{"cves":[{"id":"CVE-2022-31003","published":"2022-05-31T20:15:00","updated_at":"2025-08-25T23:54:17.197456+00:00","description":"\nSofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent\nlibrary. Prior to version 1.13.8, when parsing each line of a sdp message,\n`rest = record + 2` will access the memory behind `\\0` and cause an\nout-of-bounds write. An attacker can send a message with evil sdp to\nFreeSWITCH, causing a crash or more serious consequence, such as remote\ncode execution. Version 1.13.8 contains a patch for this issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/freeswitch/sofia-sip/commit/907f2ac0ee504c93ebfefd676b4632a3575908c9","https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8w5j-6g2j-pxcp","https://ubuntu.com/security/notices/USN-5932-1","https://www.cve.org/CVERecord?id=CVE-2022-31003"],"bugs":[""],"patches":{"sofia-sip":[]},"tags":{},"packages":[{"name":"sofia-sip","source":"https://ubuntu.com/security/cve?package=sofia-sip","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sofia-sip","debian":"https://tracker.debian.org/pkg/sofia-sip","statuses":[{"release_codename":"bionic","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.12.11+20110422.1+1e14eea~dfsg-3","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.12.11+20110422.1+1e14eea~dfsg-3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-5932-1"],"notices":[{"id":"USN-5932-1","title":"Sofia-SIP vulnerabilities","summary":"Several security issues were fixed in Sofia-SIP.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-03-07T14:34:13.256590","description":"It was discovered that Sofia-SIP incorrectly handled specially\ncrafted SDP packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service, or possibly execute arbitrary code.\nThis issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-31001, CVE-2022-31002, CVE-2022-31003)\n\nIt was discovered that Sofia-SIP incorrectly handled specially\ncrafted UDP packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service. (CVE-2022-47516)\n\nQiuhao Li discovered that Sofia-SIP incorrectly handled specially\ncrafted STUN packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service, or possibly execute arbitrary code.\n(CVE-2023-22741)\n","is_hidden":false,"release_packages":{"kinetic":[{"name":"sofia-sip","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"}],"jammy":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"}],"focal":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"}],"bionic":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"}],"xenial":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-47516","CVE-2022-31001","CVE-2023-22741","CVE-2022-31003","CVE-2022-31002"]}]},{"id":"CVE-2022-31001","published":"2022-05-31T20:15:00","updated_at":"2025-08-25T23:54:17.197456+00:00","description":"\nSofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent\nlibrary. Prior to version 1.13.8, an attacker can send a message with evil\nsdp to FreeSWITCH, which may cause crash. This type of crash may be caused\nby `#define MATCH(s, m) (strncmp(s, m, n = sizeof(m) - 1) == 0)`, which\nwill make `n` bigger and trigger out-of-bound access when\n`IS_NON_WS(s[n])`. Version 1.13.8 contains a patch for this issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/freeswitch/sofia-sip/commit/a99804b336d0e16d26ab7119d56184d2d7110a36","https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-79jq-hh82-cv9g","https://ubuntu.com/security/notices/USN-5932-1","https://www.cve.org/CVERecord?id=CVE-2022-31001"],"bugs":[""],"patches":{"sofia-sip":[]},"tags":{},"packages":[{"name":"sofia-sip","source":"https://ubuntu.com/security/cve?package=sofia-sip","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sofia-sip","debian":"https://tracker.debian.org/pkg/sofia-sip","statuses":[{"release_codename":"bionic","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.12.11+20110422.1+1e14eea~dfsg-3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.12.11+20110422.1+1e14eea~dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-5932-1"],"notices":[{"id":"USN-5932-1","title":"Sofia-SIP vulnerabilities","summary":"Several security issues were fixed in Sofia-SIP.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-03-07T14:34:13.256590","description":"It was discovered that Sofia-SIP incorrectly handled specially\ncrafted SDP packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service, or possibly execute arbitrary code.\nThis issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-31001, CVE-2022-31002, CVE-2022-31003)\n\nIt was discovered that Sofia-SIP incorrectly handled specially\ncrafted UDP packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service. (CVE-2022-47516)\n\nQiuhao Li discovered that Sofia-SIP incorrectly handled specially\ncrafted STUN packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service, or possibly execute arbitrary code.\n(CVE-2023-22741)\n","is_hidden":false,"release_packages":{"kinetic":[{"name":"sofia-sip","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"}],"jammy":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"}],"focal":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"}],"bionic":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"}],"xenial":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-47516","CVE-2022-31001","CVE-2023-22741","CVE-2022-31003","CVE-2022-31002"]}]},{"id":"CVE-2022-31002","published":"2022-05-31T19:15:00","updated_at":"2025-08-25T23:54:17.197456+00:00","description":"\nSofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent\nlibrary. Prior to version 1.13.8, an attacker can send a message with evil\nsdp to FreeSWITCH, which may cause a crash. This type of crash may be\ncaused by a URL ending with `%`. Version 1.13.8 contains a patch for this\nissue.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/freeswitch/sofia-sip/commit/51841eb53679434a386fb2dcbca925dcc48d58ba","https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-g3x6-p824-x6hm","https://ubuntu.com/security/notices/USN-5932-1","https://www.cve.org/CVERecord?id=CVE-2022-31002"],"bugs":[""],"patches":{"sofia-sip":[]},"tags":{},"packages":[{"name":"sofia-sip","source":"https://ubuntu.com/security/cve?package=sofia-sip","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sofia-sip","debian":"https://tracker.debian.org/pkg/sofia-sip","statuses":[{"release_codename":"bionic","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.12.11+20110422.1+1e14eea~dfsg-3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.12.11+20110422.1+1e14eea~dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-5932-1"],"notices":[{"id":"USN-5932-1","title":"Sofia-SIP vulnerabilities","summary":"Several security issues were fixed in Sofia-SIP.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-03-07T14:34:13.256590","description":"It was discovered that Sofia-SIP incorrectly handled specially\ncrafted SDP packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service, or possibly execute arbitrary code.\nThis issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-31001, CVE-2022-31002, CVE-2022-31003)\n\nIt was discovered that Sofia-SIP incorrectly handled specially\ncrafted UDP packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service. (CVE-2022-47516)\n\nQiuhao Li discovered that Sofia-SIP incorrectly handled specially\ncrafted STUN packets. A remote attacker could use this issue\nto cause applications using Sofia-SIP to crash, leading to\na denial of service, or possibly execute arbitrary code.\n(CVE-2023-22741)\n","is_hidden":false,"release_packages":{"kinetic":[{"name":"sofia-sip","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1+1e14eea~dfsg-3ubuntu0.1","pocket":"security"}],"jammy":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1","pocket":"security"}],"focal":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1","pocket":"security"}],"bionic":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":"https://launchpad.net/ubuntu/+source/sofia-sip/1.12.11+20110422.1-2.1+deb10u3build0.18.04.1","pocket":"security"}],"xenial":[{"name":"sofia-sip","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","description":"Sofia-SIP library development files","is_source":true},{"name":"sofia-sip-doc","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-glib3","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua0","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"sofia-sip-bin","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-glib-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"},{"name":"libsofia-sip-ua-dev","version":"1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sofia-sip","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-47516","CVE-2022-31001","CVE-2023-22741","CVE-2022-31003","CVE-2022-31002"]}]},{"id":"CVE-2022-30973","published":"2022-05-31T14:15:00","updated_at":"2025-07-11T07:51:11.853862+00:00","description":"\nWe failed to apply the fix for CVE-2022-30126 to the 1.x branch in the\n1.28.2 release. In Apache Tika, a regular expression in the StandardsText\nclass, used by the StandardsExtractingContentHandler could lead to a denial\nof service caused by backtracking on a specially crafted file. This only\naffects users who are running the StandardsExtractingContentHandler, which\nis a non-standard handler. This is fixed in 1.28.3.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://lists.apache.org/thread/gqvb5t4p7tmdpl0y5bdbf72pgxj04h7p","https://www.cve.org/CVERecord?id=CVE-2022-30973","https://ubuntu.com/security/notices/USN-7529-1"],"bugs":[""],"patches":{"tika":[]},"tags":{},"packages":[{"name":"tika","source":"https://ubuntu.com/security/cve?package=tika","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tika","debian":"https://tracker.debian.org/pkg/tika","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.22-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"jammy","status":"released","description":"1.22-2ubuntu0.22.04.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-7529-1"],"notices":[{"id":"USN-7529-1","title":"Apache Tika vulnerabilities","summary":"Several security issues were fixed in Apache Tika.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-05-23T13:52:50.718304","description":"It was discovered that Apache Tika can have an excessive memory usage by\nusing a crafted or corrupt PSD file. An attacker could possibly use this\nissue to cause a denial of service. This issue only affected Ubuntu\n20.04 LTS. (CVE-2020-1950, CVE-2020-1951)\n\nIt was discovered that Apache Tika incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-30126, CVE-2022-30973, CVE-2022-33879)","is_hidden":false,"release_packages":{"focal":[{"name":"tika","version":"1.22-1ubuntu0.1~esm1","description":"A content analysis toolkit","is_source":true},{"name":"libtika-java","version":"1.22-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tika","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"tika","version":"1.22-2ubuntu0.22.04.1~esm1","description":"A content analysis toolkit","is_source":true},{"name":"libtika-java","version":"1.22-2ubuntu0.22.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tika","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-30126","CVE-2020-1951","CVE-2022-30973","CVE-2022-33879","CVE-2020-1950"]}]},{"id":"CVE-2022-1942","published":"2022-05-31T14:15:00","updated_at":"2025-08-25T23:49:25.207556+00:00","description":"\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/67ca4d3b-9175-43c1-925c-72a7091bc071","https://github.com/vim/vim/commit/71223e2db87c2bf3b09aecb46266b56cda26191d (v8.2.5043)","https://github.com/vim/vim/commit/71223e2db87c2bf3b09aecb46266b56cda26191d","https://ubuntu.com/security/notices/USN-5507-1","https://ubuntu.com/security/notices/USN-5995-1","https://www.cve.org/CVERecord?id=CVE-2022-1942"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.12","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.13","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.5","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2:9.0.0242-1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm8","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm10","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-5507-1","USN-5995-1"],"notices":[{"id":"USN-5507-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-07-08T02:49:09.005963","description":"It was discovered that Vim incorrectly handled memory access. An attacker\ncould potentially use this issue to cause the program to crash, use unexpected\nvalues, or execute arbitrary code. (CVE-2022-1968)\n\nIt was discovered that Vim incorrectly handled memory access. An attacker\ncould potentially use this issue to cause the corruption of sensitive\ninformation, a crash, or arbitrary code execution.\n(CVE-2022-1897, CVE-2022-1942)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm10","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-1968","CVE-2022-1897","CVE-2022-1942"]},{"id":"USN-5995-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-04-04T08:58:38.806133","description":"It was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nand Ubuntu 22.04 LTS. (CVE-2022-0413, CVE-2022-1629, CVE-2022-1674,\nCVE-2022-1733, CVE-2022-1735, CVE-2022-1785, CVE-2022-1796, CVE-2022-1851,\nCVE-2022-1898, CVE-2022-1942, CVE-2022-1968, CVE-2022-2124, CVE-2022-2125,\nCVE-2022-2126, CVE-2022-2129, CVE-2022-2175, CVE-2022-2183, CVE-2022-2206,\nCVE-2022-2304, CVE-2022-2345, CVE-2022-2581)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1720, CVE-2022-2571, CVE-2022-2845, CVE-2022-2849,\nCVE-2022-2923)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-1927,\nCVE-2022-2344)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nand Ubuntu 22.10. (CVE-2022-2946)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-2980)\n","is_hidden":false,"release_packages":{"kinetic":[{"name":"vim","version":"2:9.0.0242-1ubuntu1.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"xxd","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.5","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.13","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"}],"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.12","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-1968","CVE-2022-2125","CVE-2022-2304","CVE-2022-2946","CVE-2022-1629","CVE-2022-0413","CVE-2022-1785","CVE-2022-2845","CVE-2022-1927","CVE-2022-2345","CVE-2022-2581","CVE-2022-2126","CVE-2022-1898","CVE-2022-1720","CVE-2022-1674","CVE-2022-2183","CVE-2022-2124","CVE-2022-2344","CVE-2022-1735","CVE-2022-1733","CVE-2022-2206","CVE-2022-2849","CVE-2022-2129","CVE-2022-2923","CVE-2022-1796","CVE-2022-2980","CVE-2022-1851","CVE-2022-2175","CVE-2022-1942","CVE-2022-2571"]}]},{"id":"CVE-2022-1934","published":"2022-05-31T03:15:00","updated_at":"2025-07-11T07:49:30.057251+00:00","description":"\nUse After Free in GitHub repository mruby/mruby prior to 3.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/99e6df06-b9f7-4c53-a722-6bb89fbfb51f/","https://github.com/mruby/mruby/commit/aa7f98dedb68d735a1665d3a289036c88b0c47ce","https://huntr.dev/bounties/99e6df06-b9f7-4c53-a722-6bb89fbfb51f","https://www.cve.org/CVERecord?id=CVE-2022-1934"],"bugs":[""],"patches":{"mruby":[]},"tags":{},"packages":[{"name":"mruby","source":"https://ubuntu.com/security/cve?package=mruby","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mruby","debian":"https://tracker.debian.org/pkg/mruby","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-26719","published":"2022-05-30T00:00:00","updated_at":"2025-08-25T23:52:36.089078+00:00","description":"\nA memory corruption issue was addressed with improved state management.\nThis issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6,\nmacOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web\ncontent may lead to arbitrary code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://webkitgtk.org/security/WSA-2022-0005.html","https://ubuntu.com/security/notices/USN-5457-1","https://www.cve.org/CVERecord?id=CVE-2022-26719"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"focal","status":"released","description":"2.36.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"2.36.3-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.36.3-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.36.3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5457-1"],"notices":[{"id":"USN-5457-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2022-06-01T11:24:25.395820","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"jammy":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.22.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"}],"impish":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.21.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"}],"focal":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-26717","CVE-2022-26709","CVE-2022-26700","CVE-2022-26716","CVE-2022-26719"]}]},{"id":"CVE-2022-26717","published":"2022-05-30T00:00:00","updated_at":"2025-08-25T23:52:36.089078+00:00","description":"\nA use after free issue was addressed with improved memory management. This\nissue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS\nMonterey 12.4, Safari 15.5, iTunes 12.12.4 for Windows. Processing\nmaliciously crafted web content may lead to arbitrary code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://webkitgtk.org/security/WSA-2022-0005.html","https://ubuntu.com/security/notices/USN-5457-1","https://www.cve.org/CVERecord?id=CVE-2022-26717"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"focal","status":"released","description":"2.36.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"2.36.3-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.36.3-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.36.3","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5457-1"],"notices":[{"id":"USN-5457-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2022-06-01T11:24:25.395820","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"jammy":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.22.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"}],"impish":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.21.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"}],"focal":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-26717","CVE-2022-26709","CVE-2022-26700","CVE-2022-26716","CVE-2022-26719"]}]},{"id":"CVE-2022-26716","published":"2022-05-30T00:00:00","updated_at":"2025-08-25T23:52:36.089078+00:00","description":"\nA memory corruption issue was addressed with improved state management.\nThis issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6,\nmacOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web\ncontent may lead to arbitrary code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://webkitgtk.org/security/WSA-2022-0005.html","https://ubuntu.com/security/notices/USN-5457-1","https://www.cve.org/CVERecord?id=CVE-2022-26716"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"focal","status":"released","description":"2.36.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"2.36.3-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.36.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.36.3-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5457-1"],"notices":[{"id":"USN-5457-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2022-06-01T11:24:25.395820","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"jammy":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.22.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"}],"impish":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.21.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"}],"focal":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-26717","CVE-2022-26709","CVE-2022-26700","CVE-2022-26716","CVE-2022-26719"]}]},{"id":"CVE-2022-26709","published":"2022-05-30T00:00:00","updated_at":"2025-08-25T23:52:30.703403+00:00","description":"\nA use after free issue was addressed with improved memory management. This\nissue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS\nMonterey 12.4, Safari 15.5. Processing maliciously crafted web content may\nlead to arbitrary code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://webkitgtk.org/security/WSA-2022-0005.html","https://ubuntu.com/security/notices/USN-5457-1","https://www.cve.org/CVERecord?id=CVE-2022-26709"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"kinetic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.36.3","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.36.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"2.36.3-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.36.3-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5457-1"],"notices":[{"id":"USN-5457-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2022-06-01T11:24:25.395820","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"jammy":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.22.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"}],"impish":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.21.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"}],"focal":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-26717","CVE-2022-26709","CVE-2022-26700","CVE-2022-26716","CVE-2022-26719"]}]},{"id":"CVE-2022-26700","published":"2022-05-30T00:00:00","updated_at":"2025-08-25T23:52:30.703403+00:00","description":"\nA memory corruption issue was addressed with improved state management.\nThis issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5,\nmacOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web\ncontent may lead to code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://webkitgtk.org/security/WSA-2022-0005.html","https://ubuntu.com/security/notices/USN-5457-1","https://www.cve.org/CVERecord?id=CVE-2022-26700"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"kinetic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.36.3","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.36.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"2.36.3-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.36.3-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5457-1"],"notices":[{"id":"USN-5457-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2022-06-01T11:24:25.395820","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"jammy":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.22.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.1","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.1-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.22.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.22.04.1","pocket":"security"}],"impish":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.21.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.21.10.1","pocket":"security"}],"focal":[{"name":"webkit2gtk","version":"2.36.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.36.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-26717","CVE-2022-26709","CVE-2022-26700","CVE-2022-26716","CVE-2022-26719"]}]},{"id":"CVE-2022-1927","published":"2022-05-29T14:15:00","updated_at":"2025-08-25T23:49:20.834912+00:00","description":"\nBuffer Over-read in GitHub repository vim/vim prior to 8.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777","https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010 (v8.2.5037)","https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010","https://ubuntu.com/security/notices/USN-5995-1","https://www.cve.org/CVERecord?id=CVE-2022-1927"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"kinetic","status":"not-affected","description":"2:9.0.0242-1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.13","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":["USN-5995-1"],"notices":[{"id":"USN-5995-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-04-04T08:58:38.806133","description":"It was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nand Ubuntu 22.04 LTS. (CVE-2022-0413, CVE-2022-1629, CVE-2022-1674,\nCVE-2022-1733, CVE-2022-1735, CVE-2022-1785, CVE-2022-1796, CVE-2022-1851,\nCVE-2022-1898, CVE-2022-1942, CVE-2022-1968, CVE-2022-2124, CVE-2022-2125,\nCVE-2022-2126, CVE-2022-2129, CVE-2022-2175, CVE-2022-2183, CVE-2022-2206,\nCVE-2022-2304, CVE-2022-2345, CVE-2022-2581)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1720, CVE-2022-2571, CVE-2022-2845, CVE-2022-2849,\nCVE-2022-2923)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-1927,\nCVE-2022-2344)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nand Ubuntu 22.10. (CVE-2022-2946)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-2980)\n","is_hidden":false,"release_packages":{"kinetic":[{"name":"vim","version":"2:9.0.0242-1ubuntu1.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"xxd","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.5","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.13","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"}],"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.12","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-1968","CVE-2022-2125","CVE-2022-2304","CVE-2022-2946","CVE-2022-1629","CVE-2022-0413","CVE-2022-1785","CVE-2022-2845","CVE-2022-1927","CVE-2022-2345","CVE-2022-2581","CVE-2022-2126","CVE-2022-1898","CVE-2022-1720","CVE-2022-1674","CVE-2022-2183","CVE-2022-2124","CVE-2022-2344","CVE-2022-1735","CVE-2022-1733","CVE-2022-2206","CVE-2022-2849","CVE-2022-2129","CVE-2022-2923","CVE-2022-1796","CVE-2022-2980","CVE-2022-1851","CVE-2022-2175","CVE-2022-1942","CVE-2022-2571"]}]},{"id":"CVE-2022-1897","published":"2022-05-27T15:15:00","updated_at":"2025-08-25T23:49:16.083100+00:00","description":"\nOut-of-bounds Write in GitHub repository vim/vim prior to 8.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/82c12151-c283-40cf-aa05-2e39efa89118","https://github.com/vim/vim/commit/338f1fc0ee3ca929387448fe464579d6113fa76a (v8.2.5023)","https://github.com/vim/vim/commit/338f1fc0ee3ca929387448fe464579d6113fa76a","https://ubuntu.com/security/notices/USN-5507-1","https://ubuntu.com/security/notices/USN-6557-1","https://www.cve.org/CVERecord?id=CVE-2022-1897"],"bugs":[""],"patches":{"vim":[]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2:9.0.1000-4ubuntu3.2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2:9.0.1672-1ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.21","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.15","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm15","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm10","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-5507-1","USN-6557-1"],"notices":[{"id":"USN-5507-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-07-08T02:49:09.005963","description":"It was discovered that Vim incorrectly handled memory access. An attacker\ncould potentially use this issue to cause the program to crash, use unexpected\nvalues, or execute arbitrary code. (CVE-2022-1968)\n\nIt was discovered that Vim incorrectly handled memory access. An attacker\ncould potentially use this issue to cause the corruption of sensitive\ninformation, a crash, or arbitrary code execution.\n(CVE-2022-1897, CVE-2022-1942)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm10","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-1968","CVE-2022-1897","CVE-2022-1942"]},{"id":"USN-6557-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-12-14T17:31:12.723162","description":"It was discovered that Vim could be made to dereference invalid memory. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1725)\n\nIt was discovered that Vim could be made to recurse infinitely. An\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1771)\n\nIt was discovered that Vim could be made to write out of bounds with a put\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-1886)\n\nIt was discovered that Vim could be made to write out of bounds. An\nattacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-1897,\nCVE-2022-2000)\n\nIt was discovered that Vim did not properly manage memory in the spell\ncommand. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-2042)\n\nIt was discovered that Vim did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2023-46246, CVE-2023-48231)\n\nIt was discovered that Vim could be made to divide by zero. An attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 23.04 and Ubuntu 23.10. (CVE-2023-48232)\n\nIt was discovered that Vim contained multiple arithmetic overflows. An\nattacker could possibly use these issues to cause a denial of service.\n(CVE-2023-48233, CVE-2023-48234, CVE-2023-48235, CVE-2023-48236,\nCVE-2023-48237)\n\nIt was discovered that Vim did not properly manage memory in the\nsubstitute command. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. This issue only affected\nUbuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-48706)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.21","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.15","pocket":"security"}],"lunar":[{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"},{"name":"xxd","version":"2:9.0.1000-4ubuntu3.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1000-4ubuntu3.3","pocket":"security"}],"mantic":[{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-athena","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-doc","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-motif","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-nox","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"},{"name":"xxd","version":"2:9.0.1672-1ubuntu2.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.1672-1ubuntu2.2","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm15","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm22","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2023-48706","CVE-2023-48234","CVE-2023-48231","CVE-2023-46246","CVE-2023-48235","CVE-2022-1725","CVE-2023-48232","CVE-2022-2042","CVE-2022-2000","CVE-2022-1886","CVE-2023-48233","CVE-2023-48236","CVE-2022-1771","CVE-2022-1897","CVE-2023-48237"]}]},{"id":"CVE-2022-1908","published":"2022-05-27T09:15:00","updated_at":"2025-07-17T21:55:06.374808+00:00","description":"\nBuffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":3.6,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.6,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8","https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba","https://www.cve.org/CVERecord?id=CVE-2022-1908","https://ubuntu.com/security/notices/USN-7638-1"],"bugs":[""],"patches":{"libmobi":[]},"tags":{},"packages":[{"name":"libmobi","source":"https://ubuntu.com/security/cve?package=libmobi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libmobi","debian":"https://tracker.debian.org/pkg/libmobi","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"0.9+dfsg1-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-7638-1"],"notices":[{"id":"USN-7638-1","title":"Libmobi vulnerabilities","summary":"Several security issues were fixed in Libmobi.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-07-16T21:00:48.959117","description":"It was discovered that Libmobi did not correctly handle certain memory\noperations, which could lead to a buffer overflow. A local attacker\ncould possibly trigger this vulnerability to cause a denial of service.\n(CVE-2022-1907, CVE-2022-1908)\n\nIt was discovered that Libmobi could dereference a NULL pointer via the\ncomponent mobi_buffer_getpointer. A local attacker could possibly\ntrigger this vulnerability to cause a denial of service.\n(CVE-2022-29788)","is_hidden":false,"release_packages":{"jammy":[{"name":"libmobi","version":"0.9+dfsg1-1ubuntu0.1~esm1","description":"C library for handling Kindle (MOBI) formats of ebook documents","is_source":true},{"name":"libmobi-dev","version":"0.9+dfsg1-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmobi","version_link":null,"pocket":"esm-apps"},{"name":"libmobi-tools","version":"0.9+dfsg1-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmobi","version_link":null,"pocket":"esm-apps"},{"name":"libmobi0","version":"0.9+dfsg1-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libmobi","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-29788","CVE-2022-1907","CVE-2022-1908"]}]},{"id":"CVE-2022-1907","published":"2022-05-27T09:15:00","updated_at":"2025-07-17T21:55:06.374808+00:00","description":"\nBuffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":3.6,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":3.6,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012","https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba","https://www.cve.org/CVERecord?id=CVE-2022-1907","https://ubuntu.com/security/notices/USN-7638-1"],"bugs":[""],"patches":{"libmobi":[]},"tags":{},"packages":[{"name":"libmobi","source":"https://ubuntu.com/security/cve?package=libmobi","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libmobi","debian":"https://tracker.debian.org/pkg/libmobi","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"0.9+dfsg1-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-7638-1"],"notices":[{"id":"USN-7638-1","title":"Libmobi vulnerabilities","summary":"Several security issues were fixed in Libmobi.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-07-16T21:00:48.959117","description":"It was discovered that Libmobi did not correctly handle certain memory\noperations, which could lead to a buffer overflow. A local attacker\ncould possibly trigger this vulnerability to cause a denial of service.\n(CVE-2022-1907, CVE-2022-1908)\n\nIt was discovered that Libmobi could dereference a NULL pointer via the\ncomponent mobi_buffer_getpointer. A local attacker could possibly\ntrigger this vulnerability to cause a denial of service.\n(CVE-2022-29788)","is_hidden":false,"release_packages":{"jammy":[{"name":"libmobi","version":"0.9+dfsg1-1ubuntu0.1~esm1","description":"C library for handling Kindle (MOBI) formats of ebook documents","is_source":true},{"name":"libmobi-dev","version":"0.9+dfsg1-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmobi","version_link":null,"pocket":"esm-apps"},{"name":"libmobi-tools","version":"0.9+dfsg1-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmobi","version_link":null,"pocket":"esm-apps"},{"name":"libmobi0","version":"0.9+dfsg1-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libmobi","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2022-29788","CVE-2022-1907","CVE-2022-1908"]}]},{"id":"CVE-2022-1898","published":"2022-05-27T09:15:00","updated_at":"2025-08-25T23:49:20.834912+00:00","description":"\nUse After Free in GitHub repository vim/vim prior to 8.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://huntr.dev/bounties/45aad635-c2f1-47ca-a4f9-db5b25979cea","https://ubuntu.com/security/notices/USN-5498-1","https://ubuntu.com/security/notices/USN-5995-1","https://www.cve.org/CVERecord?id=CVE-2022-1898"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/e2fa213cf571041dbd04ab0329303ffdc980678a"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"kinetic","status":"not-affected","description":"8.2.5166-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.2.5024","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.12","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.13","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm8","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm8","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-5498-1","USN-5995-1"],"notices":[{"id":"USN-5498-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-06-30T14:54:40.326722","description":"It was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code.\n","is_hidden":false,"release_packages":{"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-1733","CVE-2022-0413","CVE-2022-1785","CVE-2022-1851","CVE-2022-1629","CVE-2022-1796","CVE-2022-1898","CVE-2022-1735"]},{"id":"USN-5995-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-04-04T08:58:38.806133","description":"It was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 14.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nand Ubuntu 22.04 LTS. (CVE-2022-0413, CVE-2022-1629, CVE-2022-1674,\nCVE-2022-1733, CVE-2022-1735, CVE-2022-1785, CVE-2022-1796, CVE-2022-1851,\nCVE-2022-1898, CVE-2022-1942, CVE-2022-1968, CVE-2022-2124, CVE-2022-2125,\nCVE-2022-2126, CVE-2022-2129, CVE-2022-2175, CVE-2022-2183, CVE-2022-2206,\nCVE-2022-2304, CVE-2022-2345, CVE-2022-2581)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-1720, CVE-2022-2571, CVE-2022-2845, CVE-2022-2849,\nCVE-2022-2923)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-1927,\nCVE-2022-2344)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nand Ubuntu 22.10. (CVE-2022-2946)\n\nIt was discovered that Vim incorrectly handled memory when opening certain\nfiles. If an attacker could trick a user into opening a specially crafted\nfile, it could cause Vim to crash, or possible execute arbitrary code. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-2980)\n","is_hidden":false,"release_packages":{"kinetic":[{"name":"vim","version":"2:9.0.0242-1ubuntu1.3","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-athena","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"xxd","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-gui-common","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-doc","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-tiny","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-runtime","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-gtk3","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-nox","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"},{"name":"vim-motif","version":"2:9.0.0242-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.0.0242-1ubuntu1.3","pocket":"security"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.5","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.5","pocket":"security"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.13","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.1.2269-1ubuntu5.13","pocket":"security"}],"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.12","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.12","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-1968","CVE-2022-2125","CVE-2022-2304","CVE-2022-2946","CVE-2022-1629","CVE-2022-0413","CVE-2022-1785","CVE-2022-2845","CVE-2022-1927","CVE-2022-2345","CVE-2022-2581","CVE-2022-2126","CVE-2022-1898","CVE-2022-1720","CVE-2022-1674","CVE-2022-2183","CVE-2022-2124","CVE-2022-2344","CVE-2022-1735","CVE-2022-1733","CVE-2022-2206","CVE-2022-2849","CVE-2022-2129","CVE-2022-2923","CVE-2022-1796","CVE-2022-2980","CVE-2022-1851","CVE-2022-2175","CVE-2022-1942","CVE-2022-2571"]}]},{"id":"CVE-2022-26720","published":"2022-05-26T19:15:00","updated_at":"2025-08-25T23:52:36.089078+00:00","description":"\nAn out-of-bounds write issue was addressed with improved bounds checking.\nThis issue is fixed in Security Update 2022-004 Catalina, macOS Monterey\n12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute\narbitrary code with kernel privileges.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"this is an apple issue, not related to apache2"}],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://support.apple.com/en-us/HT213256","https://support.apple.com/en-us/HT213257","https://support.apple.com/en-us/HT213255","https://www.cve.org/CVERecord?id=CVE-2022-26720"],"bugs":[""],"patches":{"apache2":[]},"tags":{},"packages":[{"name":"apache2","source":"https://ubuntu.com/security/cve?package=apache2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=apache2","debian":"https://tracker.debian.org/pkg/apache2","statuses":[{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-26691","published":"2022-05-26T18:15:00","updated_at":"2025-08-25T23:52:30.703403+00:00","description":"\nA logic issue was addressed with improved state management. This issue is\nfixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big\nSur 11.6.5. An application may be able to gain elevated privileges.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://support.apple.com/en-us/HT213184","https://support.apple.com/en-us/HT213185","https://support.apple.com/en-us/HT213183","https://ubuntu.com/security/notices/USN-5454-1","https://ubuntu.com/security/notices/USN-5454-2","https://www.cve.org/CVERecord?id=CVE-2022-26691"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011769"],"patches":{"cups":["upstream: https://github.com/OpenPrinting/cups/commit/de4f8c196106033e4c372dce3e91b9d42b0b9444","upstream: https://github.com/OpenPrinting/cups/commit/411b6136f450a583ee08c3880fa09dbe837eb3f1"]},"tags":{},"packages":[{"name":"cups","source":"https://ubuntu.com/security/cve?package=cups","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cups","debian":"https://tracker.debian.org/pkg/cups","statuses":[{"release_codename":"bionic","status":"released","description":"2.2.7-1ubuntu2.9","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.3.1-9ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"2.3.3op2-7ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.4.1op1-1ubuntu4.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"2.4.1op1-1ubuntu5","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.4.2-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.1.3-4ubuntu0.11+esm1","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-5454-1","USN-5454-2"],"notices":[{"id":"USN-5454-1","title":"CUPS vulnerabilities","summary":"Several security issues were fixed in CUPS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-05-31T11:29:49.317774","description":"Joshua Mason discovered that CUPS incorrectly handled the secret key used\nto access the administrative web interface. A remote attacker could\npossibly use this issue to open a session as an administrator and execute\narbitrary code. (CVE-2022-26691)\n\nIt was discovered that CUPS incorrectly handled certain memory operations\nwhen handling IPP printing. A remote attacker could possibly use this issue\nto cause CUPS to crash, leading to a denial of service, or obtain sensitive\ninformation. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04\nLTS.  (CVE-2019-8842, CVE-2020-10001)\n","is_hidden":false,"release_packages":{"jammy":[{"name":"cups","version":"2.4.1op1-1ubuntu4.1","description":"Common UNIX Printing System(tm)","is_source":true},{"name":"libcups2-dev","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups-bsd","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups-common","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups-core-drivers","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups-server-common","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"libcupsimage2","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups-client","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups-ipp-utils","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"libcups2","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups-ppdc","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"libcupsimage2-dev","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"},{"name":"cups-daemon","version":"2.4.1op1-1ubuntu4.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.4.1op1-1ubuntu4.1","pocket":"security"}],"impish":[{"name":"cups","version":"2.3.3op2-7ubuntu2.1","description":"Common UNIX Printing System(tm)","is_source":true},{"name":"libcups2-dev","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups-bsd","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups-common","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups-core-drivers","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups-server-common","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"libcupsimage2","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups-client","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups-ipp-utils","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"libcups2","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups-ppdc","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"libcupsimage2-dev","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"},{"name":"cups-daemon","version":"2.3.3op2-7ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.3op2-7ubuntu2.1","pocket":"security"}],"focal":[{"name":"cups","version":"2.3.1-9ubuntu1.2","description":"Common UNIX Printing System(tm)","is_source":true},{"name":"libcups2-dev","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups-bsd","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups-common","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups-core-drivers","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups-server-common","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"libcupsimage2","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups-client","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups-ipp-utils","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"libcups2","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups-ppdc","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"libcupsimage2-dev","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"},{"name":"cups-daemon","version":"2.3.1-9ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.3.1-9ubuntu1.2","pocket":"security"}],"bionic":[{"name":"cups","version":"2.2.7-1ubuntu2.9","description":"Common UNIX Printing System(tm)","is_source":true},{"name":"libcupscgi1","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"libcups2-dev","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups-bsd","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups-common","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups-core-drivers","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups-server-common","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"libcupsimage2","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups-client","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"libcupsmime1","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups-ipp-utils","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"libcups2","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups-ppdc","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"libcupsppdc1","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"libcupsimage2-dev","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"},{"name":"cups-daemon","version":"2.2.7-1ubuntu2.9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":"https://launchpad.net/ubuntu/+source/cups/2.2.7-1ubuntu2.9","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-10001","CVE-2019-8842","CVE-2022-26691"]},{"id":"USN-5454-2","title":"CUPS vulnerabilities","summary":"Several security issues were fixed in CUPS.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-05-31T19:35:26.446461","description":"USN-5454-1 fixed several vulnerabilities in CUPS. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Joshua Mason discovered that CUPS incorrectly handled the secret key used\n to access the administrative web interface. A remote attacker could\n possibly use this issue to open a session as an administrator and execute\n arbitrary code. (CVE-2022-26691)\n\n It was discovered that CUPS incorrectly handled certain memory operations\n when handling IPP printing. A remote attacker could possibly use this issue\n to cause CUPS to crash, leading to a denial of service, or obtain sensitive\n information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04\n LTS.  (CVE-2019-8842, CVE-2020-10001)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"cups","version":"2.1.3-4ubuntu0.11+esm1","description":"Common UNIX Printing System(tm)","is_source":true},{"name":"libcupscgi1","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcups2-dev","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups-bsd","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcupsmime1","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups-common","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups-core-drivers","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups-server-common","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcupsimage2","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups-client","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcupscgi1-dev","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups-ipp-utils","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcups2","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcupsmime1-dev","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups-ppdc","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcupsppdc1","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcupsppdc1-dev","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"libcupsimage2-dev","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"},{"name":"cups-daemon","version":"2.1.3-4ubuntu0.11+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/cups","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-26691","CVE-2020-10001","CVE-2019-8842"]}]},{"id":"CVE-2022-22662","published":"2022-05-26T18:15:00","updated_at":"2025-08-25T23:50:28.475220+00:00","description":"\nA cookie management issue was addressed with improved state management.\nThis issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur\n11.6.5. Processing maliciously crafted web content may disclose sensitive\nuser information.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://webkitgtk.org/security/WSA-2022-0006.html","https://www.cve.org/CVERecord?id=CVE-2022-22662"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit-opensource-src":[],"wpewebkit":[]},"tags":{},"packages":[{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.36.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.36.3-0ubuntu0.22.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.36.3-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"wpewebkit","source":"https://ubuntu.com/security/cve?package=wpewebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wpewebkit","debian":"https://tracker.debian.org/pkg/wpewebkit","statuses":[{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-27777","published":"2022-05-26T17:15:00","updated_at":"2025-07-11T07:50:48.375545+00:00","description":"\nA XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which\nwould allow an attacker to inject content if able to control input into\nspecific attributes.","ubuntu_description":"","notes":[{"author":"seth-arnold","note":"In Oneiric-Saucy, rails package is just for transition;\nThe rails package contains actual code from vivid onward"}],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://discuss.rubyonrails.org/t/cve-2022-27777-possible-xss-vulnerability-in-action-view-tag-helpers/80534","https://www.cve.org/CVERecord?id=CVE-2022-27777"],"bugs":[""],"patches":{"rails":[],"ruby-rails-3.2":[],"ruby-actionpack-3.2":[],"ruby-activesupport-3.2":[],"ruby-activerecord-3.2":[],"ruby-activemodel-3.2":[],"rails-4.0":[],"redmine":[],"ruby-actionpack-2.3":[]},"tags":{},"packages":[{"name":"rails","source":"https://ubuntu.com/security/cve?package=rails","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=rails","debian":"https://tracker.debian.org/pkg/rails","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"redmine","source":"https://ubuntu.com/security/cve?package=redmine","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=redmine","debian":"https://tracker.debian.org/pkg/redmine","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"rails-4.0","source":"https://ubuntu.com/security/cve?package=rails-4.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=rails-4.0","debian":"https://tracker.debian.org/pkg/rails-4.0","statuses":[{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ruby-actionpack-2.3","source":"https://ubuntu.com/security/cve?package=ruby-actionpack-2.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby-actionpack-2.3","debian":"https://tracker.debian.org/pkg/ruby-actionpack-2.3","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"ruby-actionpack-3.2","source":"https://ubuntu.com/security/cve?package=ruby-actionpack-3.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby-actionpack-3.2","debian":"https://tracker.debian.org/pkg/ruby-actionpack-3.2","statuses":[{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ruby-activemodel-3.2","source":"https://ubuntu.com/security/cve?package=ruby-activemodel-3.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby-activemodel-3.2","debian":"https://tracker.debian.org/pkg/ruby-activemodel-3.2","statuses":[{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ruby-activerecord-3.2","source":"https://ubuntu.com/security/cve?package=ruby-activerecord-3.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby-activerecord-3.2","debian":"https://tracker.debian.org/pkg/ruby-activerecord-3.2","statuses":[{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ruby-activesupport-3.2","source":"https://ubuntu.com/security/cve?package=ruby-activesupport-3.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby-activesupport-3.2","debian":"https://tracker.debian.org/pkg/ruby-activesupport-3.2","statuses":[{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ruby-rails-3.2","source":"https://ubuntu.com/security/cve?package=ruby-rails-3.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby-rails-3.2","debian":"https://tracker.debian.org/pkg/ruby-rails-3.2","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":38460,"limit":20,"total_results":79316}