{"cves":[{"id":"CVE-2019-13616","published":"2019-10-15T00:00:00","updated_at":"2025-08-18T17:09:12.715253+00:00","description":"\nSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a\nheap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called\nfrom SDL_SoftBlit in video/SDL_blit.c.","ubuntu_description":"\nUSN-4238-1 addressed serveral vulnerabilities in SDL_image. This update\nprovides the corresponding fixes for Ubuntu 14.04 ESM.","notes":[],"codename":null,"priority":"low","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4156-1","https://ubuntu.com/security/notices/USN-4156-2","https://ubuntu.com/security/notices/USN-4238-1","https://www.cve.org/CVERecord?id=CVE-2019-13616"],"bugs":["https://bugzilla.libsdl.org/show_bug.cgi?id=4538","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940934"],"patches":{"libsdl2":["upstream: https://hg.libsdl.org/SDL/rev/e7ba650a643a"],"libsdl1.2":["upstream: https://hg.libsdl.org/SDL/rev/ad1bbfbca760"],"libsdl2-image":["upstream: https://hg.libsdl.org/SDL_image/rev/ba45f00879ba"],"sdl-image1.2":["upstream: https://hg.libsdl.org/SDL_image/rev/a59bfe382008"]},"tags":{},"packages":[{"name":"libsdl2","source":"https://ubuntu.com/security/cve?package=libsdl2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libsdl2","debian":"https://tracker.debian.org/pkg/libsdl2","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.0.10+dfsg1-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.0.10+dfsg1-1ubuntu1","component":null,"pocket":"security"}]},{"name":"libsdl2-image","source":"https://ubuntu.com/security/cve?package=libsdl2-image","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libsdl2-image","debian":"https://tracker.debian.org/pkg/libsdl2-image","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.0.5+dfsg1-2","component":null,"pocket":"security"}]},{"name":"libsdl1.2","source":"https://ubuntu.com/security/cve?package=libsdl1.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libsdl1.2","debian":"https://tracker.debian.org/pkg/libsdl1.2","statuses":[{"release_codename":"impish","status":"not-affected","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.2.15+dfsg2-0.1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.2.15-8ubuntu1.1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"1.2.15+dfsg2-5","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.2.15+dfsg1-3ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"sdl-image1.2","source":"https://ubuntu.com/security/cve?package=sdl-image1.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sdl-image1.2","debian":"https://tracker.debian.org/pkg/sdl-image1.2","statuses":[{"release_codename":"eoan","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.2.12-5+deb9u1ubuntu0.14.04.1~esm1","component":null,"pocket":"esm-infra"},{"release_codename":"bionic","status":"released","description":"1.2.12-8ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.2.12-5+deb9u1ubuntu0.16.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.2.12-12","component":null,"pocket":"security"}]}],"notices_ids":["USN-4156-2","USN-4156-1","USN-4238-1"],"notices":[{"id":"USN-4156-2","title":"SDL vulnerabilities","summary":"Several security issues were fixed in SDL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-10-16T14:21:02.741781","description":"USN-4156-1 fixed several vulnerabilities in SDL. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that SDL incorrectly handled certain images. If a user\n were tricked into opening a crafted image file, a remote attacker could\n use this issue to cause SDL to crash, resulting in a denial of service, or\n possibly execute arbitary code.\n","is_hidden":false,"release_packages":{"precise":[{"name":"libsdl1.2","version":"1.2.14-6.4ubuntu3.2","description":"Simple DirectMedia Layer debug files","is_source":true},{"name":"libsdl1.2debian","version":"1.2.14-6.4ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libsdl1.2","version_link":"https://launchpad.net/ubuntu/+source/libsdl1.2/1.2.14-6.4ubuntu3.2"},{"name":"libsdl1.2-dev","version":"1.2.14-6.4ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libsdl1.2","version_link":"https://launchpad.net/ubuntu/+source/libsdl1.2/1.2.14-6.4ubuntu3.2"}],"trusty":[{"name":"libsdl1.2","version":"1.2.15-8ubuntu1.1+esm1","description":"Simple DirectMedia Layer debug files","is_source":true},{"name":"libsdl1.2debian","version":"1.2.15-8ubuntu1.1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libsdl1.2","version_link":"https://launchpad.net/ubuntu/+source/libsdl1.2/1.2.15-8ubuntu1.1+esm1"},{"name":"libsdl1.2-dev","version":"1.2.15-8ubuntu1.1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libsdl1.2","version_link":"https://launchpad.net/ubuntu/+source/libsdl1.2/1.2.15-8ubuntu1.1+esm1"}]},"type":"USN","cves_ids":["CVE-2019-13616","CVE-2019-7572","CVE-2019-7573","CVE-2019-7574","CVE-2019-7575","CVE-2019-7576","CVE-2019-7577","CVE-2019-7578","CVE-2019-7635","CVE-2019-7636","CVE-2019-7637"]},{"id":"USN-4156-1","title":"SDL vulnerabilities","summary":"Several security issues were fixed in SDL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-10-15T18:27:06.693706","description":"It was discovered that SDL incorrectly handled certain images. If a user\nwere tricked into opening a crafted image file, a remote attacker could\nuse this issue to cause SDL to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"libsdl1.2","version":"1.2.15+dfsg2-0.1ubuntu0.1","description":"Simple DirectMedia Layer","is_source":true},{"name":"libsdl1.2-dev","version":"1.2.15+dfsg2-0.1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libsdl1.2","version_link":"https://launchpad.net/ubuntu/+source/libsdl1.2/1.2.15+dfsg2-0.1ubuntu0.1","pocket":"security"},{"name":"libsdl1.2debian","version":"1.2.15+dfsg2-0.1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libsdl1.2","version_link":"https://launchpad.net/ubuntu/+source/libsdl1.2/1.2.15+dfsg2-0.1ubuntu0.1","pocket":"security"}],"xenial":[{"name":"libsdl1.2","version":"1.2.15+dfsg1-3ubuntu0.1","description":"Simple DirectMedia Layer","is_source":true},{"name":"libsdl1.2-dev","version":"1.2.15+dfsg1-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libsdl1.2","version_link":"https://launchpad.net/ubuntu/+source/libsdl1.2/1.2.15+dfsg1-3ubuntu0.1","pocket":"security"},{"name":"libsdl1.2debian","version":"1.2.15+dfsg1-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libsdl1.2","version_link":"https://launchpad.net/ubuntu/+source/libsdl1.2/1.2.15+dfsg1-3ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-13616","CVE-2019-7572","CVE-2019-7573","CVE-2019-7574","CVE-2019-7575","CVE-2019-7576","CVE-2019-7577","CVE-2019-7578","CVE-2019-7635","CVE-2019-7636","CVE-2019-7637","CVE-2019-7638"]},{"id":"USN-4238-1","title":"SDL_image vulnerabilities","summary":"Several security issues were fixed in SDL_image.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-01-14T15:01:52.153697","description":"It was discovered that SDL_image incorrectly handled certain image files. An\nattacker could possibly use this issue to cause a denial of service or other\nunspecified impact.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"sdl-image1.2","version":"1.2.12-8ubuntu0.1","description":"Image loading library for Simple DirectMedia Layer 1.2","is_source":true},{"name":"libsdl-image1.2","version":"1.2.12-8ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sdl-image1.2","version_link":"https://launchpad.net/ubuntu/+source/sdl-image1.2/1.2.12-8ubuntu0.1","pocket":"security"},{"name":"libsdl-image1.2-dev","version":"1.2.12-8ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sdl-image1.2","version_link":"https://launchpad.net/ubuntu/+source/sdl-image1.2/1.2.12-8ubuntu0.1","pocket":"security"}],"xenial":[{"name":"sdl-image1.2","version":"1.2.12-5+deb9u1ubuntu0.16.04.1","description":"Image loading library for Simple DirectMedia Layer 1.2","is_source":true},{"name":"libsdl-image1.2","version":"1.2.12-5+deb9u1ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sdl-image1.2","version_link":"https://launchpad.net/ubuntu/+source/sdl-image1.2/1.2.12-5+deb9u1ubuntu0.16.04.1","pocket":"security"},{"name":"libsdl-image1.2-dev","version":"1.2.12-5+deb9u1ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/sdl-image1.2","version_link":"https://launchpad.net/ubuntu/+source/sdl-image1.2/1.2.12-5+deb9u1ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2018-3977","CVE-2019-12216","CVE-2019-12217","CVE-2019-12218","CVE-2019-12219","CVE-2019-12220","CVE-2019-12221","CVE-2019-12222","CVE-2019-13616","CVE-2019-5051","CVE-2019-5052","CVE-2019-7635"]}]},{"id":"CVE-2019-17595","published":"2019-10-14T21:15:00","updated_at":"2025-08-25T23:08:16.373372+00:00","description":"\nThere is a heap-based buffer over-read in the fmt_entry function in\ntinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"DoS only"}],"codename":null,"priority":"negligible","cvss3":5.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW","baseScore":5.4,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00013.html","https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html","https://ubuntu.com/security/notices/USN-5477-1","https://ubuntu.com/security/notices/USN-6099-1","https://www.cve.org/CVERecord?id=CVE-2019-17595"],"bugs":["https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942401"],"patches":{"ncurses":[]},"tags":{},"packages":[{"name":"ncurses","source":"https://ubuntu.com/security/cve?package=ncurses","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ncurses","debian":"https://tracker.debian.org/pkg/ncurses","statuses":[{"release_codename":"groovy","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"6.1-1ubuntu1.18.04.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"5.9+20140118-1ubuntu1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"6.1+20191019-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"6.0+20160213-1ubuntu1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"lunar","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5477-1","USN-6099-1"],"notices":[{"id":"USN-5477-1","title":"ncurses vulnerabilities","summary":"Several security issues were fixed in ncurses.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-06-14T11:17:52.275503","description":"Hosein Askari discovered that ncurses was incorrectly performing\nmemory management operations when dealing with long filenames while\nwriting structures into the file system. An attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary\ncode. (CVE-2017-16879)\n\nChung-Yi Lin discovered that ncurses was incorrectly handling access\nto invalid memory areas when parsing terminfo or termcap entries where\nthe use-name had invalid syntax. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2018-19211)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when processing invalid hashcodes. An attacker could possibly\nuse this issue to cause a denial of service or to expose sensitive\ninformation. (CVE-2019-17594)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when processing terminfo and termcap files.\nAn attacker could possibly use this issue to cause a denial of\nservice or to expose sensitive information. (CVE-2019-17595)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when converting between termcap and\nterminfo formats. An attacker could possibly use this issue to cause\na denial of service or execute arbitrary code. (CVE-2021-39537)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when dealing with corrupt terminfo data while reading a\nterminfo file. An attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information.\n(CVE-2022-29458)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"ncurses","version":"5.9+20140118-1ubuntu1+esm2","description":"shared libraries for terminal handling (32-bit)","is_source":true},{"name":"libx32ncurses5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-examples","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64tinfo5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-bin","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-base","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-doc","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-term","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"ncurses","version":"6.0+20160213-1ubuntu1+esm2","description":"shared libraries for terminal handling (32-bit)","is_source":true},{"name":"libx32ncurses5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-examples","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64tinfo5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-bin","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-base","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-doc","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-term","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2017-16879","CVE-2018-19211","CVE-2019-17595","CVE-2019-17594","CVE-2022-29458","CVE-2021-39537"]},{"id":"USN-6099-1","title":"ncurses vulnerabilities","summary":"Several security issues were fixed in ncurses.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-05-23T11:56:42.061295","description":"It was discovered that ncurses was incorrectly performing bounds\nchecks when processing invalid hashcodes. An attacker could possibly\nuse this issue to cause a denial of service or to expose sensitive\ninformation. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2019-17594)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when processing terminfo and termcap files.\nAn attacker could possibly use this issue to cause a denial of\nservice or to expose sensitive information. This issue only affected\nUbuntu 18.04 LTS. (CVE-2019-17595)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when converting between termcap and\nterminfo formats. An attacker could possibly use this issue to cause\na denial of service or execute arbitrary code. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39537)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when dealing with corrupt terminfo data while reading a\nterminfo file. An attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-29458)\n\nIt was discovered that ncurses was parsing environment variables when\nrunning with setuid applications and not properly handling the\nprocessing of malformed data when doing so. A local attacker could\npossibly use this issue to cause a denial of service (application\ncrash) or execute arbitrary code. (CVE-2023-29491)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"ncurses","version":"5.9+20140118-1ubuntu1+esm3","description":"shared libraries for terminal handling","is_source":true},{"name":"libx32ncurses5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-examples","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-bin","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64tinfo5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-base","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-doc","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-term","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"ncurses","version":"6.3-2ubuntu0.1","description":"shared libraries for terminal handling","is_source":true},{"name":"ncurses-examples","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib32ncursesw6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libtinfo5","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libtinfo6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib32tinfo6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"ncurses-bin","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib64tinfo6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncurses-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncurses6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncurses5","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"ncurses-base","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"ncurses-doc","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"ncurses-term","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncursesw6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib64ncursesw6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"}],"xenial":[{"name":"ncurses","version":"6.0+20160213-1ubuntu1+esm3","description":"shared libraries for terminal handling","is_source":true},{"name":"libx32ncurses5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-examples","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-bin","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64tinfo5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-base","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-doc","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-term","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"}],"lunar":[{"name":"ncurses","version":"6.4-2ubuntu0.1","description":"shared libraries for terminal handling","is_source":true},{"name":"ncurses-examples","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib32ncursesw6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libtinfo5","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libtinfo6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib32tinfo6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"ncurses-bin","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib64tinfo6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncurses-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncurses6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncurses5","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"ncurses-base","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"ncurses-doc","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"ncurses-term","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncursesw6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib64ncursesw6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"}],"bionic":[{"name":"ncurses","version":"6.1-1ubuntu1.18.04.1","description":"shared libraries for terminal handling","is_source":true},{"name":"libx32ncurses5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32tinfo-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-examples","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-bin","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32ncurses5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32ncursesw5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32ncursesw5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32tinfo5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libtinfo5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32ncurses5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib64tinfo5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib64ncurses5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib64ncurses5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libncurses5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32ncurses5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libncursesw5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-base","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32tinfo-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-doc","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32ncursesw5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32ncursesw5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32tinfo5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-term","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"}],"kinetic":[{"name":"ncurses","version":"6.3+20220423-2ubuntu0.1","description":"shared libraries for terminal handling","is_source":true},{"name":"ncurses-examples","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib32ncursesw6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libtinfo5","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libtinfo6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib32tinfo6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"ncurses-bin","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib64tinfo6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncurses-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncurses6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncurses5","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"ncurses-base","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"ncurses-doc","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"ncurses-term","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncursesw6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib64ncursesw6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"}],"focal":[{"name":"ncurses","version":"6.2-0ubuntu2.1","description":"shared libraries for terminal handling","is_source":true},{"name":"ncurses-examples","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib32ncurses-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib32ncursesw6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncursesw5","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libtinfo5","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libtinfo6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib32tinfo6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib32ncurses6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"ncurses-bin","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib64tinfo6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib64ncurses-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib64ncurses6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncurses-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncurses6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncurses5","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"ncurses-base","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"ncurses-doc","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"ncurses-term","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncursesw6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib64ncursesw6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2021-39537","CVE-2023-29491","CVE-2022-29458","CVE-2019-17594","CVE-2019-17595"]}]},{"id":"CVE-2019-17594","published":"2019-10-14T21:15:00","updated_at":"2025-08-25T23:08:16.373372+00:00","description":"\nThere is a heap-based buffer over-read in the _nc_find_entry function in\ntinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"DoS only"}],"codename":null,"priority":"negligible","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00017.html","https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00045.html","https://ubuntu.com/security/notices/USN-5477-1","https://ubuntu.com/security/notices/USN-6099-1","https://www.cve.org/CVERecord?id=CVE-2019-17594"],"bugs":["https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942401"],"patches":{"ncurses":[]},"tags":{},"packages":[{"name":"ncurses","source":"https://ubuntu.com/security/cve?package=ncurses","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ncurses","debian":"https://tracker.debian.org/pkg/ncurses","statuses":[{"release_codename":"bionic","status":"released","description":"6.1-1ubuntu1.18.04.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.1+20191019-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"6.0+20160213-1ubuntu1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"5.9+20140118-1ubuntu1+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"lunar","status":"released","description":"6.1+20191019-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-5477-1","USN-6099-1"],"notices":[{"id":"USN-5477-1","title":"ncurses vulnerabilities","summary":"Several security issues were fixed in ncurses.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-06-14T11:17:52.275503","description":"Hosein Askari discovered that ncurses was incorrectly performing\nmemory management operations when dealing with long filenames while\nwriting structures into the file system. An attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary\ncode. (CVE-2017-16879)\n\nChung-Yi Lin discovered that ncurses was incorrectly handling access\nto invalid memory areas when parsing terminfo or termcap entries where\nthe use-name had invalid syntax. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2018-19211)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when processing invalid hashcodes. An attacker could possibly\nuse this issue to cause a denial of service or to expose sensitive\ninformation. (CVE-2019-17594)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when processing terminfo and termcap files.\nAn attacker could possibly use this issue to cause a denial of\nservice or to expose sensitive information. (CVE-2019-17595)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when converting between termcap and\nterminfo formats. An attacker could possibly use this issue to cause\na denial of service or execute arbitrary code. (CVE-2021-39537)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when dealing with corrupt terminfo data while reading a\nterminfo file. An attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information.\n(CVE-2022-29458)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"ncurses","version":"5.9+20140118-1ubuntu1+esm2","description":"shared libraries for terminal handling (32-bit)","is_source":true},{"name":"libx32ncurses5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-examples","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64tinfo5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-bin","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-base","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-doc","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo5","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-term","version":"5.9+20140118-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"ncurses","version":"6.0+20160213-1ubuntu1+esm2","description":"shared libraries for terminal handling (32-bit)","is_source":true},{"name":"libx32ncurses5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-examples","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64tinfo5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-bin","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-base","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-doc","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo5","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-term","version":"6.0+20160213-1ubuntu1+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2017-16879","CVE-2018-19211","CVE-2019-17595","CVE-2019-17594","CVE-2022-29458","CVE-2021-39537"]},{"id":"USN-6099-1","title":"ncurses vulnerabilities","summary":"Several security issues were fixed in ncurses.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-05-23T11:56:42.061295","description":"It was discovered that ncurses was incorrectly performing bounds\nchecks when processing invalid hashcodes. An attacker could possibly\nuse this issue to cause a denial of service or to expose sensitive\ninformation. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2019-17594)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when processing terminfo and termcap files.\nAn attacker could possibly use this issue to cause a denial of\nservice or to expose sensitive information. This issue only affected\nUbuntu 18.04 LTS. (CVE-2019-17595)\n\nIt was discovered that ncurses was incorrectly handling\nend-of-string characters when converting between termcap and\nterminfo formats. An attacker could possibly use this issue to cause\na denial of service or execute arbitrary code. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-39537)\n\nIt was discovered that ncurses was incorrectly performing bounds\nchecks when dealing with corrupt terminfo data while reading a\nterminfo file. An attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-29458)\n\nIt was discovered that ncurses was parsing environment variables when\nrunning with setuid applications and not properly handling the\nprocessing of malformed data when doing so. A local attacker could\npossibly use this issue to cause a denial of service (application\ncrash) or execute arbitrary code. (CVE-2023-29491)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"ncurses","version":"5.9+20140118-1ubuntu1+esm3","description":"shared libraries for terminal handling","is_source":true},{"name":"libx32ncurses5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-examples","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-bin","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64tinfo5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncurses5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-base","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-doc","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo5","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5-dev","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-term","version":"5.9+20140118-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"ncurses","version":"6.3-2ubuntu0.1","description":"shared libraries for terminal handling","is_source":true},{"name":"ncurses-examples","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib32ncursesw6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libtinfo5","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libtinfo6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib32tinfo6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"ncurses-bin","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib64tinfo6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncurses-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncurses6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncurses5","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"ncurses-base","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"ncurses-doc","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"ncurses-term","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncursesw6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"},{"name":"lib64ncursesw6","version":"6.3-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3-2ubuntu0.1","pocket":"security"}],"xenial":[{"name":"ncurses","version":"6.0+20160213-1ubuntu1+esm3","description":"shared libraries for terminal handling","is_source":true},{"name":"libx32ncurses5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-examples","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-bin","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32tinfo5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libtinfo5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib32ncurses5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64tinfo5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"lib64ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncurses5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncurses5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-base","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-doc","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32ncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libx32tinfo5","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"libncursesw5-dev","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"},{"name":"ncurses-term","version":"6.0+20160213-1ubuntu1+esm3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":null,"pocket":"esm-infra"}],"lunar":[{"name":"ncurses","version":"6.4-2ubuntu0.1","description":"shared libraries for terminal handling","is_source":true},{"name":"ncurses-examples","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib32ncursesw6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libtinfo5","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libtinfo6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib32tinfo6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"ncurses-bin","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib64tinfo6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncurses-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncurses6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncurses5","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"ncurses-base","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"ncurses-doc","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"ncurses-term","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncursesw6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"},{"name":"lib64ncursesw6","version":"6.4-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.4-2ubuntu0.1","pocket":"security"}],"bionic":[{"name":"ncurses","version":"6.1-1ubuntu1.18.04.1","description":"shared libraries for terminal handling","is_source":true},{"name":"libx32ncurses5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32tinfo-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-examples","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-bin","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32ncurses5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32ncursesw5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32ncursesw5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32tinfo5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libtinfo5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib32ncurses5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib64tinfo5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib64ncurses5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"lib64ncurses5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libncurses5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32ncurses5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libncursesw5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-base","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32tinfo-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-doc","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32ncursesw5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32ncursesw5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libx32tinfo5","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"},{"name":"ncurses-term","version":"6.1-1ubuntu1.18.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.1-1ubuntu1.18.04.1","pocket":"security"}],"kinetic":[{"name":"ncurses","version":"6.3+20220423-2ubuntu0.1","description":"shared libraries for terminal handling","is_source":true},{"name":"ncurses-examples","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib32ncursesw6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libtinfo5","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libtinfo6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib32tinfo6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib32ncurses6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"ncurses-bin","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib64tinfo6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib64ncurses6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncurses-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncurses6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncurses5","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"ncurses-base","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"ncurses-doc","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"ncurses-term","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncursesw6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"},{"name":"lib64ncursesw6","version":"6.3+20220423-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.3+20220423-2ubuntu0.1","pocket":"security"}],"focal":[{"name":"ncurses","version":"6.2-0ubuntu2.1","description":"shared libraries for terminal handling","is_source":true},{"name":"ncurses-examples","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib32ncurses-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib32ncursesw6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libtinfo-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncursesw5","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libtinfo5","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libtinfo6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib32tinfo6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib32ncurses6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"ncurses-bin","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib64tinfo6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib64ncurses-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib64ncurses6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncurses5-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncurses-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncurses6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncurses5","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"ncurses-base","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"ncurses-doc","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"ncurses-term","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncursesw6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"libncursesw5-dev","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"},{"name":"lib64ncursesw6","version":"6.2-0ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ncurses","version_link":"https://launchpad.net/ubuntu/+source/ncurses/6.2-0ubuntu2.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2021-39537","CVE-2023-29491","CVE-2022-29458","CVE-2019-17594","CVE-2019-17595"]}]},{"id":"CVE-2019-14823","published":"2019-10-14T20:15:00","updated_at":"2025-08-25T23:06:15.919953+00:00","description":"\nA flaw was found in the \"Leaf and Chain\" OCSP policy implementation in JSS'\nCryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly\ntrusted the root certificate of a certificate chain. Applications using\nthis policy may not properly verify the chain and could be vulnerable to\nattacks such as Man in the Middle.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.4,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14823","https://www.cve.org/CVERecord?id=CVE-2019-14823"],"bugs":[""],"patches":{"libjss-java":[]},"tags":{},"packages":[{"name":"libjss-java","source":"https://ubuntu.com/security/cve?package=libjss-java","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libjss-java","debian":"https://tracker.debian.org/pkg/libjss-java","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14858","published":"2019-10-14T15:15:00","updated_at":"2025-08-26T12:12:38.340369+00:00","description":"\nA vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower\n3.x up to 3.5. When a module has an argument_spec with sub parameters\nmarked as no_log, passing an invalid parameter name to the module will\ncause the task to fail before the no_log options in the sub parameters are\nprocessed. As a result, data in the sub parameter fields will not be masked\nand will be displayed if Ansible is run with increased verbosity and\npresent in the module invocation arguments for the task.","ubuntu_description":"","notes":[{"author":"john-breton","note":"Vulnerable code was not introduced until 2.4."}],"codename":null,"priority":"low","cvss3":7.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugzilla.redhat.com/show_bug.cgi?id=1760593","https://www.cve.org/CVERecord?id=CVE-2019-14858"],"bugs":[""],"patches":{"ansible":["upstream: https://github.com/ansible/ansible/commit/0fd656e9964a91f2e8b1e9bbf78c74661ab9d37b","upstream: https://github.com/ansible/ansible/commit/3dfb8e81bb5f776a6b00c7a90dd087e85b71f8bb"]},"tags":{},"packages":[{"name":"ansible","source":"https://ubuntu.com/security/cve?package=ansible","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ansible","debian":"https://tracker.debian.org/pkg/ansible","statuses":[{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.7.14, 2.8.6","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.8.6+dfsg-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-14287","published":"2019-10-14T15:00:00","updated_at":"2025-08-25T23:05:54.852892+00:00","description":"\nIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer\naccount can bypass certain policy blacklists and session PAM modules, and\ncan cause incorrect logging, by invoking sudo with a crafted user ID. For\nexample, this allows bypass of !root configuration, and USER= logging, for\na \"sudo -u \\#$((0xffffffff))\" command.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-4154-1","https://www.sudo.ws/alerts/minus_1_uid.html","https://www.cve.org/CVERecord?id=CVE-2019-14287"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942322"],"patches":{"sudo":[]},"tags":{},"packages":[{"name":"sudo","source":"https://ubuntu.com/security/cve?package=sudo","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sudo","debian":"https://tracker.debian.org/pkg/sudo","statuses":[{"release_codename":"bionic","status":"released","description":"1.8.21p2-3ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"1.8.27-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.8.9p5-1ubuntu1.5+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"1.8.28","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.8.16-0ubuntu1.8","component":null,"pocket":"security"}]}],"notices_ids":["USN-4154-1"],"notices":[{"id":"USN-4154-1","title":"Sudo vulnerability","summary":"Sudo could be made to run commands as root if it called with\na specially crafted user ID.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-10-14T14:46:34.529453","description":"Joe Vennix discovered that Sudo incorrectly handled\ncertain user IDs. An attacker could potentially exploit this\nto execute arbitrary commands as the root user.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"sudo","version":"1.8.21p2-3ubuntu1.1","description":"Provide limited super user privileges to specific users","is_source":true},{"name":"sudo","version":"1.8.21p2-3ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":"https://launchpad.net/ubuntu/+source/sudo/1.8.21p2-3ubuntu1.1","pocket":"security"},{"name":"sudo-ldap","version":"1.8.21p2-3ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":"https://launchpad.net/ubuntu/+source/sudo/1.8.21p2-3ubuntu1.1","pocket":"security"}],"disco":[{"name":"sudo","version":"1.8.27-1ubuntu1.1","description":"Provide limited super user privileges to specific users","is_source":true},{"name":"sudo","version":"1.8.27-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":"https://launchpad.net/ubuntu/+source/sudo/1.8.27-1ubuntu1.1"},{"name":"sudo-ldap","version":"1.8.27-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":"https://launchpad.net/ubuntu/+source/sudo/1.8.27-1ubuntu1.1"}],"precise":[{"name":"sudo","version":"1.8.3p1-1ubuntu3.8","description":"Provide limited super user privileges to specific users","is_source":true},{"name":"sudo","version":"1.8.3p1-1ubuntu3.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":"https://launchpad.net/ubuntu/+source/sudo/1.8.3p1-1ubuntu3.8"},{"name":"sudo-ldap","version":"1.8.3p1-1ubuntu3.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":"https://launchpad.net/ubuntu/+source/sudo/1.8.3p1-1ubuntu3.8"}],"trusty":[{"name":"sudo","version":"1.8.9p5-1ubuntu1.5+esm2","description":"Provide limited super user privileges to specific users","is_source":true},{"name":"sudo","version":"1.8.9p5-1ubuntu1.5+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":null,"pocket":"esm-infra"},{"name":"sudo-ldap","version":"1.8.9p5-1ubuntu1.5+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"sudo","version":"1.8.16-0ubuntu1.8","description":"Provide limited super user privileges to specific users","is_source":true},{"name":"sudo","version":"1.8.16-0ubuntu1.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":"https://launchpad.net/ubuntu/+source/sudo/1.8.16-0ubuntu1.8","pocket":"security"},{"name":"sudo-ldap","version":"1.8.16-0ubuntu1.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/sudo","version_link":"https://launchpad.net/ubuntu/+source/sudo/1.8.16-0ubuntu1.8","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-14287"]}]},{"id":"CVE-2019-17547","published":"2019-10-14T02:15:00","updated_at":"2025-08-25T23:08:12.011823+00:00","description":"\nIn ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a\nuse-after-free.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"introduced by:\nhttps://github.com/ImageMagick/ImageMagick/commit/492b1e98b1d9b5b4172802f45b288060f1805f98"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2019-17547"],"bugs":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16537"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick6/commit/4cfcb123de8220d9b9381751ef1c74891b352609"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-17546","published":"2019-10-14T02:15:00","updated_at":"2025-07-11T07:42:18.809981+00:00","description":"\ntif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and\nother products, has an integer overflow that potentially causes a\nheap-based buffer overflow via a crafted RGBA image, related to a\n\"Negative-size-param\" condition.","ubuntu_description":"\nIt was discovered that GDAL incorrectly handled certain malformed images.\nIf a user or automated system were tricked into opening a specially\ncrafted image, a remote attacker could crash the application, leading to a\ndenial of service, or possibly execute arbitrary code with user privileges.","notes":[{"author":"sbeattie","note":"the neuron package dropped the embedded InterView library\n(which contained an embedded libtiff) in 8.2.2-1."}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16443","https://ubuntu.com/security/notices/USN-4158-1","https://ubuntu.com/security/notices/USN-5841-1","https://www.cve.org/CVERecord?id=CVE-2019-17546"],"bugs":[""],"patches":{"tiff":["upstream: https://gitlab.com/libtiff/libtiff/commit/4bb584a35f87af42d6cf09d15e9ce8909a839145"],"openjpeg2":[],"insighttoolkit4":[],"qtwebengine-opensource-src":[],"blender":[],"texmaker":[],"chromium-browser":[],"gdal":["upstream: https://github.com/OSGeo/gdal/commit/21674033ee246f698887604c7af7ba1962a40ddf"],"qt4-x11":[],"libtk-img":[],"sfftobmp":[],"qtimageformats-opensource-src":[],"paraview":[],"povray":[],"neuron":[],"ivtools":[],"xloadimage":[]},"tags":{},"packages":[{"name":"qtwebengine-opensource-src","source":"https://ubuntu.com/security/cve?package=qtwebengine-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtwebengine-opensource-src","debian":"https://tracker.debian.org/pkg/qtwebengine-opensource-src","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"texmaker","source":"https://ubuntu.com/security/cve?package=texmaker","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=texmaker","debian":"https://tracker.debian.org/pkg/texmaker","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"gdal","source":"https://ubuntu.com/security/cve?package=gdal","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gdal","debian":"https://tracker.debian.org/pkg/gdal","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.10.1+dfsg-5ubuntu1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"}]},{"name":"qtimageformats-opensource-src","source":"https://ubuntu.com/security/cve?package=qtimageformats-opensource-src","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qtimageformats-opensource-src","debian":"https://tracker.debian.org/pkg/qtimageformats-opensource-src","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"paraview","source":"https://ubuntu.com/security/cve?package=paraview","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=paraview","debian":"https://tracker.debian.org/pkg/paraview","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"blender","source":"https://ubuntu.com/security/cve?package=blender","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=blender","debian":"https://tracker.debian.org/pkg/blender","statuses":[{"release_codename":"bionic","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"}]},{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"bionic","status":"not-affected","description":"80.0.3987.87-0ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"80.0.3987.87-0ubuntu0.16.04.1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"focal was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"insighttoolkit4","source":"https://ubuntu.com/security/cve?package=insighttoolkit4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=insighttoolkit4","debian":"https://tracker.debian.org/pkg/insighttoolkit4","statuses":[{"release_codename":"hirsute","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"ivtools","source":"https://ubuntu.com/security/cve?package=ivtools","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ivtools","debian":"https://tracker.debian.org/pkg/ivtools","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"}]},{"name":"libtk-img","source":"https://ubuntu.com/security/cve?package=libtk-img","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libtk-img","debian":"https://tracker.debian.org/pkg/libtk-img","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"}]},{"name":"neuron","source":"https://ubuntu.com/security/cve?package=neuron","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=neuron","debian":"https://tracker.debian.org/pkg/neuron","statuses":[{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"dropped embedded libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"dropped embedded libtiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"dropped embedded libtiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"dropped embedded libtiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"dropped embedded libtiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"dropped embedded libtiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"dropped embedded libtiff","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjpeg2","source":"https://ubuntu.com/security/cve?package=openjpeg2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjpeg2","debian":"https://tracker.debian.org/pkg/openjpeg2","statuses":[{"release_codename":"impish","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system tiff","component":null,"pocket":"security"}]},{"name":"povray","source":"https://ubuntu.com/security/cve?package=povray","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=povray","debian":"https://tracker.debian.org/pkg/povray","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"}]},{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"sfftobmp","source":"https://ubuntu.com/security/cve?package=sfftobmp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sfftobmp","debian":"https://tracker.debian.org/pkg/sfftobmp","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"tiff","source":"https://ubuntu.com/security/cve?package=tiff","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tiff","debian":"https://tracker.debian.org/pkg/tiff","statuses":[{"release_codename":"impish","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"4.0.9-5ubuntu0.3","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"4.0.10-4ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"4.0.3-7ubuntu0.11+esm6","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"4.0.10+git190818-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"4.0.6-1ubuntu0.7","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"4.0.10+git191003-1","component":null,"pocket":"security"}]},{"name":"xloadimage","source":"https://ubuntu.com/security/cve?package=xloadimage","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xloadimage","debian":"https://tracker.debian.org/pkg/xloadimage","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system libtiff","component":null,"pocket":"security"}]}],"notices_ids":["USN-4158-1","USN-5841-1"],"notices":[{"id":"USN-4158-1","title":"LibTIFF vulnerabilities","summary":"Several security issues were fixed in LibTIFF.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-10-17T12:05:11.691353","description":"It was discovered that LibTIFF incorrectly handled certain malformed\nimages. If a user or automated system were tricked into opening a specially\ncrafted image, a remote attacker could crash the application, leading to a\ndenial of service, or possibly execute arbitrary code with user privileges.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"tiff","version":"4.0.9-5ubuntu0.3","description":"Tag Image File Format (TIFF) library","is_source":true},{"name":"libtiff-dev","version":"4.0.9-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.3","pocket":"security"},{"name":"libtiff-doc","version":"4.0.9-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.3","pocket":"security"},{"name":"libtiff-opengl","version":"4.0.9-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.3","pocket":"security"},{"name":"libtiff-tools","version":"4.0.9-5ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.3","pocket":"security"},{"name":"libtiff5","version":"4.0.9-5ubuntu0.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.3","pocket":"security"},{"name":"libtiff5-dev","version":"4.0.9-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.3","pocket":"security"},{"name":"libtiffxx5","version":"4.0.9-5ubuntu0.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.9-5ubuntu0.3","pocket":"security"}],"disco":[{"name":"tiff","version":"4.0.10-4ubuntu0.1","description":"Tag Image File Format (TIFF) library","is_source":true},{"name":"libtiff-dev","version":"4.0.10-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.10-4ubuntu0.1"},{"name":"libtiff-doc","version":"4.0.10-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.10-4ubuntu0.1"},{"name":"libtiff-opengl","version":"4.0.10-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.10-4ubuntu0.1"},{"name":"libtiff-tools","version":"4.0.10-4ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.10-4ubuntu0.1"},{"name":"libtiff5","version":"4.0.10-4ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.10-4ubuntu0.1"},{"name":"libtiff5-dev","version":"4.0.10-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.10-4ubuntu0.1"},{"name":"libtiffxx5","version":"4.0.10-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.10-4ubuntu0.1"}],"xenial":[{"name":"tiff","version":"4.0.6-1ubuntu0.7","description":"Tag Image File Format (TIFF) library","is_source":true},{"name":"libtiff-doc","version":"4.0.6-1ubuntu0.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.7","pocket":"security"},{"name":"libtiff-opengl","version":"4.0.6-1ubuntu0.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.7","pocket":"security"},{"name":"libtiff-tools","version":"4.0.6-1ubuntu0.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.7","pocket":"security"},{"name":"libtiff5","version":"4.0.6-1ubuntu0.7","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.7","pocket":"security"},{"name":"libtiff5-dev","version":"4.0.6-1ubuntu0.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.7","pocket":"security"},{"name":"libtiffxx5","version":"4.0.6-1ubuntu0.7","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":"https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.7","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-14973","CVE-2019-17546"]},{"id":"USN-5841-1","title":"LibTIFF vulnerabilities","summary":"Several security issues were fixed in LibTIFF.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2023-02-02T16:34:35.100204","description":"It was discovered that LibTIFF incorrectly handled certain malformed\nimages. If a user or automated system were tricked into opening a\nspecially crafted image, a remote attacker could crash the application,\nleading to a denial of service, or possibly execute arbitrary code with\nuser privileges. This issue was only fixed in Ubuntu 14.04 ESM.\n(CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524,\nCVE-2022-3970)\n\nIt was discovered that LibTIFF was incorrectly acessing a data structure\nwhen processing data with the tiffcrop tool, which could lead to a heap\nbuffer overflow. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code. (CVE-2022-48281)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"tiff","version":"4.0.3-7ubuntu0.11+esm6","description":"Tag Image File Format (TIFF) library","is_source":true},{"name":"libtiff-opengl","version":"4.0.3-7ubuntu0.11+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiffxx5","version":"4.0.3-7ubuntu0.11+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff5-dev","version":"4.0.3-7ubuntu0.11+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff4-dev","version":"4.0.3-7ubuntu0.11+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff5-alt-dev","version":"4.0.3-7ubuntu0.11+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff5","version":"4.0.3-7ubuntu0.11+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff-tools","version":"4.0.3-7ubuntu0.11+esm6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff-doc","version":"4.0.3-7ubuntu0.11+esm6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"tiff","version":"4.0.6-1ubuntu0.8+esm9","description":"Tag Image File Format (TIFF) library","is_source":true},{"name":"libtiff-opengl","version":"4.0.6-1ubuntu0.8+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiffxx5","version":"4.0.6-1ubuntu0.8+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff5-dev","version":"4.0.6-1ubuntu0.8+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff5","version":"4.0.6-1ubuntu0.8+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff-tools","version":"4.0.6-1ubuntu0.8+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"},{"name":"libtiff-doc","version":"4.0.6-1ubuntu0.8+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/tiff","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2019-14973","CVE-2020-35524","CVE-2019-17546","CVE-2022-48281","CVE-2020-35523","CVE-2022-3970"]}]},{"id":"CVE-2019-17545","published":"2019-10-14T02:15:00","updated_at":"2025-08-18T17:09:46.634843+00:00","description":"\nGDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in\nogr/ogr_expat.cpp when the 10MB threshold is exceeded.","ubuntu_description":"\nIt was discovered that GDAL incorrectly handled memory allocation. An\nattacker could possibly use this issue to cause denial of service or\nother unspecified impact.","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16178","https://github.com/OSGeo/gdal/commit/148115fcc40f1651a5d15fa34c9a8c528e7147bb","https://www.cve.org/CVERecord?id=CVE-2019-17545"],"bugs":[""],"patches":{"gdal":[]},"tags":{},"packages":[{"name":"gdal","source":"https://ubuntu.com/security/cve?package=gdal","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gdal","debian":"https://tracker.debian.org/pkg/gdal","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.10.1+dfsg-5ubuntu1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.4.2+dfsg-2","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-17544","published":"2019-10-14T02:15:00","updated_at":"2025-08-25T23:08:12.011823+00:00","description":"\nlibaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read\nin acommon::unescape in common/getdata.cpp via an isolated \\ character.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16109","https://github.com/GNUAspell/aspell/commit/80fa26c74279fced8d778351cff19d1d8f44fe4e","https://github.com/GNUAspell/aspell/compare/rel-0.60.7...rel-0.60.8","https://ubuntu.com/security/notices/USN-4155-1","https://ubuntu.com/security/notices/USN-4155-2","https://www.cve.org/CVERecord?id=CVE-2019-17544"],"bugs":[""],"patches":{"aspell":[]},"tags":{},"packages":[{"name":"aspell","source":"https://ubuntu.com/security/cve?package=aspell","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=aspell","debian":"https://tracker.debian.org/pkg/aspell","statuses":[{"release_codename":"bionic","status":"released","description":"0.60.7~20110707-4ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"0.60.7~20110707-6ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"0.60.7-3ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"0.60.7~20110707-1ubuntu1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"released","description":"0.60.8","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.60.7~20110707-3ubuntu0.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-4155-2","USN-4155-1"],"notices":[{"id":"USN-4155-2","title":"Aspell vulnerability","summary":"Aspell could be made to expose sensitive information if it received\na specially crafted input.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-10-21T12:33:22.062615","description":"USN-4155-1 fixed a vulnerability in Aspell. This update provides\nthe corresponding update for Ubuntu 19.10.\n\nOriginal advisory details:\n\n It was discovered that Aspell incorrectly handled certain inputs.\n An attacker could potentially access sensitive information.\n","is_hidden":false,"release_packages":{"eoan":[{"name":"aspell","version":"0.60.7-3ubuntu0.1","description":"GNU Aspell spell-checker","is_source":true},{"name":"libaspell15","version":"0.60.7-3ubuntu0.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7-3ubuntu0.1"},{"name":"aspell","version":"0.60.7-3ubuntu0.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7-3ubuntu0.1"}]},"type":"USN","cves_ids":["CVE-2019-17544"]},{"id":"USN-4155-1","title":"Aspell vulnerability","summary":"Aspell could be made to expose sensitive information if it received\na specially crafted input.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-10-15T14:12:49.376416","description":"It was discovered that Aspell incorrectly handled certain inputs.\nAn attacker could potentially access sensitive information.\n","is_hidden":false,"release_packages":{"bionic":[{"name":"aspell","version":"0.60.7~20110707-4ubuntu0.1","description":"GNU Aspell spell-checker","is_source":true},{"name":"aspell","version":"0.60.7~20110707-4ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-4ubuntu0.1","pocket":"security"},{"name":"aspell-doc","version":"0.60.7~20110707-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-4ubuntu0.1","pocket":"security"},{"name":"libaspell-dev","version":"0.60.7~20110707-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-4ubuntu0.1","pocket":"security"},{"name":"libaspell15","version":"0.60.7~20110707-4ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-4ubuntu0.1","pocket":"security"},{"name":"libpspell-dev","version":"0.60.7~20110707-4ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-4ubuntu0.1","pocket":"security"}],"disco":[{"name":"aspell","version":"0.60.7~20110707-6ubuntu0.1","description":"GNU Aspell spell-checker","is_source":true},{"name":"aspell","version":"0.60.7~20110707-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-6ubuntu0.1"},{"name":"aspell-doc","version":"0.60.7~20110707-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-6ubuntu0.1"},{"name":"libaspell-dev","version":"0.60.7~20110707-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-6ubuntu0.1"},{"name":"libaspell15","version":"0.60.7~20110707-6ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-6ubuntu0.1"},{"name":"libpspell-dev","version":"0.60.7~20110707-6ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-6ubuntu0.1"}],"precise":[{"name":"aspell","version":"0.60.7~20110707-1ubuntu0.1","description":"GNU Aspell spell-checker","is_source":true},{"name":"aspell","version":"0.60.7~20110707-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-1ubuntu0.1"},{"name":"aspell-doc","version":"0.60.7~20110707-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-1ubuntu0.1"},{"name":"libaspell-dev","version":"0.60.7~20110707-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-1ubuntu0.1"},{"name":"libaspell15","version":"0.60.7~20110707-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-1ubuntu0.1"},{"name":"libpspell-dev","version":"0.60.7~20110707-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-1ubuntu0.1"}],"trusty":[{"name":"aspell","version":"0.60.7~20110707-1ubuntu1+esm1","description":"GNU Aspell spell-checker","is_source":true},{"name":"aspell","version":"0.60.7~20110707-1ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":null,"pocket":"esm-infra"},{"name":"aspell-doc","version":"0.60.7~20110707-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":null,"pocket":"esm-infra"},{"name":"libaspell-dev","version":"0.60.7~20110707-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":null,"pocket":"esm-infra"},{"name":"libaspell15","version":"0.60.7~20110707-1ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":null,"pocket":"esm-infra"},{"name":"libpspell-dev","version":"0.60.7~20110707-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"aspell","version":"0.60.7~20110707-3ubuntu0.1","description":"GNU Aspell spell-checker","is_source":true},{"name":"aspell","version":"0.60.7~20110707-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-3ubuntu0.1","pocket":"security"},{"name":"aspell-doc","version":"0.60.7~20110707-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-3ubuntu0.1","pocket":"security"},{"name":"libaspell-dev","version":"0.60.7~20110707-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-3ubuntu0.1","pocket":"security"},{"name":"libaspell15","version":"0.60.7~20110707-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-3ubuntu0.1","pocket":"security"},{"name":"libpspell-dev","version":"0.60.7~20110707-3ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/aspell","version_link":"https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-3ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-17544"]}]},{"id":"CVE-2019-17543","published":"2019-10-14T02:15:00","updated_at":"2025-08-25T23:08:12.011823+00:00","description":"\nLZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related\nto LZ4_compress_destSize), affecting applications that call\nLZ4_compress_fast with a large input. (This issue can also lead to data\ncorruption.) NOTE: the vendor states \"only a few specific / uncommon usages\nof the API are at risk.\"","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"code is different in bionic and earlier, no indication that it\nis vulnerable to this issue."}],"codename":null,"priority":"low","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/lz4/lz4/pull/756","https://github.com/lz4/lz4/pull/760","https://github.com/lz4/lz4/compare/v1.9.1...v1.9.2","https://www.cve.org/CVERecord?id=CVE-2019-17543"],"bugs":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15941","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=943680"],"patches":{"lz4":["upstream: https://github.com/lz4/lz4/commit/690009e2c2f9e5dcb0d40e7c0c40610ce6006eda","upstream: https://github.com/lz4/lz4/commit/6bc6f836a18d1f8fd05c8fc2b42f1d800bc25de1","upstream: https://github.com/lz4/lz4/commit/13a2d9e34ffc4170720ce417c73e396d0ac1471a"]},"tags":{},"packages":[{"name":"lz4","source":"https://ubuntu.com/security/cve?package=lz4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lz4","debian":"https://tracker.debian.org/pkg/lz4","statuses":[{"release_codename":"hirsute","status":"not-affected","description":"1.9.2-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"0.0~r131-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.9.2-2","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"0.0~r131-2ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.9.2-2","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.9.2-2","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"1.9.2-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"0.0~r114-2ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.9.2-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-17542","published":"2019-10-14T02:15:00","updated_at":"2025-08-25T23:08:12.011823+00:00","description":"\nFFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk\nbecause of an out-of-array access in vqa_decode_init in\nlibavcodec/vqavideo.c.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15919","https://ubuntu.com/security/notices/USN-4431-1","https://www.cve.org/CVERecord?id=CVE-2019-17542"],"bugs":[""],"patches":{"ffmpeg":["upstream: https://github.com/FFmpeg/FFmpeg/commit/02f909dc24b1f05cfbba75077c7707b905e63cd2"]},"tags":{},"packages":[{"name":"ffmpeg","source":"https://ubuntu.com/security/cve?package=ffmpeg","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ffmpeg","debian":"https://tracker.debian.org/pkg/ffmpeg","statuses":[{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"7:3.4.8-0ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"7:2.8.17-0ubuntu0.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-4431-1"],"notices":[{"id":"USN-4431-1","title":"FFmpeg vulnerabilities","summary":"Several security issues were fixed in FFmpeg.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-07-22T16:18:53.508857","description":"It was discovered that FFmpeg incorrectly verified empty audio packets or\nHEVC data. An attacker could possibly use this issue to cause a denial of\nservice via a crafted file. This issue only affected Ubuntu 16.04 LTS, as\nit was already fixed in Ubuntu 18.04 LTS. For more information see:\nhttps://usn.ubuntu.com/usn/usn-3967-1\n(CVE-2018-15822, CVE-2019-11338)\n\nIt was discovered that FFmpeg incorrectly handled sscanf failures. An\nattacker could possibly use this issue to cause a denial of service or\nother unspecified impact. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 18.04 LTS. (CVE-2019-12730)\n\nIt was discovered that FFmpeg incorrectly handled certain WEBM files. An\nattacker could possibly use this issue to obtain sensitive data or other\nunspecified impact. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2019-13312)\n\nIt was discovered that FFmpeg incorrectly handled certain AVI files. An\nattacker could possibly use this issue to cause a denial of service or\nother unspecified impact. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 18.04 LTS. (CVE-2019-13390)\n\nIt was discovered that FFmpeg incorrectly handled certain input. An\nattacker could possibly use this issue to cause a denial of service or\nother unspecified impact. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2019-17539)\n\nIt was discovered that FFmpeg incorrectly handled certain input during\ndecoding of VQA files. An attacker could possibly use this issue to\nobtain sensitive information or other unspecified impact. This issue\nonly affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-17542)\n\nIt was discovered that FFmpeg incorrectly handled certain JPEG files. An\nattacker could possibly use this issue to obtain sensitive information\nor other unspecified impact. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2020-12284)\n\nIt was discovered that FFmpeg incorrectly handled certain M3U8 files. An\nattacker could possibly use this issue to obtain sensitive information\nor other unspecified impact. (CVE-2020-13904)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"ffmpeg","version":"7:3.4.8-0ubuntu0.2","description":"Tools for transcoding, streaming and playing of multimedia files","is_source":true},{"name":"ffmpeg","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"ffmpeg-doc","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavcodec-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavcodec-extra","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavcodec-extra57","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavcodec57","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavdevice-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavdevice57","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavfilter-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavfilter-extra","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavfilter-extra6","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavfilter6","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavformat-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavformat57","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavresample-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavresample3","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavutil-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavutil55","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libpostproc-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libpostproc54","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libswresample-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libswresample2","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libswscale-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libswscale4","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"}],"focal":[{"name":"ffmpeg","version":"7:4.2.4-1ubuntu0.1","description":"Tools for transcoding, streaming and playing of multimedia files","is_source":true},{"name":"ffmpeg","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"ffmpeg-doc","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavcodec-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavcodec-extra","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavcodec-extra58","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavcodec58","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavdevice-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavdevice58","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavfilter-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavfilter-extra","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavfilter-extra7","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavfilter7","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavformat-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavformat58","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavresample-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavresample4","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavutil-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavutil56","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libpostproc-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libpostproc55","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libswresample-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libswresample3","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libswscale-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libswscale5","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"}],"xenial":[{"name":"ffmpeg","version":"7:2.8.17-0ubuntu0.1","description":"Tools for transcoding, streaming and playing of multimedia files","is_source":true},{"name":"ffmpeg","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"ffmpeg-doc","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libav-tools","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavcodec-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavcodec-extra","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavcodec-ffmpeg-extra56","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavcodec-ffmpeg56","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavdevice-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavdevice-ffmpeg56","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavfilter-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavfilter-ffmpeg5","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavformat-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavformat-ffmpeg56","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavresample-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavresample-ffmpeg2","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavutil-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavutil-ffmpeg54","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libpostproc-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libpostproc-ffmpeg53","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libswresample-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libswresample-ffmpeg1","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libswscale-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libswscale-ffmpeg3","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2018-15822","CVE-2019-11338","CVE-2019-12730","CVE-2019-13312","CVE-2019-13390","CVE-2019-17539","CVE-2019-17542","CVE-2020-12284","CVE-2020-13904"]}]},{"id":"CVE-2019-17541","published":"2019-10-14T02:15:00","updated_at":"2025-08-25T23:08:12.011823+00:00","description":"\nImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in\nMagickCore/string.c because the error manager is mishandled in\ncoders/jpeg.c.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"introduced in:\nhttps://github.com/ImageMagick/ImageMagick6/commit/edb32b1780e23c76b5d6dd735f89959a0b7e3867"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2019-17541"],"bugs":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15827","https://github.com/ImageMagick/ImageMagick/issues/1641"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick6/commit/c1a5aa3f4214ad6e4748de84dad44398959014e1"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-17540","published":"2019-10-14T02:15:00","updated_at":"2025-08-25T23:08:06.997153+00:00","description":"\nImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo\nin coders/ps.c.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"introduced in:\nhttps://github.com/ImageMagick/ImageMagick6/commit/bfb5bdd6b41dac60d5171108fc02ecaf8735c4a8"}],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2019-17540"],"bugs":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15826"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick6/commit/b9261b1bce3dbfeecc445e092d207434b41c0752","upstream: https://github.com/ImageMagick/ImageMagick6/commit/5a4c9cfb76ee82bda0cd970cc9e58499b09cc137","upstream: https://github.com/ImageMagick/ImageMagick6/commit/41399a3414069870071e47680b0bbbe0a283db5d","upstream: https://github.com/ImageMagick/ImageMagick6/commit/4ba4dc73b7e38bb66c57d457f17ab4aeb9b6bbdc"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-17539","published":"2019-10-14T02:15:00","updated_at":"2025-08-26T12:14:26.957542+00:00","description":"\nIn FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL\npointer dereference and possibly unspecified other impact when there is no\nvalid close function pointer.","ubuntu_description":"","notes":[{"author":"ebarretto","note":"This issue was caused by b1febda0619\nThe above commit was never integrated to 2.8.x\nbut for 3.4, it was both integrated and fixed in 3.4.7, so\nletting bionic version marked as needed."}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15733","https://ubuntu.com/security/notices/USN-4431-1","https://www.cve.org/CVERecord?id=CVE-2019-17539"],"bugs":[""],"patches":{"libav":[],"ffmpeg":["upstream: https://github.com/FFmpeg/FFmpeg/commit/8df6884832ec413cf032dfaa45c23b1c7876670c"]},"tags":{},"packages":[{"name":"ffmpeg","source":"https://ubuntu.com/security/cve?package=ffmpeg","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ffmpeg","debian":"https://tracker.debian.org/pkg/ffmpeg","statuses":[{"release_codename":"bionic","status":"released","description":"7:3.4.8-0ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"7:4.2.1-2","component":null,"pocket":"security"}]},{"name":"libav","source":"https://ubuntu.com/security/cve?package=libav","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libav","debian":"https://tracker.debian.org/pkg/libav","statuses":[{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-4431-1"],"notices":[{"id":"USN-4431-1","title":"FFmpeg vulnerabilities","summary":"Several security issues were fixed in FFmpeg.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2020-07-22T16:18:53.508857","description":"It was discovered that FFmpeg incorrectly verified empty audio packets or\nHEVC data. An attacker could possibly use this issue to cause a denial of\nservice via a crafted file. This issue only affected Ubuntu 16.04 LTS, as\nit was already fixed in Ubuntu 18.04 LTS. For more information see:\nhttps://usn.ubuntu.com/usn/usn-3967-1\n(CVE-2018-15822, CVE-2019-11338)\n\nIt was discovered that FFmpeg incorrectly handled sscanf failures. An\nattacker could possibly use this issue to cause a denial of service or\nother unspecified impact. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 18.04 LTS. (CVE-2019-12730)\n\nIt was discovered that FFmpeg incorrectly handled certain WEBM files. An\nattacker could possibly use this issue to obtain sensitive data or other\nunspecified impact. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2019-13312)\n\nIt was discovered that FFmpeg incorrectly handled certain AVI files. An\nattacker could possibly use this issue to cause a denial of service or\nother unspecified impact. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 18.04 LTS. (CVE-2019-13390)\n\nIt was discovered that FFmpeg incorrectly handled certain input. An\nattacker could possibly use this issue to cause a denial of service or\nother unspecified impact. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2019-17539)\n\nIt was discovered that FFmpeg incorrectly handled certain input during\ndecoding of VQA files. An attacker could possibly use this issue to\nobtain sensitive information or other unspecified impact. This issue\nonly affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-17542)\n\nIt was discovered that FFmpeg incorrectly handled certain JPEG files. An\nattacker could possibly use this issue to obtain sensitive information\nor other unspecified impact. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2020-12284)\n\nIt was discovered that FFmpeg incorrectly handled certain M3U8 files. An\nattacker could possibly use this issue to obtain sensitive information\nor other unspecified impact. (CVE-2020-13904)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"ffmpeg","version":"7:3.4.8-0ubuntu0.2","description":"Tools for transcoding, streaming and playing of multimedia files","is_source":true},{"name":"ffmpeg","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"ffmpeg-doc","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavcodec-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavcodec-extra","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavcodec-extra57","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavcodec57","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavdevice-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavdevice57","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavfilter-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavfilter-extra","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavfilter-extra6","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavfilter6","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavformat-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavformat57","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavresample-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavresample3","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavutil-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libavutil55","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libpostproc-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libpostproc54","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libswresample-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libswresample2","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libswscale-dev","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"},{"name":"libswscale4","version":"7:3.4.8-0ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:3.4.8-0ubuntu0.2","pocket":"security"}],"focal":[{"name":"ffmpeg","version":"7:4.2.4-1ubuntu0.1","description":"Tools for transcoding, streaming and playing of multimedia files","is_source":true},{"name":"ffmpeg","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"ffmpeg-doc","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavcodec-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavcodec-extra","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavcodec-extra58","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavcodec58","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavdevice-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavdevice58","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavfilter-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavfilter-extra","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavfilter-extra7","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavfilter7","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavformat-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavformat58","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavresample-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavresample4","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavutil-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libavutil56","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libpostproc-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libpostproc55","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libswresample-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libswresample3","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libswscale-dev","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"},{"name":"libswscale5","version":"7:4.2.4-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:4.2.4-1ubuntu0.1","pocket":"security"}],"xenial":[{"name":"ffmpeg","version":"7:2.8.17-0ubuntu0.1","description":"Tools for transcoding, streaming and playing of multimedia files","is_source":true},{"name":"ffmpeg","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"ffmpeg-doc","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libav-tools","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavcodec-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavcodec-extra","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavcodec-ffmpeg-extra56","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavcodec-ffmpeg56","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavdevice-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavdevice-ffmpeg56","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavfilter-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavfilter-ffmpeg5","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavformat-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavformat-ffmpeg56","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavresample-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavresample-ffmpeg2","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavutil-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libavutil-ffmpeg54","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libpostproc-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libpostproc-ffmpeg53","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libswresample-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libswresample-ffmpeg1","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libswscale-dev","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"},{"name":"libswscale-ffmpeg3","version":"7:2.8.17-0ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/ffmpeg","version_link":"https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.17-0ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2018-15822","CVE-2019-11338","CVE-2019-12730","CVE-2019-13312","CVE-2019-13390","CVE-2019-17539","CVE-2019-17542","CVE-2020-12284","CVE-2020-13904"]}]},{"id":"CVE-2019-14859","published":"2019-10-14T00:00:00","updated_at":"2025-08-25T23:06:22.613733+00:00","description":"\nA flaw was found in all python-ecdsa versions before 0.13.3, where it did\nnot correctly verify whether signatures used DER encoding. Without this\nverification, a malformed signature could be accepted, making the signature\nmalleable. Without proper verification, an attacker could use a malleable\nsignature to create false transactions.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"included in CVE-2019-14853 commits"}],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://en.bitcoinwiki.org/wiki/Transaction_Malleability","https://github.com/warner/python-ecdsa/pull/115","https://github.com/warner/python-ecdsa/pull/124","https://ubuntu.com/security/notices/USN-4196-1","https://www.cve.org/CVERecord?id=CVE-2019-14859"],"bugs":["https://github.com/warner/python-ecdsa/issues/114"],"patches":{"python-ecdsa":[]},"tags":{},"packages":[{"name":"python-ecdsa","source":"https://ubuntu.com/security/cve?package=python-ecdsa","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-ecdsa","debian":"https://tracker.debian.org/pkg/python-ecdsa","statuses":[{"release_codename":"bionic","status":"released","description":"0.13-2ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"0.13-3ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"0.13.2-2ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.13.3-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.13-2ubuntu0.16.04.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-4196-1"],"notices":[{"id":"USN-4196-1","title":"python-ecdsa vulnerabilities","summary":"Several security issues were fixed in python-ecdsa.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-11-18T12:42:01.043160","description":"It was discovered that python-ecdsa incorrectly handled certain signatures.\nA remote attacker could possibly use this issue to cause python-ecdsa to\ngenerate unexpected exceptions, resulting in a denial of service.\n(CVE-2019-14853)\n\nIt was discovered that python-ecdsa incorrectly verified DER encoding in\nsignatures. A remote attacker could use this issue to perform certain\nmalleability attacks. (CVE-2019-14859)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"python-ecdsa","version":"0.13-2ubuntu0.18.04.1","description":"ECDSA cryptographic signature library","is_source":true},{"name":"python-ecdsa","version":"0.13-2ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-2ubuntu0.18.04.1","pocket":"security"},{"name":"python3-ecdsa","version":"0.13-2ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-2ubuntu0.18.04.1","pocket":"security"}],"disco":[{"name":"python-ecdsa","version":"0.13-3ubuntu0.1","description":"ECDSA cryptographic signature library","is_source":true},{"name":"python-ecdsa","version":"0.13-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-3ubuntu0.1"},{"name":"python3-ecdsa","version":"0.13-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-3ubuntu0.1"}],"eoan":[{"name":"python-ecdsa","version":"0.13.2-2ubuntu0.1","description":"ECDSA cryptographic signature library","is_source":true},{"name":"python-ecdsa","version":"0.13.2-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13.2-2ubuntu0.1"},{"name":"python3-ecdsa","version":"0.13.2-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13.2-2ubuntu0.1"}],"xenial":[{"name":"python-ecdsa","version":"0.13-2ubuntu0.16.04.1","description":"ECDSA cryptographic signature library","is_source":true},{"name":"python-ecdsa","version":"0.13-2ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-2ubuntu0.16.04.1","pocket":"security"},{"name":"python3-ecdsa","version":"0.13-2ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-2ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-14853","CVE-2019-14859"]}]},{"id":"CVE-2019-14853","published":"2019-10-14T00:00:00","updated_at":"2025-08-25T23:06:22.613733+00:00","description":"\nAn error-handling flaw was found in python-ecdsa before version 0.13.3.\nDuring signature decoding, malformed DER signatures could raise unexpected\nexceptions (or no exceptions at all), which could lead to a denial of\nservice.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://github.com/warner/python-ecdsa/pull/115","https://github.com/warner/python-ecdsa/pull/124","https://ubuntu.com/security/notices/USN-4196-1","https://www.cve.org/CVERecord?id=CVE-2019-14853"],"bugs":["https://github.com/warner/python-ecdsa/issues/114"],"patches":{"python-ecdsa":["upstream: https://github.com/warner/python-ecdsa/commit/b0ea52bb3aa9a16c9a4a91fdc0041edbfed10b31","upstream: https://github.com/warner/python-ecdsa/commit/20b377491e2d759a3f47eb7aedba41292cc82238","upstream: https://github.com/warner/python-ecdsa/commit/897178ca093282979ff19cc4035eadbc30ac0d23","upstream: https://github.com/warner/python-ecdsa/commit/9080d1d5ac533da0de00466aaffb49bee808bb4e","upstream: https://github.com/warner/python-ecdsa/commit/14abfe020d4907fd9849f269b98f5f8f1060366b","upstream: https://github.com/warner/python-ecdsa/commit/563d2ee2c07e10ae4f77ccde4161d6a14c681b1b","upstream: https://github.com/warner/python-ecdsa/commit/3427fa29f319b27898a28601955807abb44c0830","upstream: https://github.com/warner/python-ecdsa/commit/99c907d7acc94da6685470328174ea7299863dfd","upstream: https://github.com/warner/python-ecdsa/commit/b95be03d8540b3a088263cbb3a0a376a8a0efbd0","upstream: https://github.com/warner/python-ecdsa/commit/1eb2c0410b97ac5101b5db20e2924d79db3e8ec5","upstream: https://github.com/warner/python-ecdsa/commit/5c4c74a454c852727ac3c0207a4010486dde1866"]},"tags":{},"packages":[{"name":"python-ecdsa","source":"https://ubuntu.com/security/cve?package=python-ecdsa","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=python-ecdsa","debian":"https://tracker.debian.org/pkg/python-ecdsa","statuses":[{"release_codename":"bionic","status":"released","description":"0.13-2ubuntu0.18.04.1","component":null,"pocket":"security"},{"release_codename":"disco","status":"released","description":"0.13-3ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"released","description":"0.13.2-2ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.13.3-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"0.13-2ubuntu0.16.04.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-4196-1"],"notices":[{"id":"USN-4196-1","title":"python-ecdsa vulnerabilities","summary":"Several security issues were fixed in python-ecdsa.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2019-11-18T12:42:01.043160","description":"It was discovered that python-ecdsa incorrectly handled certain signatures.\nA remote attacker could possibly use this issue to cause python-ecdsa to\ngenerate unexpected exceptions, resulting in a denial of service.\n(CVE-2019-14853)\n\nIt was discovered that python-ecdsa incorrectly verified DER encoding in\nsignatures. A remote attacker could use this issue to perform certain\nmalleability attacks. (CVE-2019-14859)\n","is_hidden":false,"release_packages":{"bionic":[{"name":"python-ecdsa","version":"0.13-2ubuntu0.18.04.1","description":"ECDSA cryptographic signature library","is_source":true},{"name":"python-ecdsa","version":"0.13-2ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-2ubuntu0.18.04.1","pocket":"security"},{"name":"python3-ecdsa","version":"0.13-2ubuntu0.18.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-2ubuntu0.18.04.1","pocket":"security"}],"disco":[{"name":"python-ecdsa","version":"0.13-3ubuntu0.1","description":"ECDSA cryptographic signature library","is_source":true},{"name":"python-ecdsa","version":"0.13-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-3ubuntu0.1"},{"name":"python3-ecdsa","version":"0.13-3ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-3ubuntu0.1"}],"eoan":[{"name":"python-ecdsa","version":"0.13.2-2ubuntu0.1","description":"ECDSA cryptographic signature library","is_source":true},{"name":"python-ecdsa","version":"0.13.2-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13.2-2ubuntu0.1"},{"name":"python3-ecdsa","version":"0.13.2-2ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13.2-2ubuntu0.1"}],"xenial":[{"name":"python-ecdsa","version":"0.13-2ubuntu0.16.04.1","description":"ECDSA cryptographic signature library","is_source":true},{"name":"python-ecdsa","version":"0.13-2ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-2ubuntu0.16.04.1","pocket":"security"},{"name":"python3-ecdsa","version":"0.13-2ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/python-ecdsa","version_link":"https://launchpad.net/ubuntu/+source/python-ecdsa/0.13-2ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2019-14853","CVE-2019-14859"]}]},{"id":"CVE-2019-17534","published":"2019-10-13T02:15:00","updated_at":"2025-08-25T23:08:06.997153+00:00","description":"\nvips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before\n8.8.2 tries to access a color map before a DGifGetImageDesc call, leading\nto a use-after-free.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16796","https://github.com/libvips/libvips/commit/ce684dd008532ea0bf9d4a1d89bacb35f4a83f4d","https://github.com/libvips/libvips/compare/v8.8.1...v8.8.2","https://www.cve.org/CVERecord?id=CVE-2019-17534"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942254"],"patches":{"vips":[]},"tags":{},"packages":[{"name":"vips","source":"https://ubuntu.com/security/cve?package=vips","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vips","debian":"https://tracker.debian.org/pkg/vips","statuses":[{"release_codename":"impish","status":"not-affected","description":"8.8.3-3","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"8.8.3-3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"8.8.3-3","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"8.8.3-3","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"8.8.3-3","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"8.8.3-3","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"8.8.3-3","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2019-17533","published":"2019-10-13T02:15:00","updated_at":"2025-07-11T07:42:18.809981+00:00","description":"\nMat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\\0'\ncharacter, leading to a heap-based buffer over-read in strdup_vprintf when\nuninitialized memory is accessed.","ubuntu_description":"\nIt was discovered that MATIO incorrectly handled certain inputs. An\nattacker could possibly use this issue to cause a denial of service or\nobtain sensitive information.","notes":[],"codename":null,"priority":"medium","cvss3":8.2,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16856","https://github.com/tbeu/matio/commit/651a8e28099edb5fbb9e4e1d4d3238848f446c9a","https://ubuntu.com/security/notices/USN-5185-1","https://www.cve.org/CVERecord?id=CVE-2019-17533"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942255"],"patches":{"libmatio":[],"libpdl-io-matlab-perl":[],"mldemos":[]},"tags":{},"packages":[{"name":"libpdl-io-matlab-perl","source":"https://ubuntu.com/security/cve?package=libpdl-io-matlab-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libpdl-io-matlab-perl","debian":"https://tracker.debian.org/pkg/libpdl-io-matlab-perl","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"mldemos","source":"https://ubuntu.com/security/cve?package=mldemos","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mldemos","debian":"https://tracker.debian.org/pkg/mldemos","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"libmatio","source":"https://ubuntu.com/security/cve?package=libmatio","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libmatio","debian":"https://tracker.debian.org/pkg/libmatio","statuses":[{"release_codename":"impish","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.5.3-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"focal","status":"released","description":"1.5.17-3ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"bionic","status":"released","description":"1.5.11-1ubuntu0.1~esm1","component":null,"pocket":"esm-apps"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.5.2-1ubuntu1+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.5.17-4","component":null,"pocket":"security"}]}],"notices_ids":["USN-5185-1"],"notices":[{"id":"USN-5185-1","title":"MATIO vulnerability","summary":"MATIO could be made to crash if it received specially crafted\ninput.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2022-08-10T07:07:09.352705","description":"It was discovered that MATIO incorrectly handled certain inputs. An\nattacker could possibly use this issue to cause a denial of service or\nobtain sensitive information.\n","is_hidden":false,"release_packages":{"focal":[{"name":"libmatio","version":"1.5.17-3ubuntu0.1~esm1","description":"MAT File I/O Library - development files","is_source":true},{"name":"libmatio-doc","version":"1.5.17-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"},{"name":"libmatio9","version":"1.5.17-3ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"},{"name":"libmatio-dev","version":"1.5.17-3ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"}],"trusty":[{"name":"libmatio","version":"1.5.17-3ubuntu0.1~esm1","description":"MAT File I/O Library - development files","is_source":true},{"name":"libmatio-dev","version":"1.5.2-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-infra"},{"name":"libmatio-dev-dbgsym","version":"1.5.2-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-infra"},{"name":"libmatio-doc","version":"1.5.2-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-infra"},{"name":"libmatio2","version":"1.5.2-1ubuntu1+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-infra"},{"name":"libmatio2-dbg","version":"1.5.2-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-infra"},{"name":"libmatio2-dbgsym","version":"1.5.2-1ubuntu1+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-infra"}],"bionic":[{"name":"libmatio","version":"1.5.11-1ubuntu0.1~esm1","description":"MAT File I/O Library - development files","is_source":true},{"name":"libmatio-doc","version":"1.5.11-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"},{"name":"libmatio4","version":"1.5.11-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"},{"name":"libmatio-dev","version":"1.5.11-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"}],"xenial":[{"name":"libmatio","version":"1.5.3-1ubuntu0.1~esm1","description":"MAT File I/O Library - development files","is_source":true},{"name":"libmatio-doc","version":"1.5.3-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"},{"name":"libmatio2","version":"1.5.3-1ubuntu0.1~esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"},{"name":"libmatio-dev","version":"1.5.3-1ubuntu0.1~esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/libmatio","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2019-17533"]}]},{"id":"CVE-2019-17531","published":"2019-10-12T21:15:00","updated_at":"2025-08-26T12:14:26.957542+00:00","description":"\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind\n2.0.0 through 2.9.10. When Default Typing is enabled (either globally or\nfor a specific property) for an externally exposed JSON endpoint and the\nservice has the apache-log4j-extra (version 1.2.x) jar in the classpath,\nand an attacker can provide a JNDI service to access, it is possible to\nmake the service execute a malicious payload.","ubuntu_description":"\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute\narbitrary code or other unspecified impact.","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://github.com/FasterXML/jackson-databind/issues/2498","https://github.com/FasterXML/jackson-databind/commit/b5a304a98590b6bb766134f9261e6566dcbbb6d0","https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","https://ubuntu.com/security/notices/USN-4813-1","https://www.cve.org/CVERecord?id=CVE-2019-17531"],"bugs":[""],"patches":{"jackson-databind":[]},"tags":{},"packages":[{"name":"jackson-databind","source":"https://ubuntu.com/security/cve?package=jackson-databind","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jackson-databind","debian":"https://tracker.debian.org/pkg/jackson-databind","statuses":[{"release_codename":"impish","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.4.2-3ubuntu0.1~esm2","component":null,"pocket":"esm-apps"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.10.1-1","component":null,"pocket":"security"}]}],"notices_ids":["USN-4813-1"],"notices":[{"id":"USN-4813-1","title":"Jackson Databind vulnerabilities","summary":"Several security issues were fixed in Jackson Databind.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2021-03-15T21:47:52.369205","description":"It was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to obtain\nsensitive information. (CVE-2018-11307, CVE-2019-12086, CVE-2019-12814)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute\narbitrary code or other unspecified impact. (CVE-2018-12022,\nCVE-2018-12023, CVE-2018-14718, CVE-2018-14719, CVE-2018-19360,\nCVE-2018-19361, CVE-2018-19362, CVE-2019-12384, CVE-2019-14379,\nCVE-2019-14439, CVE-2019-14540, CVE-2019-16335, CVE-2019-16942,\nCVE-2019-16943, CVE-2019-17267, CVE-2019-17531, CVE-2019-20330,\nCVE-2020-10672, CVE-2020-10673, CVE-2020-10968, CVE-2020-10969,\nCVE-2020-11111, CVE-2020-11112, CVE-2020-11113, CVE-2020-11619,\nCVE-2020-11620, CVE-2020-14060, CVE-2020-14061, CVE-2020-14062,\nCVE-2020-14195, CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute XML\nentity (XXE) attacks. (CVE-2018-14720)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute\nserver-side request forgery (SSRF). (CVE-2018-14721)\n","is_hidden":false,"release_packages":{"xenial":[{"name":"jackson-databind","version":"2.4.2-3ubuntu0.1~esm2","description":"fast and powerful JSON library for Java -- data binding","is_source":true},{"name":"libjackson2-databind-java","version":"2.4.2-3ubuntu0.1~esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/jackson-databind","version_link":null,"pocket":"esm-apps"},{"name":"libjackson2-databind-java-doc","version":"2.4.2-3ubuntu0.1~esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/jackson-databind","version_link":null,"pocket":"esm-apps"}]},"type":"USN","cves_ids":["CVE-2019-14540","CVE-2020-10969","CVE-2020-10673","CVE-2020-11113","CVE-2019-12814","CVE-2020-11620","CVE-2020-8840","CVE-2020-14060","CVE-2019-20330","CVE-2020-9548","CVE-2020-10968","CVE-2019-17267","CVE-2020-14061","CVE-2020-10672","CVE-2020-11111","CVE-2018-14720","CVE-2018-11307","CVE-2019-16335","CVE-2018-19362","CVE-2019-12086","CVE-2019-14379","CVE-2019-12384","CVE-2020-11619","CVE-2018-19361","CVE-2018-19360","CVE-2018-14721","CVE-2020-14062","CVE-2019-16943","CVE-2019-16942","CVE-2019-17531","CVE-2018-12023","CVE-2018-14718","CVE-2020-14195","CVE-2020-9546","CVE-2020-9547","CVE-2019-14439","CVE-2020-11112","CVE-2018-12022","CVE-2018-14719"]}]}],"offset":48100,"limit":20,"total_results":79316}