{"cves":[{"id":"CVE-2019-20907","published":"2020-07-13T13:15:00","updated_at":"2025-08-25T23:10:08.053880+00:00","description":"\nIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a\nTAR archive leading to an infinite loop when opened by tarfile.open,\nbecause _proc_pax lacks header validation.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugs.python.org/issue39017","https://github.com/python/cpython/pull/21454","https://ubuntu.com/security/notices/USN-4428-1","https://ubuntu.com/security/notices/USN-4754-3","https://www.cve.org/CVERecord?id=CVE-2019-20907","https://ubuntu.com/security/notices/USN-6891-1"],"bugs":[""],"patches":{"python2.7":[],"python3.4":[],"python3.5":[],"python3.6":["upstream: https://github.com/python/cpython/commit/47a2955589bdb1a114d271496ff803ad73f954b8"],"python3.7":["upstream: https://github.com/python/cpython/commit/79c6b602efc9a906c8496f3d5f4d54c54b48fa06"],"python3.8":["upstream: https://github.com/python/cpython/commit/c55479556db015f48fc8bbca17f64d3e65598559"]},"tags":{},"packages":[{"name":"python2.7","source":"https://ubuntu.com/security/cve?package=python2.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python2.7","debian":"https://tracker.debian.org/pkg/python2.7","statuses":[{"release_codename":"bionic","status":"released","description":"2.7.17-1~18.04ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.7.6-8ubuntu0.6+esm6","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.7.12-1ubuntu0~16.04.12","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.7.18-1~20.04.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.7.18-13ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.7.18-13ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"python3.4","source":"https://ubuntu.com/security/cve?package=python3.4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.4","debian":"https://tracker.debian.org/pkg/python3.4","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"3.4.3-1ubuntu1~14.04.7+esm7","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"python3.5","source":"https://ubuntu.com/security/cve?package=python3.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.5","debian":"https://tracker.debian.org/pkg/python3.5","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"3.5.2-2ubuntu0~16.04.11","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"python3.6","source":"https://ubuntu.com/security/cve?package=python3.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.6","debian":"https://tracker.debian.org/pkg/python3.6","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.6.9-1~18.04ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"python3.7","source":"https://ubuntu.com/security/cve?package=python3.7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.7","debian":"https://tracker.debian.org/pkg/python3.7","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.7.5-2ubuntu1~18.04.2+esm3","component":null,"pocket":"esm-apps"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"python3.8","source":"https://ubuntu.com/security/cve?package=python3.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python3.8","debian":"https://tracker.debian.org/pkg/python3.8","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"3.8.2-1ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"3.8.5-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.8.5-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"3.8.0-3ubuntu1~18.04.2+esm2","component":null,"pocket":"esm-apps"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4428-1","USN-4754-3","USN-6891-1"],"notices":[{"id":"USN-4428-1","title":"Python vulnerabilities","summary":"Several security issues were fixed in Python.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-07-22T12:59:16.665934","description":"It was discovered that Python documentation had a misleading information.\nA security issue could be possibly caused by wrong assumptions of this information.\nThis issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM, Ubuntu 16.04 LTS and\nUbuntu 18.04 LTS. (CVE-2019-17514)\n\nIt was discovered that Python incorrectly handled certain TAR archives.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2019-20907)\n\nIt was discovered that incorrectly handled certain ZIP files. An attacker\ncould possibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2019-9674)\n\nIt was discovered that Python incorrectly handled certain IP values.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2020-14422)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"python2.7","version":"2.7.17-1~18.04ubuntu1.1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python2.7","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"idle-python3.6","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython2.7","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython2.7-dev","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython2.7-minimal","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython2.7-stdlib","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython2.7-testsuite","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython3.6","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython3.6-dev","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython3.6-minimal","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython3.6-stdlib","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"libpython3.6-testsuite","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"python2.7","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"python2.7-dev","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"python2.7-doc","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"python2.7-examples","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"python2.7-minimal","version":"2.7.17-1~18.04ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.17-1~18.04ubuntu1.1","pocket":"security"},{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"python3.6-dev","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"python3.6-doc","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"python3.6-examples","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"python3.6-minimal","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"},{"name":"python3.6-venv","version":"3.6.9-1~18.04ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":"https://launchpad.net/ubuntu/+source/python3.6/3.6.9-1~18.04ubuntu1.1","pocket":"security"}],"focal":[{"name":"python3.8","version":"3.8.2-1ubuntu1.2","description":"Interactive high-level object-oriented language (version 3.8)","is_source":true},{"name":"idle-python3.8","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"libpython3.8","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"libpython3.8-dev","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"libpython3.8-minimal","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"libpython3.8-stdlib","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"libpython3.8-testsuite","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"python3.8","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"python3.8-dev","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"python3.8-doc","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"python3.8-examples","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"python3.8-minimal","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"},{"name":"python3.8-venv","version":"3.8.2-1ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.2-1ubuntu1.2","pocket":"security"}],"precise":[{"name":"python2.7","version":"2.7.3-0ubuntu3.18","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python2.7","version":"2.7.3-0ubuntu3.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.3-0ubuntu3.18"},{"name":"libpython2.7","version":"2.7.3-0ubuntu3.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.3-0ubuntu3.18"},{"name":"python2.7","version":"2.7.3-0ubuntu3.18","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.3-0ubuntu3.18"},{"name":"python2.7-dev","version":"2.7.3-0ubuntu3.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.3-0ubuntu3.18"},{"name":"python2.7-doc","version":"2.7.3-0ubuntu3.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.3-0ubuntu3.18"},{"name":"python2.7-examples","version":"2.7.3-0ubuntu3.18","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.3-0ubuntu3.18"},{"name":"python2.7-minimal","version":"2.7.3-0ubuntu3.18","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.3-0ubuntu3.18"}],"trusty":[{"name":"python2.7","version":"2.7.6-8ubuntu0.6+esm6","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.4","version":"3.4.3-1ubuntu1~14.04.7+esm7","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python2.7","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"idle-python3.4","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"libpython2.7","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"libpython2.7-dev","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"libpython2.7-minimal","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"libpython2.7-stdlib","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"libpython2.7-testsuite","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"libpython3.4","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"libpython3.4-dev","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"libpython3.4-minimal","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"libpython3.4-stdlib","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"libpython3.4-testsuite","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"python2.7","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"python2.7-dev","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"python2.7-doc","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"python2.7-examples","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"python2.7-minimal","version":"2.7.6-8ubuntu0.6+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.6-8ubuntu0.6+esm6"},{"name":"python3.4","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"python3.4-dev","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"python3.4-doc","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"python3.4-examples","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"python3.4-minimal","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"},{"name":"python3.4-venv","version":"3.4.3-1ubuntu1~14.04.7+esm7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.4","version_link":"https://launchpad.net/ubuntu/+source/python3.4/3.4.3-1ubuntu1~14.04.7+esm7"}],"xenial":[{"name":"python2.7","version":"2.7.12-1ubuntu0~16.04.12","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.11","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python2.7","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"idle-python3.5","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"libpython2.7","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"libpython2.7-dev","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"libpython2.7-minimal","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"libpython2.7-stdlib","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"libpython2.7-testsuite","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"libpython3.5","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"libpython3.5-dev","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"libpython3.5-minimal","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"libpython3.5-stdlib","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"libpython3.5-testsuite","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"python2.7","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"python2.7-dev","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"python2.7-doc","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"python2.7-examples","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"python2.7-minimal","version":"2.7.12-1ubuntu0~16.04.12","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12","pocket":"security"},{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"python3.5-dev","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"python3.5-doc","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"python3.5-examples","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"python3.5-minimal","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"},{"name":"python3.5-venv","version":"3.5.2-2ubuntu0~16.04.11","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":"https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-20907","CVE-2019-9674","CVE-2019-17514","CVE-2020-14422"]},{"id":"USN-4754-3","title":"Python vulnerabilities","summary":"Several security issues were fixed in Python 2.7 and Python 3.8.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2021-03-12T14:07:56.469671","description":"USN-4754-1 fixed vulnerabilities in Python. This update provides\nthe corresponding updates for Ubuntu 18.04 and Ubuntu 20.04.\n\nIn the case of Python 2.7 for 20.04, these additional fixes are included:\n\nIt was dicovered that Python allowed remote attackers to cause a denial of\nservice (resource consumption) via a ZIP bomb. (CVE-2019-9674)\n\nIt was discovered that Python had potentially misleading information about\nwhether sorting occurs. This fix updates the documentation about it.\n(CVE-2019-17514)\n\nIt was discovered that Python incorrectly handled certain TAR archives.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2019-20907)\n\nIt was discovered that Python allowed an HTTP server to conduct Regular\nExpression Denial of Service (ReDoS) attacks against a client because of\nurllib.request.AbstractBasicAuthHandler catastrophic backtracking.\n(CVE-2020-8492)\n\nIt was discovered that Python allowed CRLF injection if the attacker controls\nthe HTTP request method, as demonstrated by inserting CR and LF control\ncharacters in the first argument of HTTPConnection.request. (CVE-2020-26116)\n\nOriginal advisory details:\n\n It was discovered that Python incorrectly handled certain inputs.\n An attacker could possibly use this issue to execute arbitrary code\n or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"python3.7","version":"3.7.5-2~18.04.4","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.8","version":"3.8.0-3~18.04.1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.7","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"idle-python3.8","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"libpython3.7","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"libpython3.7-dev","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"libpython3.7-minimal","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"libpython3.7-stdlib","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"libpython3.7-testsuite","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"libpython3.8","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"libpython3.8-dev","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"libpython3.8-minimal","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"libpython3.8-stdlib","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"libpython3.8-testsuite","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"python3.7","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"python3.7-dev","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"python3.7-doc","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"python3.7-examples","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"python3.7-minimal","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"python3.7-venv","version":"3.7.5-2~18.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":"https://launchpad.net/ubuntu/+source/python3.7/3.7.5-2~18.04.4","pocket":"security"},{"name":"python3.8","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"python3.8-dev","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"python3.8-examples","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"python3.8-minimal","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"},{"name":"python3.8-venv","version":"3.8.0-3~18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.0-3~18.04.1","pocket":"security"}],"focal":[{"name":"python2.7","version":"2.7.18-1~20.04.1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python2.7","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"libpython2.7","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"libpython2.7-dev","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"libpython2.7-minimal","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"libpython2.7-stdlib","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"libpython2.7-testsuite","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"python2.7","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"python2.7-dev","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"python2.7-doc","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"python2.7-examples","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"},{"name":"python2.7-minimal","version":"2.7.18-1~20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python2.7","version_link":"https://launchpad.net/ubuntu/+source/python2.7/2.7.18-1~20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-8492","CVE-2019-17514","CVE-2019-9674","CVE-2021-3177","CVE-2019-20907","CVE-2020-26116","CVE-2020-27619"]},{"id":"USN-6891-1","title":"Python vulnerabilities","summary":"Several security issues were fixed in Python.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-07-11T11:54:39.304153","description":"It was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2015-20107)\n\nIt was discovered that Python incorrectly used regular expressions\nvulnerable to catastrophic backtracking. A remote attacker could possibly\nuse this issue to cause a denial of service. This issue only affected\nUbuntu 14.04 LTS. (CVE-2018-1060, CVE-2018-1061)\n\nIt was discovered that Python failed to initialize Expat’s hash salt. A\nremote attacker could possibly use this issue to cause hash collisions,\nleading to a denial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-14647)\n\nIt was discovered that Python incorrectly handled certain pickle files. An\nattacker could possibly use this issue to consume memory, leading to a\ndenial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-20406)\n\nIt was discovered that Python incorrectly validated the domain when\nhandling cookies. An attacker could possibly trick Python into sending\ncookies to the wrong domain. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2018-20852)\n\nJonathan Birch and Panayiotis Panayiotou discovered that Python incorrectly\nhandled Unicode encoding during NFKC normalization. An attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-9636, CVE-2019-10160)\n\nIt was discovered that Python incorrectly parsed certain email addresses. A\nremote attacker could possibly use this issue to trick Python applications\ninto accepting email addresses that should be denied. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-16056)\n\nIt was discovered that the Python documentation XML-RPC server incorrectly\nhandled certain fields. A remote attacker could use this issue to execute a\ncross-site scripting (XSS) attack. This issue only affected Ubuntu 14.04\nLTS. (CVE-2019-16935)\n\nIt was discovered that Python documentation had a misleading information.\nA security issue could be possibly caused by wrong assumptions of this\ninformation. This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04\nLTS. (CVE-2019-17514)\n\nIt was discovered that Python incorrectly stripped certain characters from\nrequests. A remote attacker could use this issue to perform CRLF injection.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2019-18348)\n\nIt was discovered that Python incorrectly handled certain TAR archives.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2019-20907)\n\nColin Read and Nicolas Edet discovered that Python incorrectly handled\nparsing certain X509 certificates. An attacker could possibly use this\nissue to cause Python to crash, resulting in a denial of service. This\nissue only affected Ubuntu 14.04 LTS. (CVE-2019-5010)\n\nIt was discovered that incorrectly handled certain ZIP files. An attacker\ncould possibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 14.04 LTS. (CVE-2019-9674)\n\nIt was discovered that Python incorrectly handled certain urls. A remote\nattacker could possibly use this issue to perform CRLF injection attacks.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2019-9740, CVE-2019-9947)\n\nSihoon Lee discovered that Python incorrectly handled the local_file:\nscheme. A remote attacker could possibly use this issue to bypass blocklist\nmeschanisms. This issue only affected Ubuntu 14.04 LTS. (CVE-2019-9948)\n\nIt was discovered that Python incorrectly handled certain IP values.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2020-14422)\n\nIt was discovered that Python incorrectly handled certain character\nsequences. A remote attacker could possibly use this issue to perform\nCRLF injection. This issue only affected Ubuntu 14.04 LTS and Ubuntu\n18.04 LTS. (CVE-2020-26116)\n\nIt was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code\nor cause a denial of service. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2020-27619, CVE-2021-3177)\n\nIt was discovered that Python incorrectly handled certain HTTP requests.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2020-8492)\n\nIt was discovered that the Python stdlib ipaddress API incorrectly handled\noctal strings. A remote attacker could possibly use this issue to perform a\nwide variety of attacks, including bypassing certain access restrictions.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2021-29921)\n\nDavid Schwörer discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2021-3426)\n\nIt was discovered that Python incorrectly handled certain RFCs.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 14.04 LTS. (CVE-2021-3733)\n\nIt was discovered that Python incorrectly handled certain server\nresponses. An attacker could possibly use this issue to cause a denial of\nservice. This issue only affected Ubuntu 14.04 LTS. (CVE-2021-3737)\n\nIt was discovered that Python incorrectly handled certain FTP requests.\nAn attacker could possibly use this issue to expose sensitive information.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2021-4189)\n\nIt was discovered that Python incorrectly handled certain inputs.\nAn attacker could possibly use this issue to execute arbitrary code.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2022-0391)\n\nDevin Jeanpierre discovered that Python incorrectly handled sockets when\nthe multiprocessing module was being used. A local attacker could possibly\nuse this issue to execute arbitrary code and escalate privileges.\nThis issue only affected Ubuntu 22.04 LTS. (CVE-2022-42919)\n\nIt was discovered that Python incorrectly handled certain inputs. If a\nuser or an automated system were tricked into running a specially\ncrafted input, a remote attacker could possibly use this issue to cause a\ndenial of service. This issue only affected Ubuntu 14.04 LTS,\nUbuntu 18.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-45061, CVE-2023-24329)\n\nIt was discovered that Python incorrectly handled certain scripts.\nAn attacker could possibly use this issue to execute arbitrary code\nor cause a crash. This issue only affected Ubuntu 14.04 LTS and\nUbuntu 18.04 LTS. (CVE-2022-48560)\n\nIt was discovered that Python incorrectly handled certain plist files.\nIf a user or an automated system were tricked into processing a specially\ncrafted plist file, an attacker could possibly use this issue to consume\nresources, resulting in a denial of service. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-48564)\n\nIt was discovered that Python did not properly handle XML entity\ndeclarations in plist files. An attacker could possibly use this\nvulnerability to perform an XML External Entity (XXE) injection,\nresulting in a denial of service or information disclosure. This issue\nonly affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-48565)\n\nIt was discovered that Python did not properly provide constant-time\nprocessing for a crypto operation. An attacker could possibly use this\nissue to perform a timing attack and recover sensitive information. This\nissue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.\n(CVE-2022-48566)\n\nIt was discovered that Python instances of ssl.SSLSocket were vulnerable\nto a bypass of the TLS handshake. An attacker could possibly use this\nissue to cause applications to treat unauthenticated received data before\nTLS handshake as authenticated data after TLS handshake. This issue only\naffected Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu\n22.04 LTS. (CVE-2023-40217)\n\nIt was discovered that Python incorrectly handled null bytes when\nnormalizing pathnames. An attacker could possibly use this issue to bypass\ncertain filename checks. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2023-41105)\n\nIt was discovered that Python incorrectly handled privilege with certain\nparameters. An attacker could possibly use this issue to maintain the\noriginal processes' groups before starting the new process. This issue\nonly affected Ubuntu 23.10. (CVE-2023-6507)\n\nIt was discovered that Python incorrectly handled symlinks in temp files.\nAn attacker could possibly use this issue to modify the permissions of\nfiles. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS and Ubuntu 23.10. (CVE-2023-6597)\n\nIt was discovered that Python incorrectly handled certain crafted zip\nfiles. An attacker could possibly use this issue to crash the program,\nresulting in a denial of service. (CVE-2024-0450)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.13+esm2","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.7","version":"3.7.5-2ubuntu1~18.04.2+esm3","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.8","version":"3.8.0-3ubuntu1~18.04.2+esm2","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.6","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"idle-python3.7","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"idle-python3.8","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.6","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-dev","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-minimal","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-stdlib","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.6-testsuite","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.7","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.7-dev","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.7-minimal","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.7-stdlib","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.7-testsuite","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8-dev","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8-minimal","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8-stdlib","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8-testsuite","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.6","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-dev","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-doc","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-examples","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-minimal","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.6-venv","version":"3.6.9-1~18.04ubuntu1.13+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.6","version_link":null,"pocket":"esm-infra"},{"name":"python3.7","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-dev","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-doc","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-examples","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-minimal","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.7-venv","version":"3.7.5-2ubuntu1~18.04.2+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.7","version_link":null,"pocket":"esm-apps"},{"name":"python3.8","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.8-dev","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.8-examples","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.8-minimal","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"},{"name":"python3.8-venv","version":"3.8.0-3ubuntu1~18.04.2+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":null,"pocket":"esm-apps"}],"focal":[{"name":"python3.8","version":"3.8.10-0ubuntu1~20.04.10","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm2","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.8","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"idle-python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.8","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.8-dev","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.8-minimal","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.8-stdlib","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.8-testsuite","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"libpython3.9","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-dev","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-minimal","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-stdlib","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.9-testsuite","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.8","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-dev","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-doc","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-examples","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-full","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-minimal","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.8-venv","version":"3.8.10-0ubuntu1~20.04.10","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.8","version_link":"https://launchpad.net/ubuntu/+source/python3.8/3.8.10-0ubuntu1~20.04.10","pocket":"security"},{"name":"python3.9","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-dev","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-doc","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-examples","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-full","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-minimal","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"},{"name":"python3.9-venv","version":"3.9.5-3ubuntu0~20.04.1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.9","version_link":null,"pocket":"esm-apps"}],"jammy":[{"name":"python3.10","version":"3.10.12-1~22.04.4","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.11","version":"3.11.0~rc1-1~22.04.1~esm1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.10","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"idle-python3.11","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.10","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.10-dev","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.10-minimal","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.10-stdlib","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.10-testsuite","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"libpython3.11","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.11-dev","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.11-minimal","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.11-stdlib","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"libpython3.11-testsuite","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.10","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-dev","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-doc","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-examples","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-full","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-minimal","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-nopie","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.10-venv","version":"3.10.12-1~22.04.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.10","version_link":"https://launchpad.net/ubuntu/+source/python3.10/3.10.12-1~22.04.4","pocket":"security"},{"name":"python3.11","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-dev","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-doc","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-examples","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-full","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-minimal","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-nopie","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"},{"name":"python3.11-venv","version":"3.11.0~rc1-1~22.04.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":null,"pocket":"esm-apps"}],"mantic":[{"name":"python3.11","version":"3.11.6-3ubuntu0.1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"python3.12","version":"3.12.0-1ubuntu0.1","description":"Interactive high-level object-oriented language (version 3.12)","is_source":true},{"name":"idle-python3.11","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"idle-python3.12","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.11","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.11-dev","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.11-minimal","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.11-stdlib","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.11-testsuite","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"libpython3.12","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.12-dev","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.12-minimal","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.12-stdlib","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"libpython3.12-testsuite","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.11","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-dev","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-doc","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-examples","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-full","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-minimal","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-nopie","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.11-venv","version":"3.11.6-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.11","version_link":"https://launchpad.net/ubuntu/+source/python3.11/3.11.6-3ubuntu0.1","pocket":"security"},{"name":"python3.12","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-dev","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-doc","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-examples","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-full","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-minimal","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-nopie","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"},{"name":"python3.12-venv","version":"3.12.0-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.12","version_link":"https://launchpad.net/ubuntu/+source/python3.12/3.12.0-1ubuntu0.1","pocket":"security"}],"trusty":[{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.5","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-dev","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-minimal","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-stdlib","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-testsuite","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-dev","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-doc","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-examples","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-minimal","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-venv","version":"3.5.2-2ubuntu0~16.04.4~14.04.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm13","description":"An interactive high-level object-oriented language","is_source":true},{"name":"idle-python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-dev","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-minimal","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-stdlib","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"libpython3.5-testsuite","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-dev","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-doc","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-examples","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-minimal","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"},{"name":"python3.5-venv","version":"3.5.2-2ubuntu0~16.04.13+esm13","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/python3.5","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2021-29921","CVE-2021-3733","CVE-2022-48560","CVE-2019-5010","CVE-2020-26116","CVE-2019-16056","CVE-2019-16935","CVE-2018-14647","CVE-2018-20406","CVE-2019-10160","CVE-2015-20107","CVE-2020-27619","CVE-2022-48564","CVE-2021-4189","CVE-2022-0391","CVE-2019-17514","CVE-2019-9740","CVE-2023-6507","CVE-2019-18348","CVE-2018-20852","CVE-2018-1061","CVE-2019-9674","CVE-2019-9636","CVE-2020-8492","CVE-2019-20907","CVE-2019-9947","CVE-2023-41105","CVE-2023-6597","CVE-2021-3737","CVE-2022-48566","CVE-2018-1060","CVE-2022-45061","CVE-2023-40217","CVE-2022-42919","CVE-2022-48565","CVE-2024-0450","CVE-2019-9948","CVE-2020-14422","CVE-2021-3426","CVE-2021-3177","CVE-2023-24329"]}]},{"id":"CVE-2020-9850","published":"2020-07-13T00:00:00","updated_at":"2025-08-25T23:30:05.964465+00:00","description":"\nA logic issue was addressed with improved restrictions. This issue is fixed\nin iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1,\niTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows\n7.19. A remote attacker may be able to cause arbitrary code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4422-1","https://www.cve.org/CVERecord?id=CVE-2020-9850"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit","source":"https://ubuntu.com/security/cve?package=qtwebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit","debian":"https://tracker.debian.org/pkg/qtwebkit","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"impish","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.28.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.28.3-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.28.3-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-4422-1"],"notices":[{"id":"USN-4422-1","title":"WebKitGTK+ vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-07-14T14:08:23.295554","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.19.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"}],"focal":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9802","CVE-2020-9803","CVE-2020-9805","CVE-2020-9806","CVE-2020-9807","CVE-2020-9843","CVE-2020-9850"]}]},{"id":"CVE-2020-9843","published":"2020-07-13T00:00:00","updated_at":"2025-08-25T23:30:05.964465+00:00","description":"\nAn input validation issue was addressed with improved input validation.\nThis issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS\n6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2,\niCloud for Windows 7.19. Processing maliciously crafted web content may\nlead to a cross site scripting attack.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":7.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4422-1","https://www.cve.org/CVERecord?id=CVE-2020-9843"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit","source":"https://ubuntu.com/security/cve?package=qtwebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit","debian":"https://tracker.debian.org/pkg/qtwebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"impish","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.28.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.28.3-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.28.3-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-4422-1"],"notices":[{"id":"USN-4422-1","title":"WebKitGTK+ vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-07-14T14:08:23.295554","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.19.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"}],"focal":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9802","CVE-2020-9803","CVE-2020-9805","CVE-2020-9806","CVE-2020-9807","CVE-2020-9843","CVE-2020-9850"]}]},{"id":"CVE-2020-9807","published":"2020-07-13T00:00:00","updated_at":"2025-08-25T23:30:05.964465+00:00","description":"\nA memory corruption issue was addressed with improved state management.\nThis issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS\n6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2,\niCloud for Windows 7.19. Processing maliciously crafted web content may\nlead to arbitrary code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4422-1","https://www.cve.org/CVERecord?id=CVE-2020-9807"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit","source":"https://ubuntu.com/security/cve?package=qtwebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit","debian":"https://tracker.debian.org/pkg/qtwebkit","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"impish","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.28.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.28.3-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.28.3-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-4422-1"],"notices":[{"id":"USN-4422-1","title":"WebKitGTK+ vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-07-14T14:08:23.295554","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.19.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"}],"focal":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9802","CVE-2020-9803","CVE-2020-9805","CVE-2020-9806","CVE-2020-9807","CVE-2020-9843","CVE-2020-9850"]}]},{"id":"CVE-2020-9806","published":"2020-07-13T00:00:00","updated_at":"2025-08-25T23:29:59.404827+00:00","description":"\nA memory corruption issue was addressed with improved state management.\nThis issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS\n6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2,\niCloud for Windows 7.19. Processing maliciously crafted web content may\nlead to arbitrary code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4422-1","https://www.cve.org/CVERecord?id=CVE-2020-9806"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit","source":"https://ubuntu.com/security/cve?package=qtwebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit","debian":"https://tracker.debian.org/pkg/qtwebkit","statuses":[{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"focal","status":"released","description":"2.28.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.28.3-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.28.3-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-4422-1"],"notices":[{"id":"USN-4422-1","title":"WebKitGTK+ vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-07-14T14:08:23.295554","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.19.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"}],"focal":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9802","CVE-2020-9803","CVE-2020-9805","CVE-2020-9806","CVE-2020-9807","CVE-2020-9843","CVE-2020-9850"]}]},{"id":"CVE-2020-9805","published":"2020-07-13T00:00:00","updated_at":"2025-08-25T23:29:59.404827+00:00","description":"\nA logic issue was addressed with improved restrictions. This issue is fixed\nin iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1,\niTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows\n7.19. Processing maliciously crafted web content may lead to universal\ncross site scripting.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":7.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":7.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4422-1","https://www.cve.org/CVERecord?id=CVE-2020-9805"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit","source":"https://ubuntu.com/security/cve?package=qtwebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit","debian":"https://tracker.debian.org/pkg/qtwebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"focal","status":"released","description":"2.28.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.28.3-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.28.3-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-4422-1"],"notices":[{"id":"USN-4422-1","title":"WebKitGTK+ vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-07-14T14:08:23.295554","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.19.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"}],"focal":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9802","CVE-2020-9803","CVE-2020-9805","CVE-2020-9806","CVE-2020-9807","CVE-2020-9843","CVE-2020-9850"]}]},{"id":"CVE-2020-9803","published":"2020-07-13T00:00:00","updated_at":"2025-08-25T23:29:59.404827+00:00","description":"\nA memory corruption issue was addressed with improved validation. This\nissue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5,\nSafari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud\nfor Windows 7.19. Processing maliciously crafted web content may lead to\narbitrary code execution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4422-1","https://www.cve.org/CVERecord?id=CVE-2020-9803"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit","source":"https://ubuntu.com/security/cve?package=qtwebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit","debian":"https://tracker.debian.org/pkg/qtwebkit","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"focal","status":"released","description":"2.28.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.28.3-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.28.3-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-4422-1"],"notices":[{"id":"USN-4422-1","title":"WebKitGTK+ vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-07-14T14:08:23.295554","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.19.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"}],"focal":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9802","CVE-2020-9803","CVE-2020-9805","CVE-2020-9806","CVE-2020-9807","CVE-2020-9843","CVE-2020-9850"]}]},{"id":"CVE-2020-9802","published":"2020-07-13T00:00:00","updated_at":"2025-08-25T23:29:59.404827+00:00","description":"\nA logic issue was addressed with improved restrictions. This issue is fixed\nin iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1,\niTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows\n7.19. Processing maliciously crafted web content may lead to arbitrary code\nexecution.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4422-1","https://www.cve.org/CVERecord?id=CVE-2020-9802"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit","source":"https://ubuntu.com/security/cve?package=qtwebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit","debian":"https://tracker.debian.org/pkg/qtwebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"impish","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.28.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.28.3-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.28.3-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-4422-1"],"notices":[{"id":"USN-4422-1","title":"WebKitGTK+ vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-07-14T14:08:23.295554","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.19.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"}],"focal":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9802","CVE-2020-9803","CVE-2020-9805","CVE-2020-9806","CVE-2020-9807","CVE-2020-9843","CVE-2020-9850"]}]},{"id":"CVE-2020-13753","published":"2020-07-13T00:00:00","updated_at":"2025-08-25T23:20:10.637611+00:00","description":"\nThe bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed\nto properly block access to CLONE_NEWUSER and the TIOCSTI ioctl.\nCLONE_NEWUSER could potentially be used to confuse xdg-desktop-portal,\nwhich allows access outside the sandbox. TIOCSTI can be used to directly\nexecute commands outside the sandbox by writing to the controlling\nterminal's input buffer, similar to CVE-2017-5226.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"webkit receives limited support. For details, see\nhttps://wiki.ubuntu.com/SecurityTeam/FAQ#webkit\nwebkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8"}],"codename":null,"priority":"medium","cvss3":10.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":10.0,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4422-1","https://ubuntu.com/security/notices/USN-4648-1","https://www.cve.org/CVERecord?id=CVE-2020-13753"],"bugs":[""],"patches":{"webkitgtk":[],"webkit2gtk":[],"qtwebkit-source":[],"qtwebkit":[],"qtwebkit-opensource-src":[]},"tags":{},"packages":[{"name":"qtwebkit","source":"https://ubuntu.com/security/cve?package=qtwebkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit","debian":"https://tracker.debian.org/pkg/qtwebkit","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebkit-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebkit-opensource-src","statuses":[{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"ignored","description":"","component":null,"pocket":"security"}]},{"name":"qtwebkit-source","source":"https://ubuntu.com/security/cve?package=qtwebkit-source","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebkit-source","debian":"https://tracker.debian.org/pkg/qtwebkit-source","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]},{"name":"webkit2gtk","source":"https://ubuntu.com/security/cve?package=webkit2gtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkit2gtk","debian":"https://tracker.debian.org/pkg/webkit2gtk","statuses":[{"release_codename":"impish","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2.28.3-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2.28.3-0ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"2.28.3-0ubuntu0.20.04.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was deferred","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.28.3-2","component":null,"pocket":"security"}]},{"name":"webkitgtk","source":"https://ubuntu.com/security/cve?package=webkitgtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=webkitgtk","debian":"https://tracker.debian.org/pkg/webkitgtk","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"end of standard support, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":["USN-4422-1","USN-4648-1"],"notices":[{"id":"USN-4422-1","title":"WebKitGTK+ vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-07-14T14:08:23.295554","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.18.04.1","pocket":"security"}],"eoan":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.19.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.19.10.1"}],"focal":[{"name":"webkit2gtk","version":"2.28.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.28.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.28.3-0ubuntu0.20.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9802","CVE-2020-9803","CVE-2020-9805","CVE-2020-9806","CVE-2020-9807","CVE-2020-9843","CVE-2020-9850"]},{"id":"USN-4648-1","title":"WebKitGTK vulnerabilities","summary":"Several security issues were fixed in WebKitGTK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any applications\nthat use WebKitGTK, such as Epiphany, to make all the necessary changes.\n","references":[],"published":"2020-11-26T13:07:57.340898","description":"A large number of security issues were discovered in the WebKitGTK Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"webkit2gtk","version":"2.30.3-0ubuntu0.18.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.30.3-0ubuntu0.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.18.04.1","pocket":"security"}],"focal":[{"name":"webkit2gtk","version":"2.30.3-0ubuntu0.20.04.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.30.3-0ubuntu0.20.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.04.1","pocket":"security"}],"groovy":[{"name":"webkit2gtk","version":"2.30.3-0ubuntu0.20.10.1","description":"Web content engine library for GTK+","is_source":true},{"name":"gir1.2-javascriptcoregtk-4.0","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"gir1.2-webkit2-4.0","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-18","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-bin","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"libjavascriptcoregtk-4.0-dev","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-37-gtk2","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-dev","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"libwebkit2gtk-4.0-doc","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"},{"name":"webkit2gtk-driver","version":"2.30.3-0ubuntu0.20.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/webkit2gtk","version_link":"https://launchpad.net/ubuntu/+source/webkit2gtk/2.30.3-0ubuntu0.20.10.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-13753","CVE-2020-9951","CVE-2020-9983","CVE-2020-9952","CVE-2020-9948"]}]},{"id":"CVE-2020-4042","published":"2020-07-10T20:15:00","updated_at":"2025-08-26T12:26:12.553652+00:00","description":"\nBareos before version 19.2.8 and earlier allows a malicious client to\ncommunicate with the director without knowledge of the shared secret if the\ndirector allows client initiated connection and connects to the client\nitself. The malicious client can replay the Bareos director's cram-md5\nchallenge to the director itself leading to the director responding to the\nreplayed challenge. The response obtained is then a valid reply to the\ndirectors original challenge. This is fixed in version 19.2.8.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://bugs.bareos.org/view.php?id=1250","https://github.com/bareos/bareos/security/advisories/GHSA-vqpj-2vhj-h752","https://www.cve.org/CVERecord?id=CVE-2020-4042"],"bugs":[""],"patches":{"bareos":[]},"tags":{},"packages":[{"name":"bareos","source":"https://ubuntu.com/security/cve?package=bareos","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=bareos","debian":"https://tracker.debian.org/pkg/bareos","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-11061","published":"2020-07-10T20:15:00","updated_at":"2025-08-26T12:18:29.016099+00:00","description":"\nIn Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and\n19.2.7, a heap overflow allows a malicious client to corrupt the director's\nmemory via oversized digest strings sent during initialization of a verify\njob. Disabling verify jobs mitigates the problem. This issue is also\npatched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.0,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":6.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://bugs.bareos.org/view.php?id=1210","https://github.com/bareos/bareos/security/advisories/GHSA-mm45-cg35-54j4","https://www.cve.org/CVERecord?id=CVE-2020-11061"],"bugs":[""],"patches":{"bareos":[],"bacula":[]},"tags":{},"packages":[{"name":"bareos","source":"https://ubuntu.com/security/cve?package=bareos","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=bareos","debian":"https://tracker.debian.org/pkg/bareos","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"bacula","source":"https://ubuntu.com/security/cve?package=bacula","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=bacula","debian":"https://tracker.debian.org/pkg/bacula","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"9.6.5-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-13132","published":"2020-07-09T18:15:00","updated_at":"2025-08-26T12:19:15.310212+00:00","description":"\nAn issue was discovered in Yubico libykpiv before 2.1.0. An attacker can\ntrigger an incorrect free() in the ykpiv_util_generate_key() function in\nlib/util.c through incorrect error handling code. This could be used to\ncause a denial of service attack.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://blog.inhq.net/posts/yubico-libykpiv-vuln/","https://www.yubico.com/support/security-advisories/ysa-2020-02/","https://www.cve.org/CVERecord?id=CVE-2020-13132"],"bugs":[""],"patches":{"yubico-piv-tool":[]},"tags":{},"packages":[{"name":"yubico-piv-tool","source":"https://ubuntu.com/security/cve?package=yubico-piv-tool","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=yubico-piv-tool","debian":"https://tracker.debian.org/pkg/yubico-piv-tool","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-13131","published":"2020-07-09T18:15:00","updated_at":"2025-08-26T12:18:59.224745+00:00","description":"\nAn issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this\nlibrary (which is included in yubico-piv-tool) does not properly check\nembedded length fields during device communication. A malicious PIV token\ncan misreport the returned length fields during RSA key generation. This\nwill cause stack memory to be copied into heap allocated memory that gets\nreturned to the caller. The leaked memory could include PINs, passwords,\nkey material, and other sensitive information depending on the integration.\nDuring further processing by the caller, this information could leak across\ntrust boundaries. Note that RSA key generation is triggered by the host and\ncannot directly be triggered by the token.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://blog.inhq.net/posts/yubico-libykpiv-vuln/","https://www.yubico.com/products/services-software/download/smart-card-drivers-tools/","https://www.cve.org/CVERecord?id=CVE-2020-13131"],"bugs":[""],"patches":{"yubico-piv-tool":[]},"tags":{},"packages":[{"name":"yubico-piv-tool","source":"https://ubuntu.com/security/cve?package=yubico-piv-tool","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=yubico-piv-tool","debian":"https://tracker.debian.org/pkg/yubico-piv-tool","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.1.1-3","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-17638","published":"2020-07-09T18:15:00","updated_at":"2025-06-30T08:40:16.747300+00:00","description":"\nIn Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of\ntoo large response headers, Jetty throws an exception to produce an HTTP\n431 error. When this happens, the ByteBuffer containing the HTTP response\nheaders is released back to the ByteBufferPool twice. Because of this\ndouble release, two threads can acquire the same ByteBuffer from the pool\nand while thread1 is about to use the ByteBuffer to write response1 data,\nthread2 fills the ByteBuffer with other data. Thread1 then proceeds to\nwrite the buffer that now contains different data. This results in client1,\nwhich issued request1 seeing data from another request or response which\ncould contain sensitive data belonging to client2 (HTTP session ids,\nauthentication credentials, etc.). If the Jetty version cannot be upgraded,\nthe vulnerability can be significantly reduced by configuring a\nresponseHeaderSize significantly larger than the requestHeaderSize (12KB\nresponseHeaderSize and 8KB requestHeaderSize).","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW","baseScore":9.4,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://bugs.eclipse.org/bugs/show_bug.cgi?id=564984","https://www.cve.org/CVERecord?id=CVE-2019-17638"],"bugs":[""],"patches":{"jetty9":[]},"tags":{},"packages":[{"name":"jetty9","source":"https://ubuntu.com/security/cve?package=jetty9","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jetty9","debian":"https://tracker.debian.org/pkg/jetty9","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"9.4.45-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"9.4.53-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"9.4.55-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"9.4.56-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.4.30","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-10756","published":"2020-07-09T16:15:00","updated_at":"2025-08-18T17:10:56.294779+00:00","description":"\nAn out-of-bounds read vulnerability was found in the SLiRP networking\nimplementation of the QEMU emulator. This flaw occurs in the\nicmp6_send_echoreply() routine while replying to an ICMP echo request, also\nknown as ping. This flaw allows a malicious guest to leak the contents of\nthe host memory, resulting in possible information disclosure. This flaw\naffects versions of libslirp before 4.3.1.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4437-1","https://ubuntu.com/security/notices/USN-4467-1","https://www.cve.org/CVERecord?id=CVE-2020-10756"],"bugs":["https://bugzilla.redhat.com/show_bug.cgi?id=1835986#c11"],"patches":{"qemu-kvm":[],"qemu":[],"libslirp":["upstream: https://gitlab.freedesktop.org/slirp/libslirp/-/commit/c7ede54cbd2e2b25385325600958ba0124e31cc0"],"slirp4netns":[]},"tags":{},"packages":[{"name":"libslirp","source":"https://ubuntu.com/security/cve?package=libslirp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libslirp","debian":"https://tracker.debian.org/pkg/libslirp","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"4.1.0-2ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.3.1-1","component":null,"pocket":"security"}]},{"name":"qemu","source":"https://ubuntu.com/security/cve?package=qemu","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qemu","debian":"https://tracker.debian.org/pkg/qemu","statuses":[{"release_codename":"impish","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1:2.11+dfsg-1ubuntu7.31","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system libslirp","component":null,"pocket":"security"}]},{"name":"qemu-kvm","source":"https://ubuntu.com/security/cve?package=qemu-kvm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qemu-kvm","debian":"https://tracker.debian.org/pkg/qemu-kvm","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"slirp4netns","source":"https://ubuntu.com/security/cve?package=slirp4netns","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=slirp4netns","debian":"https://tracker.debian.org/pkg/slirp4netns","statuses":[{"release_codename":"impish","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.0.1-1","component":null,"pocket":"security"}]}],"notices_ids":["USN-4437-1","USN-4467-1"],"notices":[{"id":"USN-4437-1","title":"libslirp vulnerability","summary":"libslirp could be made to crash if it received specially crafted network\ntraffic.\n","instructions":"After a standard system update you need to reboot your computer to make\nall the necessary changes.\n","references":[],"published":"2020-07-27T14:26:56.484447","description":"Ziming Zhang and VictorV discovered that libslirp incorrectly handled\nreplying to certain ICMP echo requests. A remote attacker could possibly\nuse this issue to cause libslirp to crash, resulting in a denial of\nservice.\n","is_hidden":false,"release_packages":{"focal":[{"name":"libslirp","version":"4.1.0-2ubuntu2.1","description":"None","is_source":true},{"name":"libslirp-dev","version":"4.1.0-2ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libslirp","version_link":"https://launchpad.net/ubuntu/+source/libslirp/4.1.0-2ubuntu2.1","pocket":"security"},{"name":"libslirp0","version":"4.1.0-2ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libslirp","version_link":"https://launchpad.net/ubuntu/+source/libslirp/4.1.0-2ubuntu2.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-10756"]},{"id":"USN-4467-1","title":"QEMU vulnerabilities","summary":"Several security issues were fixed in QEMU.\n","instructions":"After a standard system update you need to restart all QEMU virtual\nmachines to make all the necessary changes.\n","references":[],"published":"2020-08-19T17:01:47.836105","description":"Ziming Zhang and VictorV discovered that the QEMU SLiRP networking\nimplementation incorrectly handled replying to certain ICMP echo requests.\nAn attacker inside a guest could possibly use this issue to leak host\nmemory to obtain sensitive information. This issue only affected Ubuntu\n18.04 LTS. (CVE-2020-10756)\n\nEric Blake and Xueqiang Wei discovered that the QEMU NDB implementation\nincorrectly handled certain requests. A remote attacker could possibly use\nthis issue to cause QEMU to crash, resulting in a denial of service. This\nissue only affected Ubuntu 20.04 LTS. (CVE-2020-10761)\n\nZiming Zhang discovered that the QEMU SM501 graphics driver incorrectly\nhandled certain operations. An attacker inside a guest could use this issue\nto cause QEMU to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2020-12829)\n\nIt was discovered that the QEMU SD memory card implementation incorrectly\nhandled certain memory operations. An attacker inside a guest could\npossibly use this issue to cause QEMU to crash, resulting in a denial of\nservice. (CVE-2020-13253)\n\nRen Ding and Hanqing Zhao discovered that the QEMU ES1370 audio driver\nincorrectly handled certain invalid frame counts. An attacker inside a\nguest could possibly use this issue to cause QEMU to crash, resulting in a\ndenial of service. (CVE-2020-13361)\n\nRen Ding and Hanqing Zhao discovered that the QEMU MegaRAID SAS SCSI driver\nincorrectly handled certain memory operations. An attacker inside a guest\ncould possibly use this issue to cause QEMU to crash, resulting in a denial\nof service. (CVE-2020-13362)\n\nAlexander Bulekov discovered that QEMU MegaRAID SAS SCSI driver incorrectly\nhandled certain memory space operations. An attacker inside a guest could\npossibly use this issue to cause QEMU to crash, resulting in a denial of\nservice. (CVE-2020-13659)\n\nRen Ding, Hanqing Zhao, Alexander Bulekov, and Anatoly Trosinenko\ndiscovered that the QEMU incorrectly handled certain msi-x mmio operations.\nAn attacker inside a guest could possibly use this issue to cause QEMU to\ncrash, resulting in a denial of service. (CVE-2020-13754)\n\nIt was discovered that QEMU incorrectly handled certain memory copy\noperations when loading ROM contents. If a user were tricked into running\nan untrusted kernel image, a remote attacker could possibly use this issue\nto run arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu\n18.04 LTS. (CVE-2020-13765)\n\nRen Ding, Hanqing Zhao, and Yi Ren discovered that the QEMU ATI video\ndriver incorrectly handled certain index values. An attacker inside a guest\ncould possibly use this issue to cause QEMU to crash, resulting in a denial\nof service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-13800)\n\nZiming Zhang discovered that the QEMU OSS audio driver incorrectly handled\ncertain operations. An attacker inside a guest could possibly use this\nissue to cause QEMU to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 20.04 LTS. (CVE-2020-14415)\n\nZiming Zhang discovered that the QEMU XGMAC Ethernet controller incorrectly\nhandled packet transmission. An attacker inside a guest could use this\nissue to cause QEMU to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2020-15863)\n\nZiming Zhang discovered that the QEMU e1000e Ethernet controller\nincorrectly handled packet processing. An attacker inside a guest could\npossibly use this issue to cause QEMU to crash, resulting in a denial of\nservice. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2020-16092)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"qemu","version":"1:2.11+dfsg-1ubuntu7.31","description":"Machine emulator and virtualizer","is_source":true},{"name":"qemu","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-block-extra","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-guest-agent","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-kvm","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system-arm","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system-common","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system-mips","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system-misc","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system-ppc","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system-s390x","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system-sparc","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-system-x86","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-user","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-user-binfmt","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-user-static","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"},{"name":"qemu-utils","version":"1:2.11+dfsg-1ubuntu7.31","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.31","pocket":"security"}],"focal":[{"name":"qemu","version":"1:4.2-3ubuntu6.4","description":"Machine emulator and virtualizer","is_source":true},{"name":"qemu","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-block-extra","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-guest-agent","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-kvm","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-arm","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-common","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-data","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-gui","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-mips","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-misc","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-ppc","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-s390x","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-sparc","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-x86","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-x86-microvm","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-system-x86-xen","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-user","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-user-binfmt","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-user-static","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"},{"name":"qemu-utils","version":"1:4.2-3ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.4","pocket":"security"}],"xenial":[{"name":"qemu","version":"1:2.5+dfsg-5ubuntu10.45","description":"Machine emulator and virtualizer","is_source":true},{"name":"qemu","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-block-extra","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-guest-agent","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-kvm","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-aarch64","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-arm","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-common","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-mips","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-misc","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-ppc","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-s390x","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-sparc","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-system-x86","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-user","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-user-binfmt","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-user-static","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"},{"name":"qemu-utils","version":"1:2.5+dfsg-5ubuntu10.45","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu","version_link":"https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2020-10756","CVE-2020-10761","CVE-2020-12829","CVE-2020-13253","CVE-2020-13361","CVE-2020-13362","CVE-2020-13659","CVE-2020-13754","CVE-2020-13765","CVE-2020-13800","CVE-2020-14415","CVE-2020-15863","CVE-2020-16092"]}]},{"id":"CVE-2020-12423","published":"2020-07-09T15:15:00","updated_at":"2025-08-25T23:18:36.945156+00:00","description":"\nWhen the Windows DLL \"webauthn.dll\" was missing from the Operating System,\nand a malicious one was placed in a folder in the user's %PATH%, Firefox\nmay have loaded the DLL, leading to arbitrary code execution. *Note: This\nissue only affects the Windows operating system; other operating systems\nare unaffected.* This vulnerability affects Firefox < 78.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"this is a windows-specific issue"}],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.mozilla.org/en-US/security/advisories/mfsa2020-24/#CVE-2020-12423","https://www.cve.org/CVERecord?id=CVE-2020-12423"],"bugs":[""],"patches":{"firefox":[],"thunderbird":[]},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"debian: Windows-specific","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-12414","published":"2020-07-09T15:15:00","updated_at":"2025-08-25T23:18:32.550162+00:00","description":"\nIndexedDB should be cleared when leaving private browsing mode and it is\nnot, the API for WKWebViewConfiguration was being used incorrectly and\nrequires the private instance of this object be deleted when leaving\nprivate mode. This vulnerability affects Firefox for iOS < 27.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"this vulnerability is specific to iOS"}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.mozilla.org/en-US/security/advisories/mfsa2020-23/#CVE-2020-12414","https://bugzilla.mozilla.org/show_bug.cgi?id=1646756","https://www.mozilla.org/security/advisories/mfsa2020-23/","https://www.cve.org/CVERecord?id=CVE-2020-12414"],"bugs":[""],"patches":{"firefox":[]},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"bionic","status":"not-affected","description":"Specific to Firefox on iOS","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"Specific to Firefox on iOS","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"Specific to Firefox on iOS","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-12412","published":"2020-07-09T15:15:00","updated_at":"2025-08-25T23:18:32.550162+00:00","description":"\nBy navigating a tab using the history API, an attacker could cause the\naddress bar to display the incorrect domain (with the https:// scheme, a\nblocked port number such as '1', and without a lock icon) while controlling\nthe page contents. This vulnerability affects Firefox < 70.","ubuntu_description":"","notes":[{"author":"tyhicks","note":"mozjs contains a copy of the SpiderMonkey JavaScript engine"}],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/#CVE-2020-12412","https://www.mozilla.org/security/advisories/mfsa2019-34/","https://www.cve.org/CVERecord?id=CVE-2020-12412"],"bugs":["https://bugzilla.mozilla.org/show_bug.cgi?id=1528587"],"patches":{"firefox":[]},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"bionic","status":"released","description":"70.0+build2-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"70.0+build2-0ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"70","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"70.0+build2-0ubuntu0.16.04.1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-12404","published":"2020-07-09T15:15:00","updated_at":"2025-08-25T23:18:27.826940+00:00","description":"\nFor native-to-JS bridging the app requires a unique token to be passed that\nensures non-app code can't call the bridging functions. That token could\nleak when used for downloading files. This vulnerability affects Firefox\nfor iOS < 26.","ubuntu_description":"","notes":[{"author":"alexmurray","note":"This only affects Firefox for iOS, Firefox in Ubuntu is not affected by this vulnerability."},{"author":"tyhicks","note":"mozjs contains a copy of the SpiderMonkey JavaScript engine"}],"codename":null,"priority":"low","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://bugzilla.mozilla.org/show_bug.cgi?id=1631739","https://www.mozilla.org/security/advisories/mfsa2020-19/","https://www.cve.org/CVERecord?id=CVE-2020-12404"],"bugs":[""],"patches":{"firefox":[],"thunderbird":[],"mozjs38":[],"mozjs52":[],"mozjs60":[],"mozjs68":[]},"tags":{},"packages":[{"name":"firefox","source":"https://ubuntu.com/security/cve?package=firefox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=firefox","debian":"https://tracker.debian.org/pkg/firefox","statuses":[{"release_codename":"bionic","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs38","source":"https://ubuntu.com/security/cve?package=mozjs38","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs38","debian":"https://tracker.debian.org/pkg/mozjs38","statuses":[{"release_codename":"bionic","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs52","source":"https://ubuntu.com/security/cve?package=mozjs52","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs52","debian":"https://tracker.debian.org/pkg/mozjs52","statuses":[{"release_codename":"bionic","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs60","source":"https://ubuntu.com/security/cve?package=mozjs60","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs60","debian":"https://tracker.debian.org/pkg/mozjs60","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"mozjs68","source":"https://ubuntu.com/security/cve?package=mozjs68","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mozjs68","debian":"https://tracker.debian.org/pkg/mozjs68","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"thunderbird","source":"https://ubuntu.com/security/cve?package=thunderbird","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=thunderbird","debian":"https://tracker.debian.org/pkg/thunderbird","statuses":[{"release_codename":"bionic","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"iOS only","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2020-7692","published":"2020-07-09T14:15:00","updated_at":"2025-07-11T07:45:47.235784+00:00","description":"\nPKCE support is not implemented in accordance with the RFC for OAuth 2.0\nfor Native Apps. Without the use of PKCE, the authorization code returned\nby an authorization server is not enough to guarantee that the client that\nissued the initial authorization request is the one that will be\nauthorized. An attacker is able to obtain the authorization code using a\nmalicious app on the client-side and use it to gain authorization to the\nprotected resource. This affects the package\ncom.google.oauth-client:google-oauth-client before 1.31.0.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276","https://github.com/googleapis/google-oauth-java-client/issues/469","https://github.com/googleapis/google-oauth-java-client/commit/13433cd7dd06267fc261f0b1d4764f8e3432c824","https://tools.ietf.org/html/rfc7636%23section-1","https://tools.ietf.org/html/rfc8252%23section-8.1","https://www.cve.org/CVERecord?id=CVE-2020-7692"],"bugs":[""],"patches":{"google-oauth-client-java":[]},"tags":{},"packages":[{"name":"google-oauth-client-java","source":"https://ubuntu.com/security/cve?package=google-oauth-client-java","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=google-oauth-client-java","debian":"https://tracker.debian.org/pkg/google-oauth-client-java","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":45120,"limit":20,"total_results":79316}