{"cves":[{"id":"CVE-2012-5068","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier,\nallows remote attackers to affect confidentiality, integrity, and\navailability via unknown vectors related to Libraries.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5068"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-5067","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect\nconfidentiality via unknown vectors related to Deployment.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-5067"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-4416","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier,\nallows remote attackers to affect confidentiality and integrity via unknown\nvectors related to Hotspot.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.openwall.com/lists/oss-security/2012/09/20","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-4416"],"bugs":[""],"patches":{"sun-java6":[],"openjdk-6":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-3216","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0\nUpdate 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to\naffect confidentiality via unknown vectors related to Libraries.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020556.html","http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2012-October/020571.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-3216"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.10.10, 1.11.5","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"2.1.3, 2.2.3, 2.3.3","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-3197","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated\nusers to affect availability via unknown vectors related to Server\nReplication.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3197"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.27","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3180","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated\nusers to affect availability via unknown vectors related to Server\nOptimizer.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3180"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"5.5.28-0ubuntu0.12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.28","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3177","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated\nusers to affect availability via unknown vectors related to Server.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3177"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.66","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"5.5.28-0ubuntu0.12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.28","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3173","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated\nusers to affect availability via unknown vectors related to InnoDB Plugin.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3173"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.64","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.26","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3167","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated\nusers to affect availability via unknown vectors related to Server Full\nText Search.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL`","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3167"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.64","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.26","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3166","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated\nusers to affect availability via unknown vectors related to InnoDB.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3166"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.26","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3163","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated\nusers to affect confidentiality, integrity, and availability via unknown\nvectors related to Information Schema.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3163"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{"mysql-5.5":["apparmor"],"mysql-5.1":["apparmor"]},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.27","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3160","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect\nconfidentiality via unknown vectors related to Server Installation.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3160"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{"mysql-5.5":["apparmor"],"mysql-5.1":["apparmor"]},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.66","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"5.5.28-0ubuntu0.12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.28","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3159","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier,\nallows remote attackers to affect confidentiality, integrity, and\navailability via unknown vectors related to Deployment, a different\nvulnerability than CVE-2012-1533.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2012verbose-1515981.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-3159"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needed","description":"","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]},{"id":"CVE-2012-3158","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to\naffect confidentiality, integrity, and availability via unknown vectors\nrelated to Protocol.","ubuntu_description":"","notes":[],"codename":null,"priority":"high","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3158"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{"mysql-5.5":["apparmor"],"mysql-5.1":["apparmor"]},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.27","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3156","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.5.25 and earlier allows remote authenticated users to affect availability\nvia unknown vectors related to Server.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3156"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[]},"tags":{},"packages":[{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.26","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3150","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated\nusers to affect availability via unknown vectors related to Server\nOptimizer.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3150"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[],"mysql-5.1":[],"mysql-dfsg-5.1":[]},"tags":{},"packages":[{"name":"mysql-5.1","source":"https://ubuntu.com/security/cve?package=mysql-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.1","debian":"https://tracker.debian.org/pkg/mysql-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"5.1.66-0ubuntu0.11.10.2","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]},{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.27","component":null,"pocket":"security"}]},{"name":"mysql-dfsg-5.1","source":"https://ubuntu.com/security/cve?package=mysql-dfsg-5.1","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-dfsg-5.1","debian":"https://tracker.debian.org/pkg/mysql-dfsg-5.1","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"5.1.66-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.1.65","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3149","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.5.26 and earlier allows remote authenticated users to affect\nconfidentiality, related to MySQL Client.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3149"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[]},"tags":{},"packages":[{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.27","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3147","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.5.26 and earlier allows remote attackers to affect integrity and\navailability, related to MySQL Client.","ubuntu_description":"","notes":[],"codename":null,"priority":"high","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3147"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[]},"tags":{},"packages":[{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.27","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3144","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the MySQL Server component in Oracle MySQL\n5.5.26 and earlier allows remote authenticated users to affect availability\nvia unknown vectors related to Server.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html","http://www.oracle.com/technetwork/topics/security/cpuoct2012verbose-1515934.html#MSQL","https://ubuntu.com/security/notices/USN-1621-1","https://www.cve.org/CVERecord?id=CVE-2012-3144"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690778"],"patches":{"mysql-5.5":[]},"tags":{},"packages":[{"name":"mysql-5.5","source":"https://ubuntu.com/security/cve?package=mysql-5.5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=mysql-5.5","debian":"https://tracker.debian.org/pkg/mysql-5.5","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"5.5.28-0ubuntu0.12.04.2","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"5.5.27-0ubuntu2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.5.27","component":null,"pocket":"security"}]}],"notices_ids":["USN-1621-1"],"notices":[{"id":"USN-1621-1","title":"MySQL vulnerabilities","summary":"Several security issues were fixed in MySQL.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":["https://launchpad.net/bugs/1068158"],"published":"2012-11-05T13:40:55.294967","description":"Multiple security issues were discovered in MySQL and this update includes\nnew upstream MySQL versions to fix these issues.\n\nMySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10.\nUbuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28.\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\n\nhttp://dev.mysql.com/doc/refman/5.1/en/news-5-1-x.html\nhttp://dev.mysql.com/doc/refman/5.5/en/news-5-5-x.html\nhttp://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.04.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.04.2"}],"lucid":[{"name":"mysql-dfsg-5.1","version":"5.1.66-0ubuntu0.10.04.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.10.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-dfsg-5.1/5.1.66-0ubuntu0.10.04.1"}],"quantal":[{"name":"mysql-5.5","version":"5.5.28-0ubuntu0.12.10.1","description":"MySQL database","is_source":true},{"name":"mysql-server-5.5","version":"5.5.28-0ubuntu0.12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.5","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.5/5.5.28-0ubuntu0.12.10.1"}],"oneiric":[{"name":"mysql-5.1","version":"5.1.66-0ubuntu0.11.10.2","description":"MySQL database","is_source":true},{"name":"mysql-server-5.1","version":"5.1.66-0ubuntu0.11.10.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/mysql-5.1","version_link":"https://launchpad.net/ubuntu/+source/mysql-5.1/5.1.66-0ubuntu0.11.10.2"}]},"type":"USN","cves_ids":["CVE-2012-3163","CVE-2012-3158","CVE-2012-3177","CVE-2012-3147","CVE-2012-3166","CVE-2012-3173","CVE-2012-3144","CVE-2012-3150","CVE-2012-3180","CVE-2012-3149","CVE-2012-3156","CVE-2012-3167","CVE-2012-3197","CVE-2012-3160"]}]},{"id":"CVE-2012-3143","published":"2012-10-16T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in the Java Runtime Environment (JRE) component\nin Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, and 5.0\nUpdate 36 and earlier allows remote attackers to affect confidentiality,\nintegrity, and availability, related to JMX, a different vulnerability than\nCVE-2012-5089.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"in lucid+, NetX and the plugin moved to the icedtea-web package"},{"author":"jdstrand","note":"openjdk-6b18 FTBFS on 11.04 (LP: #1043003)\nhttp://rhn.redhat.com/errata/RHSA-2013-1467.html states this is\nOracle JDK only, but based on Oracle advisory we claimed it was fixed in\nhttps://ubuntu.com/security/notices/USN-1619-1."}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html","https://ubuntu.com/security/notices/USN-1619-1","https://www.cve.org/CVERecord?id=CVE-2012-3143"],"bugs":["http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690774"],"patches":{"sun-java6":[],"sun-java5":[],"openjdk-6":[],"openjdk-6b18":[],"icedtea-web":[],"openjdk-7":[]},"tags":{},"packages":[{"name":"icedtea-web","source":"https://ubuntu.com/security/cve?package=icedtea-web","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=icedtea-web","debian":"https://tracker.debian.org/pkg/icedtea-web","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]},{"name":"openjdk-6","source":"https://ubuntu.com/security/cve?package=openjdk-6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6","debian":"https://tracker.debian.org/pkg/openjdk-6","statuses":[{"release_codename":"hardy","status":"released","description":"6b27-1.12.3-0ubuntu1~08.04.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"6b24-1.11.5-0ubuntu1~10.04.2","component":null,"pocket":"security"},{"release_codename":"natty","status":"released","description":"6b24-1.11.5-0ubuntu1~11.04.1","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"6b24-1.11.5-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"6b24-1.11.5-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"6b24-1.11.5-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]},{"name":"openjdk-6b18","source":"https://ubuntu.com/security/cve?package=openjdk-6b18","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-6b18","debian":"https://tracker.debian.org/pkg/openjdk-6b18","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"natty","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]},{"name":"openjdk-7","source":"https://ubuntu.com/security/cve?package=openjdk-7","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openjdk-7","debian":"https://tracker.debian.org/pkg/openjdk-7","statuses":[{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"released","description":"7u9-2.3.3-0ubuntu1~11.10.1","component":null,"pocket":"security"},{"release_codename":"precise","status":"released","description":"7u9-2.3.3-0ubuntu1~12.04.1","component":null,"pocket":"security"},{"release_codename":"quantal","status":"released","description":"7u9-2.3.3-0ubuntu1~12.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"7 update 8","component":null,"pocket":"security"}]},{"name":"sun-java5","source":"https://ubuntu.com/security/cve?package=sun-java5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java5","debian":"https://tracker.debian.org/pkg/sun-java5","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"ignored","description":"end of life","component":null,"pocket":"security"}]},{"name":"sun-java6","source":"https://ubuntu.com/security/cve?package=sun-java6","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=sun-java6","debian":"https://tracker.debian.org/pkg/sun-java6","statuses":[{"release_codename":"hardy","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"lucid","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"natty","status":"DNE","description":"removed from archive","component":null,"pocket":"security"},{"release_codename":"oneiric","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"precise","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"quantal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"6 update 36","component":null,"pocket":"security"}]}],"notices_ids":["USN-1619-1"],"notices":[{"id":"USN-1619-1","title":"OpenJDK vulnerabilities","summary":"Several security issues were fixed in OpenJDK.\n","instructions":"This update uses a new upstream release, which includes additional bug\nfixes. After a standard system update you need to restart any Java\napplications or applets to make all the necessary changes.\n","references":[],"published":"2012-10-26T16:00:24.292492","description":"Several information disclosure vulnerabilities were discovered in the\nOpenJDK JRE. (CVE-2012-3216, CVE-2012-5069, CVE-2012-5072, CVE-2012-5075,\nCVE-2012-5077, CVE-2012-5085)\n\nVulnerabilities were discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. (CVE-2012-4416, CVE-2012-5071)\n\nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. (CVE-2012-1531, CVE-2012-1532, CVE-2012-1533,\nCVE-2012-3143, CVE-2012-3159, CVE-2012-5068, CVE-2012-5083, CVE-2012-5084,\nCVE-2012-5086, CVE-2012-5089)\n\nInformation disclosure vulnerabilities were discovered in the OpenJDK JRE.\nThese issues only affected Ubuntu 12.10. (CVE-2012-5067, CVE-2012-5070)\n\nVulnerabilities were discovered in the OpenJDK JRE related to data\nintegrity. (CVE-2012-5073, CVE-2012-5079)\n \nA vulnerability was discovered in the OpenJDK JRE related to information\ndisclosure and data integrity. This issue only affected Ubuntu 12.10.\n(CVE-2012-5074)\n \nSeveral vulnerabilities were discovered in the OpenJDK JRE related to\ninformation disclosure and data integrity. An attacker could exploit these\nto cause a denial of service. These issues only affected Ubuntu 12.10.\n(CVE-2012-5076, CVE-2012-5087, CVE-2012-5088)\n\nA denial of service vulnerability was found in OpenJDK. (CVE-2012-5081)\n\nPlease see the following for more information:\nhttp://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html\n","is_hidden":false,"release_packages":{"precise":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~12.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~12.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~12.04.1"}],"lucid":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~10.04.2","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~10.04.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~10.04.2"}],"natty":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.04.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.04.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.04.1"}],"oneiric":[{"name":"openjdk-6","version":"6b24-1.11.5-0ubuntu1~11.10.1","description":"Open Source Java implementation","is_source":true},{"name":"icedtea-6-jre-cacao","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"icedtea-6-jre-jamvm","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-headless","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-zero","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"},{"name":"openjdk-6-jre-lib","version":"6b24-1.11.5-0ubuntu1~11.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-6","version_link":"https://launchpad.net/ubuntu/+source/openjdk-6/6b24-1.11.5-0ubuntu1~11.10.1"}],"quantal":[{"name":"openjdk-7","version":"7u9-2.3.3-0ubuntu1~12.10.1","description":"Open Source Java implementation","is_source":true},{"name":"openjdk-7-jre-zero","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-jamvm","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"icedtea-7-jre-cacao","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-lib","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre-headless","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"},{"name":"openjdk-7-jre","version":"7u9-2.3.3-0ubuntu1~12.10.1","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/openjdk-7","version_link":"https://launchpad.net/ubuntu/+source/openjdk-7/7u9-2.3.3-0ubuntu1~12.10.1"}]},"type":"USN","cves_ids":["CVE-2012-1531","CVE-2012-1532","CVE-2012-1533","CVE-2012-3143","CVE-2012-3159","CVE-2012-3216","CVE-2012-4416","CVE-2012-5067","CVE-2012-5068","CVE-2012-5069","CVE-2012-5070","CVE-2012-5071","CVE-2012-5072","CVE-2012-5073","CVE-2012-5074","CVE-2012-5075","CVE-2012-5076","CVE-2012-5077","CVE-2012-5079","CVE-2012-5081","CVE-2012-5083","CVE-2012-5084","CVE-2012-5085","CVE-2012-5086","CVE-2012-5087","CVE-2012-5088","CVE-2012-5089"]}]}],"offset":68700,"limit":20,"total_results":79316}