.04.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gcp-6.5","source":"https://ubuntu.com/security/cve?package=linux-gcp-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-6.5","debian":"https://tracker.debian.org/pkg/linux-gcp-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-1010.10~22.04.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"}]},{"name":"linux-gcp-fips","source":"https://ubuntu.com/security/cve?package=linux-gcp-fips","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gcp-fips","debian":"https://tracker.debian.org/pkg/linux-gcp-fips","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1001.1","component":null,"pocket":"fips"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1021.21+fips1","component":null,"pocket":"fips"}]},{"name":"linux-gke","source":"https://ubuntu.com/security/cve?package=linux-gke","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke","debian":"https://tracker.debian.org/pkg/linux-gke","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1033.35","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-1002.2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.8.0-1003.5","component":null,"pocket":"security"}]},{"name":"linux-gke-4.15","source":"https://ubuntu.com/security/cve?package=linux-gke-4.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke-4.15","debian":"https://tracker.debian.org/pkg/linux-gke-4.15","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-gke-5.0","source":"https://ubuntu.com/security/cve?package=linux-gke-5.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke-5.0","debian":"https://tracker.debian.org/pkg/linux-gke-5.0","statuses":[{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gke-5.15","source":"https://ubuntu.com/security/cve?package=linux-gke-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke-5.15","debian":"https://tracker.debian.org/pkg/linux-gke-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1011.14~20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gke-5.3","source":"https://ubuntu.com/security/cve?package=linux-gke-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke-5.3","debian":"https://tracker.debian.org/pkg/linux-gke-5.3","statuses":[{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-gke-5.4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gke-5.4","source":"https://ubuntu.com/security/cve?package=linux-gke-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke-5.4","debian":"https://tracker.debian.org/pkg/linux-gke-5.4","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-gkeop","source":"https://ubuntu.com/security/cve?package=linux-gkeop","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gkeop","debian":"https://tracker.debian.org/pkg/linux-gkeop","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1008.9","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-1001.2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gkeop-5.15","source":"https://ubuntu.com/security/cve?package=linux-gkeop-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gkeop-5.15","debian":"https://tracker.debian.org/pkg/linux-gkeop-5.15","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1003.5~20.04.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-gkeop-5.4","source":"https://ubuntu.com/security/cve?package=linux-gkeop-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gkeop-5.4","debian":"https://tracker.debian.org/pkg/linux-gkeop-5.4","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-hwe","source":"https://ubuntu.com/security/cve?package=linux-hwe","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe","debian":"https://tracker.debian.org/pkg/linux-hwe","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.8.0-39.42~16.04.1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-hwe-5.11","source":"https://ubuntu.com/security/cve?package=linux-hwe-5.11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-5.11","debian":"https://tracker.debian.org/pkg/linux-hwe-5.11","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-hwe-5.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-hwe-5.13]","component":null,"pocket":"security"}]},{"name":"linux-hwe-5.13","source":"https://ubuntu.com/security/cve?package=linux-hwe-5.13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-5.13","debian":"https://tracker.debian.org/pkg/linux-hwe-5.13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-hwe-5.15","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-hwe-5.15]","component":null,"pocket":"security"}]},{"name":"linux-hwe-5.15","source":"https://ubuntu.com/security/cve?package=linux-hwe-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-5.15","debian":"https://tracker.debian.org/pkg/linux-hwe-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-33.34~20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-hwe-5.19","source":"https://ubuntu.com/security/cve?package=linux-hwe-5.19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-5.19","debian":"https://tracker.debian.org/pkg/linux-hwe-5.19","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.19.0-28.29~22.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-hwe-5.4","source":"https://ubuntu.com/security/cve?package=linux-hwe-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-5.4","debian":"https://tracker.debian.org/pkg/linux-hwe-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-37.41~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-hwe-5.8","source":"https://ubuntu.com/security/cve?package=linux-hwe-5.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-5.8","debian":"https://tracker.debian.org/pkg/linux-hwe-5.8","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-hwe-5.11","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-hwe-5.11]","component":null,"pocket":"security"}]},{"name":"linux-hwe-6.2","source":"https://ubuntu.com/security/cve?package=linux-hwe-6.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-6.2","debian":"https://tracker.debian.org/pkg/linux-hwe-6.2","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.2.0-25.25~22.04.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-hwe-6.5","source":"https://ubuntu.com/security/cve?package=linux-hwe-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-6.5","debian":"https://tracker.debian.org/pkg/linux-hwe-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-14.14~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-hwe-edge","source":"https://ubuntu.com/security/cve?package=linux-hwe-edge","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-edge","debian":"https://tracker.debian.org/pkg/linux-hwe-edge","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-ibm","source":"https://ubuntu.com/security/cve?package=linux-ibm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-ibm","debian":"https://tracker.debian.org/pkg/linux-ibm","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1003.4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-1002.2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-1002.2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1008.8","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"5.19.0-1008.8","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-1009.9","component":null,"pocket":"security"}]},{"name":"linux-ibm-5.15","source":"https://ubuntu.com/security/cve?package=linux-ibm-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-ibm-5.15","debian":"https://tracker.debian.org/pkg/linux-ibm-5.15","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1033.36~20.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-ibm-5.4","source":"https://ubuntu.com/security/cve?package=linux-ibm-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-ibm-5.4","debian":"https://tracker.debian.org/pkg/linux-ibm-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1010.11~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-intel","source":"https://ubuntu.com/security/cve?package=linux-intel","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-intel","debian":"https://tracker.debian.org/pkg/linux-intel","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.8.0-1001.6","component":null,"pocket":"security"}]},{"name":"linux-intel-5.13","source":"https://ubuntu.com/security/cve?package=linux-intel-5.13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-intel-5.13","debian":"https://tracker.debian.org/pkg/linux-intel-5.13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of kernel support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-intel-iotg","source":"https://ubuntu.com/security/cve?package=linux-intel-iotg","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-intel-iotg","debian":"https://tracker.debian.org/pkg/linux-intel-iotg","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-1004.6","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-intel-iotg-5.15","source":"https://ubuntu.com/security/cve?package=linux-intel-iotg-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-intel-iotg-5.15","debian":"https://tracker.debian.org/pkg/linux-intel-iotg-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1003.5~20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-iot","source":"https://ubuntu.com/security/cve?package=linux-iot","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-iot","debian":"https://tracker.debian.org/pkg/linux-iot","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1001.3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-kvm","source":"https://ubuntu.com/security/cve?package=linux-kvm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-kvm","debian":"https://tracker.debian.org/pkg/linux-kvm","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1002.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1004.4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.13.0-1004.4","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-1004.4","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1008.8","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1004.9","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-laptop","source":"https://ubuntu.com/security/cve?package=linux-laptop","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-laptop","debian":"https://tracker.debian.org/pkg/linux-laptop","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.5.0-1003.6","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lowlatency","source":"https://ubuntu.com/security/cve?package=linux-lowlatency","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lowlatency","debian":"https://tracker.debian.org/pkg/linux-lowlatency","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-22.22","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-24.24","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1007.7","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.2.0-1003.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-9.9.1","component":null,"pocket":"security"}]},{"name":"linux-lowlatency-hwe-5.15","source":"https://ubuntu.com/security/cve?package=linux-lowlatency-hwe-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lowlatency-hwe-5.15","debian":"https://tracker.debian.org/pkg/linux-lowlatency-hwe-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-33.34~20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lowlatency-hwe-6.2","source":"https://ubuntu.com/security/cve?package=linux-lowlatency-hwe-6.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lowlatency-hwe-6.2","debian":"https://tracker.debian.org/pkg/linux-lowlatency-hwe-6.2","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.2.0-1008.8~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lowlatency-hwe-6.5","source":"https://ubuntu.com/security/cve?package=linux-lowlatency-hwe-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lowlatency-hwe-6.5","debian":"https://tracker.debian.org/pkg/linux-lowlatency-hwe-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-14.14.1~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lts-xenial","source":"https://ubuntu.com/security/cve?package=linux-lts-xenial","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-xenial","debian":"https://tracker.debian.org/pkg/linux-lts-xenial","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"4.4.0-13.29~14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-nvidia","source":"https://ubuntu.com/security/cve?package=linux-nvidia","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-nvidia","debian":"https://tracker.debian.org/pkg/linux-nvidia","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-1005.5","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.8.0-1007.7","component":null,"pocket":"security"}]},{"name":"linux-nvidia-6.2","source":"https://ubuntu.com/security/cve?package=linux-nvidia-6.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-nvidia-6.2","debian":"https://tracker.debian.org/pkg/linux-nvidia-6.2","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.2.0-1003.3~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-nvidia-6.5","source":"https://ubuntu.com/security/cve?package=linux-nvidia-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-nvidia-6.5","debian":"https://tracker.debian.org/pkg/linux-nvidia-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-1004.4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oem","source":"https://ubuntu.com/security/cve?package=linux-oem","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem","debian":"https://tracker.debian.org/pkg/linux-oem","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"linux-oem-5.10","source":"https://ubuntu.com/security/cve?package=linux-oem-5.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-5.10","debian":"https://tracker.debian.org/pkg/linux-oem-5.10","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-oem-5.13, was needs-triage]","component":null,"pocket":"security"}]},{"name":"linux-oem-5.13","source":"https://ubuntu.com/security/cve?package=linux-oem-5.13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-5.13","debian":"https://tracker.debian.org/pkg/linux-oem-5.13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-oem-5.14","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-oem-5.14]","component":null,"pocket":"security"}]},{"name":"linux-oem-5.14","source":"https://ubuntu.com/security/cve?package=linux-oem-5.14","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-5.14","debian":"https://tracker.debian.org/pkg/linux-oem-5.14","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.14.0-1004.4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oem-5.17","source":"https://ubuntu.com/security/cve?package=linux-oem-5.17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-5.17","debian":"https://tracker.debian.org/pkg/linux-oem-5.17","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.17.0-1003.3","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oem-5.6","source":"https://ubuntu.com/security/cve?package=linux-oem-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-5.6","debian":"https://tracker.debian.org/pkg/linux-oem-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-oem-5.10, was needs-triage]","component":null,"pocket":"security"}]},{"name":"linux-oem-6.0","source":"https://ubuntu.com/security/cve?package=linux-oem-6.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-6.0","debian":"https://tracker.debian.org/pkg/linux-oem-6.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.0.0-1006.6","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oem-6.1","source":"https://ubuntu.com/security/cve?package=linux-oem-6.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-6.1","debian":"https://tracker.debian.org/pkg/linux-oem-6.1","statuses":[{"release_codename":"jammy","status":"not-affected","description":"6.1.0-1004.4","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oem-6.5","source":"https://ubuntu.com/security/cve?package=linux-oem-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-6.5","debian":"https://tracker.debian.org/pkg/linux-oem-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-1003.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oem-6.8","source":"https://ubuntu.com/security/cve?package=linux-oem-6.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-6.8","debian":"https://tracker.debian.org/pkg/linux-oem-6.8","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.8.0-1003.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"}]},{"name":"linux-oem-osp1","source":"https://ubuntu.com/security/cve?package=linux-oem-osp1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oem-osp1","debian":"https://tracker.debian.org/pkg/linux-oem-osp1","statuses":[{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oracle","source":"https://ubuntu.com/security/cve?package=linux-oracle","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle","debian":"https://tracker.debian.org/pkg/linux-oracle","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.15.0-1007.9","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1005.5","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.13.0-1008.10","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-1002.4","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1008.8","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.15.0-1007.9~16.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.2.0-1003.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-1010.10","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.0","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.0","debian":"https://tracker.debian.org/pkg/linux-oracle-5.0","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.11","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.11","debian":"https://tracker.debian.org/pkg/linux-oracle-5.11","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-oracle-5.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-oracle-5.13]","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.13","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.13","debian":"https://tracker.debian.org/pkg/linux-oracle-5.13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-oracle-5.15, was needs-triage]","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.15","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.15","debian":"https://tracker.debian.org/pkg/linux-oracle-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1007.9~20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.3","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.3","debian":"https://tracker.debian.org/pkg/linux-oracle-5.3","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-oracle-5.4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.4","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.4","debian":"https://tracker.debian.org/pkg/linux-oracle-5.4","statuses":[{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1019.19~18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-oracle-5.8","source":"https://ubuntu.com/security/cve?package=linux-oracle-5.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-5.8","debian":"https://tracker.debian.org/pkg/linux-oracle-5.8","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-oracle-5.11","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-oracle-5.11]","component":null,"pocket":"security"}]},{"name":"linux-oracle-6.5","source":"https://ubuntu.com/security/cve?package=linux-oracle-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-oracle-6.5","debian":"https://tracker.debian.org/pkg/linux-oracle-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-1013.13~22.04.4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-raspi","source":"https://ubuntu.com/security/cve?package=linux-raspi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi","debian":"https://tracker.debian.org/pkg/linux-raspi","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1007.7","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.13.0-1008.9","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-1005.5","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1004.10","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.2.0-1004.5","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-1005.7","component":null,"pocket":"security"}]},{"name":"linux-raspi-5.4","source":"https://ubuntu.com/security/cve?package=linux-raspi-5.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi-5.4","debian":"https://tracker.debian.org/pkg/linux-raspi-5.4","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"5.4.0-1013.13~18.04.1","component":null,"pocket":"security"}]},{"name":"linux-raspi2","source":"https://ubuntu.com/security/cve?package=linux-raspi2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi2","debian":"https://tracker.debian.org/pkg/linux-raspi2","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"4.13.0-1005.5","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [replaced by linux-raspi]","component":null,"pocket":"security"}]},{"name":"linux-raspi2-5.3","source":"https://ubuntu.com/security/cve?package=linux-raspi2-5.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi2-5.3","debian":"https://tracker.debian.org/pkg/linux-raspi2-5.3","statuses":[{"release_codename":"bionic","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-raspi2-5.4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-riscv","source":"https://ubuntu.com/security/cve?package=linux-riscv","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-riscv","debian":"https://tracker.debian.org/pkg/linux-riscv","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"5.15.0-1007.7","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1004.4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.2.0-19.19.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"end of kernel support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.5.0-9.9.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-riscv-5.8]","component":null,"pocket":"security"}]},{"name":"linux-riscv-5.11","source":"https://ubuntu.com/security/cve?package=linux-riscv-5.11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-riscv-5.11","debian":"https://tracker.debian.org/pkg/linux-riscv-5.11","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-riscv-5.13","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-riscv-5.13]","component":null,"pocket":"security"}]},{"name":"linux-riscv-5.15","source":"https://ubuntu.com/security/cve?package=linux-riscv-5.15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-riscv-5.15","debian":"https://tracker.debian.org/pkg/linux-riscv-5.15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.15.0-1015.17~20.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-riscv-5.19","source":"https://ubuntu.com/security/cve?package=linux-riscv-5.19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-riscv-5.19","debian":"https://tracker.debian.org/pkg/linux-riscv-5.19","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-riscv-5.8","source":"https://ubuntu.com/security/cve?package=linux-riscv-5.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-riscv-5.8","debian":"https://tracker.debian.org/pkg/linux-riscv-5.8","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"superseded by linux-riscv-5.11","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by linux-riscv-5.11]","component":null,"pocket":"security"}]},{"name":"linux-riscv-6.5","source":"https://ubuntu.com/security/cve?package=linux-riscv-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-riscv-6.5","debian":"https://tracker.debian.org/pkg/linux-riscv-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-17.17.1.1~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-snapdragon","source":"https://ubuntu.com/security/cve?package=linux-snapdragon","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-snapdragon","debian":"https://tracker.debian.org/pkg/linux-snapdragon","statuses":[{"release_codename":"bionic","status":"not-affected","description":"4.4.0-1077.82","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"linux-starfive","source":"https://ubuntu.com/security/cve?package=linux-starfive","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-starfive","debian":"https://tracker.debian.org/pkg/linux-starfive","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"5.19.0-1003.4","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.5.0-1002.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-starfive-5.19","source":"https://ubuntu.com/security/cve?package=linux-starfive-5.19","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-starfive-5.19","debian":"https://tracker.debian.org/pkg/linux-starfive-5.19","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-starfive-6.2","source":"https://ubuntu.com/security/cve?package=linux-starfive-6.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-starfive-6.2","debian":"https://tracker.debian.org/pkg/linux-starfive-6.2","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.2.0-1006.7~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-starfive-6.5","source":"https://ubuntu.com/security/cve?package=linux-starfive-6.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-starfive-6.5","debian":"https://tracker.debian.org/pkg/linux-starfive-6.5","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.5.0-1007.8~22.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-xilinx-zynqmp","source":"https://ubuntu.com/security/cve?package=linux-xilinx-zynqmp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-xilinx-zynqmp","debian":"https://tracker.debian.org/pkg/linux-xilinx-zynqmp","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"5.4.0-1020.24","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"5.15.0-1022.26","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.12~rc1","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2023-20052","published":"2023-02-17T00:00:00","updated_at":"2025-08-04T19:42:55.871670+00:00","description":"\nOn Feb 15, 2023, the following vulnerability in the ClamAV scanning library\nwas disclosed:\n    A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and\nearlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an\nunauthenticated, remote attacker to access sensitive information on an\naffected device.\n    This vulnerability is due to enabling XML entity substitution that may\nresult in XML external entity injection. An attacker could exploit this\nvulnerability by submitting a crafted DMG file to be scanned by ClamAV on\nan affected device. A successful exploit could allow the attacker to leak\nbytes from any file that may be read by the ClamAV scanning process.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html","https://ubuntu.com/security/notices/USN-5887-1","https://www.cve.org/CVERecord?id=CVE-2023-20052"],"bugs":[""],"patches":{"clamav":[]},"tags":{},"packages":[{"name":"clamav","source":"https://ubuntu.com/security/cve?package=clamav","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=clamav","debian":"https://tracker.debian.org/pkg/clamav","statuses":[{"release_codename":"focal","status":"released","description":"0.103.8+dfsg-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"0.103.8+dfsg-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"0.103.8+dfsg-0ubuntu0.22.10.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"0.103.8+dfsg-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.103.8+dfsg-0ubuntu0.18.04.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5887-1"],"notices":[{"id":"USN-5887-1","title":"ClamAV vulnerabilities","summary":"Several security issues were fixed in ClamAV.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2023-02-27T08:32:47.535722","description":"Simon Scannell discovered that ClamAV incorrectly handled parsing\nHFS+ files. A remote attacker could possibly use this issue\nto cause ClamAV to crash, resulting in a denial of service,\nor execute arbitrary code. (CVE-2023-20032)\n\nSimon Scannell discovered that ClamAV incorrectly handled parsing\nDMG files. A remote attacker could possibly use this issue\nto expose sensitive information. (CVE-2023-20052)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"}],"bionic":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.18.04.1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"}],"kinetic":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.22.10.1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"}],"jammy":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.22.04.1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"}],"focal":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.20.04.1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"}],"xenial":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-20032","CVE-2023-20052"]}]},{"id":"CVE-2023-20032","published":"2023-02-17T00:00:00","updated_at":"2025-08-04T19:42:55.871670+00:00","description":"\nOn Feb 15, 2023, the following vulnerability in the ClamAV scanning library\nwas disclosed:\n    A vulnerability in the HFS+ partition file parser of ClamAV versions\n1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow\nan unauthenticated, remote attacker to execute arbitrary code.\n    This vulnerability is due to a missing buffer size check that may\nresult in a heap buffer overflow write. An attacker could exploit this\nvulnerability by submitting a crafted HFS+ partition file to be scanned by\nClamAV on an affected device. A successful exploit could allow the attacker\nto execute arbitrary code with the privileges of the ClamAV scanning\nprocess, or else crash the process, resulting in a denial of service (DoS)\ncondition.\n  For a description of this vulnerability, see the ClamAV blog\n[\"https://blog.clamav.net/\"].","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html","https://ubuntu.com/security/notices/USN-5887-1","https://www.cve.org/CVERecord?id=CVE-2023-20032"],"bugs":[""],"patches":{"clamav":[]},"tags":{},"packages":[{"name":"clamav","source":"https://ubuntu.com/security/cve?package=clamav","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=clamav","debian":"https://tracker.debian.org/pkg/clamav","statuses":[{"release_codename":"lunar","status":"released","description":"0.103.8+dfsg-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"0.103.8+dfsg-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"0.103.8+dfsg-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"0.103.8+dfsg-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"0.103.8+dfsg-0ubuntu0.22.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-5887-1"],"notices":[{"id":"USN-5887-1","title":"ClamAV vulnerabilities","summary":"Several security issues were fixed in ClamAV.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2023-02-27T08:32:47.535722","description":"Simon Scannell discovered that ClamAV incorrectly handled parsing\nHFS+ files. A remote attacker could possibly use this issue\nto cause ClamAV to crash, resulting in a denial of service,\nor execute arbitrary code. (CVE-2023-20032)\n\nSimon Scannell discovered that ClamAV incorrectly handled parsing\nDMG files. A remote attacker could possibly use this issue\nto expose sensitive information. (CVE-2023-20052)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"}],"bionic":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.18.04.1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.18.04.1","pocket":"security"}],"kinetic":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.22.10.1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.22.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.10.1","pocket":"security"}],"jammy":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.22.04.1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.22.04.1","pocket":"security"}],"focal":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.20.04.1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":"https://launchpad.net/ubuntu/+source/clamav/0.103.8+dfsg-0ubuntu0.20.04.1","pocket":"security"}],"xenial":[{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","description":"Anti-virus utility for Unix","is_source":true},{"name":"libclamav-dev","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-testfiles","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-base","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-daemon","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-docs","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-milter","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamav-freshclam","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"libclamav9","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"},{"name":"clamdscan","version":"0.103.8+dfsg-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/clamav","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-20032","CVE-2023-20052"]}]},{"id":"CVE-2023-0821","published":"2023-02-16T22:15:00","updated_at":"2025-08-26T18:57:09.138836+00:00","description":"\nHashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs\nusing a maliciously compressed artifact stanza source can cause excessive\ndisk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://discuss.hashicorp.com/t/hcsec-2023-05-nomad-client-vulnerable-to-decompression-bombs-in-artifact-block/50292","https://www.cve.org/CVERecord?id=CVE-2023-0821"],"bugs":[""],"patches":{"nomad":[]},"tags":{},"packages":[{"name":"nomad","source":"https://ubuntu.com/security/cve?package=nomad","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nomad","debian":"https://tracker.debian.org/pkg/nomad","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-43529","published":"2023-02-16T22:15:00","updated_at":"2025-08-25T23:42:39.569628+00:00","description":"\nThunderbird versions prior to 91.3.0 are vulnerable to the heap overflow\ndescribed in CVE-2021-43527 when processing S/MIME messages. Thunderbird\nversions 91.3.0 and later will not call the vulnerable code when processing\nS/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS\nsignatures.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.openwall.com/lists/oss-security/2021/12/01/6","https://www.cve.org/CVERecord?id=CVE-2021-43529"],"bugs":["https://bugzilla.mozilla.org/show_bug.cgi?id=1738501"],"patches":{"thunderbird":[]},"tags":{},"packages":[{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"bionic","status":"released","description":"1:91.5.0+build1-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1:91.5.0+build1-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"1:91.3.1+build1-0ubuntu0.21.10.2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:91.3.0-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-23980","published":"2023-02-16T22:15:00","updated_at":"2026-03-05T20:01:27.102796+00:00","description":"\nA mutation XSS affects users calling bleach.clean with all of: svg or math\nin the allowed tags p or br in allowed tags style, title, noscript, script,\ntextarea, noframes, iframe, or xmp in allowed tags the keyword argument\nstrip_comments=False Note: none of the above tags are in the default\nallowed tags and strip_comments defaults to True.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/mozilla/bleach/security/advisories/GHSA-vv2x-vrpj-qqpq","https://bugzilla.mozilla.org/show_bug.cgi?id=1689399","https://github.com/mozilla/bleach/commit/79b7a3c5e56a09d1d323a5006afa59b56162eb13","https://github.com/mozilla/bleach/commit/d398c89e54ced6b1039d3677689707456ba42dec","https://www.cve.org/CVERecord?id=CVE-2021-23980","https://ubuntu.com/security/notices/USN-8077-1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986251"],"patches":{"python-bleach":[]},"tags":{},"packages":[{"name":"python-bleach","source":"https://ubuntu.com/security/cve?package=python-bleach","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-bleach","debian":"https://tracker.debian.org/pkg/python-bleach","statuses":[{"release_codename":"jammy","status":"not-affected","description":"4.1.0-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.1.2-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"3.1.1-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"upstream","status":"released","description":"3.3.0-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.1.0-2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"6.1.0-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.4.2-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-8077-1"],"notices":[{"id":"USN-8077-1","title":"Bleach vulnerabilities","summary":"Several security issues were fixed in Bleach.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-05T16:04:13.464646","description":"It was discovered that Bleach did not properly sanitize URI attributes\ncontaining character entities. An attacker could possibly use this issue\nto construct a URI with a disallowed scheme that would bypass\nsanitization, leading to cross-site scripting. This issue only affected\nUbuntu 18.04 LTS. (CVE-2018-7753)\n\nYaniv Nizry discovered that Bleach was vulnerable to a mutation\ncross-site scripting issue when sanitizing HTML with the noscript tag\nand a raw tag in the allowed tags list. An attacker could possibly\nuse this issue to inject malicious content, leading to cross-site\nscripting. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-6802)\n\nYaniv Nizry discovered that Bleach was vulnerable to a mutation\ncross-site scripting issue when sanitizing HTML with RCDATA together\nwith svg or math tags in the allowed tags list. An attacker could\npossibly use this issue to inject malicious content, leading to\ncross-site scripting. (CVE-2020-6816)\n\nIt was discovered that Bleach incorrectly handled parsing of style\nattributes when sanitizing HTML. An attacker could possibly use this\nissue to perform a regular expression denial of service, leading to\nexcessive resource consumption. (CVE-2020-6817)\n\nYaniv Nizry and Michał Bentkowski discovered that Bleach was vulnerable\nto a mutation cross-site scripting issue when sanitizing HTML with\ncertain combinations of allowed tags. An attacker could possibly use\nthis issue to inject malicious content, leading to cross-site scripting.\n(CVE-2021-23980)","is_hidden":false,"release_packages":{"bionic":[{"name":"python-bleach","version":"2.1.2-1ubuntu0.1~esm1","description":"An allowed-list-based HTML sanitizing library that escapes or strips markup and attributes","is_source":true},{"name":"python-bleach","version":"2.1.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python-bleach-doc","version":"2.1.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python3-bleach","version":"2.1.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"python-bleach","version":"3.1.1-1ubuntu0.1~esm1","description":"An allowed-list-based HTML sanitizing library that escapes or strips markup and attributes","is_source":true},{"name":"python-bleach-doc","version":"3.1.1-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python3-bleach","version":"3.1.1-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"}],"xenial":[{"name":"python-bleach","version":"1.4.2-1ubuntu0.1~esm1","description":"An allowed-list-based HTML sanitizing library that escapes or strips markup and attributes","is_source":true},{"name":"python-bleach","version":"1.4.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python-bleach-doc","version":"1.4.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python3-bleach","version":"1.4.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2018-7753","CVE-2020-6817","CVE-2020-6802","CVE-2021-23980","CVE-2020-6816"]}]},{"id":"CVE-2020-6817","published":"2023-02-16T22:15:00","updated_at":"2026-03-05T20:01:27.102796+00:00","description":"\nbleach.clean behavior parsing style attributes could result in a regular\nexpression denial of service (ReDoS). Calls to bleach.clean with an allowed\ntag with an allowed style attribute are vulnerable to ReDoS. For example,\nbleach.clean(..., attributes={'a': ['style']}).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/mozilla/bleach/security/advisories/GHSA-vqhp-cxgc-6wmm","https://bugzilla.mozilla.org/show_bug.cgi?id=1623633","https://github.com/mozilla/bleach/commit/d6018f2539d271963c3e7f54f36ef11900363c69","https://github.com/mozilla/bleach/commit/6e74a5027b57055cdaeb040343d32934121392a7","https://www.cve.org/CVERecord?id=CVE-2020-6817","https://ubuntu.com/security/notices/USN-8077-1"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=955388"],"patches":{"python-bleach":[]},"tags":{},"packages":[{"name":"python-bleach","source":"https://ubuntu.com/security/cve?package=python-bleach","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-bleach","debian":"https://tracker.debian.org/pkg/python-bleach","statuses":[{"release_codename":"impish","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"3.1.1-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"hirsute","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"3.1.4-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.1.2-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"xenial","status":"released","description":"1.4.2-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-8077-1"],"notices":[{"id":"USN-8077-1","title":"Bleach vulnerabilities","summary":"Several security issues were fixed in Bleach.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-03-05T16:04:13.464646","description":"It was discovered that Bleach did not properly sanitize URI attributes\ncontaining character entities. An attacker could possibly use this issue\nto construct a URI with a disallowed scheme that would bypass\nsanitization, leading to cross-site scripting. This issue only affected\nUbuntu 18.04 LTS. (CVE-2018-7753)\n\nYaniv Nizry discovered that Bleach was vulnerable to a mutation\ncross-site scripting issue when sanitizing HTML with the noscript tag\nand a raw tag in the allowed tags list. An attacker could possibly\nuse this issue to inject malicious content, leading to cross-site\nscripting. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-6802)\n\nYaniv Nizry discovered that Bleach was vulnerable to a mutation\ncross-site scripting issue when sanitizing HTML with RCDATA together\nwith svg or math tags in the allowed tags list. An attacker could\npossibly use this issue to inject malicious content, leading to\ncross-site scripting. (CVE-2020-6816)\n\nIt was discovered that Bleach incorrectly handled parsing of style\nattributes when sanitizing HTML. An attacker could possibly use this\nissue to perform a regular expression denial of service, leading to\nexcessive resource consumption. (CVE-2020-6817)\n\nYaniv Nizry and Michał Bentkowski discovered that Bleach was vulnerable\nto a mutation cross-site scripting issue when sanitizing HTML with\ncertain combinations of allowed tags. An attacker could possibly use\nthis issue to inject malicious content, leading to cross-site scripting.\n(CVE-2021-23980)","is_hidden":false,"release_packages":{"bionic":[{"name":"python-bleach","version":"2.1.2-1ubuntu0.1~esm1","description":"An allowed-list-based HTML sanitizing library that escapes or strips markup and attributes","is_source":true},{"name":"python-bleach","version":"2.1.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python-bleach-doc","version":"2.1.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python3-bleach","version":"2.1.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"python-bleach","version":"3.1.1-1ubuntu0.1~esm1","description":"An allowed-list-based HTML sanitizing library that escapes or strips markup and attributes","is_source":true},{"name":"python-bleach-doc","version":"3.1.1-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python3-bleach","version":"3.1.1-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"}],"xenial":[{"name":"python-bleach","version":"1.4.2-1ubuntu0.1~esm1","description":"An allowed-list-based HTML sanitizing library that escapes or strips markup and attributes","is_source":true},{"name":"python-bleach","version":"1.4.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python-bleach-doc","version":"1.4.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"},{"name":"python3-bleach","version":"1.4.2-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-bleach","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2018-7753","CVE-2020-6817","CVE-2020-6802","CVE-2021-23980","CVE-2020-6816"]}]},{"id":"CVE-2020-12413","published":"2023-02-16T22:15:00","updated_at":"2025-08-25T23:18:32.550162+00:00","description":"\nThe Raccoon attack is a timing attack on DHE ciphersuites inherit in the\nTLS specification. To mitigate this vulnerability, Firefox disabled support\nfor DHE ciphersuites.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"nss doesn't reuse DHE keys, but does reuse ECDHE keys, which is\nnot problematic for the moment. See page 13 of\nhttps://raccoon-attack.com/RacoonAttack.pdf\nand the nss release notes for 3.17:\nhttps://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.17_release_notes\nSince 3.17 includes a way to disable ECDHE key reuse with the\nSSL_REUSE_SERVER_ECDHE_KEY option, marking this CVE as fixed in\nfixed in 3.17."}],"codename":null,"priority":"low","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://raccoon-attack.com/","https://www.cve.org/CVERecord?id=CVE-2020-12413"],"bugs":[""],"patches":{"nss":[]},"tags":{},"packages":[{"name":"nss","source":"https://ubuntu.com/security/cve?package=nss","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=nss","debian":"https://tracker.debian.org/pkg/nss","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"2:3.35-2ubuntu2.14","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2:3.49.1-1ubuntu1.7","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2:3.68-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2:3.68.2-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.17","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-17003","published":"2023-02-16T22:15:00","updated_at":"2025-08-25T23:07:44.818732+00:00","description":"\nScanning a QR code that contained a javascript: URL would have resulted in\nthe Javascript being executed.","ubuntu_description":"","notes":[{"author":"tyhicks","note":"mozjs contains a copy of the SpiderMonkey JavaScript engine"},{"author":"mdeslaur","note":"starting with Ubuntu 22.04, the firefox package is just a script\nthat installs the Firefox snap\nfirefox for ios"}],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2019-17003","https://www.cve.org/CVERecord?id=CVE-2019-17003"],"bugs":[""],"patches":{"firefox":[],"thunderbird":[],"mozjs38":[],"mozjs52":[],"mozjs68":[],"mozjs78":[],"mozjs91":[]},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs38","source":"https://ubuntu.com/security/cve?package=mozjs38","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs38","debian":"https://tracker.debian.org/pkg/mozjs38","statuses":[{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs52","source":"https://ubuntu.com/security/cve?package=mozjs52","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs52","debian":"https://tracker.debian.org/pkg/mozjs52","statuses":[{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs68","source":"https://ubuntu.com/security/cve?package=mozjs68","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs68","debian":"https://tracker.debian.org/pkg/mozjs68","statuses":[{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs78","source":"https://ubuntu.com/security/cve?package=mozjs78","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs78","debian":"https://tracker.debian.org/pkg/mozjs78","statuses":[{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs91","source":"https://ubuntu.com/security/cve?package=mozjs91","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs91","debian":"https://tracker.debian.org/pkg/mozjs91","statuses":[{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needed","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":35580,"limit":20,"total_results":79316}