{"cves":[{"id":"CVE-2012-5651","published":"2013-01-03T01:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nDrupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked\nusers, which might allow remote attackers to obtain sensitive information\nby reading the search results.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2012/12/19","https://www.cve.org/CVERecord?id=CVE-2012-5651"],"bugs":[""],"patches":{"drupal6":[],"drupal7":[]},"tags":{},"packages":[{"name":"drupal6","source":"https://ubuntu.com/security/cve?package=drupal6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal6","debian":"https://tracker.debian.org/pkg/drupal6","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.27","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"drupal7","source":"https://ubuntu.com/security/cve?package=drupal7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=drupal7","debian":"https://tracker.debian.org/pkg/drupal7","statuses":[{"release_codename":"trusty","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.18","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"7.22-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-4545","published":"2013-01-03T01:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe http_negotiate_create_context function in\nprotocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using\nHTTP Negotiate or GSS-Negotiate authentication, delegates user credentials\nthrough GSSAPI, which allows remote servers to authenticate as the client\nvia the delegated credentials.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.debian.org/security/2012/dsa-2592","https://www.cve.org/CVERecord?id=CVE-2012-4545"],"bugs":[""],"patches":{"elinks":[]},"tags":{},"packages":[{"name":"elinks","source":"https://ubuntu.com/security/cve?package=elinks","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=elinks","debian":"https://tracker.debian.org/pkg/elinks","statuses":[{"release_codename":"vivid","status":"not-affected","description":"0.12~pre5-9ubuntu1","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"0.12~pre5-9ubuntu1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"0.12~pre5-9ubuntu1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.12~pre5-9","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"0.12~pre5-9ubuntu1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"0.12~pre5-9ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"0.12~pre5-9ubuntu1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"0.12~pre5-9ubuntu1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"0.12~pre5-9ubuntu1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [0.12~pre5-9ubuntu1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-6426","published":"2013-01-01T15:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nLemonLDAP::NG before 1.2.3 does not use the signature-verification\ncapability of the Lasso library, which allows remote attackers to bypass\nintended access-control restrictions via crafted SAML data.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://jira.ow2.org/browse/LEMONLDAP-570?page=com.atlassian.jirafisheyeplugin:fisheye-issuepanel","https://www.cve.org/CVERecord?id=CVE-2012-6426"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696329"],"patches":{"lemonldap-ng":["upstream: http://fisheye.ow2.org/changelog/LemonLDAP?cs=2698"]},"tags":{},"packages":[{"name":"lemonldap-ng","source":"https://ubuntu.com/security/cve?package=lemonldap-ng","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=lemonldap-ng","debian":"https://tracker.debian.org/pkg/lemonldap-ng","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"1.2.4-2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.2.3","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"1.2.5-1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"1.2.5-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"1.2.5-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"1.2.5-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"1.2.5-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"1.2.5-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [1.2.5-1]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-6084","published":"2013-01-01T15:55:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nmodules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before\n3.4.2 does not properly support capability negotiation during server\nhandshakes, which allows remote attackers to cause a denial of service\n(NULL pointer dereference and daemon crash) via a malformed request.","ubuntu_description":"","notes":[{"author":"seth-arnold","note":"charybdis patch should work on ratbox"}],"codename":null,"priority":"high","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2013/01/01/1","http://www.openwall.com/lists/oss-security/2013/01/01/2","https://github.com/atheme/charybdis/commit/ac0707aa61d9c20e9b09062294701567c9f41595.patch","http://www.stack.nl/~jilles/irc/charybdis-3.4.2.tbz2","http://www.ratbox.org/download/ircd-ratbox-3.0.8.tar.bz2","http://rabbit.dereferenced.org/~nenolod/ASA-2012-12-31.txt","http://openwall.com/lists/oss-security/2013/01/01/4","https://www.cve.org/CVERecord?id=CVE-2012-6084"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697092","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697093"],"patches":{"charybdis":["upstream: https://github.com/atheme/charybdis/commit/ac0707aa61d9c20e9b09062294701567c9f41595.patch"],"ircd-ratbox":["upstream: https://github.com/atheme/charybdis/commit/ac0707aa61d9c20e9b09062294701567c9f41595.patch","vendor: http://www.debian.org/security/2013/dsa-2612"]},"tags":{},"packages":[{"name":"charybdis","source":"https://ubuntu.com/security/cve?package=charybdis","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=charybdis","debian":"https://tracker.debian.org/pkg/charybdis","statuses":[{"release_codename":"trusty","status":"not-affected","description":"3.4.2-3","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"3.4.2-3","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"3.4.2-3","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.3.0-7.1","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"3.4.2-3","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"ircd-ratbox","source":"https://ubuntu.com/security/cve?package=ircd-ratbox","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ircd-ratbox","debian":"https://tracker.debian.org/pkg/ircd-ratbox","statuses":[{"release_codename":"vivid","status":"not-affected","description":"3.0.7.dfsg-3","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"3.0.6.dfsg-2squeeze1build0.11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"3.0.7.dfsg-3","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"3.0.7.dfsg-3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.0.7.dfsg-3","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"3.0.7.dfsg-3","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"3.0.7.dfsg-3","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [3.0.7.dfsg-3]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-5573","published":"2013-01-01T12:35:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe connection_edge_process_relay_cell function in or/relay.c in Tor before\n0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives,\nwhich might allow remote attackers to cause a denial of service (memory\nconsumption or excessive cell reception rate) or bypass intended\nflow-control restrictions via a RELAY_COMMAND_SENDME command.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2012/11/26/11","https://www.cve.org/CVERecord?id=CVE-2012-5573"],"bugs":[""],"patches":{"tor":["upstream: https://gitweb.torproject.org/arma/tor.git/commitdiff/b9b54568c0bb64c32bd0b362954bdbc8c1234b16"]},"tags":{},"packages":[{"name":"tor","source":"https://ubuntu.com/security/cve?package=tor","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tor","debian":"https://tracker.debian.org/pkg/tor","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"0.2.3.25-1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-6453","published":"2012-12-31T11:50:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nCross-site scripting (XSS) vulnerability in the RSS Reader extension before\n0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script\nor HTML via a crafted feed.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.mediawiki.org/wiki/Extension:RSS_Reader#0.2.6","http://bugs.debian.org/696179","https://www.cve.org/CVERecord?id=CVE-2012-6453"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696179"],"patches":{"mediawiki-extensions":[]},"tags":{},"packages":[{"name":"mediawiki-extensions","source":"https://ubuntu.com/security/cve?package=mediawiki-extensions","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mediawiki-extensions","debian":"https://tracker.debian.org/pkg/mediawiki-extensions","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"2.11","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"2.11","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.11","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"2.11","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"2.11","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"2.11","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty/esm was DNE [trusty was not-affected [2.11]]","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-5642","published":"2012-12-31T11:50:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nserver/action.py in Fail2ban before 0.8.8 does not properly handle the\ncontent of the matches tag, which might allow remote attackers to trigger\nunsafe behavior in a custom action file via unspecified symbols in this\ncontent.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2012/12/17/1","https://www.cve.org/CVERecord?id=CVE-2012-5642"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696184"],"patches":{"fail2ban":["upstream: https://github.com/fail2ban/fail2ban/commit/83109bc"]},"tags":{},"packages":[{"name":"fail2ban","source":"https://ubuntu.com/security/cve?package=fail2ban","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=fail2ban","debian":"https://tracker.debian.org/pkg/fail2ban","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"0.8.6-3wheezy2build0.12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"0.8.10-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"0.8.10-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.8.8","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2012-6702","published":"2012-12-31T00:00:00","updated_at":"2025-07-11T07:37:54.877120+00:00","description":"\nExpat, when used in a parser that has not called XML_SetHashSalt or passed\nit a seed of 0, makes it easier for context-dependent attackers to defeat\ncryptographic protection mechanisms via vectors involving use of the srand\nfunction.","ubuntu_description":"","notes":[{"author":"sbeattie","note":"tla uses system expat as of 1.3.5+dfsg-15"},{"author":"rodrigo-zaiden","note":"related to CVE-2012-0876, where the fix added XML_SetHashSalt\nand generate_hash_secret_salt methods.\nlibxmltok does not have those methods, hence not affected."},{"author":"ccdm94","note":"cmake 3.20.5 and forward uses expat 2.2.10+."}],"codename":null,"priority":"medium","cvss3":5.9,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["http://seclists.org/oss-sec/2016/q2/468","https://ubuntu.com/security/notices/USN-3013-1","https://ubuntu.com/security/notices/USN-3010-1","https://www.cve.org/CVERecord?id=CVE-2012-6702"],"bugs":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6702","https://bugzilla.redhat.com/show_bug.cgi?id=1197087","https://sourceforge.net/p/expat/bugs/499/"],"patches":{"expat":["upstream: https://sourceforge.net/p/expat/code_git/ci/6acb0a47372a9079cc6ff70c384f015a47f2c34a/","upstream: https://sourceforge.net/p/expat/code_git/ci/f627ff74d631f4548f924ca5bd27ddad6cae07ab/"],"apache2":[],"apr-util":[],"cmake":[],"ghostscript":[],"texlive-bin":[],"xmlrpc-c":[],"wxwidgets2.8":[],"paraview":[],"wxwidgets2.6":[],"vnc4":[],"xotcl":[],"tla":[],"poco":[],"sitecopy":[],"libparagui1.1":[],"wbxml2":[],"swish-e":[],"kompozer":[],"insighttoolkit":[],"cadaver":[],"gdcm":[],"ayttm":[],"cableswig":[],"coin3":[],"simgear":[],"audacity":[],"matanza":[],"tdom":[],"vtk":[],"smart":[],"libxmltok":[]},"tags":{},"packages":[{"name":"xmlrpc-c","source":"https://ubuntu.com/security/cve?package=xmlrpc-c","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xmlrpc-c","debian":"https://tracker.debian.org/pkg/xmlrpc-c","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"focal","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"1.16.33-3.1ubuntu5.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"noble","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needed","component":null,"pocket":"security"}]},{"name":"paraview","source":"https://ubuntu.com/security/cve?package=paraview","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=paraview","debian":"https://tracker.debian.org/pkg/paraview","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [uses system expat]","component":null,"pocket":"security"}]},{"name":"sitecopy","source":"https://ubuntu.com/security/cve?package=sitecopy","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sitecopy","debian":"https://tracker.debian.org/pkg/sitecopy","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]},{"name":"insighttoolkit","source":"https://ubuntu.com/security/cve?package=insighttoolkit","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=insighttoolkit","debian":"https://tracker.debian.org/pkg/insighttoolkit","statuses":[{"release_codename":"xenial","status":"needed","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was needed","component":null,"pocket":"security"}]},{"name":"apache2","source":"https://ubuntu.com/security/cve?package=apache2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=apache2","debian":"https://tracker.debian.org/pkg/apache2","statuses":[{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"}]},{"name":"apr-util","source":"https://ubuntu.com/security/cve?package=apr-util","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=apr-util","debian":"https://tracker.debian.org/pkg/apr-util","statuses":[{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"}]},{"name":"audacity","source":"https://ubuntu.com/security/cve?package=audacity","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=audacity","debian":"https://tracker.debian.org/pkg/audacity","statuses":[{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"mantic","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"upstream","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [uses system expat]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"}]},{"name":"ayttm","source":"https://ubuntu.com/security/cve?package=ayttm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ayttm","debian":"https://tracker.debian.org/pkg/ayttm","statuses":[{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"cableswig","source":"https://ubuntu.com/security/cve?package=cableswig","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cableswig","debian":"https://tracker.debian.org/pkg/cableswig","statuses":[{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]},{"name":"cadaver","source":"https://ubuntu.com/security/cve?package=cadaver","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cadaver","debian":"https://tracker.debian.org/pkg/cadaver","statuses":[{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]},{"name":"cmake","source":"https://ubuntu.com/security/cve?package=cmake","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=cmake","debian":"https://tracker.debian.org/pkg/cmake","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [code-not-compiled]","component":null,"pocket":"security"}]},{"name":"coin3","source":"https://ubuntu.com/security/cve?package=coin3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=coin3","debian":"https://tracker.debian.org/pkg/coin3","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]},{"name":"expat","source":"https://ubuntu.com/security/cve?package=expat","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=expat","debian":"https://tracker.debian.org/pkg/expat","statuses":[{"release_codename":"hirsute","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"2.0.1-7.2ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2.1.0-4ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.2.0","component":null,"pocket":"security"},{"release_codename":"wily","status":"released","description":"2.1.0-7ubuntu0.15.10.2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2.1.0-7ubuntu0.16.04.2","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"2.2.0-1","component":null,"pocket":"security"}]},{"name":"gdcm","source":"https://ubuntu.com/security/cve?package=gdcm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gdcm","debian":"https://tracker.debian.org/pkg/gdcm","statuses":[{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"}]},{"name":"ghostscript","source":"https://ubuntu.com/security/cve?package=ghostscript","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ghostscript","debian":"https://tracker.debian.org/pkg/ghostscript","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [code-not-compiled]","component":null,"pocket":"security"}]},{"name":"kompozer","source":"https://ubuntu.com/security/cve?package=kompozer","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kompozer","debian":"https://tracker.debian.org/pkg/kompozer","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"libparagui1.1","source":"https://ubuntu.com/security/cve?package=libparagui1.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libparagui1.1","debian":"https://tracker.debian.org/pkg/libparagui1.1","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"libxmltok","source":"https://ubuntu.com/security/cve?package=libxmltok","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=libxmltok","debian":"https://tracker.debian.org/pkg/libxmltok","statuses":[{"release_codename":"hirsute","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"end of standard support","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"matanza","source":"https://ubuntu.com/security/cve?package=matanza","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=matanza","debian":"https://tracker.debian.org/pkg/matanza","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]},{"name":"poco","source":"https://ubuntu.com/security/cve?package=poco","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=poco","debian":"https://tracker.debian.org/pkg/poco","statuses":[{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"}]},{"name":"simgear","source":"https://ubuntu.com/security/cve?package=simgear","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=simgear","debian":"https://tracker.debian.org/pkg/simgear","statuses":[{"release_codename":"artful","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [uses system expat]","component":null,"pocket":"security"}]},{"name":"smart","source":"https://ubuntu.com/security/cve?package=smart","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=smart","debian":"https://tracker.debian.org/pkg/smart","statuses":[{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [code-not-compiled]","component":null,"pocket":"security"}]},{"name":"swish-e","source":"https://ubuntu.com/security/cve?package=swish-e","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=swish-e","debian":"https://tracker.debian.org/pkg/swish-e","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]},{"name":"tdom","source":"https://ubuntu.com/security/cve?package=tdom","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tdom","debian":"https://tracker.debian.org/pkg/tdom","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]},{"name":"texlive-bin","source":"https://ubuntu.com/security/cve?package=texlive-bin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=texlive-bin","debian":"https://tracker.debian.org/pkg/texlive-bin","statuses":[{"release_codename":"artful","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code-not-compiled","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored [code-not-compiled]","component":null,"pocket":"security"}]},{"name":"tla","source":"https://ubuntu.com/security/cve?package=tla","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tla","debian":"https://tracker.debian.org/pkg/tla","statuses":[{"release_codename":"artful","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.3.5+dfsg-15","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [1.3.5+dfsg-15]","component":null,"pocket":"security"}]},{"name":"vnc4","source":"https://ubuntu.com/security/cve?package=vnc4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vnc4","debian":"https://tracker.debian.org/pkg/vnc4","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"ignored","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"vtk","source":"https://ubuntu.com/security/cve?package=vtk","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vtk","debian":"https://tracker.debian.org/pkg/vtk","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"uses system expat","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"wbxml2","source":"https://ubuntu.com/security/cve?package=wbxml2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wbxml2","debian":"https://tracker.debian.org/pkg/wbxml2","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]},{"name":"wxwidgets2.6","source":"https://ubuntu.com/security/cve?package=wxwidgets2.6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wxwidgets2.6","debian":"https://tracker.debian.org/pkg/wxwidgets2.6","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"wxwidgets2.8","source":"https://ubuntu.com/security/cve?package=wxwidgets2.8","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wxwidgets2.8","debian":"https://tracker.debian.org/pkg/wxwidgets2.8","statuses":[{"release_codename":"artful","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"disco","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"eoan","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"groovy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"impish","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lunar","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"mantic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [uses system expat]","component":null,"pocket":"security"}]},{"name":"xotcl","source":"https://ubuntu.com/security/cve?package=xotcl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xotcl","debian":"https://tracker.debian.org/pkg/xotcl","statuses":[{"release_codename":"artful","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"cosmic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"disco","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"eoan","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"groovy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"hirsute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"impish","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"kinetic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"lunar","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"mantic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oracular","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [code not present]","component":null,"pocket":"security"}]}],"notices_ids":["USN-3013-1","USN-3010-1"],"notices":[{"id":"USN-3013-1","title":"XML-RPC for C and C++ vulnerabilities","summary":"Several security issues were fixed in XML-RPC for C and C++.\n","instructions":"After a standard system upgrade you need to restart any applications linked\nagainst XML-RPC for C and C++ to effect the necessary changes.\n","references":[],"published":"2016-06-20T17:11:15.149256","description":"It was discovered that the Expat code in XML-RPC for C and C++ unexpectedly\ncalled srand in certain circumstances. This could reduce the security of\ncalling applications. (CVE-2012-6702)\n\nIt was discovered that the Expat code in XML-RPC for C and C++ incorrectly\nhandled seeding the random number generator. A remote attacker could\npossibly use this issue to cause a denial of service. (CVE-2016-5300)\n\nGustavo Grieco discovered that the Expat code in XML-RPC for C and C++\nincorrectly handled malformed XML data. If a user or application linked\nagainst XML-RPC for C and C++ were tricked into opening a crafted XML file,\nan attacker could cause a denial of service, or possibly execute arbitrary\ncode. (CVE-2016-0718)\n\nIt was discovered that the Expat code in XML-RPC for C and C++ incorrectly\nhandled malformed XML data. If a user or application linked against XML-RPC\nfor C and C++ were tricked into opening a crafted XML file, an attacker\ncould cause a denial of service, or possibly execute arbitrary code.\n(CVE-2015-1283, CVE-2016-4472)\n","is_hidden":false,"release_packages":{"precise":[{"name":"xmlrpc-c","version":"1.16.33-3.1ubuntu5.2","description":"Lightweight RPC library based on XML and HTTP","is_source":true},{"name":"libxmlrpc-c++4","version":"1.16.33-3.1ubuntu5.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/xmlrpc-c","version_link":"https://launchpad.net/ubuntu/+source/xmlrpc-c/1.16.33-3.1ubuntu5.2"},{"name":"libxmlrpc-core-c3","version":"1.16.33-3.1ubuntu5.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/xmlrpc-c","version_link":"https://launchpad.net/ubuntu/+source/xmlrpc-c/1.16.33-3.1ubuntu5.2"}]},"type":"USN","cves_ids":["CVE-2012-6702","CVE-2015-1283","CVE-2016-0718","CVE-2016-4472","CVE-2016-5300"]},{"id":"USN-3010-1","title":"Expat vulnerabilities","summary":"Several security issues were fixed in Expat.\n","instructions":"After a standard system upgrade you need to restart any applications linked\nagainst Expat to effect the necessary changes.\n","references":[],"published":"2016-06-20T17:10:18.905579","description":"It was discovered that Expat unexpectedly called srand in certain\ncircumstances. This could reduce the security of calling applications.\n(CVE-2012-6702)\n\nIt was discovered that Expat incorrectly handled seeding the random number\ngenerator. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2016-5300)\n","is_hidden":false,"release_packages":{"precise":[{"name":"expat","version":"2.0.1-7.2ubuntu1.4","description":"XML parsing C library","is_source":true},{"name":"lib64expat1","version":"2.0.1-7.2ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.0.1-7.2ubuntu1.4"},{"name":"libexpat1","version":"2.0.1-7.2ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.0.1-7.2ubuntu1.4"}],"trusty":[{"name":"expat","version":"2.1.0-4ubuntu1.3","description":"XML parsing C library","is_source":true},{"name":"expat","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"lib64expat1","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"lib64expat1-dev","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"libexpat1","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"libexpat1-dev","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"},{"name":"libexpat1-udeb","version":"2.1.0-4ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-4ubuntu1.3","pocket":"security"}],"wily":[{"name":"expat","version":"2.1.0-7ubuntu0.15.10.2","description":"XML parsing C library","is_source":true},{"name":"lib64expat1","version":"2.1.0-7ubuntu0.15.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.15.10.2"},{"name":"libexpat1","version":"2.1.0-7ubuntu0.15.10.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.15.10.2"}],"xenial":[{"name":"expat","version":"2.1.0-7ubuntu0.16.04.2","description":"XML parsing C library","is_source":true},{"name":"expat","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"lib64expat1","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"lib64expat1-dev","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"libexpat1","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"libexpat1-dev","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"},{"name":"libexpat1-udeb","version":"2.1.0-7ubuntu0.16.04.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/expat","version_link":"https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.2","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2012-6702","CVE-2016-5300"]}]},{"id":"CVE-2012-6689","published":"2012-12-31T00:00:00","updated_at":"2025-08-25T20:42:15.948617+00:00","description":"\nThe netlink_sendmsg function in net/netlink/af_netlink.c in the Linux\nkernel before 3.5.5 does not validate the dst_pid field, which allows local\nusers to have an unspecified impact by spoofing Netlink messages.","ubuntu_description":"\nA flaw was discovered in how netlink sockets validate message origins. A\nlocal attacker could exploit this flaw to send netlink message\nnotifications, with spoofed credentials, to subscribed tasks.","notes":[{"author":"jdstrand","note":"android kernels (flo, goldfish, grouper, maguro, mako and manta) are\nnot supported on the Ubuntu Touch 14.10 and earlier preview kernels\nlinux-lts-saucy no longer receives official support\nlinux-lts-quantal no longer receives official support"},{"author":"sbeattie","note":"fixed in 3.6"}],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1610-1","https://ubuntu.com/security/notices/USN-1599-1","https://www.cve.org/CVERecord?id=CVE-2012-6689"],"bugs":["https://launchpad.net/bugs/1427399"],"patches":{"linux":["upstream: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e1db19db5d6b9e4e83021595eab0dc8f107bef"],"linux-ec2":[],"linux-mvl-dove":[],"linux-ti-omap4":[],"linux-fsl-imx51":[],"linux-linaro-omap":[],"linux-linaro-shared":[],"linux-linaro-vexpress":[],"linux-qcm-msm":[],"linux-armadaxp":[],"linux-lts-quantal":[],"linux-lts-raring":[],"linux-lts-saucy":[],"linux-lts-trusty":[],"linux-goldfish":[],"linux-grouper":[],"linux-maguro":[],"linux-mako":[],"linux-manta":[],"linux-flo":[],"linux-lts-utopic":[],"linux-lts-vivid":[],"linux-lts-wily":[],"linux-raspi2":[],"linux-lts-xenial":[],"linux-snapdragon":[],"linux-aws":[],"linux-hwe-edge":[],"linux-hwe":[],"linux-gke":[]},"tags":{"linux-armadaxp":["not-ue"],"linux-lts-quantal":["not-ue"],"linux-lts-saucy":["not-ue"]},"packages":[{"name":"linux","source":"https://ubuntu.com/security/cve?package=linux","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux","debian":"https://tracker.debian.org/pkg/linux","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"3.2.0-32.51","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"3.11.0-12.19","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"3.13.0-24.46","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"3.16.0-23.31","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"3.19.0-15.15","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.2.0-16.19","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"4.4.0-21.37","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"4.8.0-22.24","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"}]},{"name":"linux-armadaxp","source":"https://ubuntu.com/security/cve?package=linux-armadaxp","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-armadaxp","debian":"https://tracker.debian.org/pkg/linux-armadaxp","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"3.2.0-1609.14","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"}]},{"name":"linux-aws","source":"https://ubuntu.com/security/cve?package=linux-aws","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-aws","debian":"https://tracker.debian.org/pkg/linux-aws","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"4.4.0-1002.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1001.10","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-ec2","source":"https://ubuntu.com/security/cve?package=linux-ec2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-ec2","debian":"https://tracker.debian.org/pkg/linux-ec2","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"}]},{"name":"linux-flo","source":"https://ubuntu.com/security/cve?package=linux-flo","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-flo","debian":"https://tracker.debian.org/pkg/linux-flo","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-fsl-imx51","source":"https://ubuntu.com/security/cve?package=linux-fsl-imx51","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-fsl-imx51","debian":"https://tracker.debian.org/pkg/linux-fsl-imx51","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"}]},{"name":"linux-gke","source":"https://ubuntu.com/security/cve?package=linux-gke","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-gke","debian":"https://tracker.debian.org/pkg/linux-gke","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1003.3","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-goldfish","source":"https://ubuntu.com/security/cve?package=linux-goldfish","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-goldfish","debian":"https://tracker.debian.org/pkg/linux-goldfish","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"3.4.0-4.20","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"3.4.0-4.23","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"3.4.0-4.24","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"3.4.0-4.27","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"3.4.0-4.27","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-grouper","source":"https://ubuntu.com/security/cve?package=linux-grouper","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-grouper","debian":"https://tracker.debian.org/pkg/linux-grouper","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored","component":null,"pocket":"security"}]},{"name":"linux-hwe","source":"https://ubuntu.com/security/cve?package=linux-hwe","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe","debian":"https://tracker.debian.org/pkg/linux-hwe","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.8.0-36.36~16.04.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-hwe-edge","source":"https://ubuntu.com/security/cve?package=linux-hwe-edge","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-hwe-edge","debian":"https://tracker.debian.org/pkg/linux-hwe-edge","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.8.0-36.36~16.04.1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-linaro-omap","source":"https://ubuntu.com/security/cve?package=linux-linaro-omap","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-linaro-omap","debian":"https://tracker.debian.org/pkg/linux-linaro-omap","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"}]},{"name":"linux-linaro-shared","source":"https://ubuntu.com/security/cve?package=linux-linaro-shared","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-linaro-shared","debian":"https://tracker.debian.org/pkg/linux-linaro-shared","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"}]},{"name":"linux-linaro-vexpress","source":"https://ubuntu.com/security/cve?package=linux-linaro-vexpress","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-linaro-vexpress","debian":"https://tracker.debian.org/pkg/linux-linaro-vexpress","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"}]},{"name":"linux-lts-quantal","source":"https://ubuntu.com/security/cve?package=linux-lts-quantal","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-quantal","debian":"https://tracker.debian.org/pkg/linux-lts-quantal","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"3.5.0-18.29~precise1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lts-raring","source":"https://ubuntu.com/security/cve?package=linux-lts-raring","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-raring","debian":"https://tracker.debian.org/pkg/linux-lts-raring","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lts-saucy","source":"https://ubuntu.com/security/cve?package=linux-lts-saucy","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-saucy","debian":"https://tracker.debian.org/pkg/linux-lts-saucy","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"3.11.0-13.20~precise2","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lts-trusty","source":"https://ubuntu.com/security/cve?package=linux-lts-trusty","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-trusty","debian":"https://tracker.debian.org/pkg/linux-lts-trusty","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"3.13.0-24.46~precise1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-lts-utopic","source":"https://ubuntu.com/security/cve?package=linux-lts-utopic","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-utopic","debian":"https://tracker.debian.org/pkg/linux-lts-utopic","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [3.16.0-25.33~14.04.2]","component":null,"pocket":"security"}]},{"name":"linux-lts-vivid","source":"https://ubuntu.com/security/cve?package=linux-lts-vivid","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-vivid","debian":"https://tracker.debian.org/pkg/linux-lts-vivid","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [3.19.0-18.18~14.04.1]","component":null,"pocket":"security"}]},{"name":"linux-lts-wily","source":"https://ubuntu.com/security/cve?package=linux-lts-wily","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-wily","debian":"https://tracker.debian.org/pkg/linux-lts-wily","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was not-affected [4.2.0-18.22~14.04.1]","component":null,"pocket":"security"}]},{"name":"linux-lts-xenial","source":"https://ubuntu.com/security/cve?package=linux-lts-xenial","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-lts-xenial","debian":"https://tracker.debian.org/pkg/linux-lts-xenial","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"4.4.0-13.29~14.04.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-maguro","source":"https://ubuntu.com/security/cve?package=linux-maguro","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-maguro","debian":"https://tracker.debian.org/pkg/linux-maguro","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored","component":null,"pocket":"security"}]},{"name":"linux-mako","source":"https://ubuntu.com/security/cve?package=linux-mako","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-mako","debian":"https://tracker.debian.org/pkg/linux-mako","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"vivid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"wily","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored","component":null,"pocket":"security"}]},{"name":"linux-manta","source":"https://ubuntu.com/security/cve?package=linux-manta","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-manta","debian":"https://tracker.debian.org/pkg/linux-manta","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"3.4.0-6.25","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"3.4.0-6.29","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"3.4.0-7.32","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"trusty was ignored","component":null,"pocket":"security"}]},{"name":"linux-mvl-dove","source":"https://ubuntu.com/security/cve?package=linux-mvl-dove","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-mvl-dove","debian":"https://tracker.debian.org/pkg/linux-mvl-dove","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"linux-qcm-msm","source":"https://ubuntu.com/security/cve?package=linux-qcm-msm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-qcm-msm","debian":"https://tracker.debian.org/pkg/linux-qcm-msm","statuses":[{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"}]},{"name":"linux-raspi2","source":"https://ubuntu.com/security/cve?package=linux-raspi2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-raspi2","debian":"https://tracker.debian.org/pkg/linux-raspi2","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"4.2.0-1008.12","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.2.0-1013.19","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"4.4.0-1009.10","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"4.8.0-1013.15","component":null,"pocket":"security"}]},{"name":"linux-snapdragon","source":"https://ubuntu.com/security/cve?package=linux-snapdragon","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-snapdragon","debian":"https://tracker.debian.org/pkg/linux-snapdragon","statuses":[{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"4.4.0-1012.12","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"4.4.0-1012.12","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"4.4.0-1029.32","component":null,"pocket":"security"}]},{"name":"linux-ti-omap4","source":"https://ubuntu.com/security/cve?package=linux-ti-omap4","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=linux-ti-omap4","debian":"https://tracker.debian.org/pkg/linux-ti-omap4","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"3.2.0-1420.27","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"3.6~rc5","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1599-1","USN-1610-1"],"notices":[{"id":"USN-1599-1","title":"Linux kernel (OMAP4) vulnerability","summary":"The system could be made to run actions or potentially programs as an\nadministrator.\n","instructions":"After a standard system update you need to reboot your computer to make\nall the necessary changes.\n\nATTENTION: Due to an unavoidable ABI change the kernel updates have\nbeen given a new version number, which requires you to recompile and\nreinstall all third party kernel modules you might have installed. If\nyou use linux-restricted-modules, you have to update that package as\nwell to get modules which work with the new kernel version. Unless you\nmanually uninstalled the standard kernel metapackages (e.g. linux-generic,\nlinux-server, linux-powerpc), a standard system upgrade will automatically\nperform this as well.\n","references":[],"published":"2012-10-09T08:19:26.110416","description":"\nPablo Neira Ayuso discovered a flaw in the credentials of netlink messages.\nAn unprivileged local attacker could exploit this by getting a netlink\nbased service, that relies on netlink credentials, to perform privileged\nactions. (CVE-2012-3520)\n\nMathias Krause discovered information leak in the Linux kernel's compat\nioctl interface. A local user could exploit the flaw to examine parts of\nkernel stack memory (CVE-2012-6539)\n\nMathias Krause discovered an information leak in the Linux kernel's\ngetsockopt for IP_VS_SO_GET_TIMEOUT. A local user could exploit this flaw\nto examine parts of kernel stack memory. (CVE-2012-6540)\n\nMathias Krause discovered an information leak in the Linux kernel's\ngetsockopt implementation for the Datagram Congestion Control Protocol\n(DCCP). A local user could exploit this flaw to examine some of the\nkernel's stack memory. (CVE-2012-6541)\n\nMathias Krause discovered an information leak in the Linux kernel's\ngetsockname implementation for Logical Link Layer (llc) sockets. A local\nuser could exploit this flaw to examine some of the kernel's stack memory.\n(CVE-2012-6542)\n\nMathias Krause discovered information leaks in the Linux kernel's Bluetooth\nLogical Link Control and Adaptation Protocol (L2CAP) implementation. A\nlocal user could exploit these flaws to examine some of the kernel's stack\nmemory. (CVE-2012-6544)\n\nMathias Krause discovered information leaks in the Linux kernel's Bluetooth\nRFCOMM protocol implementation. A local user could exploit these flaws to\nexamine parts of kernel memory. (CVE-2012-6545)\n\nMathias Krause discovered information leaks in the Linux kernel's\nAsynchronous Transfer Mode (ATM) networking stack. A local user could\nexploit these flaws to examine some parts of kernel memory. (CVE-2012-6546)\n\nA flaw was discovered in how netlink sockets validate message origins. A\nlocal attacker could exploit this flaw to send netlink message\nnotifications, with spoofed credentials, to subscribed tasks.\n(CVE-2012-6689)\n\nMathias Krause discover an error in Linux kernel's Datagram Congestion\nControl Protocol (DCCP) Congestion Control Identifier (CCID) use. A local\nattack could exploit this flaw to cause a denial of service (crash) and\npotentially escalate privileges if the user can mmap page 0.\n(CVE-2013-1827)\n","is_hidden":false,"release_packages":{"precise":[{"name":"linux-ti-omap4","version":"3.2.0-1420.27","description":"Linux kernel for OMAP4","is_source":true},{"name":"linux-image-3.2.0-1420-omap4","version":"3.2.0-1420.27","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/linux-ti-omap4","version_link":"https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1420.27"}]},"type":"USN","cves_ids":["CVE-2012-3520","CVE-2012-6539","CVE-2012-6540","CVE-2012-6541","CVE-2012-6542","CVE-2012-6544","CVE-2012-6545","CVE-2012-6546","CVE-2012-6689","CVE-2013-1827"]},{"id":"USN-1610-1","title":"Linux kernel vulnerability","summary":"The system could be made to perform privileged actions as an administrator.\n","instructions":"After a standard system update you need to reboot your computer to make\nall the necessary changes.\n\nATTENTION: Due to an unavoidable ABI change the kernel updates have\nbeen given a new version number, which requires you to recompile and\nreinstall all third party kernel modules you might have installed. If\nyou use linux-restricted-modules, you have to update that package as\nwell to get modules which work with the new kernel version. Unless you\nmanually uninstalled the standard kernel metapackages (e.g. linux-generic,\nlinux-server, linux-powerpc), a standard system upgrade will automatically\nperform this as well.\n","references":[],"published":"2012-10-12T10:12:19.596324","description":"\nPablo Neira Ayuso discovered a flaw in the credentials of netlink messages.\nAn unprivileged local attacker could exploit this by getting a netlink\nbased service, that relies on netlink credentials, to perform privileged\nactions. (CVE-2012-3520)\n\nMathias Krause discovered information leak in the Linux kernel's compat\nioctl interface. A local user could exploit the flaw to examine parts of\nkernel stack memory (CVE-2012-6539)\n\nMathias Krause discovered an information leak in the Linux kernel's\ngetsockopt for IP_VS_SO_GET_TIMEOUT. A local user could exploit this flaw\nto examine parts of kernel stack memory. (CVE-2012-6540)\n\nMathias Krause discovered an information leak in the Linux kernel's\ngetsockopt implementation for the Datagram Congestion Control Protocol\n(DCCP). A local user could exploit this flaw to examine some of the\nkernel's stack memory. (CVE-2012-6541)\n\nMathias Krause discovered an information leak in the Linux kernel's\ngetsockname implementation for Logical Link Layer (llc) sockets. A local\nuser could exploit this flaw to examine some of the kernel's stack memory.\n(CVE-2012-6542)\n\nMathias Krause discovered information leaks in the Linux kernel's Bluetooth\nLogical Link Control and Adaptation Protocol (L2CAP) implementation. A\nlocal user could exploit these flaws to examine some of the kernel's stack\nmemory. (CVE-2012-6544)\n\nMathias Krause discovered information leaks in the Linux kernel's Bluetooth\nRFCOMM protocol implementation. A local user could exploit these flaws to\nexamine parts of kernel memory. (CVE-2012-6545)\n\nMathias Krause discovered information leaks in the Linux kernel's\nAsynchronous Transfer Mode (ATM) networking stack. A local user could\nexploit these flaws to examine some parts of kernel memory. (CVE-2012-6546)\n\nA flaw was discovered in how netlink sockets validate message origins. A\nlocal attacker could exploit this flaw to send netlink message\nnotifications, with spoofed credentials, to subscribed tasks.\n(CVE-2012-6689)\n\nMathias Krause discover an error in Linux kernel's Datagram Congestion\nControl Protocol (DCCP) Congestion Control Identifier (CCID) use. A local\nattack could exploit this flaw to cause a denial of service (crash) and\npotentially escalate privileges if the user can mmap page 0.\n(CVE-2013-1827)\n","is_hidden":false,"release_packages":{"precise":[{"name":"linux","version":"3.2.0-32.51","description":"Linux kernel","is_source":true},{"name":"linux-image-3.2.0-32-omap","version":"3.2.0-32.51","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/linux","version_link":"https://launchpad.net/ubuntu/+source/linux/3.2.0-32.51"},{"name":"linux-image-3.2.0-32-powerpc-smp","version":"3.2.0-32.51","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/linux","version_link":"https://launchpad.net/ubuntu/+source/linux/3.2.0-32.51"},{"name":"linux-image-3.2.0-32-highbank","version":"3.2.0-32.51","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/linux","version_link":"https://launchpad.net/ubuntu/+source/linux/3.2.0-32.51"},{"name":"linux-image-3.2.0-32-powerpc64-smp","version":"3.2.0-32.51","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/linux","version_link":"https://launchpad.net/ubuntu/+source/linux/3.2.0-32.51"},{"name":"linux-image-3.2.0-32-generic-pae","version":"3.2.0-32.51","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/linux","version_link":"https://launchpad.net/ubuntu/+source/linux/3.2.0-32.51"},{"name":"linux-image-3.2.0-32-virtual","version":"3.2.0-32.51","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/linux","version_link":"https://launchpad.net/ubuntu/+source/linux/3.2.0-32.51"},{"name":"linux-image-3.2.0-32-generic","version":"3.2.0-32.51","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/linux","version_link":"https://launchpad.net/ubuntu/+source/linux/3.2.0-32.51"}]},"type":"USN","cves_ids":["CVE-2012-3520","CVE-2012-6539","CVE-2012-6540","CVE-2012-6541","CVE-2012-6542","CVE-2012-6544","CVE-2012-6545","CVE-2012-6546","CVE-2012-6689","CVE-2013-1827"]}]},{"id":"CVE-2012-6656","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\niconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows\ncontext-dependent attackers to cause a denial of service (out-of-bounds\nread) via a multibyte character value of \"0xffff\" to the iconv function\nwhen converting IBM930 encoded data to UTF-8.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2014/08/29/3","https://ubuntu.com/security/notices/USN-2432-1","https://www.cve.org/CVERecord?id=CVE-2012-6656"],"bugs":["https://sourceware.org/bugzilla/show_bug.cgi?id=14134"],"patches":{"eglibc":["upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=6e230d11837f3ae7b375ea69d7905f0d18eb79e5"],"glibc":[]},"tags":{},"packages":[{"name":"eglibc","source":"https://ubuntu.com/security/cve?package=eglibc","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=eglibc","debian":"https://tracker.debian.org/pkg/eglibc","statuses":[{"release_codename":"lucid","status":"released","description":"2.11.1-0ubuntu7.19","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"2.15-0ubuntu10.9","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"2.19-0ubuntu6.3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.16","component":null,"pocket":"security"},{"release_codename":"utopic","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"glibc","source":"https://ubuntu.com/security/cve?package=glibc","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=glibc","debian":"https://tracker.debian.org/pkg/glibc","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"2.19-10ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-2432-1"],"notices":[{"id":"USN-2432-1","title":"GNU C Library vulnerabilities","summary":"The GNU C Library could be made to crash or run programs.\n","instructions":"After a standard system update you need to reboot your computer to make all\nthe necessary changes.\n","references":[],"published":"2014-12-03T18:26:07.624029","description":"Siddhesh Poyarekar discovered that the GNU C Library incorrectly handled\ncertain multibyte characters when using the iconv function. An attacker\ncould possibly use this issue to cause applications to crash, resulting in\na denial of service. This issue only affected Ubuntu 10.04 LTS and Ubuntu\n12.04 LTS. (CVE-2012-6656)\n\nAdhemerval Zanella Netto discovered that the GNU C Library incorrectly\nhandled certain multibyte characters when using the iconv function. An\nattacker could possibly use this issue to cause applications to crash,\nresulting in a denial of service. (CVE-2014-6040)\n\nTim Waugh discovered that the GNU C Library incorrectly enforced the\nWRDE_NOCMD flag when handling the wordexp function. An attacker could\npossibly use this issue to execute arbitrary commands. (CVE-2014-7817)\n","is_hidden":false,"release_packages":{"lucid":[{"name":"eglibc","version":"2.11.1-0ubuntu7.19","description":"GNU C Library","is_source":true},{"name":"libc6","version":"2.11.1-0ubuntu7.19","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.11.1-0ubuntu7.19"}],"precise":[{"name":"eglibc","version":"2.15-0ubuntu10.9","description":"GNU C Library","is_source":true},{"name":"libc6","version":"2.15-0ubuntu10.9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.15-0ubuntu10.9"}],"trusty":[{"name":"eglibc","version":"2.19-0ubuntu6.4","description":"GNU C Library","is_source":true},{"name":"eglibc-source","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"glibc-doc","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc-bin","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc-dev-bin","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-amd64","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-armel","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-dev","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-dev-amd64","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-dev-armel","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-dev-i386","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-dev-ppc64","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-dev-x32","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-i386","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-pic","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-ppc64","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-prof","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-udeb","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libc6-x32","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libnss-dns-udeb","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"libnss-files-udeb","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"multiarch-support","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"},{"name":"nscd","version":"2.19-0ubuntu6.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/eglibc","version_link":"https://launchpad.net/ubuntu/+source/eglibc/2.19-0ubuntu6.4","pocket":"security"}],"utopic":[{"name":"glibc","version":"2.19-10ubuntu2.1","description":"GNU C Library","is_source":true},{"name":"libc6","version":"2.19-10ubuntu2.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/glibc","version_link":"https://launchpad.net/ubuntu/+source/glibc/2.19-10ubuntu2.1"}]},"type":"USN","cves_ids":["CVE-2012-6656","CVE-2014-6040","CVE-2014-7817"]}]},{"id":"CVE-2012-6129","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nStack-based buffer overflow in utp.cpp in libutp, as used in Transmission\nbefore 2.74 and possibly other products, allows remote attackers to cause a\ndenial of service (crash) and possibly execute arbitrary code via crafted\n\"micro transport protocol packets.\"","ubuntu_description":"","notes":[{"author":"seth-arnold","note":"transmission team may update patch based on how libutp upstream\npatches the issue"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2013/02/11/4","https://ubuntu.com/security/notices/USN-1747-1","https://www.cve.org/CVERecord?id=CVE-2012-6129"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700234","https://trac.transmissionbt.com/ticket/5002"],"patches":{"transmission":["upstream: https://trac.transmissionbt.com/changeset/13646"]},"tags":{},"packages":[{"name":"transmission","source":"https://ubuntu.com/security/cve?package=transmission","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=transmission","debian":"https://tracker.debian.org/pkg/transmission","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"2.33-0ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"2.51-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"2.61-0ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.74","component":null,"pocket":"security"}]}],"notices_ids":["USN-1747-1"],"notices":[{"id":"USN-1747-1","title":"Transmission vulnerability","summary":"Transmission could be made to crash or run programs if it received\nspecially crafted network traffic.\n","instructions":"After a standard system update you need to restart Transmission to make all\nthe necessary changes.\n","references":[],"published":"2013-02-25T14:25:59.258529","description":"It was discovered that Transmission incorrectly handled certain micro\ntransport protocol packets. A remote attacker could use this issue to cause\na denial of service, or possibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"precise":[{"name":"transmission","version":"2.51-0ubuntu1.3","description":"lightweight BitTorrent client","is_source":true},{"name":"transmission-common","version":"2.51-0ubuntu1.3","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/2.51-0ubuntu1.3"}],"quantal":[{"name":"transmission","version":"2.61-0ubuntu2.2","description":"lightweight BitTorrent client","is_source":true},{"name":"transmission-common","version":"2.61-0ubuntu2.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/2.61-0ubuntu2.2"}],"oneiric":[{"name":"transmission","version":"2.33-0ubuntu2.1","description":"lightweight BitTorrent client","is_source":true},{"name":"transmission-common","version":"2.33-0ubuntu2.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/transmission","version_link":"https://launchpad.net/ubuntu/+source/transmission/2.33-0ubuntu2.1"}]},"type":"USN","cves_ids":["CVE-2012-6129"]}]},{"id":"CVE-2012-6093","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6,\n4.8.x before 4.8.5, when using certain versions of openSSL, uses an\n\"incompatible structure layout\" that can read memory from the wrong\nlocation, which causes Qt to report an incorrect error when certificate\nvalidation fails and might cause users to make unsafe security decisions to\naccept a certificate.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"this is only an issue in environments where a different version\nof openssl is loaded at runtime than the one used during\ncompilation. This shouldn't happen on Ubuntu, as it should be\nusing the openssl version in the archive. Downgrading priority\nto \"low\"."}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://lists.qt-project.org/pipermail/announce/2013-January/000020.html","https://codereview.qt-project.org/#change,42461","https://ubuntu.com/security/notices/USN-1723-1","https://www.cve.org/CVERecord?id=CVE-2012-6093"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697582"],"patches":{"qt4-x11":["upstream: http://qt.gitorious.org/qt/qt/commit/691e78e5061d4cbc0de212d23b06c5dffddf2098","upstream: http://qt.gitorious.org/qt/qt/commit/3b14dc93cf0ef06f1424d7d6319a1af4505faa53"]},"tags":{},"packages":[{"name":"qt4-x11","source":"https://ubuntu.com/security/cve?package=qt4-x11","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qt4-x11","debian":"https://tracker.debian.org/pkg/qt4-x11","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"4:4.6.2-0ubuntu5.6","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"4:4.7.4-0ubuntu8.3","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"4:4.8.1-0ubuntu4.4","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"4:4.8.3+dfsg-0ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1723-1"],"notices":[{"id":"USN-1723-1","title":"Qt vulnerabilities","summary":"Several security issues were fixed in Qt.\n","instructions":"After a standard system update you need to restart your session to make all\nthe necessary changes.\n","references":[],"published":"2013-02-14T16:33:21.285000","description":"Richard J. Moore and Peter Hartmann discovered that Qt allowed redirecting\nrequests from http to file schemes. If an attacker were able to perform a\nmachine-in-the-middle attack, this flaw could be exploited to view sensitive\ninformation. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS,\nand Ubuntu 12.10. (CVE-2012-5624)\n\nStephen Cheng discovered that Qt may report incorrect errors when ssl\ncertificate verification fails. (CVE-2012-6093)\n\nTim Brown and Mark Lowe discovered that Qt incorrectly used weak\npermissions on shared memory segments. A local attacker could use this\nissue to view sensitive information, or modify program data belonging to\nother users. (CVE-2013-0254)\n","is_hidden":false,"release_packages":{"lucid":[{"name":"qt4-x11","version":"4:4.6.2-0ubuntu5.6","description":"Qt 4 libraries","is_source":true},{"name":"libqt4-core","version":"4:4.6.2-0ubuntu5.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qt4-x11","version_link":"https://launchpad.net/ubuntu/+source/qt4-x11/4:4.6.2-0ubuntu5.6"},{"name":"libqt4-network","version":"4:4.6.2-0ubuntu5.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qt4-x11","version_link":"https://launchpad.net/ubuntu/+source/qt4-x11/4:4.6.2-0ubuntu5.6"}],"oneiric":[{"name":"qt4-x11","version":"4:4.7.4-0ubuntu8.3","description":"Qt 4 libraries","is_source":true},{"name":"libqt4-core","version":"4:4.7.4-0ubuntu8.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qt4-x11","version_link":"https://launchpad.net/ubuntu/+source/qt4-x11/4:4.7.4-0ubuntu8.3"},{"name":"libqt4-network","version":"4:4.7.4-0ubuntu8.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qt4-x11","version_link":"https://launchpad.net/ubuntu/+source/qt4-x11/4:4.7.4-0ubuntu8.3"}],"precise":[{"name":"qt4-x11","version":"4:4.8.1-0ubuntu4.4","description":"Qt 4 libraries","is_source":true},{"name":"libqt4-core","version":"4:4.8.1-0ubuntu4.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qt4-x11","version_link":"https://launchpad.net/ubuntu/+source/qt4-x11/4:4.8.1-0ubuntu4.4"},{"name":"libqt4-network","version":"4:4.8.1-0ubuntu4.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qt4-x11","version_link":"https://launchpad.net/ubuntu/+source/qt4-x11/4:4.8.1-0ubuntu4.4"}],"quantal":[{"name":"qt4-x11","version":"4:4.8.3+dfsg-0ubuntu3.1","description":"Qt 4 libraries","is_source":true},{"name":"libqt4-core","version":"4:4.8.3+dfsg-0ubuntu3.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qt4-x11","version_link":"https://launchpad.net/ubuntu/+source/qt4-x11/4:4.8.3+dfsg-0ubuntu3.1"},{"name":"libqt4-network","version":"4:4.8.3+dfsg-0ubuntu3.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/qt4-x11","version_link":"https://launchpad.net/ubuntu/+source/qt4-x11/4:4.8.3+dfsg-0ubuntu3.1"}]},"type":"USN","cves_ids":["CVE-2012-5624","CVE-2012-6093","CVE-2013-0254"]}]},{"id":"CVE-2012-6088","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does\nnot return an error code in certain situations involving an \"unparseable\nsignature,\" which allows remote attackers to bypass RPM signature checks\nvia a crafted package.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"only affects rpm >= 4.10.0"}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2013/01/03/9","https://bugzilla.novell.com/show_bug.cgi?id=796375","http://rpm.org/wiki/Releases/4.10.2","https://ubuntu.com/security/notices/USN-1694-1","https://www.cve.org/CVERecord?id=CVE-2012-6088"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697375","https://bugzilla.novell.com/show_bug.cgi?id=796375"],"patches":{"rpm":["upstream: http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=3d74c43e7424bc8bf95f5e031446ecb6b08381e8"]},"tags":{},"packages":[{"name":"rpm","source":"https://ubuntu.com/security/cve?package=rpm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=rpm","debian":"https://tracker.debian.org/pkg/rpm","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"4.7.2-1lbuild1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"4.9.0-7","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"4.9.1.1-1build1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"4.10.0-4ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"4.10.2","component":null,"pocket":"security"}]}],"notices_ids":["USN-1694-1"],"notices":[{"id":"USN-1694-1","title":"RPM vulnerability","summary":"RPM could incorrectly validate package signatures.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2013-01-17T15:56:14.989322","description":"It was discovered that RPM incorrectly handled signature checking. An\nattacker could create a specially-crafted rpm with an invalid signature\nwhich could pass the signature validation check.\n","is_hidden":false,"release_packages":{"quantal":[{"name":"rpm","version":"4.10.0-4ubuntu0.1","description":"package manager for RPM","is_source":true},{"name":"rpm","version":"4.10.0-4ubuntu0.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/rpm","version_link":"https://launchpad.net/ubuntu/+source/rpm/4.10.0-4ubuntu0.1"}]},"type":"USN","cves_ids":["CVE-2012-6088"]}]},{"id":"CVE-2012-6085","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and\n2.0.x through 2.0.19, when importing a key, allows remote attackers to\ncorrupt the public keyring database or cause a denial of service\n(application crash) via a crafted length field of an OpenPGP packet.","ubuntu_description":"","notes":[{"author":"seth-arnold","note":"reproducer key available from dropbox url"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://seclists.org/bugtraq/2012/Dec/151","http://dl.dropbox.com/u/18852638/gnupg-issues/1455.zip","http://www.openwall.com/lists/oss-security/2013/01/01/6","https://ubuntu.com/security/notices/USN-1682-1","https://www.cve.org/CVERecord?id=CVE-2012-6085"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697108 (gnupg)","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=697251 (gnupg2)","https://bugs.g10code.com/gnupg/issue1455","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6085"],"patches":{"gnupg":["upstream: http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=patch;h=f795a0d59e197455f8723c300eebf59e09853efa","vendor: http://www.debian.org/security/2013/dsa-2601"],"gnupg2":["upstream: http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=patch;h=498882296ffac7987c644aaf2a0aa108a2925471","vendor: http://www.debian.org/security/2013/dsa-2601"]},"tags":{},"packages":[{"name":"gnupg","source":"https://ubuntu.com/security/cve?package=gnupg","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gnupg","debian":"https://tracker.debian.org/pkg/gnupg","statuses":[{"release_codename":"hardy","status":"released","description":"1.4.6-2ubuntu5.2","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"1.4.10-2ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"1.4.11-3ubuntu1.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"1.4.11-3ubuntu2.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"1.4.11-3ubuntu4.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.4.13,1.4.12-7","component":null,"pocket":"security"}]},{"name":"gnupg2","source":"https://ubuntu.com/security/cve?package=gnupg2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gnupg2","debian":"https://tracker.debian.org/pkg/gnupg2","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"2.0.14-1ubuntu1.5","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"2.0.17-2ubuntu2.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"2.0.17-2ubuntu2.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"2.0.17-2ubuntu3.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.0.19-2","component":null,"pocket":"security"}]}],"notices_ids":["USN-1682-1"],"notices":[{"id":"USN-1682-1","title":"GnuPG vulnerability","summary":"GnuPG could be made to corrupt the keyring if it imported a specially\ncrafted key.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2013-01-09T19:45:13.880475","description":"KB Sriram discovered that GnuPG incorrectly handled certain malformed keys.\nIf a user or automated system were tricked into importing a malformed key,\nthe GnuPG keyring could become corrupted.\n","is_hidden":false,"release_packages":{"precise":[{"name":"gnupg2","version":"2.0.17-2ubuntu2.12.04.2","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg","version":"1.4.11-3ubuntu2.2","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg2","version":"2.0.17-2ubuntu2.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg2","version_link":"https://launchpad.net/ubuntu/+source/gnupg2/2.0.17-2ubuntu2.12.04.2"},{"name":"gnupg","version":"1.4.11-3ubuntu2.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg","version_link":"https://launchpad.net/ubuntu/+source/gnupg/1.4.11-3ubuntu2.2"}],"hardy":[{"name":"gnupg","version":"1.4.6-2ubuntu5.2","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg","version":"1.4.6-2ubuntu5.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg","version_link":"https://launchpad.net/ubuntu/+source/gnupg/1.4.6-2ubuntu5.2"}],"lucid":[{"name":"gnupg2","version":"2.0.14-1ubuntu1.5","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg","version":"1.4.10-2ubuntu1.2","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg2","version":"2.0.14-1ubuntu1.5","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg2","version_link":"https://launchpad.net/ubuntu/+source/gnupg2/2.0.14-1ubuntu1.5"},{"name":"gnupg","version":"1.4.10-2ubuntu1.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg","version_link":"https://launchpad.net/ubuntu/+source/gnupg/1.4.10-2ubuntu1.2"}],"quantal":[{"name":"gnupg2","version":"2.0.17-2ubuntu3.1","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg","version":"1.4.11-3ubuntu4.1","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg2","version":"2.0.17-2ubuntu3.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg2","version_link":"https://launchpad.net/ubuntu/+source/gnupg2/2.0.17-2ubuntu3.1"},{"name":"gnupg","version":"1.4.11-3ubuntu4.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg","version_link":"https://launchpad.net/ubuntu/+source/gnupg/1.4.11-3ubuntu4.1"}],"oneiric":[{"name":"gnupg2","version":"2.0.17-2ubuntu2.11.10.2","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg","version":"1.4.11-3ubuntu1.11.10.2","description":"GNU privacy guard - a free PGP replacement","is_source":true},{"name":"gnupg2","version":"2.0.17-2ubuntu2.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg2","version_link":"https://launchpad.net/ubuntu/+source/gnupg2/2.0.17-2ubuntu2.11.10.2"},{"name":"gnupg","version":"1.4.11-3ubuntu1.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/gnupg","version_link":"https://launchpad.net/ubuntu/+source/gnupg/1.4.11-3ubuntu1.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-6085"]}]},{"id":"CVE-2012-6076","published":"2012-12-31T00:00:00","updated_at":"2025-09-16T11:20:08.599808+00:00","description":"\nInkscape before 0.48.4 reads .eps files from /tmp instead of the current\ndirectory, which might cause Inkspace to process unintended files, allow\nlocal users to obtain sensitive information, and possibly have other\nunspecified impacts.","ubuntu_description":"","notes":[{"author":"seth-arnold","note":"\"low\" priority due to symlink and hardlink restrictions in\nUbuntu's Linux kernels; without those protections, \"medium\"\nwould be more appropriate.\nMultiple patches are proposed in the bugreport; NewAndUndoOld\nappears to be preferred from comments #11 and #12"},{"author":"mdeslaur","note":"0.48.4 has fix, albeit the older fix.\ninkscape in lucid doesn't do the chdir into /tmp, so\nnot-affected"}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2012/12/30/2","https://ubuntu.com/security/notices/USN-1712-1","https://www.cve.org/CVERecord?id=CVE-2012-6076"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654341","https://bugs.launchpad.net/inkscape/+bug/911146"],"patches":{"inkscape":["other: https://launchpadlibrarian.net/127163394/1022719-NewAndUndoOld.diff"]},"tags":{"inkscape":["hardlink-restriction","symlink-restriction"]},"packages":[{"name":"inkscape","source":"https://ubuntu.com/security/cve?package=inkscape","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=inkscape","debian":"https://tracker.debian.org/pkg/inkscape","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"0.47.0-2ubuntu2","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"0.48.2-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"0.48.3.1-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"0.48.3.1-1ubuntu6.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.48.3.1-1.3, 0.48.4","component":null,"pocket":"security"}]}],"notices_ids":["USN-1712-1"],"notices":[{"id":"USN-1712-1","title":"Inkscape vulnerabilities","summary":"Several security issues were fixed in Inkscape.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2013-01-30T15:15:07.915111","description":"It was discoverd that Inkscape incorrectly handled XML external entities in\nSVG files. If a user were tricked into opening a specially-crafted SVG\nfile, Inkscape could possibly include external files in drawings, resulting\nin information disclosure. (CVE-2012-5656)\n\nIt was discovered that Inkscape attempted to open certain files from the\n/tmp directory instead of the current directory. A local attacker could\ntrick a user into opening a different file than the one that was intended.\nThis issue only applied to Ubuntu 11.10, Ubuntu 12.04 LTS and Ubuntu 12.10.\n(CVE-2012-6076)\n","is_hidden":false,"release_packages":{"precise":[{"name":"inkscape","version":"0.48.3.1-1ubuntu1.1","description":"vector-based drawing program","is_source":true},{"name":"inkscape","version":"0.48.3.1-1ubuntu1.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/inkscape","version_link":"https://launchpad.net/ubuntu/+source/inkscape/0.48.3.1-1ubuntu1.1"}],"lucid":[{"name":"inkscape","version":"0.47.0-2ubuntu2.1","description":"vector-based drawing program","is_source":true},{"name":"inkscape","version":"0.47.0-2ubuntu2.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/inkscape","version_link":"https://launchpad.net/ubuntu/+source/inkscape/0.47.0-2ubuntu2.1"}],"quantal":[{"name":"inkscape","version":"0.48.3.1-1ubuntu6.1","description":"vector-based drawing program","is_source":true},{"name":"inkscape","version":"0.48.3.1-1ubuntu6.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/inkscape","version_link":"https://launchpad.net/ubuntu/+source/inkscape/0.48.3.1-1ubuntu6.1"}],"oneiric":[{"name":"inkscape","version":"0.48.2-0ubuntu1.1","description":"vector-based drawing program","is_source":true},{"name":"inkscape","version":"0.48.2-0ubuntu1.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/inkscape","version_link":"https://launchpad.net/ubuntu/+source/inkscape/0.48.2-0ubuntu1.1"}]},"type":"USN","cves_ids":["CVE-2012-5656","CVE-2012-6076"]}]},{"id":"CVE-2012-6075","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nBuffer overflow in the e1000_receive function in the e1000 device driver\n(hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE\nflags are disabled, allows remote attackers to cause a denial of service\n(guest OS crash) and possibly execute arbitrary guest code via a large\npacket.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"hypervisor packages are in universe. For\nissues in the hypervisor, add appropriate\ntags to each section, ex:\nTags_xen: universe-binary"},{"author":"kees","note":"qemu and kvm are only included if the Xen issue is in full-virt mode."},{"author":"seth-arnold","note":"\"there will be no more qemu-kvm releases.\" -- Michael Tokarev\nqemu patches should apply to xen's embedded copies"},{"author":"mdeslaur","note":"raring is replacing qemu-kvm with qemu (in progress)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2012/12/30/1","https://ubuntu.com/security/notices/USN-1692-1","https://www.cve.org/CVERecord?id=CVE-2012-6075"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696051"],"patches":{"xen-3.1":[],"xen-3.2":[],"xen-3.3":[],"xen":[],"qemu-kvm":["upstream: http://git.qemu.org/?p=qemu.git;a=commit;h=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb","upstream: http://git.qemu.org/?p=qemu.git;a=commit;h=2c0331f4f7d241995452b99afaf0aab00493334a","vendor: http://www.debian.org/security/2013/dsa-2607"],"qemu":["vendor: http://www.debian.org/security/2013/dsa-2608"],"kvm":[]},"tags":{"xen-3.1":["universe-binary"],"xen-3.2":["universe-binary"],"xen-3.3":["universe-binary"],"xen":["universe-binary"]},"packages":[{"name":"kvm","source":"https://ubuntu.com/security/cve?package=kvm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=kvm","debian":"https://tracker.debian.org/pkg/kvm","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qemu","source":"https://ubuntu.com/security/cve?package=qemu","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qemu","debian":"https://tracker.debian.org/pkg/qemu","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"released","description":"1.3.0+dfsg-1~exp3ubuntu3","component":null,"pocket":"security"},{"release_codename":"saucy","status":"released","description":"1.3.0+dfsg-1~exp3ubuntu3","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"qemu-kvm","source":"https://ubuntu.com/security/cve?package=qemu-kvm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qemu-kvm","debian":"https://tracker.debian.org/pkg/qemu-kvm","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"0.12.3+noroms-0ubuntu9.21","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"0.14.1+noroms-0ubuntu6.6","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"1.0+noroms-0ubuntu14.7","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"1.2.0+noroms-0ubuntu2.12.10.2","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"xen","source":"https://ubuntu.com/security/cve?package=xen","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xen","debian":"https://tracker.debian.org/pkg/xen","statuses":[{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"4.1.1-2ubuntu4.5","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"4.1.2-2ubuntu2.5","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"4.1.3-3ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"raring","status":"released","description":"4.2.0-1ubuntu6","component":null,"pocket":"security"},{"release_codename":"saucy","status":"released","description":"4.2.0-1ubuntu6","component":null,"pocket":"security"}]},{"name":"xen-3.1","source":"https://ubuntu.com/security/cve?package=xen-3.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xen-3.1","debian":"https://tracker.debian.org/pkg/xen-3.1","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"xen-3.2","source":"https://ubuntu.com/security/cve?package=xen-3.2","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xen-3.2","debian":"https://tracker.debian.org/pkg/xen-3.2","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"xen-3.3","source":"https://ubuntu.com/security/cve?package=xen-3.3","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=xen-3.3","debian":"https://tracker.debian.org/pkg/xen-3.3","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"raring","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1692-1"],"notices":[{"id":"USN-1692-1","title":"QEMU vulnerability","summary":"QEMU could be made to crash or run programs if it received specially\ncrafted network traffic.\n","instructions":"After a standard system update you need to restart your virtual machines to\nmake all the necessary changes.\n","references":[],"published":"2013-01-16T17:45:20.692408","description":"It was discovered that QEMU incorrectly handled certain e1000 packet sizes.\nIn certain environments, an attacker may use this flaw in combination with\nlarge packets to cause a denial of service or execute arbitrary code in the\nguest.\n","is_hidden":false,"release_packages":{"precise":[{"name":"qemu-kvm","version":"1.0+noroms-0ubuntu14.7","description":"Machine emulator and virtualizer","is_source":true},{"name":"qemu-kvm","version":"1.0+noroms-0ubuntu14.7","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/1.0+noroms-0ubuntu14.7"}],"lucid":[{"name":"qemu-kvm","version":"0.12.3+noroms-0ubuntu9.21","description":"Machine emulator and virtualizer","is_source":true},{"name":"qemu-kvm","version":"0.12.3+noroms-0ubuntu9.21","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.21"}],"quantal":[{"name":"qemu-kvm","version":"1.2.0+noroms-0ubuntu2.12.10.2","description":"Machine emulator and virtualizer","is_source":true},{"name":"qemu-kvm","version":"1.2.0+noroms-0ubuntu2.12.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/1.2.0+noroms-0ubuntu2.12.10.2"}],"oneiric":[{"name":"qemu-kvm","version":"0.14.1+noroms-0ubuntu6.6","description":"Machine emulator and virtualizer","is_source":true},{"name":"qemu-kvm","version":"0.14.1+noroms-0ubuntu6.6","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.14.1+noroms-0ubuntu6.6"}]},"type":"USN","cves_ids":["CVE-2012-6075"]}]},{"id":"CVE-2012-5670","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe _bdf_parse_glyphs function in FreeType before 2.4.11 allows\ncontext-dependent attackers to cause a denial of service (out-of-bounds\nwrite and crash) via vectors related to BDF fonts and an ENCODING field\nwith a negative value.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"introduced by\nhttp://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/bdf/bdflib.c?id=03242f58c4bf7226276d8e4e7cb106045319e517\nso only in 2.4.9+"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1686-1","https://www.cve.org/CVERecord?id=CVE-2012-5670"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696691","https://savannah.nongnu.org/bugs/?37907"],"patches":{"freetype":["upstream: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7f2e4f4f553f6836be7683f66226afac3fa979b8"]},"tags":{},"packages":[{"name":"freetype","source":"https://ubuntu.com/security/cve?package=freetype","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freetype","debian":"https://tracker.debian.org/pkg/freetype","statuses":[{"release_codename":"hardy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"2.4.10-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.4.11","component":null,"pocket":"security"}]}],"notices_ids":["USN-1686-1"],"notices":[{"id":"USN-1686-1","title":"FreeType vulnerabilities","summary":"FreeType could be made to crash or run programs as your login if it opened\na specially crafted file.\n","instructions":"After a standard system update you need to restart your session to make all\nthe necessary changes.\n","references":[],"published":"2013-01-14T17:58:00.763481","description":"Mateusz Jurczyk discovered that FreeType did not correctly handle certain\nmalformed BDF font files. If a user were tricked into using a specially\ncrafted font file, a remote attacker could cause FreeType to crash or\npossibly execute arbitrary code with user privileges.\n","is_hidden":false,"release_packages":{"precise":[{"name":"freetype","version":"2.4.8-1ubuntu2.1","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.8-1ubuntu2.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.8-1ubuntu2.1"}],"hardy":[{"name":"freetype","version":"2.3.5-1ubuntu4.8.04.10","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.3.5-1ubuntu4.8.04.10","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.3.5-1ubuntu4.8.04.10"}],"lucid":[{"name":"freetype","version":"2.3.11-1ubuntu2.7","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.3.11-1ubuntu2.7","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.3.11-1ubuntu2.7"}],"quantal":[{"name":"freetype","version":"2.4.10-0ubuntu1.1","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.10-0ubuntu1.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.10-0ubuntu1.1"}],"oneiric":[{"name":"freetype","version":"2.4.4-2ubuntu1.3","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.4-2ubuntu1.3","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.4-2ubuntu1.3"}]},"type":"USN","cves_ids":["CVE-2012-5668","CVE-2012-5669","CVE-2012-5670"]}]},{"id":"CVE-2012-5669","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe _bdf_parse_glyphs function in FreeType before 2.4.11 allows\ncontext-dependent attackers to cause a denial of service (crash) and\npossibly execute arbitrary code via vectors related to BDF fonts and an\nincorrect calculation that triggers an out-of-bounds read.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1686-1","https://www.cve.org/CVERecord?id=CVE-2012-5669"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696691","https://savannah.nongnu.org/bugs/?37906"],"patches":{"freetype":["upstream: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=07bdb6e289c7954e2a533039dc93c1c136099d2d"]},"tags":{},"packages":[{"name":"freetype","source":"https://ubuntu.com/security/cve?package=freetype","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freetype","debian":"https://tracker.debian.org/pkg/freetype","statuses":[{"release_codename":"hardy","status":"released","description":"2.3.5-1ubuntu4.8.04.10","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"2.3.11-1ubuntu2.7","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"2.4.4-2ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"2.4.8-1ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"2.4.10-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.4.11","component":null,"pocket":"security"}]}],"notices_ids":["USN-1686-1"],"notices":[{"id":"USN-1686-1","title":"FreeType vulnerabilities","summary":"FreeType could be made to crash or run programs as your login if it opened\na specially crafted file.\n","instructions":"After a standard system update you need to restart your session to make all\nthe necessary changes.\n","references":[],"published":"2013-01-14T17:58:00.763481","description":"Mateusz Jurczyk discovered that FreeType did not correctly handle certain\nmalformed BDF font files. If a user were tricked into using a specially\ncrafted font file, a remote attacker could cause FreeType to crash or\npossibly execute arbitrary code with user privileges.\n","is_hidden":false,"release_packages":{"precise":[{"name":"freetype","version":"2.4.8-1ubuntu2.1","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.8-1ubuntu2.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.8-1ubuntu2.1"}],"hardy":[{"name":"freetype","version":"2.3.5-1ubuntu4.8.04.10","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.3.5-1ubuntu4.8.04.10","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.3.5-1ubuntu4.8.04.10"}],"lucid":[{"name":"freetype","version":"2.3.11-1ubuntu2.7","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.3.11-1ubuntu2.7","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.3.11-1ubuntu2.7"}],"quantal":[{"name":"freetype","version":"2.4.10-0ubuntu1.1","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.10-0ubuntu1.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.10-0ubuntu1.1"}],"oneiric":[{"name":"freetype","version":"2.4.4-2ubuntu1.3","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.4-2ubuntu1.3","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.4-2ubuntu1.3"}]},"type":"USN","cves_ids":["CVE-2012-5668","CVE-2012-5669","CVE-2012-5670"]}]},{"id":"CVE-2012-5668","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nFreeType before 2.4.11 allows context-dependent attackers to cause a denial\nof service (NULL pointer dereference and crash) via vectors related to BDF\nfonts and the improper handling of an \"allocation error\" in the\nbdf_free_font function.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1686-1","https://www.cve.org/CVERecord?id=CVE-2012-5668"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696691","https://savannah.nongnu.org/bugs/?37905"],"patches":{"freetype":["upstream: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9b6b5754b57c12b820e01305eb69b8863a161e5a"]},"tags":{},"packages":[{"name":"freetype","source":"https://ubuntu.com/security/cve?package=freetype","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=freetype","debian":"https://tracker.debian.org/pkg/freetype","statuses":[{"release_codename":"hardy","status":"released","description":"2.3.5-1ubuntu4.8.04.10","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"2.3.11-1ubuntu2.7","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"2.4.4-2ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"2.4.8-1ubuntu2.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"2.4.10-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.4.11","component":null,"pocket":"security"}]}],"notices_ids":["USN-1686-1"],"notices":[{"id":"USN-1686-1","title":"FreeType vulnerabilities","summary":"FreeType could be made to crash or run programs as your login if it opened\na specially crafted file.\n","instructions":"After a standard system update you need to restart your session to make all\nthe necessary changes.\n","references":[],"published":"2013-01-14T17:58:00.763481","description":"Mateusz Jurczyk discovered that FreeType did not correctly handle certain\nmalformed BDF font files. If a user were tricked into using a specially\ncrafted font file, a remote attacker could cause FreeType to crash or\npossibly execute arbitrary code with user privileges.\n","is_hidden":false,"release_packages":{"precise":[{"name":"freetype","version":"2.4.8-1ubuntu2.1","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.8-1ubuntu2.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.8-1ubuntu2.1"}],"hardy":[{"name":"freetype","version":"2.3.5-1ubuntu4.8.04.10","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.3.5-1ubuntu4.8.04.10","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.3.5-1ubuntu4.8.04.10"}],"lucid":[{"name":"freetype","version":"2.3.11-1ubuntu2.7","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.3.11-1ubuntu2.7","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.3.11-1ubuntu2.7"}],"quantal":[{"name":"freetype","version":"2.4.10-0ubuntu1.1","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.10-0ubuntu1.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.10-0ubuntu1.1"}],"oneiric":[{"name":"freetype","version":"2.4.4-2ubuntu1.3","description":"FreeType 2 is a font engine library","is_source":true},{"name":"libfreetype6","version":"2.4.4-2ubuntu1.3","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/freetype","version_link":"https://launchpad.net/ubuntu/+source/freetype/2.4.4-2ubuntu1.3"}]},"type":"USN","cves_ids":["CVE-2012-5668","CVE-2012-5669","CVE-2012-5670"]}]},{"id":"CVE-2012-3544","published":"2012-12-31T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nApache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly\nhandle chunk extensions in chunked transfer coding, which allows remote\nattackers to cause a denial of service by streaming data.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://mail-archives.apache.org/mod_mbox/tomcat-announce/201305.mbox/%3C518CB1D9.6020808@apache.org%3E","http://tomcat.apache.org/security-6.html","https://ubuntu.com/security/notices/USN-1841-1","https://www.cve.org/CVERecord?id=CVE-2012-3544"],"bugs":[""],"patches":{"tomcat7":["upstream: http://svn.apache.org/viewvc?view=rev&rev=1378702","upstream: http://svn.apache.org/viewvc?view=rev&rev=1378921"],"tomcat6":["upstream: http://svn.apache.org/viewvc?view=revision&revision=1476592"]},"tags":{},"packages":[{"name":"tomcat6","source":"https://ubuntu.com/security/cve?package=tomcat6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tomcat6","debian":"https://tracker.debian.org/pkg/tomcat6","statuses":[{"release_codename":"lucid","status":"released","description":"6.0.24-2ubuntu1.13","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6.0.35-1ubuntu3.3","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6.0.35-5ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"raring","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"6.0.37-1","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"6.0.39-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6.0.37","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"6.0.39-1","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"6.0.39-1","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"6.0.39-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"6.0.39-1","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"tomcat7","source":"https://ubuntu.com/security/cve?package=tomcat7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=tomcat7","debian":"https://tracker.debian.org/pkg/tomcat7","statuses":[{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"7.0.30-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"raring","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"saucy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7.0.30","component":null,"pocket":"security"},{"release_codename":"utopic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"vivid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"wily","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"yakkety","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"zesty","status":"not-affected","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1841-1"],"notices":[{"id":"USN-1841-1","title":"Tomcat vulnerabilities","summary":"Several security issues were fixed in Tomcat.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2013-05-28T17:02:25.467205","description":"It was discovered that Tomcat incorrectly handled certain requests\nsubmitted using chunked transfer encoding. A remote attacker could use this\nflaw to cause the Tomcat server to stop responding, resulting in a denial\nof service. This issue only affected Ubuntu 10.04 LTS and Ubuntu 12.04 LTS.\n(CVE-2012-3544)\n\nIt was discovered that Tomcat incorrectly handled certain authentication\nrequests. A remote attacker could possibly use this flaw to inject a\nrequest that would get executed with a victim's credentials. This issue\nonly affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS, and Ubuntu 12.10.\n(CVE-2013-2067)\n\nIt was discovered that Tomcat sometimes exposed elements of a previous\nrequest to the current request. This could allow a remote attacker to\npossibly obtain sensitive information. This issue only affected Ubuntu\n12.10 and Ubuntu 13.04. (CVE-2013-2071)\n","is_hidden":false,"release_packages":{"precise":[{"name":"tomcat6","version":"6.0.35-1ubuntu3.3","description":"Servlet and JSP engine","is_source":true},{"name":"libtomcat6-java","version":"6.0.35-1ubuntu3.3","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat6","version_link":"https://launchpad.net/ubuntu/+source/tomcat6/6.0.35-1ubuntu3.3"}],"lucid":[{"name":"tomcat6","version":"6.0.24-2ubuntu1.13","description":"Servlet and JSP engine","is_source":true},{"name":"libtomcat6-java","version":"6.0.24-2ubuntu1.13","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat6","version_link":"https://launchpad.net/ubuntu/+source/tomcat6/6.0.24-2ubuntu1.13"}],"quantal":[{"name":"tomcat7","version":"7.0.30-0ubuntu1.2","description":"Servlet and JSP engine","is_source":true},{"name":"libtomcat7-java","version":"7.0.30-0ubuntu1.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.30-0ubuntu1.2"}],"raring":[{"name":"tomcat7","version":"7.0.35-1~exp2ubuntu1.1","description":"Servlet and JSP engine","is_source":true},{"name":"libtomcat7-java","version":"7.0.35-1~exp2ubuntu1.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/tomcat7","version_link":"https://launchpad.net/ubuntu/+source/tomcat7/7.0.35-1~exp2ubuntu1.1"}]},"type":"USN","cves_ids":["CVE-2012-3544","CVE-2013-2067","CVE-2013-2071"]}]}],"offset":68360,"limit":20,"total_results":79316}