{"cves":[{"id":"CVE-2016-5300","published":"2016-06-06T00:00:00","updated_at":"2025-07-11T07:38:23.894981+00:00","description":"\nThe XML parser in Expat does not use sufficient entropy for hash\ninitialization, which allows context-dependent attackers to cause a denial\nof service (CPU consumption) via crafted identifiers in an XML document.\nNOTE: this vulnerability exists because of an incomplete fix for\nCVE-2012-0876.","ubuntu_description":"","notes":[{"author":"ebarretto","note":"tla uses system expat as of 1.3.5+dfsg-15"},{"author":"rodrigo-zaiden","note":"it is also an incomplete fix for CVE-2012-6702,\nthat followed CVE-2012-0876.\nlibxmltok is not affected by any of these CVEs as\nit doesn't have the hash functions."}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://seclists.org/oss-sec/2016/q2/468","https://ubuntu.com/security/notices/USN-3013-1","https://ubuntu.com/security/notices/USN-3010-1","https://www.cve.org/CVERecord?id=CVE-2016-5300"],"bugs":[""],"patches":{"expat":["upstream: https://sourceforge.net/p/expat/code_git/ci/a5f2d0406056d384cdd4b9955384703137a4d19a/","upstream: https://sourceforge.net/p/expat/code_git/ci/ca523deca47303436fe522d030dbd9af3635be60/"],"apache2":[],"apr-util":[],"cmake":[],"ghostscript":[],"texlive-bin":[],"xmlrpc-c":[],"wxwidgets2.8":[],"wxwidgets2.6":[],"vnc4":[],"xotcl":[],"tla":[],"poco":[],"sitecopy":[],"libparagui1.1":[],"wbxml2":[],"swish-e":[],"kompozer":[],"insighttoolkit":[],"cadaver":[],"gdcm":[],"ayttm":[],"cableswig":[],"coin3":[],"simgear":[],"audacity":[],"matanza":[],"tdom":[],"vtk":[],"smart":[],"libxmltok":[]},"tags":{},"packages":[{"name":"xmlrpc-c","source":"https://ubuntu.com/security/cve?package=xmlrpc-c","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xmlrpc-c","debian":"https://tracker.debian.org/pkg/xmlrpc-c","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"1.16.33-3.1ubuntu5.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"}]},{"name":"sitecopy","source":"https://ubuntu.com/security/cve?package=sitecopy","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sitecopy","debian":"https://tracker.debian.org/pkg/sitecopy","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]},{"name":"apache2","source":"https://ubuntu.com/security/cve?package=apache2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=apache2","debian":"https://tracker.debian.org/pkg/apache2","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"}]},{"name":"apr-util","source":"https://ubuntu.com/security/cve?package=apr-util","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=apr-util","debian":"https://tracker.debian.org/pkg/apr-util","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"}]},{"name":"audacity","source":"https://ubuntu.com/security/cve?package=audacity","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=audacity","debian":"https://tracker.debian.org/pkg/audacity","statuses":[{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [uses system expat]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"}]},{"name":"ayttm","source":"https://ubuntu.com/security/cve?package=ayttm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ayttm","debian":"https://tracker.debian.org/pkg/ayttm","statuses":[{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"cableswig","source":"https://ubuntu.com/security/cve?package=cableswig","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cableswig","debian":"https://tracker.debian.org/pkg/cableswig","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"cadaver","source":"https://ubuntu.com/security/cve?package=cadaver","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cadaver","debian":"https://tracker.debian.org/pkg/cadaver","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"cmake","source":"https://ubuntu.com/security/cve?package=cmake","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cmake","debian":"https://tracker.debian.org/pkg/cmake","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [code-not-compiled]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"}]},{"name":"coin3","source":"https://ubuntu.com/security/cve?package=coin3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=coin3","debian":"https://tracker.debian.org/pkg/coin3","statuses":[{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"expat","source":"https://ubuntu.com/security/cve?package=expat","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=expat","debian":"https://tracker.debian.org/pkg/expat","statuses":[{"release_codename":"jammy","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"2.0.1-7.2ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.1.0-4ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"released","description":"2.1.0-7ubuntu0.15.10.2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.1.0-7ubuntu0.16.04.2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"}]},{"name":"gdcm","source":"https://ubuntu.com/security/cve?package=gdcm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gdcm","debian":"https://tracker.debian.org/pkg/gdcm","statuses":[{"release_codename":"kinetic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"}]},{"name":"ghostscript","source":"https://ubuntu.com/security/cve?package=ghostscript","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ghostscript","debian":"https://tracker.debian.org/pkg/ghostscript","statuses":[{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [code-not-compiled]","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"}]},{"name":"insighttoolkit","source":"https://ubuntu.com/security/cve?package=insighttoolkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=insighttoolkit","debian":"https://tracker.debian.org/pkg/insighttoolkit","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"kompozer","source":"https://ubuntu.com/security/cve?package=kompozer","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kompozer","debian":"https://tracker.debian.org/pkg/kompozer","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"libparagui1.1","source":"https://ubuntu.com/security/cve?package=libparagui1.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libparagui1.1","debian":"https://tracker.debian.org/pkg/libparagui1.1","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"libxmltok","source":"https://ubuntu.com/security/cve?package=libxmltok","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libxmltok","debian":"https://tracker.debian.org/pkg/libxmltok","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"matanza","source":"https://ubuntu.com/security/cve?package=matanza","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=matanza","debian":"https://tracker.debian.org/pkg/matanza","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"poco","source":"https://ubuntu.com/security/cve?package=poco","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=poco","debian":"https://tracker.debian.org/pkg/poco","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"}]},{"name":"simgear","source":"https://ubuntu.com/security/cve?package=simgear","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=simgear","debian":"https://tracker.debian.org/pkg/simgear","statuses":[{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [uses system expat]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"}]},{"name":"smart","source":"https://ubuntu.com/security/cve?package=smart","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=smart","debian":"https://tracker.debian.org/pkg/smart","statuses":[{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [code-not-compiled]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"swish-e","source":"https://ubuntu.com/security/cve?package=swish-e","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=swish-e","debian":"https://tracker.debian.org/pkg/swish-e","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"tdom","source":"https://ubuntu.com/security/cve?package=tdom","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tdom","debian":"https://tracker.debian.org/pkg/tdom","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"","component":null,"pocket":"security"}]},{"name":"texlive-bin","source":"https://ubuntu.com/security/cve?package=texlive-bin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=texlive-bin","debian":"https://tracker.debian.org/pkg/texlive-bin","statuses":[{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [code-not-compiled]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"}]},{"name":"tla","source":"https://ubuntu.com/security/cve?package=tla","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tla","debian":"https://tracker.debian.org/pkg/tla","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [1.3.5+dfsg-15]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"}]},{"name":"vnc4","source":"https://ubuntu.com/security/cve?package=vnc4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vnc4","debian":"https://tracker.debian.org/pkg/vnc4","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"vtk","source":"https://ubuntu.com/security/cve?package=vtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vtk","debian":"https://tracker.debian.org/pkg/vtk","statuses":[{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"wbxml2","source":"https://ubuntu.com/security/cve?package=wbxml2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wbxml2","debian":"https://tracker.debian.org/pkg/wbxml2","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"wxwidgets2.6","source":"https://ubuntu.com/security/cve?package=wxwidgets2.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wxwidgets2.6","debian":"https://tracker.debian.org/pkg/wxwidgets2.6","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"wxwidgets2.8","source":"https://ubuntu.com/security/cve?package=wxwidgets2.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wxwidgets2.8","debian":"https://tracker.debian.org/pkg/wxwidgets2.8","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [uses system expat]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"xotcl","source":"https://ubuntu.com/security/cve?package=xotcl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xotcl","debian":"https://tracker.debian.org/pkg/xotcl","statuses":[{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"}]}],"notices_ids":["USN-3013-1","USN-3010-1"],"notices":[{"id":"USN-3013-1","title":"XML-RPC for C and C++ vulnerabilities","summary":"Several security issues were fixed in XML-RPC for C and C++.\n","instructions":"After a standard system upgrade you need to restart any applications linked\nagainst XML-RPC for C and C++ to effect the necessary changes.\n","references":[],"published":"2016-06-20T17:11:15.149256","description":"It was discovered that the Expat code in XML-RPC for C and C++ unexpectedly\ncalled srand in certain circumstances. This could reduce the security of\ncalling applications. (CVE-2012-6702)\n\nIt was discovered that the Expat code in XML-RPC for C and C++ incorrectly\nhandled seeding the random number generator. A remote attacker could\npossibly use this issue to cause a denial of service. (CVE-2016-5300)\n\nGustavo Grieco discovered that the Expat code in XML-RPC for C and C++\nincorrectly handled malformed XML data. If a user or application linked\nagainst XML-RPC for C and C++ were tricked into opening a crafted XML file,\nan attacker could cause a denial of service, or possibly execute arbitrary\ncode. (CVE-2016-0718)\n\nIt was discovered that the Expat code in XML-RPC for C and C++ incorrectly\nhandled malformed XML data. If a user or application linked against XML-RPC\nfor C and C++ were tricked into opening a crafted XML file, an attacker\ncould cause a denial of service, or possibly execute arbitrary code.\n(CVE-2015-1283, CVE-2016-4472)\n","is_hidden":false,"release_packages":{"precise":[{"name":"xmlrpc-c","version":"1.16.33-3.1ubuntu5.2","description":"Lightweight RPC library based on XML and HTTP","is_source":true},{"name":"libxmlrpc-c++4","version":"1.16.33-3.1ubuntu5.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/xmlrpc-c","version_link":"https://launchpad.net/ubuntu/+source/xmlrpc-c/1.16.33-3.1ubuntu5.2"},{"name":"libxmlrpc-core-c3","version":"1.16.33-3.1ubuntu5.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/xmlrpc-c","version_link":"https://launchpad.net/ubuntu/+source/xmlrpc-c/1.16.33-3.1ubuntu5.2"}]},"type":"USN","cves_ids":["CVE-2012-6702","CVE-2015-1283","CVE-2016-0718","CVE-2016-4472","CVE-2016-5300"]},{"id":"USN-3010-1","title":"Expat vulnerabilities","summary":"Several security issues were fixed in Expat.\n","instructions":"After a standard system upgrade you need to restart any applications linked\nagainst Expat to effect the necessary changes.\n","references":[],"published":"2016-06-20T17:10:18.905579","description":"It was discovered that Expat unexpectedly called srand in certain\ncircumstances. This could reduce the security of calling applications.\n(CVE-2012-6702)\n\nIt was discovered that Expat incorrectly handled seeding the random number\ngenerator. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2016-5300)\n","is_hidden":false,"release_packages":{"precise":[{"name":"expat","version":"2.0.1-7.2ubuntu1.4","description":"XML parsing C library","is_source":true},{"name":"lib64expat1","version":"2.0.1-7.2ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.0.1-7.2ubuntu1.4"},{"name":"libexpat1","version":"2.0.1-7.2ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.0.1-7.2ubuntu1.4"}],"trusty":[{"name":"expat","version":"2.1.0-4ubuntu1.3","description":"XML parsing C library","is_source":true},{"name":"expat","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"lib64expat1","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"lib64expat1-dev","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"libexpat1","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"libexpat1-dev","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"libexpat1-udeb","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"}],"wily":[{"name":"expat","version":"2.1.0-7ubuntu0.15.10.2","description":"XML parsing C library","is_source":true},{"name":"lib64expat1","version":"2.1.0-7ubuntu0.15.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.15.10.2"},{"name":"libexpat1","version":"2.1.0-7ubuntu0.15.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.15.10.2"}],"xenial":[{"name":"expat","version":"2.1.0-7ubuntu0.16.04.2","description":"XML parsing C library","is_source":true},{"name":"expat","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"lib64expat1","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"lib64expat1-dev","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"libexpat1","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"libexpat1-dev","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"libexpat1-udeb","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2012-6702","CVE-2016-5300"]}]},{"id":"CVE-2016-1703","published":"2016-06-06T00:00:00","updated_at":"2025-08-25T21:55:16.494924+00:00","description":"\nMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79\nallow attackers to cause a denial of service or possibly have other impact\nvia unknown vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.co.uk/2016/06/stable-channel-update.html","https://ubuntu.com/security/notices/USN-2992-1","https://www.cve.org/CVERecord?id=CVE-2016-1703"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.79","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.15.7-0ubuntu0.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.15.7","component":null,"pocket":"security"},{"release_codename":"wily","status":"released","description":"1.15.7-0ubuntu0.15.10.1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.15.7-0ubuntu0.16.04.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-2992-1"],"notices":[{"id":"USN-2992-1","title":"Oxide vulnerabilities","summary":"Several security issues were fixed in Oxide.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2016-06-06T15:26:12.476756","description":"An unspecified security issue was discovered in Blink. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit this to bypass same-origin restrictions.\n(CVE-2016-1673)\n\nAn issue was discovered with Document reattachment in Blink in some\ncircumstances. If a user were tricked in to opening a specially crafted\nwebsite, an attacker could potentially exploit this to bypass same-origin\nrestrictions. (CVE-2016-1675)\n\nA type confusion bug was discovered in V8. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to obtain sensitive information. (CVE-2016-1677)\n\nA heap overflow was discovered in V8. If a user were tricked in to opening\na specially crafted website, an attacker could potentially exploit this to\ncause a denial of service (application crash) or execute arbitrary code.\n(CVE-2016-1678)\n\nA use-after-free was discovered in the V8ValueConverter implementation in\nChromium in some circumstances. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this to\ncause a denial of service (application crash) or execute arbitrary code.\n(CVE-2016-1679)\n\nA use-after-free was discovered in Skia. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1680)\n\nA security issue was discovered in ServiceWorker registration in Blink in\nsome circumstances. If a user were tricked in to opening a specially\ncrafted website, an attacker could potentially exploit this to bypass\nContent Security Policy (CSP) protections. (CVE-2016-1682)\n\nAn out-of-bounds memory access was discovered in libxslt. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit this to cause a denial of service (application crash)\nor execute arbitrary code. (CVE-2016-1683)\n\nAn integer overflow was discovered in libxslt. If a user were tricked in\nto opening a specially crafted website, an attacker could potentially\nexploit this to cause a denial of service (application crash or resource\nconsumption). (CVE-2016-1684)\n\nAn out-of-bounds read was discovered in the regular expression\nimplementation in V8. If a user were tricked in to opening a specially\ncrafted website, an attacker could potentially exploit this to cause a\ndenial of service (application crash). (CVE-2016-1688)\n\nA heap overflow was discovered in Chromium. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1689)\n\nA heap overflow was discovered in Skia. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1691)\n\nIt was discovered that Blink permits cross-origin loading of stylesheets\nby a service worker even when the stylesheet download has an incorrect\nMIME type. If a user were tricked in to opening a specially crafted\nwebsite, an attacker could potentially exploit this to bypass same-origin\nrestrictions. (CVE-2016-1692)\n\nMultiple security issues were discovered in Chromium. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to read uninitialized memory, cause a denial\nof service (application crash) or execute arbitrary code. (CVE-2016-1695,\nCVE-2016-1703)\n\nIt was discovered that Blink does not prevent frame navigation during\nDocumentLoader detach operations. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this to\nbypass same-origin restrictions. (CVE-2016-1697)\n\nA parameter sanitization bug was discovered in the devtools subsystem in\nBlink. An attacker could potentially exploit this to bypass intended\naccess restrictions. (CVE-2016-1699)\n\nAn out-of-bounds read was discovered in Skia. If a user were tricked in\nto opening a specially crafted website, an attacker could potentially\nexploit this to cause a denial of service (application crash).\n(CVE-2016-1702)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.14.04.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqt-qmlplugin","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtcore-dev","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtquick-dev","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtquick0","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqmlscene","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-chromedriver","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-codecs","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-codecs-extra","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"}],"wily":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.15.10.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.15.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.15.10.1"}],"xenial":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.16.04.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqt-qmlplugin","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtcore-dev","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtquick-dev","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtquick0","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"oxideqt-codecs","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"oxideqt-codecs-extra","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2016-1673","CVE-2016-1675","CVE-2016-1677","CVE-2016-1678","CVE-2016-1679","CVE-2016-1680","CVE-2016-1682","CVE-2016-1683","CVE-2016-1684","CVE-2016-1688","CVE-2016-1689","CVE-2016-1691","CVE-2016-1692","CVE-2016-1695","CVE-2016-1697","CVE-2016-1699","CVE-2016-1702","CVE-2016-1703"]}]},{"id":"CVE-2016-1702","published":"2016-06-06T00:00:00","updated_at":"2025-08-25T21:55:16.494924+00:00","description":"\nThe SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used\nin Google Chrome before 51.0.2704.79, does not validate the interval count,\nwhich allows remote attackers to cause a denial of service (out-of-bounds\nread) via crafted serialized data.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.co.uk/2016/06/stable-channel-update.html","https://ubuntu.com/security/notices/USN-2992-1","https://www.cve.org/CVERecord?id=CVE-2016-1702"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.79","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.15.7-0ubuntu0.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.15.7","component":null,"pocket":"security"},{"release_codename":"wily","status":"released","description":"1.15.7-0ubuntu0.15.10.1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.15.7-0ubuntu0.16.04.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-2992-1"],"notices":[{"id":"USN-2992-1","title":"Oxide vulnerabilities","summary":"Several security issues were fixed in Oxide.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2016-06-06T15:26:12.476756","description":"An unspecified security issue was discovered in Blink. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit this to bypass same-origin restrictions.\n(CVE-2016-1673)\n\nAn issue was discovered with Document reattachment in Blink in some\ncircumstances. If a user were tricked in to opening a specially crafted\nwebsite, an attacker could potentially exploit this to bypass same-origin\nrestrictions. (CVE-2016-1675)\n\nA type confusion bug was discovered in V8. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to obtain sensitive information. (CVE-2016-1677)\n\nA heap overflow was discovered in V8. If a user were tricked in to opening\na specially crafted website, an attacker could potentially exploit this to\ncause a denial of service (application crash) or execute arbitrary code.\n(CVE-2016-1678)\n\nA use-after-free was discovered in the V8ValueConverter implementation in\nChromium in some circumstances. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this to\ncause a denial of service (application crash) or execute arbitrary code.\n(CVE-2016-1679)\n\nA use-after-free was discovered in Skia. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1680)\n\nA security issue was discovered in ServiceWorker registration in Blink in\nsome circumstances. If a user were tricked in to opening a specially\ncrafted website, an attacker could potentially exploit this to bypass\nContent Security Policy (CSP) protections. (CVE-2016-1682)\n\nAn out-of-bounds memory access was discovered in libxslt. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit this to cause a denial of service (application crash)\nor execute arbitrary code. (CVE-2016-1683)\n\nAn integer overflow was discovered in libxslt. If a user were tricked in\nto opening a specially crafted website, an attacker could potentially\nexploit this to cause a denial of service (application crash or resource\nconsumption). (CVE-2016-1684)\n\nAn out-of-bounds read was discovered in the regular expression\nimplementation in V8. If a user were tricked in to opening a specially\ncrafted website, an attacker could potentially exploit this to cause a\ndenial of service (application crash). (CVE-2016-1688)\n\nA heap overflow was discovered in Chromium. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1689)\n\nA heap overflow was discovered in Skia. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1691)\n\nIt was discovered that Blink permits cross-origin loading of stylesheets\nby a service worker even when the stylesheet download has an incorrect\nMIME type. If a user were tricked in to opening a specially crafted\nwebsite, an attacker could potentially exploit this to bypass same-origin\nrestrictions. (CVE-2016-1692)\n\nMultiple security issues were discovered in Chromium. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to read uninitialized memory, cause a denial\nof service (application crash) or execute arbitrary code. (CVE-2016-1695,\nCVE-2016-1703)\n\nIt was discovered that Blink does not prevent frame navigation during\nDocumentLoader detach operations. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this to\nbypass same-origin restrictions. (CVE-2016-1697)\n\nA parameter sanitization bug was discovered in the devtools subsystem in\nBlink. An attacker could potentially exploit this to bypass intended\naccess restrictions. (CVE-2016-1699)\n\nAn out-of-bounds read was discovered in Skia. If a user were tricked in\nto opening a specially crafted website, an attacker could potentially\nexploit this to cause a denial of service (application crash).\n(CVE-2016-1702)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.14.04.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqt-qmlplugin","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtcore-dev","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtquick-dev","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtquick0","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqmlscene","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-chromedriver","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-codecs","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-codecs-extra","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"}],"wily":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.15.10.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.15.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.15.10.1"}],"xenial":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.16.04.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqt-qmlplugin","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtcore-dev","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtquick-dev","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtquick0","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"oxideqt-codecs","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"oxideqt-codecs-extra","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2016-1673","CVE-2016-1675","CVE-2016-1677","CVE-2016-1678","CVE-2016-1679","CVE-2016-1680","CVE-2016-1682","CVE-2016-1683","CVE-2016-1684","CVE-2016-1688","CVE-2016-1689","CVE-2016-1691","CVE-2016-1692","CVE-2016-1695","CVE-2016-1697","CVE-2016-1699","CVE-2016-1702","CVE-2016-1703"]}]},{"id":"CVE-2016-1699","published":"2016-06-06T00:00:00","updated_at":"2025-08-25T21:55:11.329165+00:00","description":"\nWebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka\nDevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79,\ndoes not ensure that the remoteFrontendUrl parameter is associated with a\nchrome-devtools-frontend.appspot.com URL, which allows remote attackers to\nbypass intended access restrictions via a crafted URL.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.co.uk/2016/06/stable-channel-update.html","https://ubuntu.com/security/notices/USN-2992-1","https://www.cve.org/CVERecord?id=CVE-2016-1699"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.79","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.15.7-0ubuntu0.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.15.7","component":null,"pocket":"security"},{"release_codename":"wily","status":"released","description":"1.15.7-0ubuntu0.15.10.1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.15.7-0ubuntu0.16.04.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-2992-1"],"notices":[{"id":"USN-2992-1","title":"Oxide vulnerabilities","summary":"Several security issues were fixed in Oxide.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2016-06-06T15:26:12.476756","description":"An unspecified security issue was discovered in Blink. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit this to bypass same-origin restrictions.\n(CVE-2016-1673)\n\nAn issue was discovered with Document reattachment in Blink in some\ncircumstances. If a user were tricked in to opening a specially crafted\nwebsite, an attacker could potentially exploit this to bypass same-origin\nrestrictions. (CVE-2016-1675)\n\nA type confusion bug was discovered in V8. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to obtain sensitive information. (CVE-2016-1677)\n\nA heap overflow was discovered in V8. If a user were tricked in to opening\na specially crafted website, an attacker could potentially exploit this to\ncause a denial of service (application crash) or execute arbitrary code.\n(CVE-2016-1678)\n\nA use-after-free was discovered in the V8ValueConverter implementation in\nChromium in some circumstances. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this to\ncause a denial of service (application crash) or execute arbitrary code.\n(CVE-2016-1679)\n\nA use-after-free was discovered in Skia. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1680)\n\nA security issue was discovered in ServiceWorker registration in Blink in\nsome circumstances. If a user were tricked in to opening a specially\ncrafted website, an attacker could potentially exploit this to bypass\nContent Security Policy (CSP) protections. (CVE-2016-1682)\n\nAn out-of-bounds memory access was discovered in libxslt. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit this to cause a denial of service (application crash)\nor execute arbitrary code. (CVE-2016-1683)\n\nAn integer overflow was discovered in libxslt. If a user were tricked in\nto opening a specially crafted website, an attacker could potentially\nexploit this to cause a denial of service (application crash or resource\nconsumption). (CVE-2016-1684)\n\nAn out-of-bounds read was discovered in the regular expression\nimplementation in V8. If a user were tricked in to opening a specially\ncrafted website, an attacker could potentially exploit this to cause a\ndenial of service (application crash). (CVE-2016-1688)\n\nA heap overflow was discovered in Chromium. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1689)\n\nA heap overflow was discovered in Skia. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1691)\n\nIt was discovered that Blink permits cross-origin loading of stylesheets\nby a service worker even when the stylesheet download has an incorrect\nMIME type. If a user were tricked in to opening a specially crafted\nwebsite, an attacker could potentially exploit this to bypass same-origin\nrestrictions. (CVE-2016-1692)\n\nMultiple security issues were discovered in Chromium. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to read uninitialized memory, cause a denial\nof service (application crash) or execute arbitrary code. (CVE-2016-1695,\nCVE-2016-1703)\n\nIt was discovered that Blink does not prevent frame navigation during\nDocumentLoader detach operations. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this to\nbypass same-origin restrictions. (CVE-2016-1697)\n\nA parameter sanitization bug was discovered in the devtools subsystem in\nBlink. An attacker could potentially exploit this to bypass intended\naccess restrictions. (CVE-2016-1699)\n\nAn out-of-bounds read was discovered in Skia. If a user were tricked in\nto opening a specially crafted website, an attacker could potentially\nexploit this to cause a denial of service (application crash).\n(CVE-2016-1702)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.14.04.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqt-qmlplugin","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtcore-dev","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtquick-dev","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtquick0","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqmlscene","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-chromedriver","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-codecs","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-codecs-extra","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"}],"wily":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.15.10.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.15.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.15.10.1"}],"xenial":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.16.04.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqt-qmlplugin","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtcore-dev","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtquick-dev","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtquick0","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"oxideqt-codecs","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"oxideqt-codecs-extra","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2016-1673","CVE-2016-1675","CVE-2016-1677","CVE-2016-1678","CVE-2016-1679","CVE-2016-1680","CVE-2016-1682","CVE-2016-1683","CVE-2016-1684","CVE-2016-1688","CVE-2016-1689","CVE-2016-1691","CVE-2016-1692","CVE-2016-1695","CVE-2016-1697","CVE-2016-1699","CVE-2016-1702","CVE-2016-1703"]}]},{"id":"CVE-2016-1697","published":"2016-06-06T00:00:00","updated_at":"2025-08-25T21:55:11.329165+00:00","description":"\nThe FrameLoader::startLoad function in\nWebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google\nChrome before 51.0.2704.79, does not prevent frame navigations during\nDocumentLoader detach operations, which allows remote attackers to bypass\nthe Same Origin Policy via crafted JavaScript code.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.co.uk/2016/06/stable-channel-update.html","https://ubuntu.com/security/notices/USN-2992-1","https://www.cve.org/CVERecord?id=CVE-2016-1697"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.79","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"1.15.7-0ubuntu0.14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.15.7","component":null,"pocket":"security"},{"release_codename":"wily","status":"released","description":"1.15.7-0ubuntu0.15.10.1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"1.15.7-0ubuntu0.16.04.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-2992-1"],"notices":[{"id":"USN-2992-1","title":"Oxide vulnerabilities","summary":"Several security issues were fixed in Oxide.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2016-06-06T15:26:12.476756","description":"An unspecified security issue was discovered in Blink. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit this to bypass same-origin restrictions.\n(CVE-2016-1673)\n\nAn issue was discovered with Document reattachment in Blink in some\ncircumstances. If a user were tricked in to opening a specially crafted\nwebsite, an attacker could potentially exploit this to bypass same-origin\nrestrictions. (CVE-2016-1675)\n\nA type confusion bug was discovered in V8. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to obtain sensitive information. (CVE-2016-1677)\n\nA heap overflow was discovered in V8. If a user were tricked in to opening\na specially crafted website, an attacker could potentially exploit this to\ncause a denial of service (application crash) or execute arbitrary code.\n(CVE-2016-1678)\n\nA use-after-free was discovered in the V8ValueConverter implementation in\nChromium in some circumstances. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this to\ncause a denial of service (application crash) or execute arbitrary code.\n(CVE-2016-1679)\n\nA use-after-free was discovered in Skia. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1680)\n\nA security issue was discovered in ServiceWorker registration in Blink in\nsome circumstances. If a user were tricked in to opening a specially\ncrafted website, an attacker could potentially exploit this to bypass\nContent Security Policy (CSP) protections. (CVE-2016-1682)\n\nAn out-of-bounds memory access was discovered in libxslt. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit this to cause a denial of service (application crash)\nor execute arbitrary code. (CVE-2016-1683)\n\nAn integer overflow was discovered in libxslt. If a user were tricked in\nto opening a specially crafted website, an attacker could potentially\nexploit this to cause a denial of service (application crash or resource\nconsumption). (CVE-2016-1684)\n\nAn out-of-bounds read was discovered in the regular expression\nimplementation in V8. If a user were tricked in to opening a specially\ncrafted website, an attacker could potentially exploit this to cause a\ndenial of service (application crash). (CVE-2016-1688)\n\nA heap overflow was discovered in Chromium. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1689)\n\nA heap overflow was discovered in Skia. If a user were tricked in to\nopening a specially crafted website, an attacker could potentially exploit\nthis to cause a denial of service (application crash) or execute arbitrary\ncode. (CVE-2016-1691)\n\nIt was discovered that Blink permits cross-origin loading of stylesheets\nby a service worker even when the stylesheet download has an incorrect\nMIME type. If a user were tricked in to opening a specially crafted\nwebsite, an attacker could potentially exploit this to bypass same-origin\nrestrictions. (CVE-2016-1692)\n\nMultiple security issues were discovered in Chromium. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to read uninitialized memory, cause a denial\nof service (application crash) or execute arbitrary code. (CVE-2016-1695,\nCVE-2016-1703)\n\nIt was discovered that Blink does not prevent frame navigation during\nDocumentLoader detach operations. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this to\nbypass same-origin restrictions. (CVE-2016-1697)\n\nA parameter sanitization bug was discovered in the devtools subsystem in\nBlink. An attacker could potentially exploit this to bypass intended\naccess restrictions. (CVE-2016-1699)\n\nAn out-of-bounds read was discovered in Skia. If a user were tricked in\nto opening a specially crafted website, an attacker could potentially\nexploit this to cause a denial of service (application crash).\n(CVE-2016-1702)\n","is_hidden":false,"release_packages":{"trusty":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.14.04.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqt-qmlplugin","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtcore-dev","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtquick-dev","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"liboxideqtquick0","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqmlscene","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-chromedriver","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-codecs","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"},{"name":"oxideqt-codecs-extra","version":"1.15.7-0ubuntu0.14.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.14.04.1","pocket":"security"}],"wily":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.15.10.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.15.10.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.15.10.1"}],"xenial":[{"name":"oxide-qt","version":"1.15.7-0ubuntu0.16.04.1","description":"Web browser engine for Qt (QML plugin)","is_source":true},{"name":"liboxideqt-qmlplugin","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtcore-dev","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtcore0","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtquick-dev","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"liboxideqtquick0","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"oxideqt-codecs","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"},{"name":"oxideqt-codecs-extra","version":"1.15.7-0ubuntu0.16.04.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/oxide-qt","version_link":"https://launchpad.net/ubuntu/+source/oxide-qt/1.15.7-0ubuntu0.16.04.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2016-1673","CVE-2016-1675","CVE-2016-1677","CVE-2016-1678","CVE-2016-1679","CVE-2016-1680","CVE-2016-1682","CVE-2016-1683","CVE-2016-1684","CVE-2016-1688","CVE-2016-1689","CVE-2016-1691","CVE-2016-1692","CVE-2016-1695","CVE-2016-1697","CVE-2016-1699","CVE-2016-1702","CVE-2016-1703"]}]},{"id":"CVE-2016-1701","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:11.329165+00:00","description":"\nThe Autofill implementation in Google Chrome before 51.0.2704.79 mishandles\nthe interaction between field updates and JavaScript code that triggers a\nframe deletion, which allows remote attackers to cause a denial of service\n(use-after-free) or possibly have unspecified other impact via a crafted\nweb site, a different vulnerability than CVE-2016-1690.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.co.uk/2016/06/stable-channel-update.html","https://www.cve.org/CVERecord?id=CVE-2016-1701"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.79","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1700","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:11.329165+00:00","description":"\nextensions/renderer/runtime_custom_bindings.cc in Google Chrome before\n51.0.2704.79 does not consider side effects during creation of an array of\nextension views, which allows remote attackers to cause a denial of service\n(use-after-free) or possibly have unspecified other impact via vectors\nrelated to extensions.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.co.uk/2016/06/stable-channel-update.html","https://www.cve.org/CVERecord?id=CVE-2016-1700"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.79","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1698","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:11.329165+00:00","description":"\nThe createCustomType function in extensions/renderer/resources/binding.js\nin the extension bindings in Google Chrome before 51.0.2704.79 does not\nvalidate module types, which might allow attackers to load arbitrary\nmodules or obtain sensitive information by leveraging a poisoned\ndefinition.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.co.uk/2016/06/stable-channel-update.html","https://www.cve.org/CVERecord?id=CVE-2016-1698"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.79","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1696","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:11.329165+00:00","description":"\nThe extensions subsystem in Google Chrome before 51.0.2704.79 does not\nproperly restrict bindings access, which allows remote attackers to bypass\nthe Same Origin Policy via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.co.uk/2016/06/stable-channel-update.html","https://www.cve.org/CVERecord?id=CVE-2016-1696"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.79","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1694","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:11.329165+00:00","description":"\nbrowser/browsing_data/browsing_data_remover.cc in Google Chrome before\n51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier\nfor remote attackers to spoof web sites via a valid certificate from an\narbitrary recognized Certification Authority.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1694"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1693","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:11.329165+00:00","description":"\nbrowser/safe_browsing/srt_field_trial_win.cc in Google Chrome before\n51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the\nSoftware Removal Tool, which allows remote attackers to spoof the\nchrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an\nHTTP session.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1693"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1690","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:06.514213+00:00","description":"\nThe Autofill implementation in Google Chrome before 51.0.2704.63 mishandles\nthe interaction between field updates and JavaScript code that triggers a\nframe deletion, which allows remote attackers to cause a denial of service\n(use-after-free) or possibly have unspecified other impact via a crafted\nweb site, a different vulnerability than CVE-2016-1701.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1690"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1687","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:06.514213+00:00","description":"\nThe renderer implementation in Google Chrome before 51.0.2704.63 does not\nproperly restrict public exposure of classes, which allows remote attackers\nto obtain sensitive information via vectors related to extensions.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1687"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1686","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:06.514213+00:00","description":"\nThe CPDF_DIBSource::CreateDecoder function in\ncore/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in\nGoogle Chrome before 51.0.2704.63, mishandles decoder-initialization\nfailure, which allows remote attackers to cause a denial of service\n(out-of-bounds read) via a crafted PDF document.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1686"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1685","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:06.514213+00:00","description":"\ncore/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before\n51.0.2704.63, miscalculates certain index values, which allows remote\nattackers to cause a denial of service (out-of-bounds read) via a crafted\nPDF document.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1685"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1681","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:01.483311+00:00","description":"\nHeap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in\nj2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63,\nallows remote attackers to cause a denial of service or possibly have\nunspecified other impact via a crafted PDF document.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1681"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1676","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:01.483311+00:00","description":"\nextensions/renderer/resources/binding.js in the extension bindings in\nGoogle Chrome before 51.0.2704.63 does not properly use prototypes, which\nallows remote attackers to bypass the Same Origin Policy via unspecified\nvectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1676"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1674","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:01.483311+00:00","description":"\nThe extensions subsystem in Google Chrome before 51.0.2704.63 allows remote\nattackers to bypass the Same Origin Policy via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1674"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-1672","published":"2016-06-05T23:59:00","updated_at":"2025-08-25T21:55:01.483311+00:00","description":"\nThe ModuleSystem::RequireForJsInner function in\nextensions/renderer/module_system.cc in the extension bindings in Google\nChrome before 51.0.2704.63 mishandles properties, which allows remote\nattackers to conduct bindings-interception attacks and bypass the Same\nOrigin Policy via unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html","https://www.cve.org/CVERecord?id=CVE-2016-1672"],"bugs":[""],"patches":{"chromium-browser":[],"oxide-qt":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"precise","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"51.0.2704.79-0ubuntu0.14.04.1.1121","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"51.0.2704.63","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"51.0.2704.79-0ubuntu0.16.04.1.1242","component":null,"pocket":"security"}]},{"name":"oxide-qt","source":"https://ubuntu.com/security/cve?package=oxide-qt","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=oxide-qt","debian":"https://tracker.debian.org/pkg/oxide-qt","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2016-4564","published":"2016-06-04T00:00:00","updated_at":"2025-08-25T22:03:44.682356+00:00","description":"\nThe DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0\nand 7.x before 7.0.1-2 makes an incorrect function call in attempting to\nlocate the next token, which allows remote attackers to cause a denial of\nservice (buffer overflow and application crash) or possibly have\nunspecified other impact via a crafted file.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"This is 0122-Prevent-buffer-overflow-in-magick-draw.c.patch"}],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["http://www.imagemagick.org/script/changelog.php","https://ubuntu.com/security/notices/USN-3131-1","https://www.cve.org/CVERecord?id=CVE-2016-4564"],"bugs":["https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1615929"],"patches":{"imagemagick":["upstream: https://github.com/ImageMagick/ImageMagick/commit/726812fa2fa7ce16bcf58f6e115f65427a1c0950"]},"tags":{},"packages":[{"name":"imagemagick","source":"https://ubuntu.com/security/cve?package=imagemagick","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=imagemagick","debian":"https://tracker.debian.org/pkg/imagemagick","statuses":[{"release_codename":"precise","status":"released","description":"8:6.6.9.7-5ubuntu3.5","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"8:6.7.7.10-6ubuntu3.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"8:6.8.9.9-5+deb8u4","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"8:6.8.9.9-7ubuntu5.2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"released","description":"8:6.8.9.9-7ubuntu8.1","component":null,"pocket":"security"}]}],"notices_ids":["USN-3131-1"],"notices":[{"id":"USN-3131-1","title":"ImageMagick vulnerabilities","summary":"Several security issues were fixed in ImageMagick.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2016-11-21T14:07:40.268837","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","is_hidden":false,"release_packages":{"precise":[{"name":"imagemagick","version":"8:6.6.9.7-5ubuntu3.5","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.6.9.7-5ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.6.9.7-5ubuntu3.5"},{"name":"libmagick++4","version":"8:6.6.9.7-5ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.6.9.7-5ubuntu3.5"},{"name":"libmagickcore4","version":"8:6.6.9.7-5ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.6.9.7-5ubuntu3.5"},{"name":"libmagickcore4-extra","version":"8:6.6.9.7-5ubuntu3.5","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.6.9.7-5ubuntu3.5"}],"trusty":[{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"imagemagick-common","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"libmagick++5","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"libmagickcore5","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"libmagickcore5-extra","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"libmagickwand5","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"},{"name":"perlmagick","version":"8:6.7.7.10-6ubuntu3.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.7.7.10-6ubuntu3.2","pocket":"security"}],"xenial":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.2","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"imagemagick-common","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"imagemagick-doc","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libimage-magick-perl","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libimage-magick-q16-perl","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagick++-6-headers","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagick++-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagick++-dev","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickcore-6-arch-config","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickcore-6-headers","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickcore-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickcore-dev","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickwand-6-headers","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickwand-6.q16-2","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickwand-6.q16-dev","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"libmagickwand-dev","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"},{"name":"perlmagick","version":"8:6.8.9.9-7ubuntu5.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.2","pocket":"security"}],"yakkety":[{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu8.1","description":"Image manipulation programs and library","is_source":true},{"name":"imagemagick","version":"8:6.8.9.9-7ubuntu8.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu8.1"},{"name":"imagemagick-6.q16","version":"8:6.8.9.9-7ubuntu8.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu8.1"},{"name":"libmagick++-6.q16-5v5","version":"8:6.8.9.9-7ubuntu8.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu8.1"},{"name":"libmagickcore-6.q16-2","version":"8:6.8.9.9-7ubuntu8.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu8.1"},{"name":"libmagickcore-6.q16-2-extra","version":"8:6.8.9.9-7ubuntu8.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/imagemagick","version_link":"https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu8.1"}]},"type":"USN","cves_ids":["CVE-2014-8354","CVE-2014-8355","CVE-2014-8562","CVE-2014-8716","CVE-2014-9805","CVE-2014-9806","CVE-2014-9807","CVE-2014-9808","CVE-2014-9809","CVE-2014-9810","CVE-2014-9811","CVE-2014-9812","CVE-2014-9813","CVE-2014-9814","CVE-2014-9815","CVE-2014-9816","CVE-2014-9817","CVE-2014-9818","CVE-2014-9819","CVE-2014-9820","CVE-2014-9821","CVE-2014-9822","CVE-2014-9823","CVE-2014-9826","CVE-2014-9828","CVE-2014-9829","CVE-2014-9830","CVE-2014-9831","CVE-2014-9833","CVE-2014-9834","CVE-2014-9835","CVE-2014-9836","CVE-2014-9837","CVE-2014-9838","CVE-2014-9839","CVE-2014-9840","CVE-2014-9841","CVE-2014-9843","CVE-2014-9844","CVE-2014-9845","CVE-2014-9846","CVE-2014-9847","CVE-2014-9848","CVE-2014-9849","CVE-2014-9850","CVE-2014-9851","CVE-2014-9853","CVE-2014-9854","CVE-2014-9907","CVE-2015-8894","CVE-2015-8895","CVE-2015-8896","CVE-2015-8897","CVE-2015-8898","CVE-2015-8900","CVE-2015-8901","CVE-2015-8902","CVE-2015-8903","CVE-2015-8957","CVE-2015-8958","CVE-2015-8959","CVE-2016-4562","CVE-2016-4563","CVE-2016-4564","CVE-2016-5010","CVE-2016-5687","CVE-2016-5688","CVE-2016-5689","CVE-2016-5690","CVE-2016-5691","CVE-2016-5841","CVE-2016-5842","CVE-2016-6491","CVE-2016-6823","CVE-2016-7101","CVE-2016-7513","CVE-2016-7514","CVE-2016-7515","CVE-2016-7516","CVE-2016-7517","CVE-2016-7518","CVE-2016-7519","CVE-2016-7520","CVE-2016-7521","CVE-2016-7522","CVE-2016-7523","CVE-2016-7524","CVE-2016-7525","CVE-2016-7526","CVE-2016-7527","CVE-2016-7528","CVE-2016-7529","CVE-2016-7530","CVE-2016-7531","CVE-2016-7532","CVE-2016-7533","CVE-2016-7534","CVE-2016-7535","CVE-2016-7536","CVE-2016-7537","CVE-2016-7538","CVE-2016-7539","CVE-2016-7540"]}]}],"offset":60680,"limit":20,"total_results":79316}