{"cves":[{"id":"CVE-2022-21305","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:37.511212+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: Hotspot). Supported versions that are\naffected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM\nEnterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability\nallows unauthenticated attacker with network access via multiple protocols\nto compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful\nattacks of this vulnerability can result in unauthorized update, insert or\ndelete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition\naccessible data. Note: This vulnerability applies to Java deployments,\ntypically in clients running sandboxed Java Web Start applications or\nsandboxed Java applets, that load and run untrusted code (e.g., code that\ncomes from the internet) and rely on the Java sandbox for security. This\nvulnerability can also be exploited by using APIs in the specified\nComponent, e.g., through a web service which supplies data to the APIs.\nCVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21305"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u342-b07-0ubuntu1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8u342-b07-0ubuntu1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u342-b07-0ubuntu1~16.04","component":null,"pocket":"esm-infra"},{"release_codename":"mantic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21304","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:40.752923+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Parser). Supported versions that are affected are 5.7.36 and prior\nand 8.0.27 and prior. Easily exploitable vulnerability allows high\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Server. Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability\nimpacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://ubuntu.com/security/notices/USN-5270-2","https://www.cve.org/CVERecord?id=CVE-2022-21304"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"upstream","status":"released","description":"5.7.37","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"5.7.37-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"5.7.37-0ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1","USN-5270-2"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]},{"id":"USN-5270-2","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T15:35:00.135566","description":"USN-5270-1 fixed several vulnerabilities in MySQL. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Multiple security issues were discovered in MySQL and this update includes\n new upstream MySQL versions to fix these issues.\n\n MySQL has been updated to 5.7.37 in Ubuntu 16.04 ESM.\n\n In addition to security fixes, the updated packages contain bug fixes, new\n features, and possibly incompatible changes.\n\n Please see the following for more information:\n\n https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\n https://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"xenial":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-common","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-21304","CVE-2022-21344","CVE-2022-21367","CVE-2022-21303","CVE-2022-21270","CVE-2022-21245"]}]},{"id":"CVE-2022-21303","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:40.752923+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Stored Procedure). Supported versions that are affected are 5.7.36\nand prior and 8.0.27 and prior. Easily exploitable vulnerability allows\nhigh privileged attacker with network access via multiple protocols to\ncompromise MySQL Server. Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability\nimpacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://ubuntu.com/security/notices/USN-5270-2","https://www.cve.org/CVERecord?id=CVE-2022-21303"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"released","description":"5.7.37-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.7.37","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"5.7.37-0ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1","USN-5270-2"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]},{"id":"USN-5270-2","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T15:35:00.135566","description":"USN-5270-1 fixed several vulnerabilities in MySQL. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Multiple security issues were discovered in MySQL and this update includes\n new upstream MySQL versions to fix these issues.\n\n MySQL has been updated to 5.7.37 in Ubuntu 16.04 ESM.\n\n In addition to security fixes, the updated packages contain bug fixes, new\n features, and possibly incompatible changes.\n\n Please see the following for more information:\n\n https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\n https://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"xenial":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-common","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-21304","CVE-2022-21344","CVE-2022-21367","CVE-2022-21303","CVE-2022-21270","CVE-2022-21245"]}]},{"id":"CVE-2022-21302","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:40.752923+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nInnoDB). Supported versions that are affected are 8.0.27 and prior.\nDifficult to exploit vulnerability allows low privileged attacker with\nnetwork access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://www.cve.org/CVERecord?id=CVE-2022-21302"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]}]},{"id":"CVE-2022-21301","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:40.752923+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: DML). Supported versions that are affected are 8.0.27 and prior.\nEasily exploitable vulnerability allows high privileged attacker with\nnetwork access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer as well as unauthorized update, insert or delete access to some of\nMySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and\nAvailability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://www.cve.org/CVERecord?id=CVE-2022-21301"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]}]},{"id":"CVE-2022-21299","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:37.511212+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: JAXP). Supported versions that are\naffected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM\nEnterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability\nallows unauthenticated attacker with network access via multiple protocols\nto compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM\nEnterprise Edition. Note: This vulnerability applies to Java deployments,\ntypically in clients running sandboxed Java Web Start applications or\nsandboxed Java applets, that load and run untrusted code (e.g., code that\ncomes from the internet) and rely on the Java sandbox for security. This\nvulnerability can also be exploited by using APIs in the specified\nComponent, e.g., through a web service which supplies data to the APIs.\nCVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21299"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u342-b07-0ubuntu1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8u342-b07-0ubuntu1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u342-b07-0ubuntu1~16.04","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21297","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:40.752923+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Optimizer). Supported versions that are affected are 8.0.26 and\nprior. Easily exploitable vulnerability allows high privileged attacker\nwith network access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://www.cve.org/CVERecord?id=CVE-2022-21297"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.27-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"8.0.27-0ubuntu0.21.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.27","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-21296","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:37.511212+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: JAXP). Supported versions that are\naffected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM\nEnterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability\nallows unauthenticated attacker with network access via multiple protocols\nto compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful\nattacks of this vulnerability can result in unauthorized read access to a\nsubset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible\ndata. Note: This vulnerability applies to Java deployments, typically in\nclients running sandboxed Java Web Start applications or sandboxed Java\napplets, that load and run untrusted code (e.g., code that comes from the\ninternet) and rely on the Java sandbox for security. This vulnerability can\nalso be exploited by using APIs in the specified Component, e.g., through a\nweb service which supplies data to the APIs. CVSS 3.1 Base Score 5.3\n(Confidentiality impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21296"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u342-b07-0ubuntu1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8u342-b07-0ubuntu1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u342-b07-0ubuntu1~16.04","component":null,"pocket":"esm-infra"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21295","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:37.511212+00:00","description":"\nVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization\n(component: Core). The supported version that is affected is Prior to\n6.1.32. Easily exploitable vulnerability allows low privileged attacker\nwith logon to the infrastructure where Oracle VM VirtualBox executes to\ncompromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM\nVirtualBox, attacks may significantly impact additional products.\nSuccessful attacks of this vulnerability can result in unauthorized read\naccess to a subset of Oracle VM VirtualBox accessible data. Note: This\nvulnerability applies to Windows systems only. CVSS 3.1 Base Score 3.8\n(Confidentiality impacts). CVSS Vector:\n(CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":3.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":3.8,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://www.cve.org/CVERecord?id=CVE-2022-21295"],"bugs":[""],"patches":{"virtualbox":[]},"tags":{},"packages":[{"name":"virtualbox","source":"https://ubuntu.com/security/cve?package=virtualbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=virtualbox","debian":"https://tracker.debian.org/pkg/virtualbox","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"debian: Windows-specific","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-21294","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:37.511212+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: Libraries). Supported versions that\nare affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle\nGraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable\nvulnerability allows unauthenticated attacker with network access via\nmultiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise\nEdition. Successful attacks of this vulnerability can result in\nunauthorized ability to cause a partial denial of service (partial DOS) of\nOracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability\napplies to Java deployments, typically in clients running sandboxed Java\nWeb Start applications or sandboxed Java applets, that load and run\nuntrusted code (e.g., code that comes from the internet) and rely on the\nJava sandbox for security. This vulnerability can also be exploited by\nusing APIs in the specified Component, e.g., through a web service which\nsupplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts).\nCVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21294"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u342-b07-0ubuntu1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8u342-b07-0ubuntu1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u342-b07-0ubuntu1~16.04","component":null,"pocket":"esm-infra"},{"release_codename":"kinetic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21293","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:37.511212+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: Libraries). Supported versions that\nare affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle\nGraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable\nvulnerability allows unauthenticated attacker with network access via\nmultiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise\nEdition. Successful attacks of this vulnerability can result in\nunauthorized ability to cause a partial denial of service (partial DOS) of\nOracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability\napplies to Java deployments, typically in clients running sandboxed Java\nWeb Start applications or sandboxed Java applets, that load and run\nuntrusted code (e.g., code that comes from the internet) and rely on the\nJava sandbox for security. This vulnerability can also be exploited by\nusing APIs in the specified Component, e.g., through a web service which\nsupplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts).\nCVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21293"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u342-b07-0ubuntu1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8u342-b07-0ubuntu1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u342-b07-0ubuntu1~16.04","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21291","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:37.511212+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: Hotspot). Supported versions that are\naffected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM\nEnterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability\nallows unauthenticated attacker with network access via multiple protocols\nto compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful\nattacks of this vulnerability can result in unauthorized update, insert or\ndelete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition\naccessible data. Note: This vulnerability applies to Java deployments,\ntypically in clients running sandboxed Java Web Start applications or\nsandboxed Java applets, that load and run untrusted code (e.g., code that\ncomes from the internet) and rely on the Java sandbox for security. This\nvulnerability can also be exploited by using APIs in the specified\nComponent, e.g., through a web service which supplies data to the APIs.\nCVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21291"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21283","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:32.141633+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: Libraries). Supported versions that\nare affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise\nEdition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows\nunauthenticated attacker with network access via multiple protocols to\ncompromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM\nEnterprise Edition. Note: This vulnerability applies to Java deployments,\ntypically in clients running sandboxed Java Web Start applications or\nsandboxed Java applets, that load and run untrusted code (e.g., code that\ncomes from the internet) and rely on the Java sandbox for security. This\nvulnerability can also be exploited by using APIs in the specified\nComponent, e.g., through a web service which supplies data to the APIs.\nCVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21283"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u342-b07-0ubuntu1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8u342-b07-0ubuntu1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u342-b07-0ubuntu1~16.04","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21282","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:32.141633+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: JAXP). Supported versions that are\naffected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM\nEnterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability\nallows unauthenticated attacker with network access via multiple protocols\nto compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful\nattacks of this vulnerability can result in unauthorized read access to a\nsubset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible\ndata. Note: This vulnerability applies to Java deployments, typically in\nclients running sandboxed Java Web Start applications or sandboxed Java\napplets, that load and run untrusted code (e.g., code that comes from the\ninternet) and rely on the Java sandbox for security. This vulnerability can\nalso be exploited by using APIs in the specified Component, e.g., through a\nweb service which supplies data to the APIs. CVSS 3.1 Base Score 5.3\n(Confidentiality impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21282"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"released","description":"8u342-b07-0ubuntu1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8u342-b07-0ubuntu1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8u342-b07-0ubuntu1~16.04","component":null,"pocket":"esm-infra"},{"release_codename":"kinetic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"8u342-b07-0ubuntu1~22.04","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21278","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:35.991250+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Optimizer). Supported versions that are affected are 8.0.26 and\nprior. Easily exploitable vulnerability allows low privileged attacker with\nnetwork access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer as well as unauthorized update, insert or delete access to some of\nMySQL Server accessible data. CVSS 3.1 Base Score 7.1 (Integrity and\nAvailability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":7.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://www.cve.org/CVERecord?id=CVE-2022-21278"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.27-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"8.0.27-0ubuntu0.21.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.27","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.27-0ubuntu0.21.10.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-21277","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:32.141633+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: ImageIO). Supported versions that are\naffected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise\nEdition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows\nunauthenticated attacker with network access via multiple protocols to\ncompromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM\nEnterprise Edition. Note: This vulnerability applies to Java deployments,\ntypically in clients running sandboxed Java Web Start applications or\nsandboxed Java applets, that load and run untrusted code (e.g., code that\ncomes from the internet) and rely on the Java sandbox for security. This\nvulnerability can also be exploited by using APIs in the specified\nComponent, e.g., through a web service which supplies data to the APIs.\nCVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5313-1","https://ubuntu.com/security/notices/USN-5313-2","https://www.cve.org/CVERecord?id=CVE-2022-21277"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"end of standard support, was ignored [superseded by openjdk-17]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"released","description":"17.0.2+8-1~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"17.0.2+8-1~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"17.0.2+8-1~22.10","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"17.0.2+8-1","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"superseded by openjdk-19","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"released","description":"11.0.14+9-0ubuntu2~18.04","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"11.0.14+9-0ubuntu2~20.04","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"11.0.14+9-0ubuntu2~22.10","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"11.0.14.1+1-0ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5313-1"],"notices":[{"id":"USN-5313-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2022-03-07T11:29:10.408687","description":"It was discovered that OpenJDK incorrectly handled deserialization filters.\nAn attacker could possibly use this issue to insert, delete or obtain\nsensitive information. (CVE-2022-21248)\n\nIt was discovered that OpenJDK incorrectly read uncompressed TIFF files.\nAn attacker could possibly use this issue to cause a denial of service via\na specially crafted TIFF file. (CVE-2022-21277)\n\nJonni Passki discovered that OpenJDK incorrectly verified access\nrestrictions when performing URI resolution. An attacker could possibly\nuse this issue to obtain sensitive information. (CVE-2022-21282)\n\nIt was discovered that OpenJDK incorrectly handled certain regular\nexpressions in the Pattern class implementation. An attacker could\npossibly use this issue to cause a denial of service. (CVE-2022-21283)\n\nIt was discovered that OpenJDK incorrectly handled specially crafted Java\nclass files. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2022-21291)\n\nMarkus Loewe discovered that OpenJDK incorrectly validated attributes\nduring object deserialization. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2022-21293, CVE-2022-21294)\n\nDan Rabe discovered that OpenJDK incorrectly verified access permissions\nin the JAXP component. An attacker could possibly use this to specially\ncraft an XML file to obtain sensitive information. (CVE-2022-21296)\n\nIt was discovered that OpenJDK incorrectly handled XML entities. An\nattacker could use this to specially craft an XML file that, when parsed,\nwould possibly cause a denial of service. (CVE-2022-21299)\n\nZhiqiang Zang discovered that OpenJDK incorrectly handled array indexes.\nAn attacker could possibly use this issue to obtain sensitive information.\n(CVE-2022-21305)\n\nIt was discovered that OpenJDK incorrectly read very long attributes\nvalues in JAR file manifests. An attacker could possibly use this to\nspecially craft JAR file to cause a denial of service. (CVE-2022-21340)\n\nIt was discovered that OpenJDK incorrectly validated input from serialized\nstreams. An attacker cold possibly use this issue to bypass sandbox\nrestrictions. (CVE-2022-21341)\n\nFabian Meumertzheim discovered that OpenJDK incorrectly handled certain\nspecially crafted BMP or TIFF files. An attacker could possibly use this\nto cause a denial of service. (CVE-2022-21360, CVE-2022-21366)\n\nIt was discovered that an integer overflow could be triggered in OpenJDK\nBMPImageReader class implementation. An attacker could possibly use this\nto specially craft a BMP file to cause a denial of service.\n(CVE-2022-21365)\n","is_hidden":false,"release_packages":{"impish":[{"name":"openjdk-17","version":"17.0.2+8-1~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~22.10","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~22.10","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~22.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~22.10","pocket":"security"}],"bionic":[{"name":"openjdk-17","version":"17.0.2+8-1~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~18.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~18.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~18.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~18.04","pocket":"security"}],"focal":[{"name":"openjdk-17","version":"17.0.2+8-1~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-lts","version":"11.0.14+9-0ubuntu2~20.04","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-17-demo","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-17-jdk","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-source","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-zero","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-doc","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre-zero","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jdk-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jre-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-source","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre-headless","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-jdk-headless","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-11-jre","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-jre","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"},{"name":"openjdk-11-demo","version":"11.0.14+9-0ubuntu2~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-lts","version_link":"https://launchpad.net/ubuntu/+source/openjdk-lts/11.0.14+9-0ubuntu2~20.04","pocket":"security"},{"name":"openjdk-17-doc","version":"17.0.2+8-1~20.04","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-17","version_link":"https://launchpad.net/ubuntu/+source/openjdk-17/17.0.2+8-1~20.04","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21305","CVE-2022-21299","CVE-2022-21340","CVE-2022-21366","CVE-2022-21277","CVE-2022-21291","CVE-2022-21294","CVE-2022-21293","CVE-2022-21360","CVE-2022-21365","CVE-2022-21341","CVE-2022-21248","CVE-2022-21296","CVE-2022-21282","CVE-2022-21283"]}]},{"id":"CVE-2022-21271","published":"2022-01-19T12:15:00","updated_at":"2025-07-11T07:49:32.141633+00:00","description":"\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition\nproduct of Oracle Java SE (component: Libraries). Supported versions that\nare affected are Oracle Java SE: 7u321, 8u311, 11.0.13; Oracle GraalVM\nEnterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability\nallows unauthenticated attacker with network access via multiple protocols\nto compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful\nattacks of this vulnerability can result in unauthorized ability to cause a\npartial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM\nEnterprise Edition. Note: This vulnerability applies to Java deployments,\ntypically in clients running sandboxed Java Web Start applications or\nsandboxed Java applets, that load and run untrusted code (e.g., code that\ncomes from the internet) and rely on the Java sandbox for security. This\nvulnerability can also be exploited by using APIs in the specified\nComponent, e.g., through a web service which supplies data to the APIs.\nCVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).","ubuntu_description":"","notes":[{"author":"ebarretto","note":"Specific to Oracle Java"}],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://www.cve.org/CVERecord?id=CVE-2022-21271"],"bugs":[""],"patches":{"openjdk-8":[],"icedtea-web":[],"openjdk-9":[],"openjdk-lts":[],"openjdk-12":[],"openjdk-13":[],"openjdk-15":[],"openjdk-16":[],"openjdk-17":[],"openjdk-18":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-12","source":"https://ubuntu.com/security/cve?package=openjdk-12","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-12","debian":"https://tracker.debian.org/pkg/openjdk-12","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-13","source":"https://ubuntu.com/security/cve?package=openjdk-13","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-13","debian":"https://tracker.debian.org/pkg/openjdk-13","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-15","source":"https://ubuntu.com/security/cve?package=openjdk-15","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-15","debian":"https://tracker.debian.org/pkg/openjdk-15","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-16","source":"https://ubuntu.com/security/cve?package=openjdk-16","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-16","debian":"https://tracker.debian.org/pkg/openjdk-16","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-17","source":"https://ubuntu.com/security/cve?package=openjdk-17","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-17","debian":"https://tracker.debian.org/pkg/openjdk-17","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"openjdk-18","source":"https://ubuntu.com/security/cve?package=openjdk-18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-18","debian":"https://tracker.debian.org/pkg/openjdk-18","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-8","source":"https://ubuntu.com/security/cve?package=openjdk-8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-8","debian":"https://tracker.debian.org/pkg/openjdk-8","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"openjdk-9","source":"https://ubuntu.com/security/cve?package=openjdk-9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-9","debian":"https://tracker.debian.org/pkg/openjdk-9","statuses":[{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-lts","source":"https://ubuntu.com/security/cve?package=openjdk-lts","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-lts","debian":"https://tracker.debian.org/pkg/openjdk-lts","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2022-21270","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:35.991250+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Federated). Supported versions that are affected are 5.7.36 and\nprior and 8.0.27 and prior. Easily exploitable vulnerability allows high\nprivileged attacker with network access via multiple protocols to\ncompromise MySQL Server. Successful attacks of this vulnerability can\nresult in unauthorized ability to cause a hang or frequently repeatable\ncrash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability\nimpacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://ubuntu.com/security/notices/USN-5270-2","https://www.cve.org/CVERecord?id=CVE-2022-21270"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"released","description":"5.7.37-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.7.37","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"5.7.37-0ubuntu0.16.04.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1","USN-5270-2"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]},{"id":"USN-5270-2","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T15:35:00.135566","description":"USN-5270-1 fixed several vulnerabilities in MySQL. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Multiple security issues were discovered in MySQL and this update includes\n new upstream MySQL versions to fix these issues.\n\n MySQL has been updated to 5.7.37 in Ubuntu 16.04 ESM.\n\n In addition to security fixes, the updated packages contain bug fixes, new\n features, and possibly incompatible changes.\n\n Please see the following for more information:\n\n https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\n https://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"xenial":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","description":"MySQL database","is_source":true},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-common","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.16.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2022-21304","CVE-2022-21344","CVE-2022-21367","CVE-2022-21303","CVE-2022-21270","CVE-2022-21245"]}]},{"id":"CVE-2022-21265","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:30.600810+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Optimizer). Supported versions that are affected are 8.0.27 and\nprior. Easily exploitable vulnerability allows high privileged attacker\nwith network access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized update,\ninsert or delete access to some of MySQL Server accessible data and\nunauthorized ability to cause a partial denial of service (partial DOS) of\nMySQL Server. CVSS 3.1 Base Score 3.8 (Integrity and Availability impacts).\nCVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":3.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":3.8,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://www.cve.org/CVERecord?id=CVE-2022-21265"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]}]},{"id":"CVE-2022-21264","published":"2022-01-19T12:15:00","updated_at":"2025-08-18T17:17:30.600810+00:00","description":"\nVulnerability in the MySQL Server product of Oracle MySQL (component:\nServer: Optimizer). Supported versions that are affected are 8.0.27 and\nprior. Easily exploitable vulnerability allows high privileged attacker\nwith network access via multiple protocols to compromise MySQL Server.\nSuccessful attacks of this vulnerability can result in unauthorized ability\nto cause a hang or frequently repeatable crash (complete DOS) of MySQL\nServer. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector:\n(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).","ubuntu_description":"","notes":[{"author":"leosilva","note":"since 5.5 is no longer upstream supported and so far we cannot\npatch it, marking it as ignored."}],"codename":null,"priority":"medium","cvss3":4.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.oracle.com/security-alerts/cpujan2022.html","https://ubuntu.com/security/notices/USN-5270-1","https://www.cve.org/CVERecord?id=CVE-2022-21264"],"bugs":[""],"patches":{"mysql-5.5":[],"mysql-5.6":[],"mysql-5.7":[],"mysql-8.0":[],"mariadb-5.5":[],"mariadb-10.0":[],"mariadb-10.1":[],"mariadb-10.3":[],"mariadb-10.5":[],"percona-xtradb-cluster-5.5":[],"percona-xtradb-cluster-5.6":[],"percona-server-5.6":[]},"tags":{},"packages":[{"name":"percona-xtradb-cluster-5.6","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.6","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-server-5.6","source":"https://ubuntu.com/security/cve?package=percona-server-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-server-5.6","debian":"https://tracker.debian.org/pkg/percona-server-5.6","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mariadb-10.0","source":"https://ubuntu.com/security/cve?package=mariadb-10.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.0","debian":"https://tracker.debian.org/pkg/mariadb-10.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.1","source":"https://ubuntu.com/security/cve?package=mariadb-10.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.1","debian":"https://tracker.debian.org/pkg/mariadb-10.1","statuses":[{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.3","source":"https://ubuntu.com/security/cve?package=mariadb-10.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.3","debian":"https://tracker.debian.org/pkg/mariadb-10.3","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-10.5","source":"https://ubuntu.com/security/cve?package=mariadb-10.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-10.5","debian":"https://tracker.debian.org/pkg/mariadb-10.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mariadb-5.5","source":"https://ubuntu.com/security/cve?package=mariadb-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mariadb-5.5","debian":"https://tracker.debian.org/pkg/mariadb-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"this mysql cve does not affect mariadb","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.6","source":"https://ubuntu.com/security/cve?package=mysql-5.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.6","debian":"https://tracker.debian.org/pkg/mysql-5.6","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-5.7","source":"https://ubuntu.com/security/cve?package=mysql-5.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.7","debian":"https://tracker.debian.org/pkg/mysql-5.7","statuses":[{"release_codename":"bionic","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"8.x only","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mysql-8.0","source":"https://ubuntu.com/security/cve?package=mysql-8.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-8.0","debian":"https://tracker.debian.org/pkg/mysql-8.0","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"8.0.28-0ubuntu0.20.04.3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"8.0.28-0ubuntu0.21.10.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8.0.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"8.0.28-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"percona-xtradb-cluster-5.5","source":"https://ubuntu.com/security/cve?package=percona-xtradb-cluster-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=percona-xtradb-cluster-5.5","debian":"https://tracker.debian.org/pkg/percona-xtradb-cluster-5.5","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-5270-1"],"notices":[{"id":"USN-5270-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. In general, a standard system update will make all the necessary\nchanges.\n","references":[],"published":"2022-02-03T12:01:37.075486","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 8.0.28 in Ubuntu 20.04 LTS and Ubuntu 21.10.\nUbuntu 18.04 LTS has been updated to MySQL 5.7.37.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttps://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-37.html\nhttps://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-28.html\nhttps://www.oracle.com/security-alerts/cpujan2022.html\n","is_hidden":false,"release_packages":{"impish":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.21.10.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.21.10.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.21.10.3","pocket":"security"}],"focal":[{"name":"mysql-8.0","version":"8.0.28-0ubuntu0.20.04.3","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient-dev","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-router","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"libmysqlclient21","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-core-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-server-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-testsuite","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-client-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"},{"name":"mysql-source-8.0","version":"8.0.28-0ubuntu0.20.04.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-8.0","version_link":"https://launchpad.net/ubuntu/+source/mysql-8.0/8.0.28-0ubuntu0.20.04.3","pocket":"security"}],"bionic":[{"name":"mysql-5.7","version":"5.7.37-0ubuntu0.18.04.1","description":"MySQL database","is_source":true},{"name":"mysql-client","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-source-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-client-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqlclient20","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-server-core-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"libmysqld-dev","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"},{"name":"mysql-testsuite-5.7","version":"5.7.37-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.7","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.37-0ubuntu0.18.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2022-21303","CVE-2022-21358","CVE-2022-21370","CVE-2022-21256","CVE-2022-21302","CVE-2022-21351","CVE-2022-21379","CVE-2022-21368","CVE-2022-21249","CVE-2022-21270","CVE-2022-21264","CVE-2022-21339","CVE-2022-21342","CVE-2022-21344","CVE-2022-21378","CVE-2022-21301","CVE-2022-21374","CVE-2022-21362","CVE-2022-21348","CVE-2022-21254","CVE-2022-21367","CVE-2022-21245","CVE-2022-21372","CVE-2022-21265","CVE-2022-21253","CVE-2022-21304"]}]}],"offset":40000,"limit":20,"total_results":79316}