{"cves":[{"id":"CVE-2021-46342","published":"2022-01-20T22:15:00","updated_at":"2025-08-26T12:37:34.133759+00:00","description":"\nThere is an Assertion 'ecma_is_lexical_environment (obj_p) ||\n!ecma_op_object_is_fast_array (obj_p)' failed at\n/jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/jerryscript-project/jerryscript/issues/4934","https://www.cve.org/CVERecord?id=CVE-2021-46342"],"bugs":[""],"patches":{"iotjs":[]},"tags":{},"packages":[{"name":"iotjs","source":"https://ubuntu.com/security/cve?package=iotjs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=iotjs","debian":"https://tracker.debian.org/pkg/iotjs","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46340","published":"2022-01-20T22:15:00","updated_at":"2025-08-26T12:37:34.133759+00:00","description":"\nThere is an Assertion 'context_p->stack_top_uint8 ==\nSCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 ==\nSCAN_STACK_CATCH_STATEMENT' failed at\n/parser/js/js-scanner.c(scanner_scan_statement_end) in JerryScript 3.0.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/jerryscript-project/jerryscript/issues/4924","https://www.cve.org/CVERecord?id=CVE-2021-46340"],"bugs":[""],"patches":{"iotjs":[]},"tags":{},"packages":[{"name":"iotjs","source":"https://ubuntu.com/security/cve?package=iotjs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=iotjs","debian":"https://tracker.debian.org/pkg/iotjs","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46339","published":"2022-01-20T22:15:00","updated_at":"2025-08-26T12:37:34.133759+00:00","description":"\nThere is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)'\nfailed at /base/ecma-helpers-string.c(ecma_new_ecma_string_from_utf8) in\nJerryScript 3.0.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/jerryscript-project/jerryscript/issues/4935","https://www.cve.org/CVERecord?id=CVE-2021-46339"],"bugs":[""],"patches":{"iotjs":[]},"tags":{},"packages":[{"name":"iotjs","source":"https://ubuntu.com/security/cve?package=iotjs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=iotjs","debian":"https://tracker.debian.org/pkg/iotjs","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46338","published":"2022-01-20T22:15:00","updated_at":"2025-08-26T12:37:34.133759+00:00","description":"\nThere is an Assertion 'ecma_is_lexical_environment (object_p)' failed at\n/base/ecma-helpers.c(ecma_get_lex_env_type) in JerryScript 3.0.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/jerryscript-project/jerryscript/issues/4900","https://www.cve.org/CVERecord?id=CVE-2021-46338"],"bugs":[""],"patches":{"iotjs":[]},"tags":{},"packages":[{"name":"iotjs","source":"https://ubuntu.com/security/cve?package=iotjs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=iotjs","debian":"https://tracker.debian.org/pkg/iotjs","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46337","published":"2022-01-20T22:15:00","updated_at":"2025-08-26T12:37:34.133759+00:00","description":"\nThere is an Assertion 'page_p != NULL' failed at\n/parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/jerryscript-project/jerryscript/issues/4930","https://www.cve.org/CVERecord?id=CVE-2021-46337"],"bugs":[""],"patches":{"iotjs":[]},"tags":{},"packages":[{"name":"iotjs","source":"https://ubuntu.com/security/cve?package=iotjs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=iotjs","debian":"https://tracker.debian.org/pkg/iotjs","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46336","published":"2022-01-20T22:15:00","updated_at":"2025-08-26T12:37:34.133759+00:00","description":"\nThere is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at\n/parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/jerryscript-project/jerryscript/issues/4927","https://www.cve.org/CVERecord?id=CVE-2021-46336"],"bugs":[""],"patches":{"iotjs":[]},"tags":{},"packages":[{"name":"iotjs","source":"https://ubuntu.com/security/cve?package=iotjs","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=iotjs","debian":"https://tracker.debian.org/pkg/iotjs","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-46322","published":"2022-01-20T22:15:00","updated_at":"2025-08-26T12:37:34.133759+00:00","description":"\nDuktape v2.99.99 was discovered to contain a SEGV vulnerability via the\ncomponent duk_push_tval in duktape/duk_api_stack.c.","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."},{"author":"mdeslaur","note":"fix is in the src-input/duk_js_call.c file, which is not\nincluded in mysql"}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2021-46322"],"bugs":["https://github.com/svaarala/duktape/issues/2448"],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[],"duktape":["upstream: https://github.com/svaarala/duktape/pull/2451","upstream: https://github.com/svaarala/duktape/commit/fc75060165a011ff5ec43bfebea0c37a3d1baca1"],"ceph":[]},"tags":{},"packages":[{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"duktape","source":"https://ubuntu.com/security/cve?package=duktape","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=duktape","debian":"https://tracker.debian.org/pkg/duktape","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.7.0-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.7.0-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.7.0-2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.7.0","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.7.0+tests-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.7.0+tests-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.7.0+tests-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.7.0+tests-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.7.0+tests-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.7.0+tests-0ubuntu2","component":null,"pocket":"security"}]},{"name":"ceph","source":"https://ubuntu.com/security/cve?package=ceph","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ceph","debian":"https://tracker.debian.org/pkg/ceph","statuses":[{"release_codename":"jammy","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"duktape not compiled","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-45417","published":"2022-01-20T14:00:00","updated_at":"2025-08-25T23:43:10.969068+00:00","description":"\nAIDE before 0.17.4 allows local users to obtain root privileges via crafted\nfile metadata (such as XFS extended attributes or tmpfs ACLs), because of a\nheap-based buffer overflow.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://www.ipi.fi/pipermail/aide/2022-January/001714.html","http://www.ipi.fi/pipermail/aide/2022-January/001713.html","https://ubuntu.com/security/notices/USN-5243-1","https://ubuntu.com/security/notices/USN-5243-2","https://www.cve.org/CVERecord?id=CVE-2021-45417"],"bugs":[""],"patches":{"aide":[]},"tags":{},"packages":[{"name":"aide","source":"https://ubuntu.com/security/cve?package=aide","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=aide","debian":"https://tracker.debian.org/pkg/aide","statuses":[{"release_codename":"bionic","status":"released","description":"0.16-3ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"0.17.4-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"0.16.1-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"0.17.3-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"0.17.3-4ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.17.4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.16~a2.git20130520-2ubuntu0.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"0.16~a2.git20130520-3ubuntu0.1~esm1","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-5243-1","USN-5243-2"],"notices":[{"id":"USN-5243-1","title":"AIDE vulnerability","summary":"AIDE could be made to crash or run programs as an administrator if it\nopened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-01-20T14:48:31.488576","description":"David Bouman discovered that AIDE incorrectly handled base64 operations. A\nlocal attacker could use this issue to cause AIDE to crash, resulting in a\ndenial of service, or possibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"hirsute":[{"name":"aide","version":"0.17.3-1ubuntu0.1","description":"Advanced Intrusion Detection Environment","is_source":true},{"name":"aide-dynamic","version":"0.17.3-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.17.3-1ubuntu0.1","pocket":"security"},{"name":"aide-common","version":"0.17.3-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.17.3-1ubuntu0.1","pocket":"security"},{"name":"aide-xen","version":"0.17.3-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.17.3-1ubuntu0.1","pocket":"security"},{"name":"aide","version":"0.17.3-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.17.3-1ubuntu0.1","pocket":"security"}],"impish":[{"name":"aide","version":"0.17.3-4ubuntu0.1","description":"Advanced Intrusion Detection Environment","is_source":true},{"name":"aide-dynamic","version":"0.17.3-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.17.3-4ubuntu0.1","pocket":"security"},{"name":"aide-common","version":"0.17.3-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.17.3-4ubuntu0.1","pocket":"security"},{"name":"aide-xen","version":"0.17.3-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.17.3-4ubuntu0.1","pocket":"security"},{"name":"aide","version":"0.17.3-4ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.17.3-4ubuntu0.1","pocket":"security"}],"focal":[{"name":"aide","version":"0.16.1-1ubuntu0.1","description":"Advanced Intrusion Detection Environment","is_source":true},{"name":"aide-dynamic","version":"0.16.1-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.16.1-1ubuntu0.1","pocket":"security"},{"name":"aide-common","version":"0.16.1-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.16.1-1ubuntu0.1","pocket":"security"},{"name":"aide-xen","version":"0.16.1-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.16.1-1ubuntu0.1","pocket":"security"},{"name":"aide","version":"0.16.1-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.16.1-1ubuntu0.1","pocket":"security"}],"bionic":[{"name":"aide","version":"0.16-3ubuntu0.1","description":"Advanced Intrusion Detection Environment","is_source":true},{"name":"aide-dynamic","version":"0.16-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.16-3ubuntu0.1","pocket":"security"},{"name":"aide-common","version":"0.16-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.16-3ubuntu0.1","pocket":"security"},{"name":"aide-xen","version":"0.16-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.16-3ubuntu0.1","pocket":"security"},{"name":"aide","version":"0.16-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":"https://launchpad.net/ubuntu/+source/aide/0.16-3ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2021-45417"]},{"id":"USN-5243-2","title":"AIDE vulnerability","summary":"AIDE could be made to crash or run programs as an administrator if it\nopened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-01-20T16:12:06.586051","description":"USN-5243-1 fixed a vulnerability in aide. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\n\nOriginal advisory details:\n\n David Bouman discovered that AIDE incorrectly handled base64 operations. A\n local attacker could use this issue to cause AIDE to crash, resulting in a\n denial of service, or possibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"trusty":[{"name":"aide","version":"0.16~a2.git20130520-2ubuntu0.1+esm1","description":"Advanced Intrusion Detection Environment - static binary","is_source":true},{"name":"aide","version":"0.16~a2.git20130520-2ubuntu0.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":null,"pocket":"esm-infra"},{"name":"aide-common","version":"0.16~a2.git20130520-2ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":null,"pocket":"esm-infra"},{"name":"aide-dynamic","version":"0.16~a2.git20130520-2ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":null,"pocket":"esm-infra"},{"name":"aide-xen","version":"0.16~a2.git20130520-2ubuntu0.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"aide","version":"0.16~a2.git20130520-3ubuntu0.1~esm1","description":"Advanced Intrusion Detection Environment - static binary","is_source":true},{"name":"aide","version":"0.16~a2.git20130520-3ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":null,"pocket":"esm-infra"},{"name":"aide-common","version":"0.16~a2.git20130520-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":null,"pocket":"esm-infra"},{"name":"aide-dynamic","version":"0.16~a2.git20130520-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":null,"pocket":"esm-infra"},{"name":"aide-xen","version":"0.16~a2.git20130520-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aide","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2021-45417"]}]},{"id":"CVE-2022-21658","published":"2022-01-20T11:00:00","updated_at":"2025-08-26T12:42:13.292075+00:00","description":"\nRust is a multi-paradigm, general-purpose programming language designed for\nperformance and safety, especially safe concurrency. The Rust Security\nResponse WG was notified that the `std::fs::remove_dir_all` standard\nlibrary function is vulnerable a race condition enabling symlink following\n(CWE-363). An attacker could use this security issue to trick a privileged\nprogram into deleting files and directories the attacker couldn't otherwise\naccess or delete. Rust 1.0.0 through Rust 1.58.0 is affected by this\nvulnerability with 1.58.1 containing a patch. Note that the following build\ntargets don't have usable APIs to properly mitigate the attack, and are\nthus still vulnerable even with a patched toolchain: macOS before version\n10.10 (Yosemite) and REDOX. We recommend everyone to update to Rust 1.58.1\nas soon as possible, especially people developing programs expected to run\nin privileged contexts (including system daemons and setuid binaries), as\nthose have the highest risk of being affected by this. Note that adding\nchecks in your codebase before calling remove_dir_all will not mitigate the\nvulnerability, as they would also be vulnerable to race conditions like\nremove_dir_all itself. The existing mitigation is working as intended\noutside of race conditions.","ubuntu_description":"","notes":[{"author":"alexmurray","note":"Will require any package in the Ubuntu archive which calls remove_dir_all() to be recompiled with the patched rustc"}],"codename":null,"priority":"medium","cvss3":7.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/rust-lang/rust/security/advisories/GHSA-r9cc-f5pr-p3j2","https://groups.google.com/g/rustlang-security-announcements/c/R1fZFDhnJVQ?pli=1","https://rustsec.org/advisories/CVE-2022-21658.html","https://blog.rust-lang.org/2022/01/20/cve-2022-21658.html","https://github.com/rust-lang/wg-security-response/blob/master/patches/CVE-2022-21658/0002-Fix-CVE-2022-21658-for-UNIX-like.patch","https://www.cve.org/CVERecord?id=CVE-2022-21658"],"bugs":[""],"patches":{"rustc":[]},"tags":{},"packages":[{"name":"rustc","source":"https://ubuntu.com/security/cve?package=rustc","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=rustc","debian":"https://tracker.debian.org/pkg/rustc","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.59.0+dfsg1~ubuntu1~llvm-1~ubuntu1~18.04.2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.59.0+dfsg1~ubuntu1~llvm-1~ubuntu1~20.04.2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.58.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-21704","published":"2022-01-19T23:15:00","updated_at":"2025-08-26T12:42:26.509593+00:00","description":"\nlog4js-node is a port of log4js to node.js. In affected versions default\nfile permissions for log files created by the file, fileSync and dateFile\nappenders are world-readable (in unix). This could cause problems if log\nfiles contain sensitive information. This would affect any users that have\nnot supplied their own permissions for the files via the mode parameter in\nthe config. Users are advised to update.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://github.com/log4js-node/log4js-node/pull/1141 (v6.4.1)","https://github.com/log4js-node/streamroller/pull/87","https://github.com/log4js-node/log4js-node/security/advisories/GHSA-82v2-mx6x-wq7q","https://github.com/log4js-node/log4js-node/blob/v6.4.0/CHANGELOG.md#640","https://www.cve.org/CVERecord?id=CVE-2022-21704"],"bugs":[""],"patches":{"node-log4js":[]},"tags":{},"packages":[{"name":"node-log4js","source":"https://ubuntu.com/security/cve?package=node-log4js","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=node-log4js","debian":"https://tracker.debian.org/pkg/node-log4js","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"6.4.1+~cs8.3.5-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-21699","published":"2022-01-19T22:15:00","updated_at":"2025-08-25T23:50:10.434184+00:00","description":"\nIPython (Interactive Python) is a command shell for interactive computing\nin multiple programming languages, originally developed for the Python\nprogramming language. Affected versions are subject to an arbitrary code\nexecution vulnerability achieved by not properly managing cross user\ntemporary files. This vulnerability allows one user to run code as another\non the same machine. All users are advised to upgrade.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699","https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x","https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668","https://ubuntu.com/security/notices/USN-5953-1","https://www.cve.org/CVERecord?id=CVE-2022-21699"],"bugs":[""],"patches":{"ipython":["upstream: https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668"]},"tags":{},"packages":[{"name":"ipython","source":"https://ubuntu.com/security/cve?package=ipython","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ipython","debian":"https://tracker.debian.org/pkg/ipython","statuses":[{"release_codename":"bionic","status":"released","description":"5.5.0-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"7.13.0-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8.5.0-4","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.1, 7.31.1, 5.11","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"7.31.1-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"7.31.1-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8.5.0-4","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8.5.0-4","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8.5.0-4","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8.5.0-4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]}],"notices_ids":["USN-5953-1"],"notices":[{"id":"USN-5953-1","title":"IPython vulnerabilities","summary":"Several security issues were fixed in IPython.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-03-15T09:54:07.370981","description":"It was discovered that IPython incorrectly processed REST API POST requests.\nAn attacker could possibly use this issue to launch a cross-site request\nforgery (CSRF) attack and leak user's sensitive information. This issue\nonly affected Ubuntu 14.04 ESM. (CVE-2015-5607)\n\nIt was discovered that IPython did not properly manage cross user temporary\nfiles. A local attacker could possibly use this issue to execute arbitrary\ncode. This issue only affected Ubuntu 18.04 ESM and Ubuntu 20.04 ESM.\n(CVE-2022-21699)\n","is_hidden":false,"release_packages":{"focal":[{"name":"ipython","version":"7.13.0-1ubuntu0.1~esm1","description":"Enhanced interactive Python 3 shell","is_source":true},{"name":"python-ipython-doc","version":"7.13.0-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-apps"},{"name":"python3-ipython","version":"7.13.0-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-apps"},{"name":"ipython3","version":"7.13.0-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-apps"}],"bionic":[{"name":"ipython","version":"5.5.0-1ubuntu0.1~esm1","description":"Enhanced interactive Python 2 shell","is_source":true},{"name":"ipython","version":"5.5.0-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-apps"},{"name":"python-ipython-doc","version":"5.5.0-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-apps"},{"name":"python-ipython","version":"5.5.0-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-apps"},{"name":"python3-ipython","version":"5.5.0-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-apps"},{"name":"ipython3","version":"5.5.0-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-apps"}],"trusty":[{"name":"ipython","version":"1.2.1-2ubuntu0.1~esm1","description":"enhanced interactive Python shell","is_source":true},{"name":"ipython3-notebook","version":"1.2.1-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-infra"},{"name":"ipython3","version":"1.2.1-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-infra"},{"name":"ipython-notebook-common","version":"1.2.1-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-infra"},{"name":"ipython-doc","version":"1.2.1-2ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-infra"},{"name":"ipython","version":"1.2.1-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-infra"},{"name":"ipython3-qtconsole","version":"1.2.1-2ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-infra"},{"name":"ipython-notebook","version":"1.2.1-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-infra"},{"name":"ipython-qtconsole","version":"1.2.1-2ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ipython","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2015-5607","CVE-2022-21699"]}]},{"id":"CVE-2021-3816","published":"2022-01-19T21:15:00","updated_at":"2025-07-11T07:47:58.612411+00:00","description":"\nCacti 1.1.38 allows authenticated users with User Management permissions to\ninject arbitrary HTML in the group_prefix field during the creation of a\nnew group via \"Copy\" method at user_group_admin.php.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cacti.net/info/changelog","https://www.cve.org/CVERecord?id=CVE-2021-3816"],"bugs":[""],"patches":{"cacti":[]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-26247","published":"2022-01-19T21:15:00","updated_at":"2025-07-11T07:46:31.016711+00:00","description":"\nAs an unauthenticated remote user, visit\n\"http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>\"\nto successfully execute the JavaScript payload present in the \"ref\" URL\nparameter.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cacti.net/info/changelog","https://www.cve.org/CVERecord?id=CVE-2021-26247"],"bugs":[""],"patches":{"cacti":[]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-23225","published":"2022-01-19T21:15:00","updated_at":"2025-07-11T07:46:20.333606+00:00","description":"\nCacti 1.1.38 allows authenticated users with User Management permissions to\ninject arbitrary web script or HTML in the \"new_username\" field during\ncreation of a new user via \"Copy\" method at user_admin.php.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cacti.net/info/changelog","https://www.cve.org/CVERecord?id=CVE-2021-23225"],"bugs":[""],"patches":{"cacti":[]},"tags":{},"packages":[{"name":"cacti","source":"https://ubuntu.com/security/cve?package=cacti","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cacti","debian":"https://tracker.debian.org/pkg/cacti","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2021-33913","published":"2022-01-19T18:15:00","updated_at":"2025-08-25T23:37:27.346184+00:00","description":"\nlibspf2 before 1.2.11 has a heap-based buffer overflow that might allow\nremote attackers to execute arbitrary code (via an unauthenticated e-mail\nmessage from anywhere on the Internet) with a crafted SPF DNS record,\nbecause of SPF_record_expand_data in spf_expand.c. The amount of overflowed\ndata depends on the relationship between the length of an entire domain\nname and the length of its leftmost label. The vulnerable code may be part\nof the supply chain of a site's e-mail infrastructure (e.g., with\nadditional configuration, Exim can use libspf2; the Postfix web site links\nto unofficial patches for use of libspf2 with Postfix; older versions of\nspfquery relied on libspf2) but most often is not.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/shevek/libspf2/commit/f06fef6cede4c4cb42f2c617496e6041782d7070","https://ubuntu.com/security/notices/USN-6584-1","https://ubuntu.com/security/notices/USN-6584-2","https://www.cve.org/CVERecord?id=CVE-2021-33913"],"bugs":[""],"patches":{"libspf2":[]},"tags":{},"packages":[{"name":"libspf2","source":"https://ubuntu.com/security/cve?package=libspf2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libspf2","debian":"https://tracker.debian.org/pkg/libspf2","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.2.10-7ubuntu0.18.04.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"1.2.10-7+deb9u2build0.20.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.2.10-7.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.2.10-7.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.2.10-7.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.2.10-6ubuntu0.1~esm2","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"not-affected","description":"noble 1.2.10-8","component":null,"pocket":"security"}]}],"notices_ids":["USN-6584-1","USN-6584-2"],"notices":[{"id":"USN-6584-1","title":"Libspf2 vulnerabilities","summary":"Several security issues were fixed in Libspf2.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-01-15T17:17:57.065521","description":"Philipp Jeitner and Haya Shulman discovered that Libspf2 incorrectly handled\ncertain inputs. If a user or an automated system were tricked into opening a\nspecially crafted input file, a remote attacker could possibly use this issue\nto cause a denial of service or execute arbitrary code. (CVE-2021-20314)\n\nIt was discovered that Libspf2 incorrectly handled certain inputs. If a user or\nan automated system were tricked into opening a specially crafted input file, a\nremote attacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 18.04 LTS and \nUbuntu 20.04 LTS. (CVE-2021-33912, CVE-2021-33913)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"libspf2","version":"1.2.10-7ubuntu0.18.04.1~esm1","description":"Sender Policy Framework for SMTP authorization","is_source":true},{"name":"libmail-spf-xs-perl","version":"1.2.10-7ubuntu0.18.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-2","version":"1.2.10-7ubuntu0.18.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-dev","version":"1.2.10-7ubuntu0.18.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"spfquery","version":"1.2.10-7ubuntu0.18.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"libspf2","version":"1.2.10-7+deb9u2build0.20.04.1","description":"Sender Policy Framework for SMTP authorization","is_source":true},{"name":"libmail-spf-xs-perl","version":"1.2.10-7+deb9u2build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":"https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1","pocket":"security"},{"name":"libspf2-2","version":"1.2.10-7+deb9u2build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":"https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1","pocket":"security"},{"name":"libspf2-dev","version":"1.2.10-7+deb9u2build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":"https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1","pocket":"security"},{"name":"spfquery","version":"1.2.10-7+deb9u2build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":"https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1","pocket":"security"}],"xenial":[{"name":"libspf2","version":"1.2.10-6ubuntu0.1~esm1","description":"Sender Policy Framework for SMTP authorization","is_source":true},{"name":"libmail-spf-xs-perl","version":"1.2.10-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-2","version":"1.2.10-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-dev","version":"1.2.10-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"spfquery","version":"1.2.10-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2021-33912","CVE-2021-33913","CVE-2021-20314"]},{"id":"USN-6584-2","title":"Libspf2 vulnerabilities","summary":"Several security issues were fixed in Libspf2.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-02-21T10:40:23.641331","description":"USN-6584-1 fixed several vulnerabilities in Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. This update provides the corresponding updates for\nCVE-2021-33912 and CVE-2021-33913 in Ubuntu 16.04 LTS.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Philipp Jeitner and Haya Shulman discovered that Libspf2 incorrectly handled\n certain inputs. If a user or an automated system were tricked into opening a\n specially crafted input file, a remote attacker could possibly use this issue\n to cause a denial of service or execute arbitrary code. (CVE-2021-20314)\n \n It was discovered that Libspf2 incorrectly handled certain inputs. If a user or\n an automated system were tricked into opening a specially crafted input file, a\n remote attacker could possibly use this issue to cause a denial of service or\n execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and \n Ubuntu 20.04 LTS. (CVE-2021-33912, CVE-2021-33913)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"libspf2","version":"1.2.10-6ubuntu0.1~esm2","description":"Sender Policy Framework for SMTP authorization","is_source":true},{"name":"libmail-spf-xs-perl","version":"1.2.10-6ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-2","version":"1.2.10-6ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-dev","version":"1.2.10-6ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"spfquery","version":"1.2.10-6ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2021-33913","CVE-2021-33912"]}]},{"id":"CVE-2021-33912","published":"2022-01-19T18:15:00","updated_at":"2025-08-25T23:37:27.346184+00:00","description":"\nlibspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might\nallow remote attackers to execute arbitrary code (via an unauthenticated\ne-mail message from anywhere on the Internet) with a crafted SPF DNS\nrecord, because of incorrect sprintf usage in SPF_record_expand_data in\nspf_expand.c. The vulnerable code may be part of the supply chain of a\nsite's e-mail infrastructure (e.g., with additional configuration, Exim can\nuse libspf2; the Postfix web site links to unofficial patches for use of\nlibspf2 with Postfix; older versions of spfquery relied on libspf2) but\nmost often is not.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/shevek/libspf2/commit/28faf4624a6a371b11afdb9820078d3b0ee3803d","https://ubuntu.com/security/notices/USN-6584-1","https://ubuntu.com/security/notices/USN-6584-2","https://www.cve.org/CVERecord?id=CVE-2021-33912"],"bugs":[""],"patches":{"libspf2":[]},"tags":{},"packages":[{"name":"libspf2","source":"https://ubuntu.com/security/cve?package=libspf2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libspf2","debian":"https://tracker.debian.org/pkg/libspf2","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.2.10-7ubuntu0.18.04.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.2.10-7.1ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.2.10-7.2build1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.2.10-7.2build1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.2.10-7+deb9u2build0.20.04.1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.2.10-6ubuntu0.1~esm2","component":null,"pocket":"esm-apps"},{"release_codename":"noble","status":"not-affected","description":"noble 1.2.10-8","component":null,"pocket":"security"}]}],"notices_ids":["USN-6584-1","USN-6584-2"],"notices":[{"id":"USN-6584-1","title":"Libspf2 vulnerabilities","summary":"Several security issues were fixed in Libspf2.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-01-15T17:17:57.065521","description":"Philipp Jeitner and Haya Shulman discovered that Libspf2 incorrectly handled\ncertain inputs. If a user or an automated system were tricked into opening a\nspecially crafted input file, a remote attacker could possibly use this issue\nto cause a denial of service or execute arbitrary code. (CVE-2021-20314)\n\nIt was discovered that Libspf2 incorrectly handled certain inputs. If a user or\nan automated system were tricked into opening a specially crafted input file, a\nremote attacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. This issue only affected Ubuntu 18.04 LTS and \nUbuntu 20.04 LTS. (CVE-2021-33912, CVE-2021-33913)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"libspf2","version":"1.2.10-7ubuntu0.18.04.1~esm1","description":"Sender Policy Framework for SMTP authorization","is_source":true},{"name":"libmail-spf-xs-perl","version":"1.2.10-7ubuntu0.18.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-2","version":"1.2.10-7ubuntu0.18.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-dev","version":"1.2.10-7ubuntu0.18.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"spfquery","version":"1.2.10-7ubuntu0.18.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"libspf2","version":"1.2.10-7+deb9u2build0.20.04.1","description":"Sender Policy Framework for SMTP authorization","is_source":true},{"name":"libmail-spf-xs-perl","version":"1.2.10-7+deb9u2build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":"https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1","pocket":"security"},{"name":"libspf2-2","version":"1.2.10-7+deb9u2build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":"https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1","pocket":"security"},{"name":"libspf2-dev","version":"1.2.10-7+deb9u2build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":"https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1","pocket":"security"},{"name":"spfquery","version":"1.2.10-7+deb9u2build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":"https://launchpad.net/ubuntu/+source/libspf2/1.2.10-7+deb9u2build0.20.04.1","pocket":"security"}],"xenial":[{"name":"libspf2","version":"1.2.10-6ubuntu0.1~esm1","description":"Sender Policy Framework for SMTP authorization","is_source":true},{"name":"libmail-spf-xs-perl","version":"1.2.10-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-2","version":"1.2.10-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-dev","version":"1.2.10-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"spfquery","version":"1.2.10-6ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2021-33912","CVE-2021-33913","CVE-2021-20314"]},{"id":"USN-6584-2","title":"Libspf2 vulnerabilities","summary":"Several security issues were fixed in Libspf2.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-02-21T10:40:23.641331","description":"USN-6584-1 fixed several vulnerabilities in Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. This update provides the corresponding updates for\nCVE-2021-33912 and CVE-2021-33913 in Ubuntu 16.04 LTS.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Philipp Jeitner and Haya Shulman discovered that Libspf2 incorrectly handled\n certain inputs. If a user or an automated system were tricked into opening a\n specially crafted input file, a remote attacker could possibly use this issue\n to cause a denial of service or execute arbitrary code. (CVE-2021-20314)\n \n It was discovered that Libspf2 incorrectly handled certain inputs. If a user or\n an automated system were tricked into opening a specially crafted input file, a\n remote attacker could possibly use this issue to cause a denial of service or\n execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and \n Ubuntu 20.04 LTS. (CVE-2021-33912, CVE-2021-33913)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"libspf2","version":"1.2.10-6ubuntu0.1~esm2","description":"Sender Policy Framework for SMTP authorization","is_source":true},{"name":"libmail-spf-xs-perl","version":"1.2.10-6ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-2","version":"1.2.10-6ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"libspf2-dev","version":"1.2.10-6ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"},{"name":"spfquery","version":"1.2.10-6ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libspf2","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2021-33913","CVE-2021-33912"]}]},{"id":"CVE-2022-23221","published":"2022-01-19T17:15:00","updated_at":"2025-07-22T10:33:10.633491+00:00","description":"\nH2 Console before 2.1.210 allows remote attackers to execute arbitrary code\nvia a jdbc:h2:mem JDBC URL containing the\nIGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT\nsubstring, a different vulnerability than CVE-2021-42392.","ubuntu_description":"","notes":[{"author":"yomonokio","note":"Upstream states that persistent databases created by H2 1.4.200 and\nolder versions require export into SQL script with that old version\nand creation of a new database with the new version and execution\nof this script in it."}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/h2database/h2database/security/advisories","https://github.com/h2database/h2database/releases/tag/version-2.1.210","https://twitter.com/d0nkey_man/status/1483824727936450564","https://ubuntu.com/security/notices/USN-5365-1","https://www.cve.org/CVERecord?id=CVE-2022-23221","https://ubuntu.com/security/notices/USN-6834-1"],"bugs":[""],"patches":{"h2database":[]},"tags":{},"packages":[{"name":"h2database","source":"https://ubuntu.com/security/cve?package=h2database","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=h2database","debian":"https://tracker.debian.org/pkg/h2database","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.4.197-4+deb10u1build0.20.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"1.4.197-4+deb10u1build0.21.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.210","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.4.196-2ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2.1.210+really1.4.197-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.1.210","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.1.210","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.4.191-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"}]}],"notices_ids":["USN-5365-1","USN-6834-1"],"notices":[{"id":"USN-5365-1","title":"H2 vulnerabilities","summary":"Several security issues were fixed in H2.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-04-05T15:14:29.087092","description":"It was discovered that H2 was vulnerable to deserialization of\nuntrusted data. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2021-42392)\n\nIt was discovered that H2 incorrectly handled some specially\ncrafted connection URLs. An attacker could possibly use this\nissue to execute arbitrary code. (CVE-2022-23221)\n","is_hidden":false,"release_packages":{"impish":[{"name":"h2database","version":"1.4.197-4+deb10u1build0.21.10.1","description":"H2 Database Engine","is_source":true},{"name":"libh2-java","version":"1.4.197-4+deb10u1build0.21.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/h2database","version_link":"https://launchpad.net/ubuntu/+source/h2database/1.4.197-4+deb10u1build0.21.10.1","pocket":"security"},{"name":"libh2-java-doc","version":"1.4.197-4+deb10u1build0.21.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/h2database","version_link":"https://launchpad.net/ubuntu/+source/h2database/1.4.197-4+deb10u1build0.21.10.1","pocket":"security"}],"focal":[{"name":"h2database","version":"1.4.197-4+deb10u1build0.20.04.1","description":"H2 Database Engine","is_source":true},{"name":"libh2-java","version":"1.4.197-4+deb10u1build0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/h2database","version_link":"https://launchpad.net/ubuntu/+source/h2database/1.4.197-4+deb10u1build0.20.04.1","pocket":"security"},{"name":"libh2-java-doc","version":"1.4.197-4+deb10u1build0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/h2database","version_link":"https://launchpad.net/ubuntu/+source/h2database/1.4.197-4+deb10u1build0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2021-42392","CVE-2022-23221"]},{"id":"USN-6834-1","title":"H2 vulnerabilities","summary":"H2 could be made to allow arbitrary code execution.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-06-13T14:44:19.956137","description":"It was discovered that H2 was vulnerable to deserialization of\nuntrusted data. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2021-42392)\n\nIt was discovered that H2 incorrectly handled some specially\ncrafted connection URLs. An attacker could possibly use this\nissue to execute arbitrary code. (CVE-2022-23221)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"h2database","version":"1.4.196-2ubuntu0.1~esm1","description":"H2 Database Engine","is_source":true},{"name":"libh2-java","version":"1.4.196-2ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/h2database","version_link":null,"pocket":"esm-apps"},{"name":"libh2-java-doc","version":"1.4.196-2ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/h2database","version_link":null,"pocket":"esm-apps"}],"xenial":[{"name":"h2database","version":"1.4.191-1ubuntu0.1~esm1","description":"H2 Database Engine","is_source":true},{"name":"libh2-java","version":"1.4.191-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/h2database","version_link":null,"pocket":"esm-apps"},{"name":"libh2-java-doc","version":"1.4.191-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/h2database","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2021-42392","CVE-2022-23221"]}]},{"id":"CVE-2022-21394","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:39.479074+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core). The supported version that is affected is Prior to\n6.1.32. Easily exploitable vulnerability allows low privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products.\nSuccessful attacks of this vulnerability can result in unauthorized access\nto critical data or complete access to all Oracle VM VirtualBox accessible\ndata. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://www.cve.org/CVERecord?id=CVE-2022-21394"],"bugs":[""],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-21379","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:52.186401+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Group Replication Plugin). Supported versions that are affected are\n8.0.27 and prior. Easily exploitable vulnerability allows high privileged\nattacker with network access via multiple protocols to compromise MySQL\nServer. Successful attacks of this vulnerability can result in unauthorized\nability to cause a hang or frequently repeatable crash (complete DOS) of\nMySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://www.cve.org/CVERecord?id=CVE-2022-21379"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]}]},{"id":"CVE-2022-21378","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:52.186401+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Optimizer). Supported versions that are affected are 8.0.27 and\nprior. Easily exploitable vulnerability allows high privileged attacker\nwith network access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer as well as unauthorized update, insert or delete access to some of\nMySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and\nAvailability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://www.cve.org/CVERecord?id=CVE-2022-21378"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]}]}],"offset":39960,"limit":20,"total_results":79316}