{"cves":[{"id":"CVE-2019-1353","published":"2019-12-10T18:00:00","updated_at":"2025-08-25T23:04:52.746570+00:00","description":"\nAn issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1,\nv2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When\nrunning Git in the Windows Subsystem for Linux (also known as \"WSL\") while\naccessing a working directory on a regular Windows drive, none of the NTFS\nprotections were active.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://groups.google.com/forum/?fromgroups#!topic/git-packagers/AWRBO_5gqa4","https://ubuntu.com/security/notices/USN-4220-1","https://www.cve.org/CVERecord?id=CVE-2019-1353"],"bugs":[""],"patches":{"git":[]},"tags":{},"packages":[{"name":"git","source":"https://ubuntu.com/security/cve?package=git","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=git","debian":"https://tracker.debian.org/pkg/git","statuses":[{"release_codename":"bionic","status":"released","description":"1:2.17.1-1ubuntu0.5","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"1:2.20.1-2ubuntu1.19.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"1:2.20.1-2ubuntu1.19.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:2.24.0-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1:2.7.4-0ubuntu1.7","component":null,"pocket":"security"}]}],"notices_ids":["USN-4220-1"],"notices":[{"id":"USN-4220-1","title":"Git vulnerabilities","summary":"Several security issues were fixed in Git.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T19:00:07.743987","description":"Joern Schneeweisz and Nicolas Joly discovered that Git contained various\nsecurity flaws. An attacker could possibly use these issues to overwrite\narbitrary paths, execute arbitrary code, and overwrite files in the .git\ndirectory.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"git","version":"1:2.17.1-1ubuntu0.5","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-all","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-cvs","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-run","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-doc","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-el","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-email","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-gui","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-man","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-mediawiki","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-svn","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitk","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitweb","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"}],"disco":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"}],"eoan":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"}],"xenial":[{"name":"git","version":"1:2.7.4-0ubuntu1.7","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-all","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-arch","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-core","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-cvs","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-run","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-doc","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-el","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-email","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-gui","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-man","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-mediawiki","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-svn","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitk","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitweb","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-1348","CVE-2019-1349","CVE-2019-1350","CVE-2019-1351","CVE-2019-1352","CVE-2019-1353","CVE-2019-1354","CVE-2019-1387","CVE-2019-19604"]}]},{"id":"CVE-2019-1352","published":"2019-12-10T18:00:00","updated_at":"2025-08-25T23:04:52.746570+00:00","description":"\nA remote code execution vulnerability exists when Git for Visual Studio\nimproperly sanitizes input, aka 'Git for Visual Studio Remote Code\nExecution Vulnerability'. This CVE ID is unique from CVE-2019-1349,\nCVE-2019-1350, CVE-2019-1354, CVE-2019-1387.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://groups.google.com/forum/?fromgroups#!topic/git-packagers/AWRBO_5gqa4","https://ubuntu.com/security/notices/USN-4220-1","https://www.cve.org/CVERecord?id=CVE-2019-1352"],"bugs":[""],"patches":{"git":[]},"tags":{},"packages":[{"name":"git","source":"https://ubuntu.com/security/cve?package=git","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=git","debian":"https://tracker.debian.org/pkg/git","statuses":[{"release_codename":"bionic","status":"released","description":"1:2.17.1-1ubuntu0.5","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"1:2.20.1-2ubuntu1.19.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"1:2.20.1-2ubuntu1.19.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:2.24.0-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1:2.7.4-0ubuntu1.7","component":null,"pocket":"security"}]}],"notices_ids":["USN-4220-1"],"notices":[{"id":"USN-4220-1","title":"Git vulnerabilities","summary":"Several security issues were fixed in Git.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T19:00:07.743987","description":"Joern Schneeweisz and Nicolas Joly discovered that Git contained various\nsecurity flaws. An attacker could possibly use these issues to overwrite\narbitrary paths, execute arbitrary code, and overwrite files in the .git\ndirectory.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"git","version":"1:2.17.1-1ubuntu0.5","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-all","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-cvs","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-run","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-doc","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-el","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-email","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-gui","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-man","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-mediawiki","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-svn","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitk","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitweb","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"}],"disco":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"}],"eoan":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"}],"xenial":[{"name":"git","version":"1:2.7.4-0ubuntu1.7","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-all","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-arch","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-core","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-cvs","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-run","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-doc","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-el","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-email","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-gui","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-man","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-mediawiki","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-svn","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitk","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitweb","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-1348","CVE-2019-1349","CVE-2019-1350","CVE-2019-1351","CVE-2019-1352","CVE-2019-1353","CVE-2019-1354","CVE-2019-1387","CVE-2019-19604"]}]},{"id":"CVE-2019-1351","published":"2019-12-10T18:00:00","updated_at":"2025-08-25T23:04:46.385593+00:00","description":"\nA tampering vulnerability exists when Git for Visual Studio improperly\nhandles virtual drive paths, aka 'Git for Visual Studio Tampering\nVulnerability'.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://groups.google.com/forum/?fromgroups#!topic/git-packagers/AWRBO_5gqa4","https://ubuntu.com/security/notices/USN-4220-1","https://www.cve.org/CVERecord?id=CVE-2019-1351"],"bugs":[""],"patches":{"git":[]},"tags":{},"packages":[{"name":"git","source":"https://ubuntu.com/security/cve?package=git","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=git","debian":"https://tracker.debian.org/pkg/git","statuses":[{"release_codename":"bionic","status":"released","description":"1:2.17.1-1ubuntu0.5","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"1:2.20.1-2ubuntu1.19.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"1:2.20.1-2ubuntu1.19.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:2.24.0-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1:2.7.4-0ubuntu1.7","component":null,"pocket":"security"}]}],"notices_ids":["USN-4220-1"],"notices":[{"id":"USN-4220-1","title":"Git vulnerabilities","summary":"Several security issues were fixed in Git.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T19:00:07.743987","description":"Joern Schneeweisz and Nicolas Joly discovered that Git contained various\nsecurity flaws. An attacker could possibly use these issues to overwrite\narbitrary paths, execute arbitrary code, and overwrite files in the .git\ndirectory.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"git","version":"1:2.17.1-1ubuntu0.5","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-all","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-cvs","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-run","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-doc","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-el","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-email","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-gui","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-man","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-mediawiki","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-svn","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitk","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitweb","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"}],"disco":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"}],"eoan":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"}],"xenial":[{"name":"git","version":"1:2.7.4-0ubuntu1.7","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-all","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-arch","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-core","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-cvs","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-run","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-doc","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-el","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-email","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-gui","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-man","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-mediawiki","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-svn","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitk","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitweb","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-1348","CVE-2019-1349","CVE-2019-1350","CVE-2019-1351","CVE-2019-1352","CVE-2019-1353","CVE-2019-1354","CVE-2019-1387","CVE-2019-19604"]}]},{"id":"CVE-2019-1350","published":"2019-12-10T18:00:00","updated_at":"2025-08-25T23:04:46.385593+00:00","description":"\nA remote code execution vulnerability exists when Git for Visual Studio\nimproperly sanitizes input, aka 'Git for Visual Studio Remote Code\nExecution Vulnerability'. This CVE ID is unique from CVE-2019-1349,\nCVE-2019-1352, CVE-2019-1354, CVE-2019-1387.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://groups.google.com/forum/?fromgroups#!topic/git-packagers/AWRBO_5gqa4","https://ubuntu.com/security/notices/USN-4220-1","https://www.cve.org/CVERecord?id=CVE-2019-1350"],"bugs":[""],"patches":{"git":[]},"tags":{},"packages":[{"name":"git","source":"https://ubuntu.com/security/cve?package=git","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=git","debian":"https://tracker.debian.org/pkg/git","statuses":[{"release_codename":"bionic","status":"released","description":"1:2.17.1-1ubuntu0.5","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"1:2.20.1-2ubuntu1.19.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"1:2.20.1-2ubuntu1.19.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:2.24.0-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1:2.7.4-0ubuntu1.7","component":null,"pocket":"security"}]}],"notices_ids":["USN-4220-1"],"notices":[{"id":"USN-4220-1","title":"Git vulnerabilities","summary":"Several security issues were fixed in Git.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T19:00:07.743987","description":"Joern Schneeweisz and Nicolas Joly discovered that Git contained various\nsecurity flaws. An attacker could possibly use these issues to overwrite\narbitrary paths, execute arbitrary code, and overwrite files in the .git\ndirectory.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"git","version":"1:2.17.1-1ubuntu0.5","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-all","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-cvs","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-run","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-doc","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-el","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-email","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-gui","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-man","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-mediawiki","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-svn","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitk","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitweb","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"}],"disco":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"}],"eoan":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"}],"xenial":[{"name":"git","version":"1:2.7.4-0ubuntu1.7","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-all","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-arch","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-core","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-cvs","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-run","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-doc","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-el","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-email","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-gui","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-man","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-mediawiki","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-svn","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitk","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitweb","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-1348","CVE-2019-1349","CVE-2019-1350","CVE-2019-1351","CVE-2019-1352","CVE-2019-1353","CVE-2019-1354","CVE-2019-1387","CVE-2019-19604"]}]},{"id":"CVE-2019-1349","published":"2019-12-10T18:00:00","updated_at":"2025-08-25T23:04:46.385593+00:00","description":"\nA remote code execution vulnerability exists when Git for Visual Studio\nimproperly sanitizes input, aka 'Git for Visual Studio Remote Code\nExecution Vulnerability'. This CVE ID is unique from CVE-2019-1350,\nCVE-2019-1352, CVE-2019-1354, CVE-2019-1387.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://groups.google.com/forum/?fromgroups#!topic/git-packagers/AWRBO_5gqa4","https://ubuntu.com/security/notices/USN-4220-1","https://www.cve.org/CVERecord?id=CVE-2019-1349"],"bugs":[""],"patches":{"git":[]},"tags":{},"packages":[{"name":"git","source":"https://ubuntu.com/security/cve?package=git","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=git","debian":"https://tracker.debian.org/pkg/git","statuses":[{"release_codename":"bionic","status":"released","description":"1:2.17.1-1ubuntu0.5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"1:2.20.1-2ubuntu1.19.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"1:2.20.1-2ubuntu1.19.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:2.24.0-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1:2.7.4-0ubuntu1.7","component":null,"pocket":"security"}]}],"notices_ids":["USN-4220-1"],"notices":[{"id":"USN-4220-1","title":"Git vulnerabilities","summary":"Several security issues were fixed in Git.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T19:00:07.743987","description":"Joern Schneeweisz and Nicolas Joly discovered that Git contained various\nsecurity flaws. An attacker could possibly use these issues to overwrite\narbitrary paths, execute arbitrary code, and overwrite files in the .git\ndirectory.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"git","version":"1:2.17.1-1ubuntu0.5","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-all","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-cvs","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-run","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-doc","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-el","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-email","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-gui","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-man","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-mediawiki","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-svn","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitk","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitweb","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"}],"disco":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"}],"eoan":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"}],"xenial":[{"name":"git","version":"1:2.7.4-0ubuntu1.7","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-all","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-arch","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-core","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-cvs","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-run","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-doc","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-el","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-email","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-gui","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-man","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-mediawiki","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-svn","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitk","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitweb","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-1348","CVE-2019-1349","CVE-2019-1350","CVE-2019-1351","CVE-2019-1352","CVE-2019-1353","CVE-2019-1354","CVE-2019-1387","CVE-2019-19604"]}]},{"id":"CVE-2019-1348","published":"2019-12-10T18:00:00","updated_at":"2025-08-25T23:04:46.385593+00:00","description":"\nAn issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1,\nv2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The\n--export-marks option of git fast-import is exposed also via the in-stream\ncommand feature export-marks=... and it allows overwriting arbitrary paths.","ubuntu_description":"\nThe --export-marks option of git fast-import is exposed also via\nthe in-stream command feature export-marks=... and it allows\noverwriting arbitrary paths.","notes":[],"codename":null,"priority":"medium","cvss3":3.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":3.3,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://groups.google.com/forum/?fromgroups#!topic/git-packagers/AWRBO_5gqa4","https://ubuntu.com/security/notices/USN-4220-1","https://www.cve.org/CVERecord?id=CVE-2019-1348"],"bugs":[""],"patches":{"git":[]},"tags":{},"packages":[{"name":"git","source":"https://ubuntu.com/security/cve?package=git","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=git","debian":"https://tracker.debian.org/pkg/git","statuses":[{"release_codename":"bionic","status":"released","description":"1:2.17.1-1ubuntu0.5","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"1:2.20.1-2ubuntu1.19.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"1:2.20.1-2ubuntu1.19.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1:2.24.0-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1:2.7.4-0ubuntu1.7","component":null,"pocket":"security"}]}],"notices_ids":["USN-4220-1"],"notices":[{"id":"USN-4220-1","title":"Git vulnerabilities","summary":"Several security issues were fixed in Git.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T19:00:07.743987","description":"Joern Schneeweisz and Nicolas Joly discovered that Git contained various\nsecurity flaws. An attacker could possibly use these issues to overwrite\narbitrary paths, execute arbitrary code, and overwrite files in the .git\ndirectory.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"git","version":"1:2.17.1-1ubuntu0.5","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-all","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-cvs","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-run","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-doc","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-el","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-email","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-gui","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-man","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-mediawiki","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"git-svn","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitk","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"},{"name":"gitweb","version":"1:2.17.1-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.5","pocket":"security"}],"disco":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.04.1"}],"eoan":[{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-all","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-cvs","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-run","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-daemon-sysvinit","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-doc","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-el","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-email","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-gui","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-man","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-mediawiki","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"git-svn","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitk","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"},{"name":"gitweb","version":"1:2.20.1-2ubuntu1.19.10.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.20.1-2ubuntu1.19.10.1"}],"xenial":[{"name":"git","version":"1:2.7.4-0ubuntu1.7","description":"fast, scalable, distributed revision control system","is_source":true},{"name":"git","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-all","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-arch","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-core","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-cvs","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-run","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-daemon-sysvinit","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-doc","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-el","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-email","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-gui","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-man","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-mediawiki","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"git-svn","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitk","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"},{"name":"gitweb","version":"1:2.7.4-0ubuntu1.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/git","version_link":"https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.7","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-1348","CVE-2019-1349","CVE-2019-1350","CVE-2019-1351","CVE-2019-1352","CVE-2019-1353","CVE-2019-1354","CVE-2019-1387","CVE-2019-19604"]}]},{"id":"CVE-2016-1000108","published":"2019-12-10T15:15:00","updated_at":"2025-08-26T11:53:34.843055+00:00","description":"\nyaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18\nnamespace conflicts and therefore does not protect CGI applications from\nthe presence of untrusted client data in the HTTP_PROXY environment\nvariable, which might allow remote attackers to redirect a CGI\napplication's outbound HTTP traffic to an arbitrary proxy server via a\ncrafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://marc.info/?l=oss-security&m=146885145004975&w=2","https://www.cve.org/CVERecord?id=CVE-2016-1000108"],"bugs":[""],"patches":{"yaws":[]},"tags":{},"packages":[{"name":"yaws","source":"https://ubuntu.com/security/cve?package=yaws","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=yaws","debian":"https://tracker.debian.org/pkg/yaws","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.0.3-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2013-4184","published":"2019-12-10T15:15:00","updated_at":"2025-08-25T20:54:39.623835+00:00","description":"\nPerl module Data::UUID from CPAN version 1.219 vulnerable to symlink\nattacks","ubuntu_description":"","notes":[{"author":"jdstrand","note":"<itp> (bug #717315)"}],"codename":null,"priority":"low","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2013-4184"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717315"],"patches":{"libdata-uuid-perl":[]},"tags":{},"packages":[{"name":"libdata-uuid-perl","source":"https://ubuntu.com/security/cve?package=libdata-uuid-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libdata-uuid-perl","debian":"https://tracker.debian.org/pkg/libdata-uuid-perl","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2013-4133","published":"2019-12-10T15:15:00","updated_at":"2025-08-25T20:54:25.366378+00:00","description":"\nkde-workspace before 4.10.5 has a memory leak in plasma desktop","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"It's debatable whether this is a security issue."}],"codename":null,"priority":"negligible","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugs.kde.org/show_bug.cgi?id=314919","https://www.cve.org/CVERecord?id=CVE-2013-4133"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=717180"],"patches":{"kdebase-workspace":[],"kde-workspace":["upstream: https://projects.kde.org/projects/kde/kde-workspace/repository/revisions/2c810db3e41d56ad7dd8ec3436f3cf3abcc31983"]},"tags":{},"packages":[{"name":"kde-workspace","source":"https://ubuntu.com/security/cve?package=kde-workspace","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kde-workspace","debian":"https://tracker.debian.org/pkg/kde-workspace","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"4:4.10.5-0ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"4:4.10.90-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.10.5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"4:4.10.90-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [4:4.10.90-0ubuntu2]]","component":null,"pocket":"security"}]},{"name":"kdebase-workspace","source":"https://ubuntu.com/security/cve?package=kdebase-workspace","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kdebase-workspace","debian":"https://tracker.debian.org/pkg/kdebase-workspace","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"reached-of-life","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2013-2183","published":"2019-12-10T15:15:00","updated_at":"2025-08-25T20:51:10.009650+00:00","description":"\nMonkey HTTP Daemon has local security bypass","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2013/06/14/5","http://bugs.monkey-project.com/ticket/187","https://www.cve.org/CVERecord?id=CVE-2013-2183"],"bugs":[""],"patches":{"monkey":[]},"tags":{},"packages":[{"name":"monkey","source":"https://ubuntu.com/security/cve?package=monkey","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=monkey","debian":"https://tracker.debian.org/pkg/monkey","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2013-2167","published":"2019-12-10T15:15:00","updated_at":"2025-08-25T20:51:05.342656+00:00","description":"\npython-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache\nsigning bypass","ubuntu_description":"","notes":[{"author":"jdstrand","note":"per upstream, feature exposing this bug was introduced in Grizzly as\nan optional feature\nfix for CVE-2013-2166 implemented in this patchset\nper upstream, patch is forward compatible, but will invalidate any\nexisting ephemeral encrypted or signed memcache entries. This is too\ndisruptive for a stable release update"}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2013-2167"],"bugs":["https://bugs.launchpad.net/ossa/+bug/1175368"],"patches":{"python-keystoneclient":["upstream: https://review.openstack.org/33661"]},"tags":{},"packages":[{"name":"python-keystoneclient","source":"https://ubuntu.com/security/cve?package=python-keystoneclient","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-keystoneclient","debian":"https://tracker.debian.org/pkg/python-keystoneclient","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.3.0","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2013-2166","published":"2019-12-10T15:15:00","updated_at":"2025-08-25T20:51:05.342656+00:00","description":"\npython-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache\nencryption bypass","ubuntu_description":"","notes":[{"author":"jdstrand","note":"per upstream, feature exposing this bug was introduced in Grizzly as\nan optional feature\nfix for CVE-2013-2167 implemented in this patchset\nper upstream, patch is forward compatible, but will invalidate any\nexisting ephemeral encrypted or signed memcache entries. This is too\ndisruptive for a stable release update"}],"codename":null,"priority":"low","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2013-2166"],"bugs":["https://bugs.launchpad.net/python-keystoneclient/+bug/1175367"],"patches":{"python-keystoneclient":["other: https://review.openstack.org/33661"]},"tags":{},"packages":[{"name":"python-keystoneclient","source":"https://ubuntu.com/security/cve?package=python-keystoneclient","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-keystoneclient","debian":"https://tracker.debian.org/pkg/python-keystoneclient","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.3.0","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2013-2159","published":"2019-12-10T15:15:00","updated_at":"2025-08-25T20:51:00.267357+00:00","description":"\nMonkey HTTP Daemon: broken user name authentication","ubuntu_description":"","notes":[{"author":"seth-arnold","note":"\"Fixed in commit 4128b9a1912 on master\""}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2013/06/07/4","http://bugs.monkey-project.com/ticket/183","https://www.cve.org/CVERecord?id=CVE-2013-2159"],"bugs":[""],"patches":{"monkey":[]},"tags":{},"packages":[{"name":"monkey","source":"https://ubuntu.com/security/cve?package=monkey","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=monkey","debian":"https://tracker.debian.org/pkg/monkey","statuses":[{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14889","published":"2019-12-10T15:00:00","updated_at":"2025-08-25T23:06:27.443490+00:00","description":"\nA flaw was found with the libssh API function ssh_scp_new() in versions\nbefore 0.9.3 and before 0.8.8. When the libssh SCP client connects to a\nserver, the scp command, which includes a user-provided path, is executed\non the server-side. In case the library is used in a way where users can\ninfluence the third parameter of the function, it would become possible for\nan attacker to inject arbitrary commands, leading to a compromise of the\nremote target.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.libssh.org/security/advisories/CVE-2019-14889.txt","https://ubuntu.com/security/notices/USN-4219-1","https://www.cve.org/CVERecord?id=CVE-2019-14889"],"bugs":[""],"patches":{"libssh":[]},"tags":{},"packages":[{"name":"libssh","source":"https://ubuntu.com/security/cve?package=libssh","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libssh","debian":"https://tracker.debian.org/pkg/libssh","statuses":[{"release_codename":"bionic","status":"released","description":"0.8.0~20170825.94fa1e38-1ubuntu0.5","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"0.8.6-3ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"0.9.0-1ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.8.8,0.9.3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.6.3-4.3ubuntu0.5","component":null,"pocket":"security"}]}],"notices_ids":["USN-4219-1"],"notices":[{"id":"USN-4219-1","title":"libssh vulnerability","summary":"libssh could be made to run programs under certain conditions.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T17:49:56.293144","description":"It was discovered that libssh incorrectly handled certain scp commands. If\na user or automated system were tricked into using a specially-crafted scp\ncommand, a remote attacker could execute arbitrary commands on the server.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"libssh","version":"0.8.0~20170825.94fa1e38-1ubuntu0.5","description":"A tiny C SSH library","is_source":true},{"name":"libssh-4","version":"0.8.0~20170825.94fa1e38-1ubuntu0.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.0~20170825.94fa1e38-1ubuntu0.5","pocket":"security"},{"name":"libssh-dev","version":"0.8.0~20170825.94fa1e38-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.0~20170825.94fa1e38-1ubuntu0.5","pocket":"security"},{"name":"libssh-doc","version":"0.8.0~20170825.94fa1e38-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.0~20170825.94fa1e38-1ubuntu0.5","pocket":"security"},{"name":"libssh-gcrypt-4","version":"0.8.0~20170825.94fa1e38-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.0~20170825.94fa1e38-1ubuntu0.5","pocket":"security"},{"name":"libssh-gcrypt-dev","version":"0.8.0~20170825.94fa1e38-1ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.0~20170825.94fa1e38-1ubuntu0.5","pocket":"security"}],"disco":[{"name":"libssh","version":"0.8.6-3ubuntu0.3","description":"A tiny C SSH library","is_source":true},{"name":"libssh-4","version":"0.8.6-3ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.6-3ubuntu0.3"},{"name":"libssh-dev","version":"0.8.6-3ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.6-3ubuntu0.3"},{"name":"libssh-doc","version":"0.8.6-3ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.6-3ubuntu0.3"},{"name":"libssh-gcrypt-4","version":"0.8.6-3ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.6-3ubuntu0.3"},{"name":"libssh-gcrypt-dev","version":"0.8.6-3ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.8.6-3ubuntu0.3"}],"eoan":[{"name":"libssh","version":"0.9.0-1ubuntu1.3","description":"A tiny C SSH library","is_source":true},{"name":"libssh-4","version":"0.9.0-1ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.9.0-1ubuntu1.3"},{"name":"libssh-dev","version":"0.9.0-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.9.0-1ubuntu1.3"},{"name":"libssh-doc","version":"0.9.0-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.9.0-1ubuntu1.3"},{"name":"libssh-gcrypt-4","version":"0.9.0-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.9.0-1ubuntu1.3"},{"name":"libssh-gcrypt-dev","version":"0.9.0-1ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.9.0-1ubuntu1.3"}],"xenial":[{"name":"libssh","version":"0.6.3-4.3ubuntu0.5","description":"A tiny C SSH library","is_source":true},{"name":"libssh-4","version":"0.6.3-4.3ubuntu0.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.5","pocket":"security"},{"name":"libssh-dev","version":"0.6.3-4.3ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.5","pocket":"security"},{"name":"libssh-doc","version":"0.6.3-4.3ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.5","pocket":"security"},{"name":"libssh-gcrypt-4","version":"0.6.3-4.3ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.5","pocket":"security"},{"name":"libssh-gcrypt-dev","version":"0.6.3-4.3ubuntu0.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libssh","version_link":"https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.5","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-14889"]}]},{"id":"CVE-2019-14870","published":"2019-12-10T00:00:00","updated_at":"2025-08-25T23:06:27.443490+00:00","description":"\nAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x\nbefore 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation\nmodel includes a feature allowing for a subset of clients to be opted out\nof constrained delegation in any way, either S4U2Self or regular Kerberos\nauthentication, by forcing all tickets for these clients to be\nnon-forwardable. In AD this is implemented by a user attribute\ndelegation_not_allowed (aka not-delegated), which translates to\ndisallow-forwardable. However the Samba AD DC does not do that for S4U2Self\nand does set the forwardable flag even if the impersonated client has the\nnot-delegated flag set.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.samba.org/samba/security/CVE-2019-14870.html","https://ubuntu.com/security/notices/USN-4217-1","https://ubuntu.com/security/notices/USN-4217-2","https://www.cve.org/CVERecord?id=CVE-2019-14870"],"bugs":["https://bugzilla.samba.org/show_bug.cgi?id=14187"],"patches":{"samba":[]},"tags":{},"packages":[{"name":"samba","source":"https://ubuntu.com/security/cve?package=samba","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=samba","debian":"https://tracker.debian.org/pkg/samba","statuses":[{"release_codename":"bionic","status":"released","description":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"2:4.10.0+dfsg-0ubuntu2.7","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2:4.10.7+dfsg-0ubuntu2.3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"4.11.3,4.10.11,4.9.17","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2:4.3.11+dfsg-0ubuntu0.16.04.24","component":null,"pocket":"security"}]}],"notices_ids":["USN-4217-2","USN-4217-1"],"notices":[{"id":"USN-4217-2","title":"Samba vulnerabilities","summary":"Several security issues were fixed in Samba.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-11T15:07:59.785952","description":"USN-4217-1 fixed several vulnerabilities in Samba. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Andreas Oster discovered that the Samba DNS management server incorrectly\n handled certain records. An authenticated attacker could possibly use this\n issue to crash Samba, resulting in a denial of service. (CVE-2019-14861)\n\n Isaac Boukris discovered that Samba did not enforce the Kerberos\n DelegationNotAllowed feature restriction, contrary to expectations.\n (CVE-2019-14870)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"samba","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"libnss-winbind","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libpam-winbind","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libwbclient0","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-common","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-libs","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libsmbsharemodes0","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-testsuite","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libsmbclient","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-common-bin","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libsmbsharemodes-dev","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"python-samba","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"winbind","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"smbclient","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-vfs-modules","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libwbclient-dev","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-dsdb-modules","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-dev","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libsmbclient-dev","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libparse-pidl-perl","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"registry-tools","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-doc","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libpam-smbpass","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"}]},"type":"USN","cves_ids":["CVE-2019-14861","CVE-2019-14870"]},{"id":"USN-4217-1","title":"Samba vulnerabilities","summary":"Several security issues were fixed in Samba.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T12:54:20.861243","description":"Andreas Oster discovered that the Samba DNS management server incorrectly\nhandled certain records. An authenticated attacker could possibly use this\nissue to crash Samba, resulting in a denial of service. (CVE-2019-14861)\n\nIsaac Boukris discovered that Samba did not enforce the Kerberos\nDelegationNotAllowed feature restriction, contrary to expectations.\n(CVE-2019-14870)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"samba","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"ctdb","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libnss-winbind","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libpam-winbind","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libparse-pidl-perl","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libsmbclient","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libsmbclient-dev","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libwbclient-dev","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libwbclient0","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"python-samba","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"registry-tools","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-common","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-common-bin","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-dev","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-dsdb-modules","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-libs","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-testsuite","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-vfs-modules","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"smbclient","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"winbind","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"}],"disco":[{"name":"samba","version":"2:4.10.0+dfsg-0ubuntu2.7","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"ctdb","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libnss-winbind","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libpam-winbind","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libparse-pidl-perl","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libsmbclient","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libsmbclient-dev","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libwbclient-dev","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libwbclient0","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"python3-samba","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"registry-tools","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-common","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-common-bin","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-dev","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-dsdb-modules","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-libs","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-testsuite","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-vfs-modules","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"smbclient","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"winbind","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"}],"eoan":[{"name":"samba","version":"2:4.10.7+dfsg-0ubuntu2.3","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"ctdb","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libnss-winbind","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libpam-winbind","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libparse-pidl-perl","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libsmbclient","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libsmbclient-dev","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libwbclient-dev","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libwbclient0","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"python3-samba","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"registry-tools","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-common","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-common-bin","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-dev","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-dsdb-modules","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-libs","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-testsuite","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-vfs-modules","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"smbclient","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"winbind","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"}],"xenial":[{"name":"samba","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"ctdb","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libnss-winbind","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libpam-winbind","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libparse-pidl-perl","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libsmbclient","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libsmbclient-dev","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libwbclient-dev","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libwbclient0","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"python-samba","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"registry-tools","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-common","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-common-bin","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-dev","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-dsdb-modules","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-libs","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-testsuite","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-vfs-modules","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"smbclient","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"winbind","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-14861","CVE-2019-14870"]}]},{"id":"CVE-2019-14861","published":"2019-12-10T00:00:00","updated_at":"2025-08-25T23:06:22.613733+00:00","description":"\nAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x\nbefore 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe\nprovides administrative facilities to modify DNS records and zones. Samba,\nwhen acting as an AD DC, stores DNS records in LDAP. In AD, the default\npermissions on the DNS partition allow creation of new records by\nauthenticated users. This is used for example to allow machines to\nself-register in DNS. If a DNS record was created that case-insensitively\nmatched the name of the zone, the ldb_qsort() and dns_name_compare()\nroutines could be confused into reading memory prior to the list of DNS\nentries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and\nso following invalid memory as a pointer.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.samba.org/samba/security/CVE-2019-14861.html","https://ubuntu.com/security/notices/USN-4217-1","https://ubuntu.com/security/notices/USN-4217-2","https://www.cve.org/CVERecord?id=CVE-2019-14861"],"bugs":["https://bugzilla.samba.org/show_bug.cgi?id=14138"],"patches":{"samba":[]},"tags":{},"packages":[{"name":"samba","source":"https://ubuntu.com/security/cve?package=samba","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=samba","debian":"https://tracker.debian.org/pkg/samba","statuses":[{"release_codename":"bionic","status":"released","description":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"2:4.10.0+dfsg-0ubuntu2.7","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"2:4.10.7+dfsg-0ubuntu2.3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"4.11.3,4.10.11,4.9.17","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2:4.3.11+dfsg-0ubuntu0.16.04.24","component":null,"pocket":"security"}]}],"notices_ids":["USN-4217-2","USN-4217-1"],"notices":[{"id":"USN-4217-2","title":"Samba vulnerabilities","summary":"Several security issues were fixed in Samba.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-11T15:07:59.785952","description":"USN-4217-1 fixed several vulnerabilities in Samba. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Andreas Oster discovered that the Samba DNS management server incorrectly\n handled certain records. An authenticated attacker could possibly use this\n issue to crash Samba, resulting in a denial of service. (CVE-2019-14861)\n\n Isaac Boukris discovered that Samba did not enforce the Kerberos\n DelegationNotAllowed feature restriction, contrary to expectations.\n (CVE-2019-14870)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"samba","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"libnss-winbind","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libpam-winbind","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libwbclient0","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-common","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-libs","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libsmbsharemodes0","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-testsuite","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libsmbclient","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-common-bin","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libsmbsharemodes-dev","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"python-samba","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"winbind","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"smbclient","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-vfs-modules","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libwbclient-dev","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-dsdb-modules","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-dev","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libsmbclient-dev","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libparse-pidl-perl","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"registry-tools","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"samba-doc","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"},{"name":"libpam-smbpass","version":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4"}]},"type":"USN","cves_ids":["CVE-2019-14861","CVE-2019-14870"]},{"id":"USN-4217-1","title":"Samba vulnerabilities","summary":"Several security issues were fixed in Samba.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-12-10T12:54:20.861243","description":"Andreas Oster discovered that the Samba DNS management server incorrectly\nhandled certain records. An authenticated attacker could possibly use this\nissue to crash Samba, resulting in a denial of service. (CVE-2019-14861)\n\nIsaac Boukris discovered that Samba did not enforce the Kerberos\nDelegationNotAllowed feature restriction, contrary to expectations.\n(CVE-2019-14870)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"samba","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"ctdb","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libnss-winbind","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libpam-winbind","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libparse-pidl-perl","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libsmbclient","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libsmbclient-dev","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libwbclient-dev","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"libwbclient0","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"python-samba","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"registry-tools","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-common","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-common-bin","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-dev","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-dsdb-modules","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-libs","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-testsuite","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"samba-vfs-modules","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"smbclient","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"},{"name":"winbind","version":"2:4.7.6+dfsg~ubuntu-0ubuntu2.14","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.14","pocket":"security"}],"disco":[{"name":"samba","version":"2:4.10.0+dfsg-0ubuntu2.7","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"ctdb","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libnss-winbind","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libpam-winbind","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libparse-pidl-perl","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libsmbclient","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libsmbclient-dev","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libwbclient-dev","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"libwbclient0","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"python3-samba","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"registry-tools","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-common","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-common-bin","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-dev","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-dsdb-modules","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-libs","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-testsuite","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"samba-vfs-modules","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"smbclient","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"},{"name":"winbind","version":"2:4.10.0+dfsg-0ubuntu2.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.0+dfsg-0ubuntu2.7"}],"eoan":[{"name":"samba","version":"2:4.10.7+dfsg-0ubuntu2.3","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"ctdb","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libnss-winbind","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libpam-winbind","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libparse-pidl-perl","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libsmbclient","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libsmbclient-dev","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libwbclient-dev","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"libwbclient0","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"python3-samba","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"registry-tools","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-common","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-common-bin","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-dev","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-dsdb-modules","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-libs","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-testsuite","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"samba-vfs-modules","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"smbclient","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"},{"name":"winbind","version":"2:4.10.7+dfsg-0ubuntu2.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.10.7+dfsg-0ubuntu2.3"}],"xenial":[{"name":"samba","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","description":"SMB/CIFS file, print, and login server for Unix","is_source":true},{"name":"ctdb","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libnss-winbind","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libpam-winbind","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libparse-pidl-perl","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libsmbclient","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libsmbclient-dev","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libwbclient-dev","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"libwbclient0","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"python-samba","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"registry-tools","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-common","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-common-bin","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-dev","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-dsdb-modules","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-libs","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-testsuite","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"samba-vfs-modules","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"smbclient","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"},{"name":"winbind","version":"2:4.3.11+dfsg-0ubuntu0.16.04.24","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/samba","version_link":"https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.24","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-14861","CVE-2019-14870"]}]},{"id":"CVE-2019-11157","published":"2019-12-10T00:00:00","updated_at":"2025-08-25T23:02:06.834728+00:00","description":"\nImproper conditions check in voltage settings for some Intel(R) Processors\nmay allow a privileged user to potentially enable escalation of privilege\nand/or information disclosure via local access.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"research may call the issue \"thundervolt\""}],"codename":null,"priority":"medium","cvss3":6.7,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2019-11157"],"bugs":[""],"patches":{"intel-microcode":[]},"tags":{},"packages":[{"name":"intel-microcode","source":"https://ubuntu.com/security/cve?package=intel-microcode","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=intel-microcode","debian":"https://tracker.debian.org/pkg/intel-microcode","statuses":[{"release_codename":"bionic","status":"released","description":"3.20191115.1ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"3.20191115.1ubuntu0.19.04.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"3.20191115.1ubuntu0.19.10.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"3.20191115.1ubuntu0.14.04.1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"20191115","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"3.20191115.1ubuntu0.16.04.1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2013-0342","published":"2019-12-09T21:15:00","updated_at":"2025-07-11T07:37:54.877120+00:00","description":"\nThe CreateID function in packet.py in pyrad before 2.1 uses sequential\npacket IDs, which makes it easier for remote attackers to spoof packets by\npredicting the next ID, a different vulnerability than CVE-2013-0294.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":4.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2013-0342"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701151"],"patches":{"pyrad":[]},"tags":{},"packages":[{"name":"pyrad","source":"https://ubuntu.com/security/cve?package=pyrad","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=pyrad","debian":"https://tracker.debian.org/pkg/pyrad","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-19646","published":"2019-12-09T19:15:00","updated_at":"2025-08-25T23:09:29.396203+00:00","description":"\npragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check\nPRAGMA command in certain cases of generated columns.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"generated column support was added in 3.31.0."}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2019-19646"],"bugs":[""],"patches":{"sqlite":[],"sqlite3":["upstream: https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3","upstream: https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd"]},"tags":{},"packages":[{"name":"sqlite","source":"https://ubuntu.com/security/cve?package=sqlite","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sqlite","debian":"https://tracker.debian.org/pkg/sqlite","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"sqlite3","source":"https://ubuntu.com/security/cve?package=sqlite3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sqlite3","debian":"https://tracker.debian.org/pkg/sqlite3","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-19603","published":"2019-12-09T19:15:00","updated_at":"2025-08-25T23:09:24.554975+00:00","description":"\nSQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW,\nleading to an application crash.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"The code changes required to backport the fix for this issue to\nolder versions of SQLite shipped in Ubuntu stable releases is\nsubtantial and may introduce regressions. Due to the low\nseverity of this issue, we will not be releasing a fix for\nUbuntu 18.04 LTS and earlier. Marking as ignored."}],"codename":null,"priority":"low","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4394-1","https://www.cve.org/CVERecord?id=CVE-2019-19603"],"bugs":[""],"patches":{"sqlite":[],"sqlite3":["upstream: https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13"]},"tags":{},"packages":[{"name":"sqlite","source":"https://ubuntu.com/security/cve?package=sqlite","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sqlite","debian":"https://tracker.debian.org/pkg/sqlite","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"sqlite3","source":"https://ubuntu.com/security/cve?package=sqlite3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sqlite3","debian":"https://tracker.debian.org/pkg/sqlite3","statuses":[{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"3.29.0-2ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"3.31.1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"}]}],"notices_ids":["USN-4394-1"],"notices":[{"id":"USN-4394-1","title":"SQLite vulnerabilities","summary":"Several security issues were fixed in SQLite.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-06-10T13:36:53.564277","description":"It was discovered that SQLite incorrectly handled certain corruped schemas.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2018-8740)\n\nIt was discovered that SQLite incorrectly handled certain SELECT\nstatements. An attacker could possibly use this issue to cause a denial of\nservice. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19603)\n\nIt was discovered that SQLite incorrectly handled certain self-referential\nviews. An attacker could possibly use this issue to cause a denial of\nservice. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19645)\n\nHenry Liu discovered that SQLite incorrectly handled certain malformed\nwindow-function queries. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 19.10 and Ubuntu 20.04\nLTS. (CVE-2020-11655)\n\nIt was discovered that SQLite incorrectly handled certain string\noperations. An attacker could use this issue to cause SQLite to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2020-13434)\n\nIt was discovered that SQLite incorrectly handled certain expressions. An\nattacker could use this issue to cause SQLite to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-13435)\n\nIt was discovered that SQLite incorrectly handled certain fts3 queries. An\nattacker could use this issue to cause SQLite to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2020-13630)\n\nIt was discovered that SQLite incorrectly handled certain virtual table\nnames. An attacker could possibly use this issue to cause a denial of\nservice. This issue was only addressed in Ubuntu 19.10 and Ubuntu 20.04\nLTS. (CVE-2020-13631)\n\nIt was discovered that SQLite incorrectly handled certain fts3 queries. An\nattacker could use this issue to cause SQLite to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2020-13632)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"sqlite3","version":"3.22.0-1ubuntu0.4","description":"C library that implements an SQL database engine","is_source":true},{"name":"lemon","version":"3.22.0-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.22.0-1ubuntu0.4","pocket":"security"},{"name":"libsqlite3-0","version":"3.22.0-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.22.0-1ubuntu0.4","pocket":"security"},{"name":"libsqlite3-dev","version":"3.22.0-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.22.0-1ubuntu0.4","pocket":"security"},{"name":"libsqlite3-tcl","version":"3.22.0-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.22.0-1ubuntu0.4","pocket":"security"},{"name":"sqlite3","version":"3.22.0-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.22.0-1ubuntu0.4","pocket":"security"},{"name":"sqlite3-doc","version":"3.22.0-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.22.0-1ubuntu0.4","pocket":"security"}],"eoan":[{"name":"sqlite3","version":"3.29.0-2ubuntu0.3","description":"C library that implements an SQL database engine","is_source":true},{"name":"lemon","version":"3.29.0-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.29.0-2ubuntu0.3"},{"name":"libsqlite3-0","version":"3.29.0-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.29.0-2ubuntu0.3"},{"name":"libsqlite3-dev","version":"3.29.0-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.29.0-2ubuntu0.3"},{"name":"libsqlite3-tcl","version":"3.29.0-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.29.0-2ubuntu0.3"},{"name":"sqlite3","version":"3.29.0-2ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.29.0-2ubuntu0.3"},{"name":"sqlite3-doc","version":"3.29.0-2ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.29.0-2ubuntu0.3"}],"focal":[{"name":"sqlite3","version":"3.31.1-4ubuntu0.1","description":"C library that implements an SQL database engine","is_source":true},{"name":"lemon","version":"3.31.1-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.31.1-4ubuntu0.1","pocket":"security"},{"name":"libsqlite3-0","version":"3.31.1-4ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.31.1-4ubuntu0.1","pocket":"security"},{"name":"libsqlite3-dev","version":"3.31.1-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.31.1-4ubuntu0.1","pocket":"security"},{"name":"libsqlite3-tcl","version":"3.31.1-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.31.1-4ubuntu0.1","pocket":"security"},{"name":"sqlite3","version":"3.31.1-4ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.31.1-4ubuntu0.1","pocket":"security"},{"name":"sqlite3-doc","version":"3.31.1-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.31.1-4ubuntu0.1","pocket":"security"}],"xenial":[{"name":"sqlite3","version":"3.11.0-1ubuntu1.5","description":"C library that implements an SQL database engine","is_source":true},{"name":"lemon","version":"3.11.0-1ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.11.0-1ubuntu1.5","pocket":"security"},{"name":"libsqlite3-0","version":"3.11.0-1ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.11.0-1ubuntu1.5","pocket":"security"},{"name":"libsqlite3-dev","version":"3.11.0-1ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.11.0-1ubuntu1.5","pocket":"security"},{"name":"libsqlite3-tcl","version":"3.11.0-1ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.11.0-1ubuntu1.5","pocket":"security"},{"name":"sqlite3","version":"3.11.0-1ubuntu1.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.11.0-1ubuntu1.5","pocket":"security"},{"name":"sqlite3-doc","version":"3.11.0-1ubuntu1.5","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sqlite3","version_link":"https://launchpad.net/ubuntu/+source/sqlite3/3.11.0-1ubuntu1.5","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2018-8740","CVE-2019-19603","CVE-2019-19645","CVE-2020-11655","CVE-2020-13434","CVE-2020-13435","CVE-2020-13630","CVE-2020-13631","CVE-2020-13632"]}]}],"offset":47200,"limit":20,"total_results":79316}