Merge ~sayun/ubuntu-cve-tracker/+git/UCT:CVE-2023-4508-etal into ubuntu-cve-tracker:master

[Chris]

Update UCT with CVE-2023-4508. Also retiring a lot of other CVEs.

[Steve Beattie (sbeattie)]

Thanks for this, merged. In the future it would be good to break these sorts of things into two distinct commits.

review: Approve

diff --git a/active/CVE-2023-4508 b/active/CVE-2023-4508
index 667cc9f..ef89eb4 100644
--- a/active/CVE-2023-4508
+++ b/active/CVE-2023-4508
@@ -1,7 +1,9 @@
+PublicDateAtUSN: 2023-08-24 23:15:00 UTC
 Candidate: CVE-2023-4508
 PublicDate: 2023-08-24 23:15:00 UTC
 References:
  https://www.cve.org/CVERecord?id=CVE-2023-4508
+ https://ubuntu.com/security/notices/USN-6760-1
 Description:
  A user able to control file input to Gerbv, between versions 2.4.0 and
  2.10.0, can cause a crash and cause denial-of-service with a specially
@@ -25,15 +27,15 @@ Patches_gerbv:
 upstream_gerbv: released (2.10.0)
 trusty_gerbv: ignored (end of standard support)
 xenial_gerbv: ignored (end of standard support)
-esm-apps/xenial_gerbv: needed
+esm-apps/xenial_gerbv: released (2.6.0-1ubuntu0.16.04.1~esm2)
 bionic_gerbv: ignored (end of standard support)
-esm-apps/bionic_gerbv: needed
-focal_gerbv: needed
-esm-apps/focal_gerbv: needed
+esm-apps/bionic_gerbv: released (2.6.1-3ubuntu0.1~esm2)
+focal_gerbv: released (2.7.0-1ubuntu0.2)
+esm-apps/focal_gerbv: not-affected (2.7.0-1ubuntu0.2)
 jammy_gerbv: needed
-esm-apps/jammy_gerbv: needed
+esm-apps/jammy_gerbv: released (2.8.2-1ubuntu0.1~esm2)
 lunar_gerbv: ignored (end of life, was needed)
-mantic_gerbv: needed
+mantic_gerbv: released (2.9.8-1ubuntu0.1)
 noble_gerbv: not-affected (2.10.0-1)
 esm-apps/noble_gerbv: not-affected (2.10.0-1)
 devel_gerbv: not-affected (2.10.0-1)
diff --git a/active/CVE-2023-45285 b/active/CVE-2023-45285
deleted file mode 100644
index 7ec2966..0000000
--- a/active/CVE-2023-45285
+++ /dev/null
@@ -1,61 +0,0 @@
-PublicDateAtUSN: 2023-12-06
-Candidate: CVE-2023-45285
-PublicDate: 2023-12-06 17:15:00 UTC
-References:
- https://go.dev/issue/63845
- https://github.com/golang/go/commit/23c943e5296c6fa3a6f9433bd929306c4dbf2aa3 (go1.21.5)
- https://github.com/golang/go/commit/46bc33819ac86a9596b8059235842f0e0c7469bd (go1.20.12)
- https://ubuntu.com/security/notices/USN-6574-1
- https://www.cve.org/CVERecord?id=CVE-2023-45285
-Description:
- Using go get to fetch a module with the ".git" suffix may unexpectedly
- fallback to the insecure "git://" protocol if the module is unavailable via
- the secure "https://" and "git+ssh://" protocols, even if GOINSECURE is not
- set for said module. This only affects users who are not using the module
- proxy and are fetching modules directly (i.e. GOPROXY=off).
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [7.5 HIGH]
-
-Patches_golang-1.19:
-upstream_golang-1.19: needs-triage
-trusty_golang-1.19: ignored (end of standard support)
-xenial_golang-1.19: ignored (end of standard support)
-bionic_golang-1.19: ignored (end of standard support)
-focal_golang-1.19: DNE
-jammy_golang-1.19: DNE
-lunar_golang-1.19: ignored (end of life, was needs-triage)
-mantic_golang-1.19: DNE
-noble_golang-1.19: DNE
-devel_golang-1.19: DNE
-
-Patches_golang-1.20:
-upstream_golang-1.20: released (1.20.12-1)
-trusty_golang-1.20: ignored (end of standard support)
-xenial_golang-1.20: ignored (end of standard support)
-bionic_golang-1.20: ignored (end of standard support)
-focal_golang-1.20: released (1.20.3-1ubuntu0.1~20.04.1)
-jammy_golang-1.20: released (1.20.3-1ubuntu0.1~22.04.1)
-lunar_golang-1.20: released (1.20.3-1ubuntu0.2)
-mantic_golang-1.20: released (1.20.8-1ubuntu0.23.10.1)
-noble_golang-1.20: DNE
-devel_golang-1.20: DNE
-
-Patches_golang-1.21:
-upstream_golang-1.21: released (1.21.5-1)
-trusty_golang-1.21: ignored (end of standard support)
-xenial_golang-1.21: ignored (end of standard support)
-bionic_golang-1.21: ignored (end of standard support)
-focal_golang-1.21: released (1.21.1-1~ubuntu20.04.2)
-jammy_golang-1.21: released (1.21.1-1~ubuntu22.04.2)
-lunar_golang-1.21: released (1.21.1-1~ubuntu23.04.2)
-mantic_golang-1.21: released (1.21.1-1ubuntu0.23.10.1)
-noble_golang-1.21: not-affected (1.21.5-1)
-esm-apps/noble_golang-1.21: not-affected (1.21.5-1)
-devel_golang-1.21: not-affected (1.21.5-1)
diff --git a/active/CVE-2023-46049 b/active/CVE-2023-46049
deleted file mode 100644
index 4194be4..0000000
--- a/active/CVE-2023-46049
+++ /dev/null
@@ -1,161 +0,0 @@
-Candidate: CVE-2023-46049
-PublicDate: 2024-03-27 06:15:00 UTC
-References:
- https://github.com/llvm/llvm-project/issues/67388
- http://seclists.org/fulldisclosure/2024/Jan/66
- https://llvm.org/docs/Security.html
- https://www.cve.org/CVERecord?id=CVE-2023-46049
-Description:
- LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata()
- function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to
- llvm-lto. NOTE: this is disputed because the relationship between
- pdflatex.fmt and any LLVM language front end is not explained, and because
- a crash of the llvm-lto application should be categorized as a usability
- problem.
-Ubuntu-Description:
-Notes:
- mdeslaur> Marking as not-affected as the CVE was disputed
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_llvm-toolchain-3.5:
-upstream_llvm-toolchain-3.5: needs-triage
-esm-apps/xenial_llvm-toolchain-3.5: not-affected
-focal_llvm-toolchain-3.5: DNE
-jammy_llvm-toolchain-3.5: DNE
-mantic_llvm-toolchain-3.5: DNE
-noble_llvm-toolchain-3.5: DNE
-devel_llvm-toolchain-3.5: DNE
-
-Patches_llvm-toolchain-3.6:
-upstream_llvm-toolchain-3.6: needs-triage
-trusty/esm_llvm-toolchain-3.6: not-affected
-esm-infra/xenial_llvm-toolchain-3.6: not-affected
-focal_llvm-toolchain-3.6: DNE
-jammy_llvm-toolchain-3.6: DNE
-mantic_llvm-toolchain-3.6: DNE
-noble_llvm-toolchain-3.6: DNE
-devel_llvm-toolchain-3.6: DNE
-
-Patches_llvm-toolchain-3.7:
-upstream_llvm-toolchain-3.7: needs-triage
-esm-apps/xenial_llvm-toolchain-3.7: not-affected
-esm-apps/bionic_llvm-toolchain-3.7: not-affected
-focal_llvm-toolchain-3.7: DNE
-jammy_llvm-toolchain-3.7: DNE
-mantic_llvm-toolchain-3.7: DNE
-noble_llvm-toolchain-3.7: DNE
-devel_llvm-toolchain-3.7: DNE
-
-Patches_llvm-toolchain-3.8:
-upstream_llvm-toolchain-3.8: needs-triage
-trusty/esm_llvm-toolchain-3.8: not-affected
-esm-infra/xenial_llvm-toolchain-3.8: not-affected
-focal_llvm-toolchain-3.8: DNE
-jammy_llvm-toolchain-3.8: DNE
-mantic_llvm-toolchain-3.8: DNE
-noble_llvm-toolchain-3.8: DNE
-devel_llvm-toolchain-3.8: DNE
-
-Patches_llvm-toolchain-3.9:
-upstream_llvm-toolchain-3.9: needs-triage
-trusty/esm_llvm-toolchain-3.9: not-affected
-esm-apps/xenial_llvm-toolchain-3.9: not-affected
-esm-infra/bionic_llvm-toolchain-3.9: not-affected
-focal_llvm-toolchain-3.9: DNE
-jammy_llvm-toolchain-3.9: DNE
-mantic_llvm-toolchain-3.9: DNE
-noble_llvm-toolchain-3.9: DNE
-devel_llvm-toolchain-3.9: DNE
-
-Patches_llvm-toolchain-4.0:
-upstream_llvm-toolchain-4.0: needs-triage
-esm-infra/xenial_llvm-toolchain-4.0: not-affected
-esm-apps/bionic_llvm-toolchain-4.0: not-affected
-focal_llvm-toolchain-4.0: DNE
-jammy_llvm-toolchain-4.0: DNE
-mantic_llvm-toolchain-4.0: DNE
-noble_llvm-toolchain-4.0: DNE
-devel_llvm-toolchain-4.0: DNE
-
-Patches_llvm-toolchain-5.0:
-upstream_llvm-toolchain-5.0: needs-triage
-esm-infra/xenial_llvm-toolchain-5.0: not-affected
-esm-apps/bionic_llvm-toolchain-5.0: not-affected
-focal_llvm-toolchain-5.0: DNE
-jammy_llvm-toolchain-5.0: DNE
-mantic_llvm-toolchain-5.0: DNE
-noble_llvm-toolchain-5.0: DNE
-devel_llvm-toolchain-5.0: DNE
-
-Patches_llvm-toolchain-6.0:
-upstream_llvm-toolchain-6.0: needs-triage
-esm-infra/xenial_llvm-toolchain-6.0: not-affected
-esm-infra/bionic_llvm-toolchain-6.0: not-affected
-focal_llvm-toolchain-6.0: not-affected
-esm-apps/focal_llvm-toolchain-6.0: not-affected
-jammy_llvm-toolchain-6.0: DNE
-mantic_llvm-toolchain-6.0: DNE
-noble_llvm-toolchain-6.0: DNE
-devel_llvm-toolchain-6.0: DNE
-
-Patches_llvm-toolchain-7:
-upstream_llvm-toolchain-7: needs-triage
-esm-infra/bionic_llvm-toolchain-7: not-affected
-focal_llvm-toolchain-7: not-affected
-esm-apps/focal_llvm-toolchain-7: not-affected
-jammy_llvm-toolchain-7: DNE
-mantic_llvm-toolchain-7: DNE
-noble_llvm-toolchain-7: DNE
-devel_llvm-toolchain-7: DNE
-
-Patches_llvm-toolchain-8:
-upstream_llvm-toolchain-8: needs-triage
-esm-apps/xenial_llvm-toolchain-8: not-affected
-esm-infra/bionic_llvm-toolchain-8: not-affected
-focal_llvm-toolchain-8: not-affected
-esm-apps/focal_llvm-toolchain-8: not-affected
-jammy_llvm-toolchain-8: DNE
-mantic_llvm-toolchain-8: DNE
-noble_llvm-toolchain-8: DNE
-devel_llvm-toolchain-8: DNE
-
-Patches_llvm-toolchain-9:
-upstream_llvm-toolchain-9: needs-triage
-esm-infra/bionic_llvm-toolchain-9: not-affected
-focal_llvm-toolchain-9: not-affected
-jammy_llvm-toolchain-9: DNE
-mantic_llvm-toolchain-9: DNE
-noble_llvm-toolchain-9: DNE
-devel_llvm-toolchain-9: DNE
-
-Patches_llvm-toolchain-10:
-upstream_llvm-toolchain-10: not-affected
-esm-infra/bionic_llvm-toolchain-10: not-affected
-focal_llvm-toolchain-10: not-affected
-jammy_llvm-toolchain-10: DNE
-mantic_llvm-toolchain-10: DNE
-noble_llvm-toolchain-10: DNE
-devel_llvm-toolchain-10: DNE
-
-Patches_llvm-toolchain-11:
-upstream_llvm-toolchain-11: needs-triage
-focal_llvm-toolchain-11: not-affected
-jammy_llvm-toolchain-11: not-affected
-esm-apps/jammy_llvm-toolchain-11: not-affected
-mantic_llvm-toolchain-11: DNE
-noble_llvm-toolchain-11: DNE
-devel_llvm-toolchain-11: DNE
-
-Patches_llvm-toolchain-12:
-upstream_llvm-toolchain-12: needs-triage
-focal_llvm-toolchain-12: not-affected
-jammy_llvm-toolchain-12: not-affected
-esm-apps/jammy_llvm-toolchain-12: not-affected
-mantic_llvm-toolchain-12: DNE
-noble_llvm-toolchain-12: DNE
-devel_llvm-toolchain-12: DNE
diff --git a/active/CVE-2023-46219 b/active/CVE-2023-46219
deleted file mode 100644
index a07858d..0000000
--- a/active/CVE-2023-46219
+++ /dev/null
@@ -1,39 +0,0 @@
-PublicDateAtUSN: 2023-12-06 07:00:00 UTC
-Candidate: CVE-2023-46219
-PublicDate: 2023-12-12 02:15:00 UTC
-CRD: 2023-12-06 07:00:00 UTC
-References:
- https://curl.se/docs/CVE-2023-46219.html
- https://ubuntu.com/security/notices/USN-6535-1
- https://www.cve.org/CVERecord?id=CVE-2023-46219
-Description:
- When saving HSTS data to an excessively long file name, curl could end up
- removing all contents, making subsequent requests using that file unaware
- of the HSTS status they should otherwise use.
-Ubuntu-Description:
-Notes:
- mdeslaur> introduced in 7.84.0
-Mitigation:
-Bugs:
-Priority: low
- Upstream determined this is a low-priority issue
-Discovered-by: Maksymilian Arciemowicz
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N [5.3 MEDIUM]
-
-Patches_curl:
- upstream: https://github.com/curl/curl/commit/73b65e94f3531179de45
-upstream_curl: released (8.5.0)
-trusty_curl: ignored (end of standard support)
-trusty/esm_curl: not-affected
-xenial_curl: ignored (end of standard support)
-esm-infra/xenial_curl: not-affected
-bionic_curl: ignored (end of standard support)
-esm-infra/bionic_curl: not-affected
-focal_curl: not-affected (7.68.0-1ubuntu2.20)
-jammy_curl: not-affected (7.81.0-1ubuntu1.14)
-lunar_curl: released (7.88.1-8ubuntu2.4)
-mantic_curl: released (8.2.1-1ubuntu3.2)
-noble_curl: released (8.5.0-2ubuntu1)
-devel_curl: released (8.5.0-2ubuntu1)
diff --git a/active/CVE-2023-46246 b/active/CVE-2023-46246
deleted file mode 100644
index ce5eb4d..0000000
--- a/active/CVE-2023-46246
+++ /dev/null
@@ -1,43 +0,0 @@
-PublicDateAtUSN: 2023-10-27 19:15:00 UTC
-Candidate: CVE-2023-46246
-PublicDate: 2023-10-27 19:15:00 UTC
-References:
- https://github.com/vim/vim/security/advisories/GHSA-q22m-h7m2-9mgm
- https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a (v9.0.2068)
- https://github.com/vim/vim/commit/9198c1f2b1ddecde22af918541e0de2a32f0f45a
- https://ubuntu.com/security/notices/USN-6557-1
- https://www.cve.org/CVERecord?id=CVE-2023-46246
-Description:
- Vim is an improved version of the good old UNIX editor Vi.
- Heap-use-after-free in memory allocated in the function `ga_grow_inner` in
- in the file `src/alloc.c` at line 748, which is freed in the file
- `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used
- again in `src/cmdhist.c` at line 759. When using the `:history` command,
- it's possible that the provided argument overflows the accepted value.
- Causing an Integer Overflow and potentially later an use-after-free. This
- vulnerability has been patched in version 9.0.2068.
- 
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to: fabian
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H [5.5 MEDIUM]
-
-Patches_vim:
-upstream_vim: needs-triage
-trusty_vim: ignored (end of standard support)
-trusty/esm_vim: released (2:7.4.052-1ubuntu3.1+esm15)
-xenial_vim: ignored (end of standard support)
-esm-infra/xenial_vim: released (2:7.4.1689-3ubuntu1.5+esm22)
-bionic_vim: ignored (end of standard support)
-esm-infra/bionic_vim: released (2:8.0.1453-1ubuntu1.13+esm7)
-focal_vim: released (2:8.1.2269-1ubuntu5.21)
-jammy_vim: released (2:8.2.3995-1ubuntu2.15)
-lunar_vim: released (2:9.0.1000-4ubuntu3.3)
-mantic_vim: released (2:9.0.1672-1ubuntu2.2)
-noble_vim: not-affected (2:9.1.0-1ubuntu1)
-devel_vim: not-affected (2:9.1.0-1ubuntu1)
diff --git a/active/CVE-2023-4641 b/active/CVE-2023-4641
deleted file mode 100644
index 0abd3ae..0000000
--- a/active/CVE-2023-4641
+++ /dev/null
@@ -1,41 +0,0 @@
-PublicDateAtUSN: 2023-12-27 16:15:00 UTC
-Candidate: CVE-2023-4641
-PublicDate: 2023-12-27 16:15:00 UTC
-References:
- https://ubuntu.com/security/notices/USN-6640-1
- https://www.cve.org/CVERecord?id=CVE-2023-4641
-Description:
- A flaw was found in shadow-utils. When asking for a new password,
- shadow-utils asks the password twice. If the password fails on the second
- attempt, shadow-utils fails in cleaning the buffer used to store the first
- entry. This may allow an attacker with enough access to retrieve the
- password from the memory.
-Ubuntu-Description:
-Notes:
- alexmurray> Technically this doesn't seem able to be exploitable in practice
-Mitigation:
-Bugs:
- https://bugzilla.redhat.com/show_bug.cgi?id=2215945
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051062
-Priority: low
- Unlikely attack scenario
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N [5.5 MEDIUM]
-
-Patches_shadow:
- upstream: https://github.com/shadow-maint/shadow/commit/65c88a43a23c2391dcc90c0abda3e839e9c57904
-upstream_shadow: released (1:4.13+dfsg1-2, 4.14.0)
-trusty_shadow: ignored (end of standard support)
-trusty/esm_shadow: released (1:4.1.5.1-1ubuntu9.5+esm4)
-xenial_shadow: ignored (end of standard support)
-esm-infra/xenial_shadow: released (1:4.2-3.1ubuntu5.5+esm4)
-bionic_shadow: ignored (end of standard support)
-esm-infra/bionic_shadow: released (1:4.5-1ubuntu2.5+esm1)
-focal_shadow: released (1:4.8.1-1ubuntu5.20.04.5)
-jammy_shadow: released (1:4.8.1-2ubuntu2.2)
-lunar_shadow: ignored (end of life, was needed)
-mantic_shadow: released (1:4.13+dfsg1-1ubuntu1.1)
-noble_shadow: not-affected (1:4.13+dfsg1-3ubuntu1)
-devel_shadow: not-affected (1:4.13+dfsg1-3ubuntu1)
diff --git a/active/CVE-2023-46751 b/active/CVE-2023-46751
deleted file mode 100644
index 86fee21..0000000
--- a/active/CVE-2023-46751
+++ /dev/null
@@ -1,38 +0,0 @@
-PublicDateAtUSN: 2023-12-07
-Candidate: CVE-2023-46751
-PublicDate: 2023-12-06 20:15:00 UTC
-References:
- https://ubuntu.com/security/notices/USN-6551-1
- https://www.cve.org/CVERecord?id=CVE-2023-46751
-Description:
- An issue was discovered in the function gdev_prn_open_printer_seekable() in
- Artifex Ghostscript through 10.02.0 allows remote attackers to crash the
- application via a dangling pointer.
-Ubuntu-Description:
-Notes:
- mdeslaur> introduced by:
- mdeslaur> https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e1a3956f252404f07d93be47f7845b23e4a2c4de
-Mitigation:
-Bugs:
- https://bugs.ghostscript.com/show_bug.cgi?id=707264 (restricted)
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]
-
-Patches_ghostscript:
- upstream: https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=dcdbc595c13c9d11d235702dff46bb74c80f7698
- upstream: https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=5d2da96e81c7455338302c71a291088a8396245a (10.02.1)
-upstream_ghostscript: released (10.02.1~dfsg-1)
-trusty_ghostscript: ignored (end of standard support)
-xenial_ghostscript: ignored (end of standard support)
-esm-infra/xenial_ghostscript: not-affected
-bionic_ghostscript: ignored (end of standard support)
-esm-infra/bionic_ghostscript: not-affected
-focal_ghostscript: not-affected (9.50~dfsg-5ubuntu4.11)
-jammy_ghostscript: released (9.55.0~dfsg1-0ubuntu5.6)
-lunar_ghostscript: released (10.0.0~dfsg1-0ubuntu1.5)
-mantic_ghostscript: released (10.01.2~dfsg1-0ubuntu2.2)
-noble_ghostscript: released (10.02.1~dfsg1-0ubuntu1)
-devel_ghostscript: released (10.02.1~dfsg1-0ubuntu1)
diff --git a/active/CVE-2023-47470 b/active/CVE-2023-47470
deleted file mode 100644
index d2e2b5f..0000000
--- a/active/CVE-2023-47470
+++ /dev/null
@@ -1,39 +0,0 @@
-Candidate: CVE-2023-47470
-PublicDate: 2023-11-16 03:15:00 UTC
-References:
- https://patchwork.ffmpeg.org/project/ffmpeg/patch/20230915131147.5945-2-michael%40niedermayer.cc/
- https://github.com/goldds96/Report/tree/main/FFmpeg
- https://github.com/FFmpeg/FFmpeg/commit/4565747056a11356210ed8edcecb920105e40b60
- https://www.cve.org/CVERecord?id=CVE-2023-47470
-Description:
- Buffer Overflow vulnerability in Ffmpeg before github commit
- 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to
- achieve an out-of-array write, execute arbitrary code, and cause a denial
- of service (DoS) via the ref_pic_list_struct function in
- libavcodec/evc_ps.c
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [7.8 HIGH]
-
-Patches_ffmpeg:
-upstream_ffmpeg: not-affected (debian: Vulnerable code not in any Debian released version)
-trusty_ffmpeg: ignored (end of standard support)
-xenial_ffmpeg: ignored (end of standard support)
-esm-apps/xenial_ffmpeg: not-affected (code not present)
-bionic_ffmpeg: ignored (end of standard support)
-esm-apps/bionic_ffmpeg: not-affected (code not present)
-focal_ffmpeg: not-affected (code not present)
-esm-apps/focal_ffmpeg: not-affected (code not present)
-jammy_ffmpeg: not-affected (code not present)
-esm-apps/jammy_ffmpeg: not-affected (code not present)
-lunar_ffmpeg: not-affected (code not present)
-mantic_ffmpeg: not-affected (code not present)
-noble_ffmpeg: not-affected (7:6.1-3ubuntu1)
-esm-apps/noble_ffmpeg: not-affected (7:6.1-3ubuntu1)
-devel_ffmpeg: not-affected (7:6.1-3ubuntu1)
diff --git a/active/CVE-2023-47471 b/active/CVE-2023-47471
deleted file mode 100644
index 7bfe0ec..0000000
--- a/active/CVE-2023-47471
+++ /dev/null
@@ -1,37 +0,0 @@
-PublicDateAtUSN: 2023-11-16 04:15:00 UTC
-Candidate: CVE-2023-47471
-PublicDate: 2023-11-16 04:15:00 UTC
-References:
- https://github.com/strukturag/libde265/issues/426
- https://github.com/strukturag/libde265/commit/e36b4a1b0bafa53df47514c419d5be3e8916ebc7
- https://ubuntu.com/security/notices/USN-6677-1
- https://www.cve.org/CVERecord?id=CVE-2023-47471
-Description:
- Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a
- local attacker to cause a denial of service via the slice_segment_header
- function in the slice.cc component.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to: fabian
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [6.5 MEDIUM]
-
-Patches_libde265:
-upstream_libde265: needs-triage
-trusty_libde265: ignored (end of standard support)
-xenial_libde265: ignored (end of standard support)
-esm-apps/xenial_libde265: released (1.0.2-2ubuntu0.16.04.1~esm4)
-bionic_libde265: ignored (end of standard support)
-esm-apps/bionic_libde265: released (1.0.2-2ubuntu0.18.04.1~esm4)
-focal_libde265: released (1.0.4-1ubuntu0.4)
-esm-apps/focal_libde265: not-affected (1.0.4-1ubuntu0.4)
-jammy_libde265: released (1.0.8-1ubuntu0.3)
-esm-apps/jammy_libde265: not-affected (1.0.8-1ubuntu0.3)
-lunar_libde265: ignored (end of life, was needs-triage)
-mantic_libde265: released (1.0.12-2ubuntu0.1)
-noble_libde265: not-affected
-devel_libde265: not-affected
diff --git a/active/CVE-2023-48426 b/active/CVE-2023-48426
deleted file mode 100644
index aac98e3..0000000
--- a/active/CVE-2023-48426
+++ /dev/null
@@ -1,38 +0,0 @@
-Candidate: CVE-2023-48426
-PublicDate: 2024-04-05 16:15:00 UTC
-References:
- https://source.android.com/docs/security/bulletin/chromecast/2023-12-01
- https://www.cve.org/CVERecord?id=CVE-2023-48426
-Description:
- u-boot bug that allows for u-boot shell and interrupt over UART
- 
-Ubuntu-Description:
-Notes:
- mdeslaur> This is a chromecast issue, likely doesn't affected u-boot in
- mdeslaur> Ubuntu. Marking as not-affected.
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_u-boot:
-upstream_u-boot: needs-triage
-esm-infra/xenial_u-boot: not-affected
-esm-infra/bionic_u-boot: not-affected
-focal_u-boot: not-affected
-jammy_u-boot: not-affected
-mantic_u-boot: not-affected
-noble_u-boot: not-affected
-devel_u-boot: not-affected
-
-Patches_u-boot-nezha:
-upstream_u-boot-nezha: needs-triage
-focal_u-boot-nezha: DNE
-jammy_u-boot-nezha: not-affected
-esm-apps/jammy_u-boot-nezha: not-affected
-mantic_u-boot-nezha: not-affected
-noble_u-boot-nezha: not-affected
-esm-apps/noble_u-boot-nezha: not-affected
-devel_u-boot-nezha: not-affected
diff --git a/active/CVE-2023-4863 b/active/CVE-2023-4863
deleted file mode 100644
index b0d0d4d..0000000
--- a/active/CVE-2023-4863
+++ /dev/null
@@ -1,97 +0,0 @@
-PublicDateAtUSN: 2023-09-12 15:15:00 UTC
-Candidate: CVE-2023-4863
-PublicDate: 2023-09-12 15:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html
- https://chromium.googlesource.com/webm/libwebp.git/+/902bc9190331343b2017211debcec8d2ab87e17a
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/
- https://ubuntu.com/security/notices/USN-6367-1
- https://ubuntu.com/security/notices/USN-6368-1
- https://ubuntu.com/security/notices/USN-6369-1
- https://blog.isosceles.com/the-webp-0day/
- https://ubuntu.com/security/notices/USN-6369-2
- https://www.cve.org/CVERecord?id=CVE-2023-4863
-Description:
- Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187
- and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds
- memory write via a crafted HTML page. (Chromium security severity:
- Critical)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
- rodrigo-zaiden> in libwebp source, it seems like the affected versions
-  starts from 0.5.0, with a high probability that the commit f75dfbf2 is
-  the one adding the issue. I can be wrong in my assumption but, at least,
-  the reproducer available in the the-webp-0day blog post, reproduces in
-  0.5.0 but not in 0.4.4, and the buffer huffman_tables was added in the
-  mentioned commit.
- rodrigo-zaiden> in Ubuntu, libwebp versions earlier than 0.5.0 does not
-  contain the affected code, hence are probably not affected.
-Mitigation:
-Bugs:
- https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/2035220
- https://bugs.chromium.org/p/chromium/issues/detail?id=1479274
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-lunar_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
-
-Patches_libwebp:
- upstream: https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a (main)
- upstream: https://github.com/webmproject/libwebp/commit/8bacd63a6de1cc091f85a1692390401e7bbf55ac (1.2.4)
- upstream: https://github.com/webmproject/libwebp/commit/801d2be12dba966233c21f850490203eb1acf014 (1.2.2)
-upstream_libwebp: needs-triage
-trusty_libwebp: ignored (end of standard support)
-trusty/esm_libwebp: not-affected (code not present)
-xenial_libwebp: ignored (end of standard support)
-esm-infra/xenial_libwebp: not-affected (code not present)
-bionic_libwebp: ignored (end of standard support)
-esm-infra/bionic_libwebp: released (0.6.1-2ubuntu0.18.04.2+esm1)
-focal_libwebp: released (0.6.1-2ubuntu0.20.04.3)
-jammy_libwebp: released (1.2.2-2ubuntu0.22.04.2)
-lunar_libwebp: released (1.2.4-0.1ubuntu0.23.04.2)
-mantic_libwebp: released (1.2.4-0.2ubuntu1)
-noble_libwebp: released (1.2.4-0.2ubuntu1)
-devel_libwebp: released (1.2.4-0.2ubuntu1)
-
-Patches_firefox:
-upstream_firefox: released (117.0.1)
-trusty_firefox: ignored (end of standard support)
-xenial_firefox: ignored (end of standard support)
-bionic_firefox: ignored (end of standard support)
-focal_firefox: released (117.0.1+build2-0ubuntu0.20.04.1)
-jammy_firefox: not-affected (code not present)
-lunar_firefox: not-affected (code not present)
-mantic_firefox: not-affected (code not present)
-noble_firefox: not-affected (code not present)
-devel_firefox: not-affected (code not present)
-
-Patches_thunderbird:
-upstream_thunderbird: released (115.2.2)
-trusty_thunderbird: ignored (end of standard support)
-xenial_thunderbird: ignored (end of standard support)
-bionic_thunderbird: ignored (end of standard support)
-focal_thunderbird: released (1:102.15.1+build1-0ubuntu0.20.04.1)
-jammy_thunderbird: released (1:102.15.1+build1-0ubuntu0.22.04.1)
-lunar_thunderbird: released (1:102.15.1+build1-0ubuntu0.23.04.1)
-mantic_thunderbird: released (1:115.2.3+build1-0ubuntu1)
-noble_thunderbird: released (1:115.2.3+build1-0ubuntu1)
-devel_thunderbird: released (1:115.2.3+build1-0ubuntu1)
-
diff --git a/active/CVE-2023-48706 b/active/CVE-2023-48706
deleted file mode 100644
index 2c45f27..0000000
--- a/active/CVE-2023-48706
+++ /dev/null
@@ -1,45 +0,0 @@
-PublicDateAtUSN: 2023-11-22 22:15:00 UTC
-Candidate: CVE-2023-48706
-PublicDate: 2023-11-22 22:15:00 UTC
-References:
- https://github.com/vim/vim/security/advisories/GHSA-c8qm-x72m-q53q
- https://github.com/vim/vim/pull/13552
- https://github.com/gandalf4a/crash_report/blob/main/vim/vim_huaf
- http://www.openwall.com/lists/oss-security/2023/11/22/3
- https://ubuntu.com/security/notices/USN-6557-1
- https://www.cve.org/CVERecord?id=CVE-2023-48706
-Description:
- Vim is a UNIX editor that, prior to version 9.0.2121, has a
- heap-use-after-free vulnerability. When executing a `:s` command for the
- very first time and using a sub-replace-special atom inside the
- substitution part, it is possible that the recursive `:s` call causes
- free-ing of memory which may later then be accessed by the initial `:s`
- command. The user must intentionally execute the payload and the whole
- process is a bit tricky to do since it seems to work only reliably for the
- very first :s command. It may also cause a crash of Vim. Version 9.0.2121
- contains a fix for this issue.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to: fabian
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H [4.7 MEDIUM]
-
-Patches_vim:
- upstream: https://github.com/vim/vim/commit/26c11c56888d01e298cd8044caf860f3c26f57bb
-upstream_vim: released (9.0.2121)
-trusty_vim: ignored (end of standard support)
-trusty/esm_vim: not-affected (code not present)
-xenial_vim: ignored (end of standard support)
-esm-infra/xenial_vim: not-affected (code not present)
-bionic_vim: ignored (end of standard support)
-esm-infra/bionic_vim: not-affected (code not present)
-focal_vim: not-affected (code not present)
-jammy_vim: released (2:8.2.3995-1ubuntu2.15)
-lunar_vim: released (2:9.0.1000-4ubuntu3.3)
-mantic_vim: released (2:9.0.1672-1ubuntu2.2)
-noble_vim: released (2:9.0.2116-1ubuntu2)
-devel_vim: released (2:9.0.2116-1ubuntu2)
diff --git a/active/CVE-2023-4911 b/active/CVE-2023-4911
deleted file mode 100644
index 2079008..0000000
--- a/active/CVE-2023-4911
+++ /dev/null
@@ -1,54 +0,0 @@
-PublicDateAtUSN: 2023-10-03 17:00:00 UTC
-Candidate: CVE-2023-4911
-PublicDate: 2023-10-03 18:15:00 UTC
-CRD: 2023-10-03 17:00:00 UTC
-References:
- https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
- https://ubuntu.com/security/notices/USN-6409-1
- https://www.cve.org/CVERecord?id=CVE-2023-4911
-Description:
- A buffer overflow was discovered in the GNU C Library's dynamic loader
- ld.so while processing the GLIBC_TUNABLES environment variable. This issue
- could allow a local attacker to use maliciously crafted GLIBC_TUNABLES
- environment variables when launching binaries with SUID permission to
- execute code with elevated privileges.
-Ubuntu-Description:
-Notes:
- alexmurray> Upstream advisory states this was introduced in April 2021
-  (glibc 2.34) by commit 2ed18c5b534d9e92fc006202a5af0df6b72e7aca
-Mitigation:
-Bugs:
-Priority: high
- Local privilege escalation in a package that is installed on all Ubuntu
- instances.
-Discovered-by: Qualys
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]
-
-Patches_glibc:
-upstream_glibc: needs-triage
-trusty_glibc: ignored (end of standard support)
-xenial_glibc: ignored (end of standard support)
-esm-infra/xenial_glibc: not-affected (code not present)
-bionic_glibc: ignored (end of standard support)
-esm-infra/bionic_glibc: not-affected (code not present)
-focal_glibc: not-affected (code not present)
-jammy_glibc: released (2.35-0ubuntu3.4)
-lunar_glibc: released (2.37-0ubuntu2.1)
-mantic_glibc: released (2.38-1ubuntu6)
-noble_glibc: released (2.38-1ubuntu6)
-devel_glibc: released (2.38-1ubuntu6)
-
-Patches_eglibc:
-upstream_eglibc: needs-triage
-trusty_eglibc: ignored (end of standard support)
-trusty/esm_eglibc: not-affected (code not present)
-xenial_eglibc: DNE
-bionic_eglibc: DNE
-focal_eglibc: DNE
-jammy_eglibc: DNE
-lunar_eglibc: DNE
-mantic_eglibc: DNE
-noble_eglibc: DNE
-devel_eglibc: DNE
diff --git a/active/CVE-2023-49355 b/active/CVE-2023-49355
deleted file mode 100644
index 324018e..0000000
--- a/active/CVE-2023-49355
+++ /dev/null
@@ -1,39 +0,0 @@
-Candidate: CVE-2023-49355
-PublicDate: 2023-12-11 07:15:00 UTC
-References:
- https://github.com/linzc21/bug-reports/blob/main/reports/jq/1.7-37-g88f01a7/heap-buffer-overflow/CVE-2023-49355.md
- https://github.com/jqlang/jq/tree/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa
- https://github.com/jqlang/jq/blob/88f01a741c8d63c4d1b5bc3ef61520c6eb93edaa/src/decNumber/decNumber.c#L3764
- https://www.cve.org/CVERecord?id=CVE-2023-49355
-Description:
- decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte
- out-of-bounds write via the " []-1.2e-1111111111" input. NOTE: this is not
- the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions
- -10E-1000010001, which is not in normalized scientific notation.
-Ubuntu-Description:
-Notes:
- fabian> Its a duplicate of CVE-2023-50246 according to
-         https://github.com/jqlang/jq/issues/2986.
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]
-
-Patches_jq:
-upstream_jq: released (1.7.1-1)
-trusty_jq: ignored (end of standard support)
-trusty/esm_jq: not-affected (code not present)
-xenial_jq: ignored (end of standard support)
-esm-apps/xenial_jq: not-affected (code not present)
-bionic_jq: ignored (end of standard support)
-esm-apps/bionic_jq: not-affected (code not present)
-focal_jq: not-affected (code not present)
-esm-apps/focal_jq: not-affected (code not present)
-jammy_jq: not-affected (code not present)
-lunar_jq: not-affected (code not present)
-mantic_jq: not-affected (code not present)
-noble_jq: not-affected (1.7.1-2)
-devel_jq: not-affected (1.7.1-2)
diff --git a/active/CVE-2023-49465 b/active/CVE-2023-49465
deleted file mode 100644
index 88c6dd9..0000000
--- a/active/CVE-2023-49465
+++ /dev/null
@@ -1,36 +0,0 @@
-PublicDateAtUSN: 2023-12-07 20:15:00 UTC
-Candidate: CVE-2023-49465
-PublicDate: 2023-12-07 20:15:00 UTC
-References:
- https://github.com/strukturag/libde265/issues/435
- https://ubuntu.com/security/notices/USN-6677-1
- https://www.cve.org/CVERecord?id=CVE-2023-49465
-Description:
- Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow
- vulnerability in the derive_spatial_luma_vector_prediction function at
- motion.cc.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to: fabian
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-Patches_libde265:
-upstream_libde265: needs-triage
-trusty_libde265: ignored (end of standard support)
-xenial_libde265: ignored (end of standard support)
-esm-apps/xenial_libde265: released (1.0.2-2ubuntu0.16.04.1~esm4)
-bionic_libde265: ignored (end of standard support)
-esm-apps/bionic_libde265: released (1.0.2-2ubuntu0.18.04.1~esm4)
-focal_libde265: released (1.0.4-1ubuntu0.4)
-esm-apps/focal_libde265: not-affected (1.0.4-1ubuntu0.4)
-jammy_libde265: released (1.0.8-1ubuntu0.3)
-esm-apps/jammy_libde265: not-affected (1.0.8-1ubuntu0.3)
-lunar_libde265: ignored (end of life, was needs-triage)
-mantic_libde265: released (1.0.12-2ubuntu0.1)
-noble_libde265: not-affected
-devel_libde265: not-affected
diff --git a/active/CVE-2023-49467 b/active/CVE-2023-49467
deleted file mode 100644
index 7f7cb91..0000000
--- a/active/CVE-2023-49467
+++ /dev/null
@@ -1,36 +0,0 @@
-PublicDateAtUSN: 2023-12-07 20:15:00 UTC
-Candidate: CVE-2023-49467
-PublicDate: 2023-12-07 20:15:00 UTC
-References:
- https://github.com/strukturag/libde265/issues/434
- https://ubuntu.com/security/notices/USN-6677-1
- https://www.cve.org/CVERecord?id=CVE-2023-49467
-Description:
- Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow
- vulnerability in the derive_combined_bipredictive_merging_candidates
- function at motion.cc.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to: fabian
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-Patches_libde265:
-upstream_libde265: needs-triage
-trusty_libde265: ignored (end of standard support)
-xenial_libde265: ignored (end of standard support)
-esm-apps/xenial_libde265: released (1.0.2-2ubuntu0.16.04.1~esm4)
-bionic_libde265: ignored (end of standard support)
-esm-apps/bionic_libde265: released (1.0.2-2ubuntu0.18.04.1~esm4)
-focal_libde265: released (1.0.4-1ubuntu0.4)
-esm-apps/focal_libde265: not-affected (1.0.4-1ubuntu0.4)
-jammy_libde265: released (1.0.8-1ubuntu0.3)
-esm-apps/jammy_libde265: not-affected (1.0.8-1ubuntu0.3)
-lunar_libde265: ignored (end of life, was needs-triage)
-mantic_libde265: released (1.0.12-2ubuntu0.1)
-noble_libde265: not-affected
-devel_libde265: not-affected
diff --git a/active/CVE-2023-49468 b/active/CVE-2023-49468
deleted file mode 100644
index 160b32a..0000000
--- a/active/CVE-2023-49468
+++ /dev/null
@@ -1,35 +0,0 @@
-PublicDateAtUSN: 2023-12-07 20:15:00 UTC
-Candidate: CVE-2023-49468
-PublicDate: 2023-12-07 20:15:00 UTC
-References:
- https://github.com/strukturag/libde265/issues/432
- https://ubuntu.com/security/notices/USN-6677-1
- https://www.cve.org/CVERecord?id=CVE-2023-49468
-Description:
- Libde265 v1.0.14 was discovered to contain a global buffer overflow
- vulnerability in the read_coding_unit function at slice.cc.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to: fabian
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-Patches_libde265:
-upstream_libde265: needs-triage
-trusty_libde265: ignored (end of standard support)
-xenial_libde265: ignored (end of standard support)
-esm-apps/xenial_libde265: released (1.0.2-2ubuntu0.16.04.1~esm4)
-bionic_libde265: ignored (end of standard support)
-esm-apps/bionic_libde265: released (1.0.2-2ubuntu0.18.04.1~esm4)
-focal_libde265: released (1.0.4-1ubuntu0.4)
-esm-apps/focal_libde265: not-affected (1.0.4-1ubuntu0.4)
-jammy_libde265: released (1.0.8-1ubuntu0.3)
-esm-apps/jammy_libde265: not-affected (1.0.8-1ubuntu0.3)
-lunar_libde265: ignored (end of life, was needs-triage)
-mantic_libde265: released (1.0.12-2ubuntu0.1)
-noble_libde265: not-affected
-devel_libde265: not-affected
diff --git a/active/CVE-2023-4949 b/active/CVE-2023-4949
deleted file mode 100644
index f811f47..0000000
--- a/active/CVE-2023-4949
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2023-4949
-PublicDate: 2023-11-10 17:15:00 UTC
-References:
- https://xenbits.xenproject.org/xsa/advisory-443.html
- https://www.cve.org/CVERecord?id=CVE-2023-4949
-Description:
- An attacker with local access to a system (either through a disk or
- external drive) can present a modified XFS partition to grub-legacy in such
- a way to exploit a memory corruption in grub’s XFS file system
- implementation.
-Ubuntu-Description:
-Notes:
- eslerm> does not impact secure boot
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H [6.7 MEDIUM]
-
-Patches_grub:
-upstream_grub: needs-triage
-trusty_grub: ignored (end of standard support)
-trusty/esm_grub: not-affected (does not affect Secure Boot)
-xenial_grub: ignored (end of standard support)
-esm-infra/xenial_grub: not-affected (does not affect Secure Boot)
-bionic_grub: ignored (end of standard support)
-focal_grub: DNE
-jammy_grub: DNE
-lunar_grub: DNE
-mantic_grub: DNE
-noble_grub: DNE
-devel_grub: DNE
diff --git a/active/CVE-2023-49721 b/active/CVE-2023-49721
deleted file mode 100644
index d8a4843..0000000
--- a/active/CVE-2023-49721
+++ /dev/null
@@ -1,35 +0,0 @@
-Candidate: CVE-2023-49721
-PublicDate: 2024-02-14 22:15:00 UTC
-CRD: 2024-02-14
-References:
- https://www.openwall.com/lists/oss-security/2024/02/14/4
- https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2040137
- https://www.cve.org/CVERecord?id=CVE-2023-49721
-Description:
- An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD.
- This allows an OS-resident attacker to bypass Secure Boot.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
- https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/2040139
-Priority: medium
-Discovered-by: Mate Kukri
-Assigned-to:
-CVSS:
- ubuntu: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H [6.7 MEDIUM]
-
-Patches_lxd:
-upstream_lxd: needs-triage
-trusty_lxd: ignored (end of standard support)
-xenial_lxd: ignored (end of standard support)
-esm-infra/xenial_lxd: not-affected (code not present)
-bionic_lxd: ignored (end of standard support)
-esm-infra/bionic_lxd: not-affected (code not present)
-focal_lxd: not-affected (code not present)
-esm-apps/focal_lxd: not-affected (code not present)
-jammy_lxd: DNE
-lunar_lxd: DNE
-mantic_lxd: DNE
-noble_lxd: DNE
-devel_lxd: DNE
diff --git a/active/CVE-2023-50246 b/active/CVE-2023-50246
deleted file mode 100644
index 25e4a32..0000000
--- a/active/CVE-2023-50246
+++ /dev/null
@@ -1,35 +0,0 @@
-Candidate: CVE-2023-50246
-PublicDate: 2023-12-13 21:15:00 UTC
-References:
- https://github.com/jqlang/jq/security/advisories/GHSA-686w-5m7m-54vc
- https://github.com/jqlang/jq/commit/71c2ab509a8628dbbad4bc7b3f98a64aa90d3297
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64574
- https://www.cve.org/CVERecord?id=CVE-2023-50246
-Description:
- jq is a command-line JSON processor. Version 1.7 is vulnerable to
- heap-based buffer overflow. Version 1.7.1 contains a patch for this issue.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H [5.5 MEDIUM]
-
-Patches_jq:
-upstream_jq: released (1.7.1-1)
-trusty_jq: ignored (end of standard support)
-trusty/esm_jq: not-affected (code not present)
-xenial_jq: ignored (end of standard support)
-esm-apps/xenial_jq: not-affected (code not present)
-bionic_jq: ignored (end of standard support)
-esm-apps/bionic_jq: not-affected (code not present)
-focal_jq: not-affected (code not present)
-esm-apps/focal_jq: not-affected (code not present)
-jammy_jq: not-affected (code not present)
-lunar_jq: not-affected (code not present)
-mantic_jq: not-affected (code not present)
-noble_jq: not-affected (1.7.1-2)
-devel_jq: not-affected (1.7.1-2)
diff --git a/active/CVE-2023-50268 b/active/CVE-2023-50268
deleted file mode 100644
index 33d3d1f..0000000
--- a/active/CVE-2023-50268
+++ /dev/null
@@ -1,37 +0,0 @@
-Candidate: CVE-2023-50268
-PublicDate: 2023-12-13 21:15:00 UTC
-References:
- https://github.com/jqlang/jq/security/advisories/GHSA-7hmr-442f-qc8j
- https://github.com/jqlang/jq/pull/2804
- https://github.com/jqlang/jq/commit/c9a51565214eece8f1053089739aea73145bfd6b
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64771
- https://www.cve.org/CVERecord?id=CVE-2023-50268
-Description:
- jq is a command-line JSON processor. Version 1.7 is vulnerable to
- stack-based buffer overflow in builds using decNumber. Version 1.7.1
- contains a patch for this issue.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H [5.5 MEDIUM]
-
-Patches_jq:
-upstream_jq: needs-triage
-trusty_jq: ignored (end of standard support)
-trusty/esm_jq: not-affected (code not present)
-xenial_jq: ignored (end of standard support)
-esm-apps/xenial_jq: not-affected (code not present)
-bionic_jq: ignored (end of standard support)
-esm-apps/bionic_jq: not-affected (code not present)
-focal_jq: not-affected (code not present)
-esm-apps/focal_jq: not-affected (code not present)
-jammy_jq: not-affected (code not present)
-lunar_jq: not-affected (code not present)
-mantic_jq: not-affected (code not present)
-noble_jq: released (1.7.1-2)
-devel_jq: released (1.7.1-2)
diff --git a/active/CVE-2023-50292 b/active/CVE-2023-50292
deleted file mode 100644
index 8a92da9..0000000
--- a/active/CVE-2023-50292
+++ /dev/null
@@ -1,47 +0,0 @@
-Candidate: CVE-2023-50292
-PublicDate: 2024-02-09 18:15:00 UTC
-References:
- https://solr.apache.org/security.html#cve-2023-50292-apache-solr-schema-designer-blindly-trusts-all-configsets-possibly-leading-to-rce-by-unauthenticated-users
- https://www.openwall.com/lists/oss-security/2024/02/09/3
- https://www.cve.org/CVERecord?id=CVE-2023-50292
-Description:
- Incorrect Permission Assignment for Critical Resource, Improper Control of
- Dynamically-Managed Code Resources vulnerability in Apache Solr. This issue
- affects Apache Solr: from 8.10.0 through 8.11.2, from 9.0.0 before 9.3.0.
- The Schema Designer was introduced to allow users to more easily configure
- and test new Schemas and configSets. However, when the feature was created,
- the "trust" (authentication) of these configSets was not considered.
- External library loading is only available to configSets that are "trusted"
- (created by authenticated users), thus non-authenticated users are unable
- to perform Remote Code Execution. Since the Schema Designer loaded
- configSets without taking their "trust" into account, configSets that were
- created by unauthenticated users were allowed to load external libraries
- when used in the Schema Designer. Users are recommended to upgrade to
- version 9.3.0, which fixes the issue.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Skay
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [7.5 HIGH]
-
-
-Patches_lucene-solr:
-upstream_lucene-solr: released (3.6.2+dfsg-23)
-trusty_lucene-solr: ignored (end of standard support)
-trusty/esm_lucene-solr: not-affected
-xenial_lucene-solr: ignored (end of standard support)
-esm-apps/xenial_lucene-solr: not-affected
-bionic_lucene-solr: ignored (end of standard support)
-esm-apps/bionic_lucene-solr: not-affected
-focal_lucene-solr: not-affected
-esm-apps/focal_lucene-solr: not-affected
-jammy_lucene-solr: not-affected (3.6.2+dfsg-24)
-esm-apps/jammy_lucene-solr: not-affected
-mantic_lucene-solr: not-affected
-noble_lucene-solr: not-affected
-esm-apps/noble_lucene-solr: not-affected
-devel_lucene-solr: not-affected
diff --git a/active/CVE-2023-50298 b/active/CVE-2023-50298
deleted file mode 100644
index 008dc25..0000000
--- a/active/CVE-2023-50298
+++ /dev/null
@@ -1,48 +0,0 @@
-Candidate: CVE-2023-50298
-PublicDate: 2024-02-09 18:15:00 UTC
-References:
- https://solr.apache.org/security.html#cve-2023-50298-apache-solr-can-expose-zookeeper-credentials-via-streaming-expressions
- https://www.openwall.com/lists/oss-security/2024/02/09/2
- https://www.cve.org/CVERecord?id=CVE-2023-50298
-Description:
- Exposure of Sensitive Information to an Unauthorized Actor vulnerability in
- Apache Solr.This issue affects Apache Solr: from 6.0.0 through 8.11.2, from
- 9.0.0 before 9.4.1. Solr Streaming Expressions allows users to extract data
- from other Solr Clouds, using a "zkHost" parameter. When original SolrCloud
- is setup to use ZooKeeper credentials and ACLs, they will be sent to
- whatever "zkHost" the user provides. An attacker could setup a server to
- mock ZooKeeper, that accepts ZooKeeper requests with credentials and ACLs
- and extracts the sensitive information, then send a streaming expression
- using the mock server's address in "zkHost". Streaming Expressions are
- exposed via the "/streaming" handler, with "read" permissions. Users are
- recommended to upgrade to version 8.11.3 or 9.4.1, which fix the issue.
- From these versions on, only zkHost values that have the same server
- address (regardless of chroot), will use the given ZooKeeper credentials
- and ACLs when connecting.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Qing Xu
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [7.5 HIGH]
-
-
-Patches_lucene-solr:
-upstream_lucene-solr: released (3.6.2+dfsg-23)
-trusty_lucene-solr: ignored (end of standard support)
-trusty/esm_lucene-solr: not-affected
-xenial_lucene-solr: ignored (end of standard support)
-esm-apps/xenial_lucene-solr: not-affected
-bionic_lucene-solr: ignored (end of standard support)
-esm-apps/bionic_lucene-solr: not-affected
-focal_lucene-solr: not-affected
-esm-apps/focal_lucene-solr: not-affected
-jammy_lucene-solr: not-affected (3.6.2+dfsg-24)
-esm-apps/jammy_lucene-solr: not-affected
-mantic_lucene-solr: not-affected
-noble_lucene-solr: not-affected
-esm-apps/noble_lucene-solr: not-affected
-devel_lucene-solr: not-affected
diff --git a/active/CVE-2023-50386 b/active/CVE-2023-50386
deleted file mode 100644
index 0236aec..0000000
--- a/active/CVE-2023-50386
+++ /dev/null
@@ -1,52 +0,0 @@
-Candidate: CVE-2023-50386
-PublicDate: 2024-02-09 18:15:00 UTC
-References:
- https://solr.apache.org/security.html#cve-2023-50386-apache-solr-backuprestore-apis-allow-for-deployment-of-executables-in-malicious-configsets
- https://www.openwall.com/lists/oss-security/2024/02/09/1
- https://www.cve.org/CVERecord?id=CVE-2023-50386
-Description:
- Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload
- of File with Dangerous Type, Inclusion of Functionality from Untrusted
- Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr:
- from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected
- versions, Solr ConfigSets accepted Java jar and class files to be uploaded
- through the ConfigSets API. When backing up Solr Collections, these
- configSet files would be saved to disk when using the
- LocalFileSystemRepository (the default for backups). If the backup was
- saved to a directory that Solr uses in its ClassPath/ClassLoaders, then the
- jar and class files would be available to use with any ConfigSet, trusted
- or untrusted. When Solr is run in a secure way (Authorization enabled), as
- is strongly suggested, this vulnerability is limited to extending the
- Backup permissions with the ability to add libraries. Users are recommended
- to upgrade to version 8.11.3 or 9.4.1, which fix the issue. In these
- versions, the following protections have been added: * Users are no longer
- able to upload files to a configSet that could be executed via a Java
- ClassLoader. * The Backup API restricts saving backups to directories that
- are used in the ClassLoader.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: L3yx
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-
-Patches_lucene-solr:
-upstream_lucene-solr: released (3.6.2+dfsg-23)
-trusty_lucene-solr: ignored (end of standard support)
-trusty/esm_lucene-solr: not-affected
-xenial_lucene-solr: ignored (end of standard support)
-esm-apps/xenial_lucene-solr: not-affected
-bionic_lucene-solr: ignored (end of standard support)
-esm-apps/bionic_lucene-solr: not-affected
-focal_lucene-solr: not-affected
-esm-apps/focal_lucene-solr: not-affected
-jammy_lucene-solr: not-affected (3.6.2+dfsg-24)
-esm-apps/jammy_lucene-solr: not-affected
-mantic_lucene-solr: not-affected
-noble_lucene-solr: not-affected
-esm-apps/noble_lucene-solr: not-affected
-devel_lucene-solr: not-affected
diff --git a/active/CVE-2023-5680 b/active/CVE-2023-5680
deleted file mode 100644
index 269af64..0000000
--- a/active/CVE-2023-5680
+++ /dev/null
@@ -1,52 +0,0 @@
-Candidate: CVE-2023-5680
-PublicDate: 2024-02-13 14:15:00 UTC
-References:
- https://kb.isc.org/docs/cve-2023-5680
- https://www.cve.org/CVERecord?id=CVE-2023-5680
-Description:
- If a resolver cache has a very large number of ECS records stored for the
- same name, the process of cleaning the cache database node for this name
- can significantly impair query performance. This issue affects BIND 9
- versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and
- 9.18.11-S1 through 9.18.21-S1.
-Ubuntu-Description:
-Notes:
- alexmurray> As of isc-dhcp-4.4.3-1, isc-dhcp vendors bind9 libs
- mdeslaur> only affects the Bind Supported Preview Edition
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L [5.3 MEDIUM]
-
-
-Patches_bind9:
-upstream_bind9: needs-triage
-trusty_bind9: ignored (end of standard support, was needs-triage)
-trusty/esm_bind9: not-affected
-xenial_bind9: ignored (end of standard support, was needs-triage)
-esm-infra/xenial_bind9: not-affected
-bionic_bind9: ignored (end of standard support)
-esm-infra/bionic_bind9: not-affected
-focal_bind9: not-affected
-jammy_bind9: not-affected
-mantic_bind9: not-affected
-noble_bind9: not-affected
-devel_bind9: not-affected
-
-Patches_isc-dhcp:
-upstream_isc-dhcp: needs-triage
-trusty_isc-dhcp: not-affected (code not present)
-trusty/esm_isc-dhcp: not-affected (code not present)
-xenial_isc-dhcp: not-affected (code not present)
-esm-infra/xenial_isc-dhcp: not-affected (code not present)
-bionic_isc-dhcp: not-affected (code not present)
-esm-infra/bionic_isc-dhcp: not-affected
-focal_isc-dhcp: not-affected (code not present)
-jammy_isc-dhcp: not-affected (code not present)
-mantic_isc-dhcp: not-affected
-noble_isc-dhcp: not-affected
-esm-apps/noble_isc-dhcp: not-affected
-devel_isc-dhcp: not-affected
diff --git a/active/CVE-2023-5732 b/active/CVE-2023-5732
deleted file mode 100644
index d239289..0000000
--- a/active/CVE-2023-5732
+++ /dev/null
@@ -1,39 +0,0 @@
-PublicDateAtUSN: 2023-10-25
-Candidate: CVE-2023-5732
-PublicDate: 2023-10-25 18:17:00 UTC
-References:
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/#CVE-2023-5732
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/#CVE-2023-5732
- https://bugzilla.mozilla.org/show_bug.cgi?id=1690979
- https://bugzilla.mozilla.org/show_bug.cgi?id=1836962
- https://www.mozilla.org/security/advisories/mfsa2023-34/
- https://www.mozilla.org/security/advisories/mfsa2023-46/
- https://www.mozilla.org/security/advisories/mfsa2023-47/
- https://ubuntu.com/security/notices/USN-6468-1
- https://www.cve.org/CVERecord?id=CVE-2023-5732
-Description:
- An attacker could have created a malicious link using bidirectional
- characters to spoof the location in the address bar when visited. This
- vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird <
- 115.4.1.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N [6.5 MEDIUM]
-
-Patches_thunderbird:
-upstream_thunderbird: needs-triage
-trusty_thunderbird: ignored (end of standard support)
-xenial_thunderbird: ignored (end of standard support)
-bionic_thunderbird: ignored (end of standard support)
-focal_thunderbird: released (1:115.4.1+build1-0ubuntu0.20.04.1)
-jammy_thunderbird: released (1:115.4.1+build1-0ubuntu0.22.04.1)
-lunar_thunderbird: released (1:115.4.1+build1-0ubuntu0.23.04.1)
-mantic_thunderbird: released (1:115.4.1+build1-0ubuntu0.23.10.1)
-noble_thunderbird: released (1:115.4.1+build1-0ubuntu1)
-devel_thunderbird: released (1:115.4.1+build1-0ubuntu1)
diff --git a/active/CVE-2023-6246 b/active/CVE-2023-6246
deleted file mode 100644
index 82697be..0000000
--- a/active/CVE-2023-6246
+++ /dev/null
@@ -1,54 +0,0 @@
-PublicDateAtUSN: 2024-01-31
-Candidate: CVE-2023-6246
-PublicDate: 2024-01-31 14:15:00 UTC
-References:
- https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt
- https://ubuntu.com/security/notices/USN-6620-1
- https://www.cve.org/CVERecord?id=CVE-2023-6246
-Description:
- A heap-based buffer overflow was found in the __vsyslog_internal function
- of the glibc library. This function is called by the syslog and vsyslog
- functions. This issue occurs when the openlog function was not called, or
- called with the ident argument set to NULL, and the program name (the
- basename of argv[0]) is bigger than 1024 bytes, resulting in an application
- crash or local privilege escalation. This issue affects glibc 2.36 and
- newer.
-Ubuntu-Description:
-Notes:
- mdeslaur> introduced by:
- mdeslaur> https://sourceware.org/git/?p=glibc.git;a=commit;h=52a5be0df411ef3ff45c10c7c308cb92993d15b1
- mdeslaur> in glibc 3.36
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Qualys
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]
-
-Patches_glibc:
- upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=6bd0e4efcc78f3c0115e5ea9739a1642807450da
-upstream_glibc: released (2.37-15)
-trusty_glibc: DNE
-xenial_glibc: ignored (end of standard support)
-esm-infra/xenial_glibc: not-affected
-bionic_glibc: ignored (end of standard support)
-esm-infra/bionic_glibc: not-affected
-focal_glibc: not-affected (2.31-0ubuntu9.14)
-jammy_glibc: not-affected (2.35-0ubuntu3.6)
-mantic_glibc: released (2.38-1ubuntu6.1)
-noble_glibc: released (2.39-0ubuntu1)
-devel_glibc: released (2.39-0ubuntu1)
-
-Patches_eglibc:
-upstream_eglibc: needs-triage
-trusty_eglibc: ignored (end of standard support)
-trusty/esm_eglibc: not-affected
-xenial_eglibc: DNE
-bionic_eglibc: DNE
-focal_eglibc: DNE
-jammy_eglibc: DNE
-mantic_eglibc: DNE
-noble_eglibc: DNE
-devel_eglibc: DNE
-
diff --git a/active/CVE-2023-6247 b/active/CVE-2023-6247
deleted file mode 100644
index a0d0e1b..0000000
--- a/active/CVE-2023-6247
+++ /dev/null
@@ -1,33 +0,0 @@
-Candidate: CVE-2023-6247
-PublicDate: 2024-02-29 01:42:00 UTC
-References:
- https://community.openvpn.net/openvpn/wiki/CVE-2023-6247
- https://www.cve.org/CVERecord?id=CVE-2023-6247
-Description:
- The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not
- properly validate the parsed data, which would result in the application
- crashing.
-Ubuntu-Description:
-Notes:
- mdeslaur> code doesn't seem present in v2.x
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Bahaa Naamneh
-Assigned-to:
-CVSS:
-
-Patches_openvpn:
- upstream: https://github.com/OpenVPN/openvpn3/commit/afdfe1bb3f4c54e8794
-upstream_openvpn: needs-triage
-trusty_openvpn: ignored (end of standard support)
-trusty/esm_openvpn: not-affected (3.x only)
-xenial_openvpn: ignored (end of standard support)
-esm-infra/xenial_openvpn: not-affected (3.x only)
-bionic_openvpn: ignored (end of standard support)
-esm-infra/bionic_openvpn: not-affected (3.x only)
-focal_openvpn: not-affected (3.x only)
-jammy_openvpn: not-affected (3.x only)
-mantic_openvpn: not-affected (3.x only)
-noble_openvpn: not-affected (3.x only)
-devel_openvpn: not-affected (3.x only)
diff --git a/active/CVE-2023-6258 b/active/CVE-2023-6258
deleted file mode 100644
index 6687ffb..0000000
--- a/active/CVE-2023-6258
+++ /dev/null
@@ -1,35 +0,0 @@
-Candidate: CVE-2023-6258
-PublicDate: 2024-01-30 17:15:00 UTC
-References:
- https://bugzilla.redhat.com/show_bug.cgi?id=2251062
- https://github.com/latchset/pkcs11-provider/pull/308
- https://github.com/latchset/pkcs11-provider/commit/de52d24c1b4b0bdc3a49a23db0f3231e209c3c68 (v0.3)
- https://www.cve.org/CVERecord?id=CVE-2023-6258
-Description:
- A security vulnerability has been identified in the pkcs11-provider, which
- is associated with Public-Key Cryptography Standards (PKCS#11). If
- exploited successfully, this vulnerability could result in a
- Bleichenbacher-like security flaw, potentially enabling a side-channel
- attack on PKCS#1 1.5 decryption.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H [8.1 HIGH]
-
-
-Patches_pkcs11-provider:
-upstream_pkcs11-provider: released (0.3-1)
-trusty_pkcs11-provider: DNE
-xenial_pkcs11-provider: DNE
-bionic_pkcs11-provider: DNE
-focal_pkcs11-provider: DNE
-jammy_pkcs11-provider: DNE
-mantic_pkcs11-provider: DNE
-noble_pkcs11-provider: not-affected (0.3-1)
-esm-apps/noble_pkcs11-provider: not-affected (0.3-1)
-devel_pkcs11-provider: not-affected (0.3-1)
diff --git a/active/CVE-2023-6277 b/active/CVE-2023-6277
deleted file mode 100644
index fb6e98f..0000000
--- a/active/CVE-2023-6277
+++ /dev/null
@@ -1,51 +0,0 @@
-PublicDateAtUSN: 2023-11-24 19:15:00 UTC
-Candidate: CVE-2023-6277
-PublicDate: 2023-11-24 19:15:00 UTC
-References:
- https://gitlab.com/libtiff/libtiff/-/merge_requests/545
- https://access.redhat.com/security/cve/CVE-2023-6277
- https://ubuntu.com/security/notices/USN-6644-1
- https://ubuntu.com/security/notices/USN-6644-2
- https://www.cve.org/CVERecord?id=CVE-2023-6277
-Description:
- An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to
- TIFFOpen() API may allow a remote attacker to cause a denial of service via
- a craft input with size smaller than 379 KB.
-Ubuntu-Description:
-Notes:
- rodrigo-zaiden> the first commit was claimed to introduce regressions, so
-  we should consider the follow up commits that makes the check a bit less
-  restrictive.
- rodrigo-zaiden> one of the regressions was caught by debian in libimager-perl,
-  https://bugs.debian.org/1057270. with the proposed follow up commits, we
-  should be clear wit that regression
-Mitigation:
-Bugs:
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056751
- https://gitlab.com/libtiff/libtiff/-/issues/614
- https://bugzilla.redhat.com/show_bug.cgi?id=2251311
-Priority: low
- Minor issue, only a OOM DoS
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [6.5 MEDIUM]
-
-Patches_tiff:
- upstream: https://gitlab.com/libtiff/libtiff/-/commit/5320c9d89c054fa805d037d84c57da874470b01a
- upstream: https://gitlab.com/libtiff/libtiff/-/commit/0b025324711213a75e38b52f7e7ba60235f108aa
- upstream: https://gitlab.com/libtiff/libtiff/-/commit/de7bfd7d4377c266f81849579f696fa1ad5ba6c3
- upstream: https://gitlab.com/libtiff/libtiff/-/commit/dbb825a8312f30e63a06c272010967d51af5c35a
-upstream_tiff: released (4.5.1+git230720-2)
-trusty_tiff: ignored (end of standard support)
-trusty/esm_tiff: released (4.0.3-7ubuntu0.11+esm12)
-xenial_tiff: ignored (end of standard support)
-esm-infra/xenial_tiff: released (4.0.6-1ubuntu0.8+esm15)
-bionic_tiff: ignored (end of standard support)
-esm-infra/bionic_tiff: released (4.0.9-5ubuntu0.10+esm5)
-focal_tiff: released (4.1.0+git191117-2ubuntu0.20.04.12)
-jammy_tiff: released (4.3.0-6ubuntu0.8)
-lunar_tiff: ignored (end of life, was needed)
-mantic_tiff: released (4.5.1+git230720-1ubuntu1.1)
-noble_tiff: not-affected (4.5.1+git230720-3ubuntu1)
-devel_tiff: not-affected (4.5.1+git230720-3ubuntu1)
diff --git a/active/CVE-2023-6779 b/active/CVE-2023-6779
deleted file mode 100644
index bb16a1d..0000000
--- a/active/CVE-2023-6779
+++ /dev/null
@@ -1,51 +0,0 @@
-PublicDateAtUSN: 2024-01-31
-Candidate: CVE-2023-6779
-PublicDate: 2024-01-31 14:15:00 UTC
-References:
- https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt
- https://ubuntu.com/security/notices/USN-6620-1
- https://www.cve.org/CVERecord?id=CVE-2023-6779
-Description:
- An off-by-one heap-based buffer overflow was found in the
- __vsyslog_internal function of the glibc library. This function is called
- by the syslog and vsyslog functions. This issue occurs when these functions
- are called with a message bigger than INT_MAX bytes, leading to an
- incorrect calculation of the buffer size to store the message, resulting in
- an application crash. This issue affects glibc 2.37 and newer.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Qualys
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]
-
-
-Patches_glibc:
- upstream: https://sourceware.org/git/?p=glibc.git;a=commit;h=7e5a0c286da33159d47d0122007aac016f3e02cd
-upstream_glibc: released (2.37-15)
-trusty_glibc: DNE
-xenial_glibc: ignored (end of standard support)
-esm-infra/xenial_glibc: not-affected
-bionic_glibc: ignored (end of standard support)
-esm-infra/bionic_glibc: not-affected
-focal_glibc: not-affected (2.31-0ubuntu9.14)
-jammy_glibc: not-affected (2.35-0ubuntu3.6)
-mantic_glibc: released (2.38-1ubuntu6.1)
-noble_glibc: released (2.39-0ubuntu1)
-devel_glibc: released (2.39-0ubuntu1)
-
-Patches_eglibc:
-upstream_eglibc: needs-triage
-trusty_eglibc: ignored (end of standard support)
-trusty/esm_eglibc: not-affected
-xenial_eglibc: DNE
-bionic_eglibc: DNE
-focal_eglibc: DNE
-jammy_eglibc: DNE
-mantic_eglibc: DNE
-noble_eglibc: DNE
-devel_eglibc: DNE
-
diff --git a/active/CVE-2023-6780 b/active/CVE-2023-6780
deleted file mode 100644
index fefbf1e..0000000
--- a/active/CVE-2023-6780
+++ /dev/null
@@ -1,51 +0,0 @@
-PublicDateAtUSN: 2024-01-31
-Candidate: CVE-2023-6780
-PublicDate: 2024-01-31 14:15:00 UTC
-References:
- https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt
- https://ubuntu.com/security/notices/USN-6620-1
- https://www.cve.org/CVERecord?id=CVE-2023-6780
-Description:
- An integer overflow was found in the __vsyslog_internal function of the
- glibc library. This function is called by the syslog and vsyslog functions.
- This issue occurs when these functions are called with a very long message,
- leading to an incorrect calculation of the buffer size to store the
- message, resulting in undefined behavior. This issue affects glibc 2.37 and
- newer.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Qualys
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L [5.3 MEDIUM]
-
-
-Patches_glibc:
- upstream: https://sourceware.org/git?p=glibc.git;a=commit;h=ddf542da94caf97ff43cc2875c88749880b7259b
-upstream_glibc: released (2.37-15)
-trusty_glibc: DNE
-xenial_glibc: ignored (end of standard support)
-esm-infra/xenial_glibc: not-affected
-bionic_glibc: ignored (end of standard support)
-esm-infra/bionic_glibc: not-affected
-focal_glibc: not-affected (2.31-0ubuntu9.14)
-jammy_glibc: not-affected (2.35-0ubuntu3.6)
-mantic_glibc: released (2.38-1ubuntu6.1)
-noble_glibc: released (2.39-0ubuntu1)
-devel_glibc: released (2.39-0ubuntu1)
-
-Patches_eglibc:
-upstream_eglibc: needs-triage
-trusty_eglibc: ignored (end of standard support)
-trusty/esm_eglibc: not-affected
-xenial_eglibc: DNE
-bionic_eglibc: DNE
-focal_eglibc: DNE
-jammy_eglibc: DNE
-mantic_eglibc: DNE
-noble_eglibc: DNE
-devel_eglibc: DNE
-
diff --git a/active/CVE-2023-7207 b/active/CVE-2023-7207
deleted file mode 100644
index 981c1d0..0000000
--- a/active/CVE-2023-7207
+++ /dev/null
@@ -1,41 +0,0 @@
-PublicDateAtUSN: 2024-02-29 01:42:00 UTC
-Candidate: CVE-2023-7207
-PublicDate: 2024-02-29 01:42:00 UTC
-References:
- https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=376d663340a9dc91c91a5849e5713f07571c1628
- https://www.openwall.com/lists/oss-security/2023/12/21/8
- https://www.cve.org/CVERecord?id=CVE-2023-7207
- https://ubuntu.com/security/notices/USN-6755-1
-Description:
- Debian's cpio contains a path traversal vulnerability. This issue was
- introduced by reverting CVE-2015-1197 patches which had caused a regression
- in --no-absolute-filenames. Upstream has since provided a proper fix to
- --no-absolute-filenames.
-Ubuntu-Description:
-Notes:
- ccdm94> bionic and earlier are not affected by this issue as the CVE patch
- ccdm94> for CVE-2015-1197 was not reverted in these releases.
-Mitigation:
-Bugs:
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059163
-Priority: medium
-Discovered-by: Ingo Brückl
-Assigned-to: fabian
-CVSS:
- ubuntu: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N [4.9 MEDIUM]
-
-Patches_cpio:
- upstream: https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=376d663340a9dc91c91a5849e5713f07571c1628
-upstream_cpio: released (2.14)
-trusty_cpio: ignored (end of standard support)
-trusty/esm_cpio: not-affected (see notes)
-xenial_cpio: ignored (end of standard support)
-esm-infra/xenial_cpio: not-affected (see notes)
-bionic_cpio: ignored (end of standard support)
-esm-infra/bionic_cpio: not-affected (see notes)
-focal_cpio: released (2.13+dfsg-2ubuntu0.4)
-jammy_cpio: released (2.13+dfsg-7ubuntu0.1)
-lunar_cpio: ignored (end of life, was needed)
-mantic_cpio: released (2.13+dfsg-7.1ubuntu0.1)
-noble_cpio: not-affected (2.15+dfsg-1ubuntu1)
-devel_cpio: not-affected (2.15+dfsg-1ubuntu1)
diff --git a/active/CVE-2024-0232 b/active/CVE-2024-0232
deleted file mode 100644
index 4674afa..0000000
--- a/active/CVE-2024-0232
+++ /dev/null
@@ -1,59 +0,0 @@
-Candidate: CVE-2024-0232
-PublicDate: 2024-01-16 14:15:00 UTC
-References:
- https://sqlite.org/forum/forumpost/4aa381993a
- https://sqlite.org/forum/forumpost/b25edc1d46
- https://www.cve.org/CVERecord?id=CVE-2024-0232
-Description:
- A heap use-after-free issue has been identified in SQLite in the
- jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local
- attacker to leverage a victim to pass specially crafted malicious input to
- the application, potentially causing a crash and leading to a denial of
- service.
-Ubuntu-Description:
-Notes:
- mdeslaur> possibly introduced here:
- mdeslaur> https://github.com/sqlite/sqlite/commit/44f53b96472a660e42f4c4f33e01f0fc9c691440
- mdeslaur> Could not reproduce the issue in mantic and lunar, marking as
- mdeslaur> not affected.
-Mitigation:
-Bugs:
- https://bugzilla.redhat.com/show_bug.cgi?id=2243754
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [5.5 MEDIUM]
-
-Patches_sqlite:
-upstream_sqlite: needs-triage
-trusty_sqlite: ignored (end of standard support)
-trusty/esm_sqlite: not-affected (code not present)
-xenial_sqlite: ignored (end of standard support)
-esm-apps/xenial_sqlite: not-affected (code not present)
-bionic_sqlite: ignored (end of standard support)
-esm-apps/bionic_sqlite: not-affected (code not present)
-focal_sqlite: not-affected (code not present)
-esm-apps/focal_sqlite: not-affected (code not present)
-jammy_sqlite: not-affected (code not present)
-esm-apps/jammy_sqlite: not-affected (code not present)
-lunar_sqlite: DNE
-mantic_sqlite: DNE
-noble_sqlite: DNE
-devel_sqlite: DNE
-
-Patches_sqlite3:
- upstream: https://sqlite.org/src/info/a163fecca90cab9d (v3.43.2)
-upstream_sqlite3: released (3.43.2)
-trusty_sqlite3: ignored (end of standard support)
-trusty/esm_sqlite3: not-affected (code not present)
-xenial_sqlite3: ignored (end of standard support)
-esm-infra/xenial_sqlite3: not-affected (code not present)
-bionic_sqlite3: ignored (end of standard support)
-esm-infra/bionic_sqlite3: not-affected (code not present)
-focal_sqlite3: not-affected (code not present)
-jammy_sqlite3: not-affected (code not present)
-lunar_sqlite3: not-affected (3.40.1-1ubuntu0.1)
-mantic_sqlite3: not-affected (3.42.0-1ubuntu0.1)
-noble_sqlite3: not-affected (3.44.2-1)
-devel_sqlite3: not-affected (3.44.2-1)
diff --git a/active/CVE-2024-0567 b/active/CVE-2024-0567
deleted file mode 100644
index dad7daf..0000000
--- a/active/CVE-2024-0567
+++ /dev/null
@@ -1,45 +0,0 @@
-PublicDateAtUSN: 2024-01-16 14:15:00 UTC
-Candidate: CVE-2024-0567
-PublicDate: 2024-01-16 14:15:00 UTC
-References:
- https://gnutls.org/security-new.html#GNUTLS-SA-2024-01-09
- https://lists.gnupg.org/pipermail/gnutls-help/2024-January/004841.html
- https://access.redhat.com/security/cve/CVE-2024-0567
- https://ubuntu.com/security/notices/USN-6593-1
- https://www.cve.org/CVERecord?id=CVE-2024-0567
-Description:
- A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS)
- rejects a certificate chain with distributed trust. This issue occurs when
- validating a certificate chain with cockpit-certificate-ensure. This flaw
- allows an unauthenticated, remote client or attacker to initiate a denial
- of service attack.
-Ubuntu-Description:
-Notes:
- mdeslaur> The code is different in focal and older and the reproducer
- mdeslaur> doesn't appear to crash the older version of GnuTLS. Marking as
- mdeslaur> not-affected.
-Mitigation:
-Bugs:
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061045
- https://gitlab.com/gnutls/gnutls/-/issues/1521
- https://bugzilla.redhat.com/show_bug.cgi?id=2258544
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]
-
-Patches_gnutls28:
- upstream: https://gitlab.com/gnutls/gnutls/-/commit/9edbdaa84e38b1bfb53a7d72c1de44f8de373405 (3.8.3)
-upstream_gnutls28: released (3.8.3-1)
-trusty_gnutls28: ignored (end of standard support)
-xenial_gnutls28: ignored (end of standard support)
-esm-infra/xenial_gnutls28: not-affected
-bionic_gnutls28: ignored (end of standard support)
-esm-infra/bionic_gnutls28: not-affected
-focal_gnutls28: not-affected (3.6.13-2ubuntu1.9)
-jammy_gnutls28: released (3.7.3-4ubuntu1.4)
-lunar_gnutls28: released (3.7.8-5ubuntu1.2)
-mantic_gnutls28: released (3.8.1-4ubuntu1.2)
-noble_gnutls28: released (3.8.3-1ubuntu1)
-devel_gnutls28: released (3.8.3-1ubuntu1)
diff --git a/active/CVE-2024-0853 b/active/CVE-2024-0853
deleted file mode 100644
index 914b457..0000000
--- a/active/CVE-2024-0853
+++ /dev/null
@@ -1,38 +0,0 @@
-Candidate: CVE-2024-0853
-PublicDate: 2024-02-03 14:15:00 UTC
-CRD: 2024-01-31
-References:
- https://curl.se/docs/CVE-2024-0853.html
- https://www.cve.org/CVERecord?id=CVE-2024-0853
-Description:
- curl inadvertently kept the SSL session ID for connections in its cache
- even when the verify status (*OCSP stapling*) test failed. A subsequent
- transfer to the same hostname could then succeed if the session ID cache
- was still fresh, which then skipped the verify status check.
-Ubuntu-Description:
-Notes:
- mdeslaur> only affects 8.5.0
-Mitigation:
-Bugs:
-Priority: low
- Upstream Curl developers have rated this as being low severity
-Discovered-by: Hiroki Kurosawa
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N [5.3 MEDIUM]
-
-
-Patches_curl:
-upstream_curl: needs-triage
-trusty_curl: ignored (end of standard support)
-trusty/esm_curl: not-affected
-xenial_curl: ignored (end of standard support)
-esm-infra/xenial_curl: not-affected
-bionic_curl: ignored (end of standard support)
-esm-infra/bionic_curl: not-affected
-focal_curl: not-affected
-jammy_curl: not-affected
-lunar_curl: not-affected
-mantic_curl: not-affected (8.2.1-1ubuntu3.2)
-noble_curl: released (8.5.0-2ubuntu2)
-devel_curl: released (8.5.0-2ubuntu2)
diff --git a/active/CVE-2024-1048 b/active/CVE-2024-1048
deleted file mode 100644
index af75af1..0000000
--- a/active/CVE-2024-1048
+++ /dev/null
@@ -1,75 +0,0 @@
-Candidate: CVE-2024-1048
-PublicDate: 2024-02-06 18:15:00 UTC
-References:
- https://access.redhat.com/security/cve/CVE-2024-1048
- https://bugzilla.redhat.com/show_bug.cgi?id=2256827
- https://www.openwall.com/lists/oss-security/2024/02/06/3
- http://www.openwall.com/lists/oss-security/2024/02/06/3
- https://www.cve.org/CVERecord?id=CVE-2024-1048
-Description:
- A flaw was found in the grub2-set-bootflag utility of grub2. After the fix
- of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the
- new grubenv content and rename it to the original grubenv file. If the
- program is killed before the rename operation, the temporary file will not
- be removed and may fill the filesystem when invoked multiple times,
- resulting in a filesystem out of free inodes or blocks.
-Ubuntu-Description:
-Notes:
- eslerm> the grub2 package does not affect Ubuntu's Secure Boot
- eslerm> grub2-unsigned contains Secure Boot security fixes grub2 and
- eslerm> grub2-unsigned should have same major version Ubuntu Secure Boot
- eslerm> and ESM do not cover i386 trusty's GA kernel cannot handle new
- eslerm> versions of grub Note that key revocation is required to protect
- eslerm> against evil housekeeper attacks (such as BlackLotus)
- mdeslaur>
- mdeslaur> This issue is in a RedHat-specific addition and does not affect
- mdeslaur> Debian or Ubuntu
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L [3.3 LOW]
-
-
-Patches_grub2:
-upstream_grub2: needs-triage
-trusty_grub2: ignored (end of standard support)
-trusty/esm_grub2: not-affected (does not affect Secure Boot)
-xenial_grub2: ignored (end of standard support)
-esm-infra/xenial_grub2: not-affected (does not affect Secure Boot)
-bionic_grub2: ignored (end of standard support)
-esm-infra/bionic_grub2: not-affected (does not affect Secure Boot)
-focal_grub2: not-affected (does not affect Secure Boot)
-jammy_grub2: not-affected (does not affect Secure Boot)
-mantic_grub2: not-affected (does not affect Secure Boot)
-noble_grub2: not-affected (does not affect Secure Boot)
-devel_grub2: not-affected (does not affect Secure Boot)
-
-Patches_grub2-unsigned:
-upstream_grub2-unsigned: needs-triage
-trusty_grub2-unsigned: ignored (end of standard support)
-xenial_grub2-unsigned: ignored (end of standard support)
-esm-infra/xenial_grub2-unsigned: not-affected (RH specific)
-bionic_grub2-unsigned: ignored (end of standard support)
-esm-infra/bionic_grub2-unsigned: not-affected (RH specific)
-focal_grub2-unsigned: not-affected (RH specific)
-jammy_grub2-unsigned: not-affected (RH specific)
-mantic_grub2-unsigned: not-affected (RH specific)
-noble_grub2-unsigned: not-affected (RH specific)
-devel_grub2-unsigned: not-affected (RH specific)
-
-Patches_grub2-signed:
-upstream_grub2-signed: needs-triage
-trusty_grub2-signed: ignored (end of standard support)
-trusty/esm_grub2-signed: not-affected (RH specific)
-xenial_grub2-signed: ignored (end of standard support)
-esm-infra/xenial_grub2-signed: not-affected (RH specific)
-bionic_grub2-signed: ignored (end of standard support)
-esm-infra/bionic_grub2-signed: not-affected (RH specific)
-focal_grub2-signed: not-affected (RH specific)
-jammy_grub2-signed: not-affected (RH specific)
-mantic_grub2-signed: not-affected (RH specific)
-noble_grub2-signed: not-affected (RH specific)
-devel_grub2-signed: not-affected (RH specific)
diff --git a/active/CVE-2024-1059 b/active/CVE-2024-1059
deleted file mode 100644
index b330bbc..0000000
--- a/active/CVE-2024-1059
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-1059
-PublicDate: 2024-01-30 22:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
- https://crbug.com/1514777
- https://www.cve.org/CVERecord?id=CVE-2024-1059
-Description:
- Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139
- allowed a remote attacker to potentially exploit stack corruption via a
- crafted HTML page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1060 b/active/CVE-2024-1060
deleted file mode 100644
index 049995b..0000000
--- a/active/CVE-2024-1060
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-1060
-PublicDate: 2024-01-30 22:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
- https://crbug.com/1511567
- https://www.cve.org/CVERecord?id=CVE-2024-1060
-Description:
- Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a
- remote attacker to potentially exploit heap corruption via a crafted HTML
- page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1077 b/active/CVE-2024-1077
deleted file mode 100644
index a5bca51..0000000
--- a/active/CVE-2024-1077
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-1077
-PublicDate: 2024-01-30 22:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html
- https://crbug.com/1511085
- https://www.cve.org/CVERecord?id=CVE-2024-1077
-Description:
- Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed
- a remote attacker to potentially exploit heap corruption via a malicious
- file. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1283 b/active/CVE-2024-1283
deleted file mode 100644
index f5edd30..0000000
--- a/active/CVE-2024-1283
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-1283
-PublicDate: 2024-02-07 00:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html
- https://issues.chromium.org/issues/41494860
- https://www.cve.org/CVERecord?id=CVE-2024-1283
-Description:
- Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160
- allowed a remote attacker to potentially exploit heap corruption via a
- crafted HTML page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1284 b/active/CVE-2024-1284
deleted file mode 100644
index 74c0d7e..0000000
--- a/active/CVE-2024-1284
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-1284
-PublicDate: 2024-02-07 00:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html
- https://issues.chromium.org/issues/41494539
- https://www.cve.org/CVERecord?id=CVE-2024-1284
-Description:
- Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a
- remote attacker to potentially exploit heap corruption via a crafted HTML
- page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1488 b/active/CVE-2024-1488
deleted file mode 100644
index a0a3336..0000000
--- a/active/CVE-2024-1488
+++ /dev/null
@@ -1,37 +0,0 @@
-Candidate: CVE-2024-1488
-PublicDate: 2024-02-15 05:15:00 UTC
-References:
- https://bugzilla.redhat.com/show_bug.cgi?id=2264183
- https://www.cve.org/CVERecord?id=CVE-2024-1488
-Description:
- A vulnerability was found in Unbound due to incorrect default permissions,
- allowing any process outside the unbound group to modify the unbound
- runtime configuration. If a process can connect over localhost to port
- 8953, it can alter the configuration of unbound.service. This flaw allows
- an unprivileged attacker to manipulate a running instance, potentially
- altering forwarders, allowing them to track all queries forwarded by the
- local resolver, and, in some cases, disrupting resolving altogether.
-Ubuntu-Description:
-Notes:
- mdeslaur> This is an issue specific to Red Hat packaging, Ubuntu is not
- mdeslaur> affected by this issue.
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_unbound:
-upstream_unbound: not-affected (debian: RedHat specific patch vulnerability)
-trusty_unbound: ignored (end of standard support)
-trusty/esm_unbound: not-affected
-xenial_unbound: ignored (end of standard support)
-esm-infra/xenial_unbound: not-affected
-bionic_unbound: ignored (end of standard support)
-esm-infra/bionic_unbound: not-affected
-focal_unbound: not-affected
-jammy_unbound: not-affected
-mantic_unbound: not-affected
-noble_unbound: not-affected
-devel_unbound: not-affected
diff --git a/active/CVE-2024-1669 b/active/CVE-2024-1669
deleted file mode 100644
index 0e5f4dc..0000000
--- a/active/CVE-2024-1669
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-1669
-PublicDate: 2024-02-21 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
- https://issues.chromium.org/issues/41495060
- https://www.cve.org/CVERecord?id=CVE-2024-1669
-Description:
- Out of bounds memory access in Blink in Google Chrome prior to
- 122.0.6261.57 allowed a remote attacker to perform out of bounds memory
- access via a crafted HTML page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1670 b/active/CVE-2024-1670
deleted file mode 100644
index 9a2b726..0000000
--- a/active/CVE-2024-1670
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-1670
-PublicDate: 2024-02-21 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
- https://issues.chromium.org/issues/41481374
- https://www.cve.org/CVERecord?id=CVE-2024-1670
-Description:
- Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a
- remote attacker to potentially exploit heap corruption via a crafted HTML
- page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1671 b/active/CVE-2024-1671
deleted file mode 100644
index 195094c..0000000
--- a/active/CVE-2024-1671
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-1671
-PublicDate: 2024-02-21 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
- https://issues.chromium.org/issues/41487933
- https://www.cve.org/CVERecord?id=CVE-2024-1671
-Description:
- Inappropriate implementation in Site Isolation in Google Chrome prior to
- 122.0.6261.57 allowed a remote attacker to bypass content security policy
- via a crafted HTML page. (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1672 b/active/CVE-2024-1672
deleted file mode 100644
index aa04f7a..0000000
--- a/active/CVE-2024-1672
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-1672
-PublicDate: 2024-02-21 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
- https://issues.chromium.org/issues/41485789
- https://www.cve.org/CVERecord?id=CVE-2024-1672
-Description:
- Inappropriate implementation in Content Security Policy in Google Chrome
- prior to 122.0.6261.57 allowed a remote attacker to bypass content security
- policy via a crafted HTML page. (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1673 b/active/CVE-2024-1673
deleted file mode 100644
index 47bf229..0000000
--- a/active/CVE-2024-1673
+++ /dev/null
@@ -1,35 +0,0 @@
-Candidate: CVE-2024-1673
-PublicDate: 2024-02-21 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
- https://issues.chromium.org/issues/41490491
- https://www.cve.org/CVERecord?id=CVE-2024-1673
-Description:
- Use after free in Accessibility in Google Chrome prior to 122.0.6261.57
- allowed a remote attacker who had compromised the renderer process to
- potentially exploit heap corruption via specific UI gestures. (Chromium
- security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1674 b/active/CVE-2024-1674
deleted file mode 100644
index 7f79375..0000000
--- a/active/CVE-2024-1674
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-1674
-PublicDate: 2024-02-21 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
- https://issues.chromium.org/issues/40095183
- https://www.cve.org/CVERecord?id=CVE-2024-1674
-Description:
- Inappropriate implementation in Navigation in Google Chrome prior to
- 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions
- via a crafted HTML page. (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1675 b/active/CVE-2024-1675
deleted file mode 100644
index c4b5dce..0000000
--- a/active/CVE-2024-1675
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-1675
-PublicDate: 2024-02-21 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
- https://issues.chromium.org/issues/41486208
- https://www.cve.org/CVERecord?id=CVE-2024-1675
-Description:
- Insufficient policy enforcement in Download in Google Chrome prior to
- 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions
- via a crafted HTML page. (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1676 b/active/CVE-2024-1676
deleted file mode 100644
index 8b28843..0000000
--- a/active/CVE-2024-1676
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-1676
-PublicDate: 2024-02-21 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
- https://issues.chromium.org/issues/40944847
- https://www.cve.org/CVERecord?id=CVE-2024-1676
-Description:
- Inappropriate implementation in Navigation in Google Chrome prior to
- 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted
- HTML page. (Chromium security severity: Low)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released (122.0.6261.57)
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1874 b/active/CVE-2024-1874
deleted file mode 100644
index 89ccbb7..0000000
--- a/active/CVE-2024-1874
+++ /dev/null
@@ -1,86 +0,0 @@
-Candidate: CVE-2024-1874
-PublicDate: 2024-04-16
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-1874
- https://github.com/php/php-src/security/advisories/GHSA-pc52-254m-w9w7
- https://github.com/php/php-src/commit/e3c784f2bfb6029b49d27783b2efc87ee6923f79
-Description:
- Command injection via array-ish $command parameter of proc_open
-Ubuntu-Description:
-Notes:
- leosilva> from debian "Only affects improper handling of command line arguments on Windows"
- sbeattie> PEAR issues should go against php-pear as of xenial
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_php5:
-upstream_php5: needs-triage
-trusty/esm_php5: not-affected
-focal_php5: DNE
-jammy_php5: DNE
-mantic_php5: DNE
-noble_php5: DNE
-devel_php5: DNE
-
-Patches_php7.0:
-upstream_php7.0: needs-triage
-esm-infra/xenial_php7.0: not-affected
-focal_php7.0: DNE
-jammy_php7.0: DNE
-mantic_php7.0: DNE
-noble_php7.0: DNE
-devel_php7.0: DNE
-
-Patches_php7.2:
-upstream_php7.2: needs-triage
-esm-infra/bionic_php7.2: not-affected
-focal_php7.2: DNE
-jammy_php7.2: DNE
-mantic_php7.2: DNE
-noble_php7.2: DNE
-devel_php7.2: DNE
-
-Patches_php7.4:
-upstream_php7.4: needs-triage
-focal_php7.4: not-affected
-jammy_php7.4: DNE
-mantic_php7.4: DNE
-noble_php7.4: DNE
-devel_php7.4: DNE
-
-Patches_php8.1:
-upstream_php8.1: released (8.1.28)
-focal_php8.1: DNE
-jammy_php8.1: not-affected
-mantic_php8.1: DNE
-noble_php8.1: DNE
-devel_php8.1: DNE
-
-Patches_php8.2:
-upstream_php8.2: released (8.2.18)
-trusty_php8.2: DNE
-trusty/esm_php8.2: DNE
-xenial_php8.2: DNE
-bionic_php8.2: DNE
-focal_php8.2: DNE
-jammy_php8.2: DNE
-mantic_php8.2: not-affected
-noble_php8.2: DNE
-devel_php8.2: DNE
-
-Patches_php8.3:
-upstream_php8.3: released (8.3.6)
-trusty_php8.3: DNE
-trusty/esm_php8.3: DNE
-xenial_php8.3: DNE
-bionic_php8.3: DNE
-focal_php8.3: DNE
-jammy_php8.3: DNE
-mantic_php8.3: DNE
-noble_php8.3: not-affected
-devel_php8.3: not-affected
-
diff --git a/active/CVE-2024-1899 b/active/CVE-2024-1899
deleted file mode 100644
index e656f99..0000000
--- a/active/CVE-2024-1899
+++ /dev/null
@@ -1,28 +0,0 @@
-Candidate: CVE-2024-1899
-PublicDate: 2024-02-26 19:15:00 UTC
-References:
- https://www.tenable.com/security/research/tra-2024-05
- https://www.cve.org/CVERecord?id=CVE-2024-1899
-Description:
- An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could
- allow a remote attacker to cause denial of service conditions.
- 
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_showdown:
-upstream_showdown: needs-triage
-trusty_showdown: ignored (end of standard support)
-xenial_showdown: DNE
-bionic_showdown: DNE
-focal_showdown: DNE
-jammy_showdown: DNE
-mantic_showdown: DNE
-noble_showdown: DNE
-devel_showdown: DNE
diff --git a/active/CVE-2024-1936 b/active/CVE-2024-1936
deleted file mode 100644
index 4213417..0000000
--- a/active/CVE-2024-1936
+++ /dev/null
@@ -1,33 +0,0 @@
-Candidate: CVE-2024-1936
-PublicDate: 2024-03-04 22:15:00 UTC
-References:
- https://www.mozilla.org/en-US/security/advisories/mfsa2024-11/#CVE-2024-1936
- https://bugzilla.mozilla.org/show_bug.cgi?id=1860977
- https://www.mozilla.org/security/advisories/mfsa2024-11/
- https://www.cve.org/CVERecord?id=CVE-2024-1936
-Description:
- The encrypted subject of an email message could be incorrectly and
- permanently assigned to an arbitrary other email message in Thunderbird's
- local cache. Consequently, when replying to the contaminated email message,
- the user might accidentally leak the confidential subject to a third party.
- While this update fixes the bug and avoids future message contamination, it
- does not automatically repair existing contaminations. Users are advised to
- use the repair folder functionality, which is available from the context
- menu of email folders, which will erase incorrect subject assignments. This
- vulnerability affects Thunderbird < 115.8.1.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_thunderbird:
-upstream_thunderbird: released (1:115.8.1-1)
-focal_thunderbird: released (1:115.8.1+build1-0ubuntu0.20.04.1)
-jammy_thunderbird: released (1:115.8.1+build1-0ubuntu0.22.04.1)
-mantic_thunderbird: released (115.8.1+build1-0ubuntu0.23.10.1)
-noble_thunderbird: not-affected
-devel_thunderbird: not-affected
diff --git a/active/CVE-2024-1938 b/active/CVE-2024-1938
deleted file mode 100644
index 545e402..0000000
--- a/active/CVE-2024-1938
+++ /dev/null
@@ -1,32 +0,0 @@
-Candidate: CVE-2024-1938
-PublicDate: 2024-02-29 01:43:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-1938
-Description:
- Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a
- remote attacker to potentially exploit object corruption via a crafted HTML
- page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-1939 b/active/CVE-2024-1939
deleted file mode 100644
index a892364..0000000
--- a/active/CVE-2024-1939
+++ /dev/null
@@ -1,32 +0,0 @@
-Candidate: CVE-2024-1939
-PublicDate: 2024-02-29 01:43:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-1939
-Description:
- Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a
- remote attacker to potentially exploit heap corruption via a crafted HTML
- page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-trusty_chromium-browser: ignored (end of standard support)
-xenial_chromium-browser: ignored (end of standard support)
-bionic_chromium-browser: ignored (end of standard support)
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2004 b/active/CVE-2024-2004
deleted file mode 100644
index 6fe3aeb..0000000
--- a/active/CVE-2024-2004
+++ /dev/null
@@ -1,41 +0,0 @@
-PublicDateAtUSN: 2024-03-27 07:00:00 UTC
-Candidate: CVE-2024-2004
-PublicDate: 2024-03-27 08:15:00 UTC
-CRD: 2024-03-27 07:00:00 UTC
-References:
- https://curl.se/docs/CVE-2024-2004.html
- https://ubuntu.com/security/notices/USN-6718-1
- https://www.cve.org/CVERecord?id=CVE-2024-2004
- https://ubuntu.com/security/notices/USN-6718-3
-Description:
- When a protocol selection parameter option disables all protocols without
- adding any then the default set of protocols would remain in the allowed
- set due to an error in the logic for removing protocols. The below command
- would perform a request to curl.se with a plaintext protocol which has been
- explicitly disabled.      curl --proto -all,-http http://curl.se  The flaw
- is only present if the set of selected protocols disables the entire set of
- available protocols, in itself a command with no practical use and
- therefore unlikely to be encountered in real situations. The curl security
- team has thus assessed this to be low severity bug.
-Ubuntu-Description:
-Notes:
- mdeslaur> affects curl 7.85.0 to and including 8.6.0
-Mitigation:
-Bugs:
-Priority: low
- Upstream developers consider this a low severity issue
-Discovered-by: Dan Fandrich
-Assigned-to:
-CVSS:
-
-Patches_curl:
- upstream: https://github.com/curl/curl/commit/17d302e56221
-upstream_curl: released (8.7.0)
-trusty/esm_curl: not-affected
-esm-infra/xenial_curl: not-affected
-esm-infra/bionic_curl: not-affected
-focal_curl: not-affected (7.68.0-1ubuntu2.21)
-jammy_curl: not-affected (7.81.0-1ubuntu1.15)
-mantic_curl: released (8.2.1-1ubuntu3.3)
-noble_curl: released (8.5.0-2ubuntu10.1)
-devel_curl: released (8.5.0-2ubuntu10.1)
diff --git a/active/CVE-2024-20290 b/active/CVE-2024-20290
deleted file mode 100644
index ba764ee..0000000
--- a/active/CVE-2024-20290
+++ /dev/null
@@ -1,44 +0,0 @@
-PublicDateAtUSN: 2024-02-07 17:15:00 UTC
-Candidate: CVE-2024-20290
-PublicDate: 2024-02-07 17:15:00 UTC
-References:
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-hDffu6t
- https://blog.clamav.net/2023/11/clamav-130-122-105-released.html
- https://ubuntu.com/security/notices/USN-6636-1
- https://www.cve.org/CVERecord?id=CVE-2024-20290
-Description:
- A vulnerability in the OLE2 file format parser of ClamAV could allow an
- unauthenticated, remote attacker to cause a denial of service (DoS)
- condition on an affected device. This vulnerability is due to an incorrect
- check for end-of-string values during scanning, which may result in a heap
- buffer over-read. An attacker could exploit this vulnerability by
- submitting a crafted file containing OLE2 content to be scanned by ClamAV
- on an affected device. A successful exploit could allow the attacker to
- cause the ClamAV scanning process to terminate, resulting in a DoS
- condition on the affected software and consuming available system
- resources. For a description of this vulnerability, see the ClamAV blog .
-Ubuntu-Description:
-Notes:
- mdeslaur> doesn't appear to affect 0.103.x
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]
-
-
-Patches_clamav:
-upstream_clamav: needs-triage
-trusty_clamav: ignored (end of standard support)
-trusty/esm_clamav: not-affected (code not present)
-xenial_clamav: ignored (end of standard support)
-esm-infra/xenial_clamav: not-affected (code not present)
-bionic_clamav: ignored (end of standard support)
-esm-infra/bionic_clamav: not-affected (code not present)
-focal_clamav: not-affected (0.103.11+dfsg-0ubuntu0.20.04.1)
-jammy_clamav: not-affected (0.103.11+dfsg-0ubuntu0.22.04.1)
-mantic_clamav: released (1.0.5+dfsg-0ubuntu0.23.10.1)
-noble_clamav: released (1.0.5+dfsg-1ubuntu1)
-devel_clamav: released (1.0.5+dfsg-1ubuntu1)
diff --git a/active/CVE-2024-20328 b/active/CVE-2024-20328
deleted file mode 100644
index 22962c6..0000000
--- a/active/CVE-2024-20328
+++ /dev/null
@@ -1,41 +0,0 @@
-PublicDateAtUSN: 2024-02-09
-Candidate: CVE-2024-20328
-PublicDate: 2024-03-01 21:15:00 UTC
-References:
- https://blog.clamav.net/2023/11/clamav-130-122-105-released.html
- https://ubuntu.com/security/notices/USN-6636-1
- https://www.cve.org/CVERecord?id=CVE-2024-20328
-Description:
- A vulnerability in the VirusEvent feature of ClamAV could allow a local
- attacker to inject arbitrary commands with the privileges of the
- application service account.The vulnerability is due to unsafe handling of
- file names. A local attacker could exploit this vulnerability by supplying
- a file name containing command-line sequences. When processed on a system
- using configuration options for the VirusEvent feature, the attacker could
- cause the application to execute arbitrary commands. ClamAV has released
- software updates that address this vulnerability. There are no workarounds
- that address this vulnerability.
-Ubuntu-Description:
-Notes:
- mdeslaur> doesn't appear to affect 0.103.x
-Mitigation:
-Bugs:
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063479
-Priority: medium
-Discovered-by: Amit Schendel
-Assigned-to:
-CVSS:
-
-Patches_clamav:
-upstream_clamav: released (1.0.5+dfsg-1)
-trusty_clamav: ignored (end of standard support)
-trusty/esm_clamav: not-affected
-xenial_clamav: ignored (end of standard support)
-esm-infra/xenial_clamav: not-affected
-bionic_clamav: ignored (end of standard support)
-esm-infra/bionic_clamav: not-affected
-focal_clamav: not-affected (0.103.11+dfsg-0ubuntu0.20.04.1)
-jammy_clamav: not-affected (0.103.11+dfsg-0ubuntu0.22.04.1)
-mantic_clamav: released (1.0.5+dfsg-0ubuntu0.23.10.1)
-noble_clamav: released (1.0.5+dfsg-1ubuntu1)
-devel_clamav: released (1.0.5+dfsg-1ubuntu1)
diff --git a/active/CVE-2024-20380 b/active/CVE-2024-20380
deleted file mode 100644
index 8046a54..0000000
--- a/active/CVE-2024-20380
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-20380
-PublicDate: 2024-04-18 20:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-20380
- https://blog.clamav.net/2024/04/clamav-131-123-106-patch-versions.html
-Description:
- A vulnerability in the HTML parser of ClamAV could allow an
- unauthenticated, remote attacker to cause a denial of service (DoS)
- condition on an affected device.
- The vulnerability is due to an issue in the C to Rust foreign function
- interface. An attacker could exploit this vulnerability by submitting a
- crafted file containing HTML content to be scanned by ClamAV on an affected
- device. An exploit could allow the attacker to cause the ClamAV scanning
- process to terminate, resulting in a DoS condition on the affected
- software.
-Ubuntu-Description:
-Notes:
- mdeslaur> per upstream "This issue affects version 1.3.0 only and does not
- mdeslaur> affect prior versions."
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_clamav:
-upstream_clamav: needs-triage
-trusty/esm_clamav: not-affected (1.3.0 only)
-esm-infra/xenial_clamav: not-affected (1.3.0 only)
-esm-infra/bionic_clamav: not-affected (1.3.0 only)
-focal_clamav: not-affected (1.3.0 only)
-jammy_clamav: not-affected (1.3.0 only)
-mantic_clamav: not-affected (1.3.0 only)
-noble_clamav: not-affected (1.3.0 only)
-devel_clamav: not-affected (1.3.0 only)
diff --git a/active/CVE-2024-20932 b/active/CVE-2024-20932
deleted file mode 100644
index 24fdec6..0000000
--- a/active/CVE-2024-20932
+++ /dev/null
@@ -1,180 +0,0 @@
-PublicDateAtUSN: 2024-01-16 22:15:00 UTC
-Candidate: CVE-2024-20932
-PublicDate: 2024-01-16 22:15:00 UTC
-References:
- https://www.oracle.com/security-alerts/cpujan2024.html
- https://ubuntu.com/security/notices/USN-6661-1
- https://www.cve.org/CVERecord?id=CVE-2024-20932
-Description:
- Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM
- Enterprise Edition product of Oracle Java SE (component: Security).
- Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle
- GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and
- 22.3.4. Easily exploitable vulnerability allows unauthenticated attacker
- with network access via multiple protocols to compromise Oracle Java SE,
- Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful
- attacks of this vulnerability can result in unauthorized creation, deletion
- or modification access to critical data or all Oracle Java SE, Oracle
- GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note:
- This vulnerability applies to Java deployments, typically in clients
- running sandboxed Java Web Start applications or sandboxed Java applets,
- that load and run untrusted code (e.g., code that comes from the internet)
- and rely on the Java sandbox for security. This vulnerability does not
- apply to Java deployments, typically in servers, that load and run only
- trusted code (e.g., code installed by an administrator). CVSS 3.1 Base
- Score 7.5 (Integrity impacts). CVSS Vector:
- (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N [7.5 HIGH]
-
-Patches_openjdk-8:
-upstream_openjdk-8: needs-triage
-trusty_openjdk-8: DNE
-xenial_openjdk-8: ignored (end of standard support)
-esm-infra/xenial_openjdk-8: not-affected (code not present)
-bionic_openjdk-8: ignored (end of standard support)
-esm-apps/bionic_openjdk-8: not-affected (code not present)
-focal_openjdk-8: not-affected (code not present)
-esm-apps/focal_openjdk-8: not-affected (code not present)
-jammy_openjdk-8: not-affected (code not present)
-esm-apps/jammy_openjdk-8: not-affected (code not present)
-lunar_openjdk-8: ignored (end of life, was needs-triage)
-mantic_openjdk-8: not-affected (code not present)
-noble_openjdk-8: not-affected (code not present)
-esm-apps/noble_openjdk-8: not-affected (code not present)
-devel_openjdk-8: not-affected (code not present)
-
-Patches_openjdk-9:
-upstream_openjdk-9: needs-triage
-trusty_openjdk-9: DNE
-xenial_openjdk-9: ignored (end of standard support)
-esm-apps/xenial_openjdk-9: ignored (no longer supported by upstream)
-bionic_openjdk-9: DNE
-focal_openjdk-9: DNE
-jammy_openjdk-9: DNE
-lunar_openjdk-9: DNE
-mantic_openjdk-9: DNE
-noble_openjdk-9: DNE
-devel_openjdk-9: DNE
-
-Patches_openjdk-lts:
-upstream_openjdk-lts: needs-triage
-trusty_openjdk-lts: DNE
-xenial_openjdk-lts: DNE
-bionic_openjdk-lts: ignored (end of standard support)
-esm-infra/bionic_openjdk-lts: not-affected (code not present)
-focal_openjdk-lts: not-affected (code not present)
-jammy_openjdk-lts: not-affected (code not present)
-lunar_openjdk-lts: ignored (end of life, was needs-triage)
-mantic_openjdk-lts: not-affected (code not present)
-noble_openjdk-lts: not-affected (code not present)
-esm-apps/noble_openjdk-lts: not-affected (code not present)
-devel_openjdk-lts: not-affected (code not present)
-
-Patches_openjdk-13:
-upstream_openjdk-13: needs-triage
-trusty_openjdk-13: DNE
-xenial_openjdk-13: DNE
-bionic_openjdk-13: DNE
-focal_openjdk-13: ignored (superseded by openjdk-17)
-esm-apps/focal_openjdk-13: ignored (superseded by openjdk-17)
-jammy_openjdk-13: DNE
-lunar_openjdk-13: DNE
-mantic_openjdk-13: DNE
-noble_openjdk-13: DNE
-devel_openjdk-13: DNE
-
-Patches_openjdk-16:
-upstream_openjdk-16: needs-triage
-trusty_openjdk-16: DNE
-xenial_openjdk-16: DNE
-bionic_openjdk-16: DNE
-focal_openjdk-16: ignored (superseded by openjdk-17)
-esm-apps/focal_openjdk-16: ignored (superseded by openjdk-17)
-jammy_openjdk-16: DNE
-lunar_openjdk-16: DNE
-mantic_openjdk-16: DNE
-noble_openjdk-16: DNE
-devel_openjdk-16: DNE
-
-Patches_openjdk-17:
- upstream: https://github.com/openjdk/jdk17u/commit/f6f32bf256e34447f54be823fdfb2e64e235e404
-upstream_openjdk-17: needs-triage
-trusty_openjdk-17: DNE
-xenial_openjdk-17: DNE
-bionic_openjdk-17: ignored (end of standard support)
-esm-apps/bionic_openjdk-17: released (17.0.10+7-1~18.04.1)
-focal_openjdk-17: released (17.0.10+7-1~20.04.1)
-jammy_openjdk-17: released (17.0.10+7-1~22.04.1)
-esm-apps/jammy_openjdk-17: not-affected (17.0.10+7-1~22.04.1)
-lunar_openjdk-17: ignored (end of life, was needs-triage)
-mantic_openjdk-17: released (17.0.10+7-1~23.10.1)
-noble_openjdk-17: not-affected (17.0.10+7-1)
-devel_openjdk-17: not-affected (17.0.10+7-1)
-
-Patches_openjdk-18:
-upstream_openjdk-18: needs-triage
-trusty_openjdk-18: DNE
-xenial_openjdk-18: DNE
-bionic_openjdk-18: DNE
-focal_openjdk-18: DNE
-jammy_openjdk-18: ignored (superseded by openjdk-19)
-esm-apps/jammy_openjdk-18: ignored (superseded by openjdk-19)
-lunar_openjdk-18: ignored (superseded by openjdk-19)
-mantic_openjdk-18: DNE
-noble_openjdk-18: DNE
-devel_openjdk-18: DNE
-
-Patches_openjdk-19:
-upstream_openjdk-19: needs-triage
-trusty_openjdk-19: DNE
-xenial_openjdk-19: DNE
-bionic_openjdk-19: DNE
-focal_openjdk-19: DNE
-jammy_openjdk-19: ignored (no longer supported by upstream)
-lunar_openjdk-19: ignored (superseded by openjdk-20)
-mantic_openjdk-19: ignored (superseded by openjdk-20)
-noble_openjdk-19: DNE
-devel_openjdk-19: DNE
-
-Patches_openjdk-20:
-upstream_openjdk-20: needs-triage
-trusty_openjdk-20: DNE
-xenial_openjdk-20: DNE
-bionic_openjdk-20: DNE
-focal_openjdk-20: DNE
-jammy_openjdk-20: DNE
-lunar_openjdk-20: ignored (superseded by openjdk-21)
-mantic_openjdk-20: ignored (superseded by openjdk-21)
-noble_openjdk-20: DNE
-devel_openjdk-20: DNE
-
-Patches_openjdk-21:
-upstream_openjdk-21: needs-triage
-trusty_openjdk-21: DNE
-xenial_openjdk-21: DNE
-bionic_openjdk-21: DNE
-focal_openjdk-21: not-affected (code not present)
-jammy_openjdk-21: not-affected (code not present)
-lunar_openjdk-21: ignored (end of life, was needs-triage)
-mantic_openjdk-21: not-affected (code not present)
-noble_openjdk-21: not-affected (code not present)
-devel_openjdk-21: not-affected (code not present)
-
-Patches_openjdk-22:
-upstream_openjdk-22: needs-triage
-trusty_openjdk-22: DNE
-xenial_openjdk-22: DNE
-bionic_openjdk-22: DNE
-focal_openjdk-22: DNE
-jammy_openjdk-22: DNE
-lunar_openjdk-22: DNE
-mantic_openjdk-22: not-affected (code not present)
-devel_openjdk-22: DNE
diff --git a/active/CVE-2024-2173 b/active/CVE-2024-2173
deleted file mode 100644
index a2790c9..0000000
--- a/active/CVE-2024-2173
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2173
-PublicDate: 2024-03-06 19:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop.html
- https://issues.chromium.org/issues/325893559
- https://www.cve.org/CVERecord?id=CVE-2024-2173
-Description:
- Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111
- allowed a remote attacker to perform out of bounds memory access via a
- crafted HTML page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2174 b/active/CVE-2024-2174
deleted file mode 100644
index 324f774..0000000
--- a/active/CVE-2024-2174
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2174
-PublicDate: 2024-03-06 19:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop.html
- https://issues.chromium.org/issues/325866363
- https://www.cve.org/CVERecord?id=CVE-2024-2174
-Description:
- Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111
- allowed a remote attacker to potentially exploit heap corruption via a
- crafted HTML page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2176 b/active/CVE-2024-2176
deleted file mode 100644
index 7b47613..0000000
--- a/active/CVE-2024-2176
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2176
-PublicDate: 2024-03-06 19:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop.html
- https://issues.chromium.org/issues/325936438
- https://www.cve.org/CVERecord?id=CVE-2024-2176
-Description:
- Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a
- remote attacker to potentially exploit heap corruption via a crafted HTML
- page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-22195 b/active/CVE-2024-22195
deleted file mode 100644
index 73fbc92..0000000
--- a/active/CVE-2024-22195
+++ /dev/null
@@ -1,43 +0,0 @@
-PublicDateAtUSN: 2024-01-11 03:15:00 UTC
-Candidate: CVE-2024-22195
-PublicDate: 2024-01-11 03:15:00 UTC
-References:
- https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95
- https://github.com/pallets/jinja/releases/tag/3.1.3
- https://ubuntu.com/security/notices/USN-6599-1
- https://www.cve.org/CVERecord?id=CVE-2024-22195
-Description:
- Jinja is an extensible templating engine. Special placeholders in the
- template allow writing code similar to Python syntax. It is possible to
- inject arbitrary HTML attributes into the rendered HTML template,
- potentially leading to Cross-Site Scripting (XSS). The Jinja `xmlattr`
- filter can be abused to inject arbitrary HTML attribute keys and values,
- bypassing the auto escaping mechanism and potentially leading to XSS. It
- may also be possible to bypass attribute validation checks if they are
- blacklist-based.
- 
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to: leosilva
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N [6.1 MEDIUM]
-
-Patches_jinja2:
- upstream: https://github.com/pallets/jinja/commit/7dd3680e6eea0d77fde024763657aa4d884ddb23
-upstream_jinja2: needs-triage
-trusty_jinja2: ignored (end of standard support)
-trusty/esm_jinja2: released (2.7.2-2ubuntu0.1~esm2)
-xenial_jinja2: ignored (end of standard support)
-esm-infra/xenial_jinja2: released (2.8-1ubuntu0.1+esm2)
-bionic_jinja2: ignored (end of standard support)
-esm-infra/bionic_jinja2: released (2.10-1ubuntu0.18.04.1+esm1)
-focal_jinja2: released (2.10.1-2ubuntu0.2)
-jammy_jinja2: released (3.0.3-1ubuntu0.1)
-lunar_jinja2: ignored (end of life)
-mantic_jinja2: released (3.1.2-1ubuntu0.23.10.1)
-noble_jinja2: released (3.1.2-1ubuntu1)
-devel_jinja2: released (3.1.2-1ubuntu1)
diff --git a/active/CVE-2024-22563 b/active/CVE-2024-22563
deleted file mode 100644
index 9bf971e..0000000
--- a/active/CVE-2024-22563
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-22563
-PublicDate: 2024-01-19 15:15:00 UTC
-References:
- https://github.com/openvswitch/ovs-issues/issues/315
- https://www.cve.org/CVERecord?id=CVE-2024-22563
-Description:
- openvswitch 2.17.8 was discovered to contain a memory leak via the function
- xmalloc__ in openvswitch-2.17.8/lib/util.c.
-Ubuntu-Description:
-Notes:
- sbeattie> introduced in b6e840a ("pcap-file: Add nanosecond resolution
-   pcap support.") (v2.11.0)
- mdeslaur> This is fixed in 2.17.0, the CVE description is wrong
-Mitigation:
-Bugs:
-Priority: low
- Denial of service due to memory leak.
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]
-
-Patches_openvswitch:
- upstream: https://github.com/openvswitch/ovs/commit/3168f328c78cf6e4b3022940452673b0e49f7620
-upstream_openvswitch: released (2.13.5,2.17.0)
-trusty_openvswitch: not-affected (code not present)
-xenial_openvswitch: not-affected (code not present)
-esm-infra/xenial_openvswitch: not-affected (code not present)
-bionic_openvswitch: not-affected (code not present)
-esm-infra/bionic_openvswitch: not-affected (code not present)
-focal_openvswitch: released (2.13.8-0ubuntu1.1)
-jammy_openvswitch: not-affected
-lunar_openvswitch: not-affected
-mantic_openvswitch: not-affected
-noble_openvswitch: not-affected
-devel_openvswitch: not-affected
diff --git a/active/CVE-2024-22667 b/active/CVE-2024-22667
deleted file mode 100644
index 0432284..0000000
--- a/active/CVE-2024-22667
+++ /dev/null
@@ -1,39 +0,0 @@
-PublicDateAtUSN: 2024-02-05 08:15:00 UTC
-Candidate: CVE-2024-22667
-PublicDate: 2024-02-05 08:15:00 UTC
-References:
- https://gist.githubusercontent.com/henices/2467e7f22dcc2aa97a2453e197b55a0c/raw/7b54bccc9a129c604fb139266f4497ab7aaa94c7/gistfile1.txt
- https://ubuntu.com/security/notices/USN-6698-1
- https://www.cve.org/CVERecord?id=CVE-2024-22667
-Description:
- Vim before 9.0.2142 has a stack-based buffer overflow because
- did_set_langmap in map.c calls sprintf to write to the error buffer that is
- passed down to the option callback functions.
-Ubuntu-Description:
-Notes:
- mdeslaur> requires sourcing a vim commands file or similar
-Mitigation:
-Bugs:
-Priority: low
- Denial of service only because of stack protector
-Discovered-by: Zhen Zhou
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]
-
-
-Patches_vim:
- upstream: https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47
-Tags_vim: stack-protector
-upstream_vim: released (2:9.0.2189-1)
-trusty_vim: ignored (end of standard support)
-trusty/esm_vim: released (2:7.4.052-1ubuntu3.1+esm16)
-xenial_vim: ignored (end of standard support)
-esm-infra/xenial_vim: released (2:7.4.1689-3ubuntu1.5+esm23)
-bionic_vim: ignored (end of standard support)
-esm-infra/bionic_vim: released (2:8.0.1453-1ubuntu1.13+esm8)
-focal_vim: released (2:8.1.2269-1ubuntu5.22)
-jammy_vim: released (2:8.2.3995-1ubuntu2.16)
-mantic_vim: released (2:9.0.1672-1ubuntu2.3)
-noble_vim: not-affected (2:9.1.0-1ubuntu1)
-devel_vim: not-affected (2:9.1.0-1ubuntu1)
diff --git a/active/CVE-2024-22860 b/active/CVE-2024-22860
deleted file mode 100644
index 52828ce..0000000
--- a/active/CVE-2024-22860
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-22860
-PublicDate: 2024-01-27 06:15:00 UTC
-References:
- https://github.com/FFmpeg/FFmpeg/commit/d2e8974699a9e35cc1a926bf74a972300d629cd5 (n6.1)
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61991
- https://github.com/FFmpeg/FFmpeg/commit/d2e8974699a9e35cc1a926bf74a972300d629cd5
- https://www.cve.org/CVERecord?id=CVE-2024-22860
-Description:
- Integer overflow vulnerability in FFmpeg before n6.1, allows remote
- attackers to execute arbitrary code via the jpegxl_anim_read_packet
- component in the JPEG XL Animation decoder.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]
-
-Patches_ffmpeg:
-upstream_ffmpeg: released (7:6.1-1)
-trusty_ffmpeg: DNE
-xenial_ffmpeg: ignored (end of standard support)
-esm-apps/xenial_ffmpeg: not-affected (code not present)
-bionic_ffmpeg: ignored (end of standard support)
-esm-apps/bionic_ffmpeg: not-affected (code not present)
-focal_ffmpeg: not-affected (code not present)
-esm-apps/focal_ffmpeg: not-affected (code not present)
-jammy_ffmpeg: not-affected (code not present)
-esm-apps/jammy_ffmpeg: not-affected (code not present)
-mantic_ffmpeg: not-affected (code not present)
-noble_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
-esm-apps/noble_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
-devel_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
diff --git a/active/CVE-2024-22861 b/active/CVE-2024-22861
deleted file mode 100644
index 2eb1eb9..0000000
--- a/active/CVE-2024-22861
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-22861
-PublicDate: 2024-01-27 07:15:00 UTC
-References:
- https://github.com/FFmpeg/FFmpeg/commit/87b8c1081959e45ffdcbabb3d53ac9882ef2b5ce (n6.1)
- https://github.com/FFmpeg/FFmpeg/commit/87b8c1081959e45ffdcbabb3d53ac9882ef2b5ce
- https://www.cve.org/CVERecord?id=CVE-2024-22861
-Description:
- Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to
- cause a denial of service (DoS) via the avcodec/osq module.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]
-
-Patches_ffmpeg:
-upstream_ffmpeg: released (7:6.1-1)
-trusty_ffmpeg: DNE
-xenial_ffmpeg: ignored (end of standard support)
-esm-apps/xenial_ffmpeg: not-affected (code not present)
-bionic_ffmpeg: ignored (end of standard support)
-esm-apps/bionic_ffmpeg: not-affected (code not present)
-focal_ffmpeg: not-affected (code not present)
-esm-apps/focal_ffmpeg: not-affected (code not present)
-jammy_ffmpeg: not-affected (code not present)
-esm-apps/jammy_ffmpeg: not-affected (code not present)
-mantic_ffmpeg: not-affected (code not present)
-noble_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
-esm-apps/noble_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
-devel_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
diff --git a/active/CVE-2024-22862 b/active/CVE-2024-22862
deleted file mode 100644
index 545ceda..0000000
--- a/active/CVE-2024-22862
+++ /dev/null
@@ -1,35 +0,0 @@
-Candidate: CVE-2024-22862
-PublicDate: 2024-01-27 06:15:00 UTC
-References:
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7 (n6.1)
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113
- https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7
- https://www.cve.org/CVERecord?id=CVE-2024-22862
-Description:
- Integer overflow vulnerability in FFmpeg before n6.1, allows remote
- attackers to execute arbitrary code via the JJPEG XL Parser.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]
-
-Patches_ffmpeg:
-upstream_ffmpeg: released (7:6.1-1)
-trusty_ffmpeg: DNE
-xenial_ffmpeg: ignored (end of standard support)
-esm-apps/xenial_ffmpeg: not-affected (code not present)
-bionic_ffmpeg: ignored (end of standard support)
-esm-apps/bionic_ffmpeg: not-affected (code not present)
-focal_ffmpeg: not-affected (code not present)
-esm-apps/focal_ffmpeg: not-affected (code not present)
-jammy_ffmpeg: not-affected (code not present)
-esm-apps/jammy_ffmpeg: not-affected (code not present)
-mantic_ffmpeg: not-affected (code not present)
-noble_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
-esm-apps/noble_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
-devel_ffmpeg: not-affected (7:6.1.1-1ubuntu1)
diff --git a/active/CVE-2024-2313 b/active/CVE-2024-2313
deleted file mode 100644
index be338c3..0000000
--- a/active/CVE-2024-2313
+++ /dev/null
@@ -1,33 +0,0 @@
-Candidate: CVE-2024-2313
-PublicDate: 2024-03-10 23:15:00 UTC
-CRD: 2024-03-06
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2313
-Description:
- If kernel headers need to be extracted, bpftrace will attempt to load them
- from a temporary directory. An unprivileged attacker could use this to
- force bcc to load compromised linux headers. Linux distributions which
- provide kernel headers by default are not affected by default.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Mark Esler
-Assigned-to:
-CVSS:
- ubuntu: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L [2.8 LOW]
-
-Patches_bpftrace:
- upstream: https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998
-upstream_bpftrace: released (v0.20.2)
-trusty_bpftrace: DNE
-xenial_bpftrace: DNE
-bionic_bpftrace: DNE
-focal_bpftrace: not-affected (kernel headers are provided by system)
-esm-apps/focal_bpftrace: not-affected (kernel headers are provided by system)
-jammy_bpftrace: not-affected (kernel headers are provided by system)
-esm-apps/jammy_bpftrace: not-affected (kernel headers are provided by system)
-mantic_bpftrace: not-affected (kernel headers are provided by system)
-noble_bpftrace: not-affected (kernel headers are provided by system)
-devel_bpftrace: not-affected (kernel headers are provided by system)
diff --git a/active/CVE-2024-2314 b/active/CVE-2024-2314
deleted file mode 100644
index 546d4ba..0000000
--- a/active/CVE-2024-2314
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-2314
-PublicDate: 2024-03-10 23:15:00 UTC
-CRD: 2024-03-07
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2314
-Description:
- If kernel headers need to be extracted, bcc will attempt to load them from
- a temporary directory. An unprivileged attacker could use this to force bcc
- to load compromised linux headers. Linux distributions which provide kernel
- headers by default are not affected by default.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Mark Esler
-Assigned-to:
-CVSS:
- ubuntu: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L [2.8 LOW]
-
-Patches_bpfcc:
- upstream: https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342
-upstream_bpfcc: released
-trusty_bpfcc: DNE
-xenial_bpfcc: DNE
-bionic_bpfcc: ignored (end of standard support)
-esm-apps/bionic_bpfcc: not-affected (kernel headers are provided by system)
-focal_bpfcc: not-affected (kernel headers are provided by system)
-esm-apps/focal_bpfcc: not-affected (kernel headers are provided by system)
-jammy_bpfcc: not-affected (kernel headers are provided by system)
-esm-apps/jammy_bpfcc: not-affected (kernel headers are provided by system)
-mantic_bpfcc: not-affected (kernel headers are provided by system)
-noble_bpfcc: not-affected (kernel headers are provided by system)
-devel_bpfcc: not-affected (kernel headers are provided by system)
diff --git a/active/CVE-2024-2379 b/active/CVE-2024-2379
deleted file mode 100644
index 557f809..0000000
--- a/active/CVE-2024-2379
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-2379
-PublicDate: 2024-03-27 08:15:00 UTC
-CRD: 2024-03-27 07:00:00 UTC
-References:
- https://curl.se/docs/CVE-2024-2379.html
- https://www.cve.org/CVERecord?id=CVE-2024-2379
-Description:
- libcurl skips the certificate verification for a QUIC connection under
- certain conditions, when built to use wolfSSL. If told to use an
- unknown/bad cipher or curve, the error path accidentally skips the
- verification and returns OK, thus ignoring any certificate problems.
-Ubuntu-Description:
-Notes:
- mdeslaur> Ubuntu package does not use the wolfSSL backend.
- mdeslaur> Only affects 8.6.0.
-Mitigation:
-Bugs:
-Priority: low
- Upstream developers consider this a low severity issue
-Discovered-by: Dexter Gerig
-Assigned-to:
-CVSS:
-
-Patches_curl:
- upstream: https://github.com/curl/curl/commit/aedbbdf18e689a5eee8dc396
-upstream_curl: released (8.7.0)
-trusty/esm_curl: not-affected (code not compiled)
-esm-infra/xenial_curl: not-affected (code not compiled)
-esm-infra/bionic_curl: not-affected (code not compiled)
-focal_curl: not-affected (code not compiled)
-jammy_curl: not-affected (code not compiled)
-mantic_curl: not-affected (code not compiled)
-noble_curl: not-affected (code not compiled)
-devel_curl: not-affected (code not compiled)
diff --git a/active/CVE-2024-2397 b/active/CVE-2024-2397
deleted file mode 100644
index c2fd9c7..0000000
--- a/active/CVE-2024-2397
+++ /dev/null
@@ -1,30 +0,0 @@
-Candidate: CVE-2024-2397
-PublicDate: 2024-04-12 14:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2397
- https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2
-Description:
- Due to a bug in packet data buffers management, the PPP printer in tcpdump
- can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap
- savefile.  This problem does not affect any tcpdump release, but it
- affected the git master branch from 2023-06-05 to 2024-03-21.
-Ubuntu-Description:
-Notes:
- mdeslaur> only affected the master branch, not packages in Ubuntu
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_tcpdump:
-upstream_tcpdump: not-affected (debian: Vulnerable code not present in any version uploaded to Debian)
-trusty/esm_tcpdump: not-affected
-esm-infra/xenial_tcpdump: not-affected
-esm-infra/bionic_tcpdump: not-affected
-focal_tcpdump: not-affected
-jammy_tcpdump: not-affected
-mantic_tcpdump: not-affected
-noble_tcpdump: not-affected
-devel_tcpdump: not-affected
diff --git a/active/CVE-2024-2398 b/active/CVE-2024-2398
deleted file mode 100644
index a3be88a..0000000
--- a/active/CVE-2024-2398
+++ /dev/null
@@ -1,39 +0,0 @@
-PublicDateAtUSN: 2024-03-27 07:00:00 UTC
-Candidate: CVE-2024-2398
-PublicDate: 2024-03-27 08:15:00 UTC
-CRD: 2024-03-27 07:00:00 UTC
-References:
- https://curl.se/docs/CVE-2024-2398.html
- https://ubuntu.com/security/notices/USN-6718-1
- https://ubuntu.com/security/notices/USN-6718-2
- https://www.cve.org/CVERecord?id=CVE-2024-2398
- https://ubuntu.com/security/notices/USN-6718-3
-Description:
- When an application tells libcurl it wants to allow HTTP/2 server push, and
- the amount of received headers for the push surpasses the maximum allowed
- limit (1000), libcurl aborts the server push. When aborting, libcurl
- inadvertently does not free all the previously allocated headers and
- instead leaks the memory.  Further, this error condition fails silently and
- is therefore not easily detected by an application.
-Ubuntu-Description:
-Notes:
- mdeslaur> affects curl 7.44.0 to and including 8.6.0
- mdeslaur> introduced in https://github.com/curl/curl/commit/ea7134ac874a66107e54ff9
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: w0x42 on hackerone
-Assigned-to:
-CVSS:
-
-Patches_curl:
- upstream: https://github.com/curl/curl/commit/deca8039991886a559b67bcd6
-upstream_curl: released (8.7.0)
-trusty/esm_curl: not-affected
-esm-infra/xenial_curl: released (7.47.0-1ubuntu2.19+esm12)
-esm-infra/bionic_curl: released (7.58.0-2ubuntu3.24+esm4)
-focal_curl: released (7.68.0-1ubuntu2.22)
-jammy_curl: released (7.81.0-1ubuntu1.16)
-mantic_curl: released (8.2.1-1ubuntu3.3)
-noble_curl: released (8.5.0-2ubuntu10.1)
-devel_curl: released (8.5.0-2ubuntu10.1)
diff --git a/active/CVE-2024-2400 b/active/CVE-2024-2400
deleted file mode 100644
index 7977d7a..0000000
--- a/active/CVE-2024-2400
+++ /dev/null
@@ -1,33 +0,0 @@
-Candidate: CVE-2024-2400
-PublicDate: 2024-03-13 04:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_12.html
- https://issues.chromium.org/issues/327696052
- https://lists.fedoraproject.org/archives/list/[e-mail]/message/T55OZ7JOMLNT5ICM4DTCZOJZD6TZICKO/
- https://lists.fedoraproject.org/archives/list/[e-mail]/message/VIKPDCUMQNF2DFB7TU3V4ISJ7WFJH7YI/
- https://www.cve.org/CVERecord?id=CVE-2024-2400
-Description:
- Use after free in Performance Manager in Google Chrome prior to
- 122.0.6261.128 allowed a remote attacker to potentially exploit heap
- corruption via a crafted HTML page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-24246 b/active/CVE-2024-24246
deleted file mode 100644
index b34a39b..0000000
--- a/active/CVE-2024-24246
+++ /dev/null
@@ -1,34 +0,0 @@
-PublicDateAtUSN: 2024-02-29 20:15:00 UTC
-Candidate: CVE-2024-24246
-PublicDate: 2024-02-29 20:15:00 UTC
-References:
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX3D3YCNS6CQL3774OFUROLP3EM25ILC/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WLK6ICPJUMOJNHZQWXAA5MPXG5JHZZL/
- https://ubuntu.com/security/notices/USN-6713-1
- https://www.cve.org/CVERecord?id=CVE-2024-24246
-Description:
- Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash
- the application via the std::__shared_count() function at
- /bits/shared_ptr_base.h.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
- https://github.com/qpdf/qpdf/issues/1123
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [5.5 MEDIUM]
-
-
-Patches_qpdf:
- upstream: https://github.com/qpdf/qpdf/commit/cb0f390cc1f98a8e82b27259f8f3cd5f162992eb (v11.9.0)
-upstream_qpdf: released (11.9.0-1)
-esm-infra/xenial_qpdf: not-affected (code not present)
-esm-infra/bionic_qpdf: not-affected (code not present)
-focal_qpdf: not-affected (code not present)
-jammy_qpdf: not-affected (code not present)
-mantic_qpdf: released (11.5.0-1ubuntu1.1)
-noble_qpdf: not-affected (11.9.0-1)
-devel_qpdf: not-affected (11.9.0-1)
diff --git a/active/CVE-2024-24482 b/active/CVE-2024-24482
deleted file mode 100644
index 41f5c51..0000000
--- a/active/CVE-2024-24482
+++ /dev/null
@@ -1,33 +0,0 @@
-Candidate: CVE-2024-24482
-PublicDate: 2024-02-02 05:15:00 UTC
-References:
- https://github.com/iBotPeaches/Apktool/security/advisories/GHSA-vgwr-4w3p-xmjv
- https://www.cve.org/CVERecord?id=CVE-2024-24482
-Description:
- Aprktool before 2.9.3 on Windows allows ../ and /.. directory traversal.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL]
-
-
-Patches_apktool:
-upstream_apktool: not-affected (Windows only)
-trusty_apktool: DNE
-xenial_apktool: ignored (end of standard support)
-esm-apps/xenial_apktool: not-affected (Windows only)
-bionic_apktool: ignored (end of standard support)
-esm-apps/bionic_apktool: not-affected (Windows only)
-focal_apktool: not-affected (Windows only)
-esm-apps/focal_apktool: not-affected (Windows only)
-jammy_apktool: not-affected (Windows only)
-esm-apps/jammy_apktool: not-affected (Windows only)
-mantic_apktool: not-affected (Windows only)
-noble_apktool: not-affected (Windows only)
-esm-apps/noble_apktool: not-affected (Windows only)
-devel_apktool: not-affected (Windows only)
diff --git a/active/CVE-2024-24575 b/active/CVE-2024-24575
deleted file mode 100644
index 5a4f1ef..0000000
--- a/active/CVE-2024-24575
+++ /dev/null
@@ -1,48 +0,0 @@
-PublicDateAtUSN: 2024-02-06 22:16:00 UTC
-Candidate: CVE-2024-24575
-PublicDate: 2024-02-06 22:16:00 UTC
-References:
- https://github.com/libgit2/libgit2/security/advisories/GHSA-54mf-x2rh-hq9v
- https://github.com/libgit2/libgit2/commit/add2dabb3c16aa49b33904dcdc07cd915efc12fa
- https://github.com/libgit2/libgit2/releases/tag/v1.6.5
- https://github.com/libgit2/libgit2/releases/tag/v1.7.2
- https://ubuntu.com/security/notices/USN-6678-1
- https://www.cve.org/CVERecord?id=CVE-2024-24575
-Description:
- libgit2 is a portable C implementation of the Git core methods provided as
- a linkable library with a solid API, allowing to build Git functionality
- into your application. Using well-crafted inputs to `git_revparse_single`
- can cause the function to enter an infinite loop, potentially causing a
- Denial of Service attack in the calling application. The revparse function
- in `src/libgit2/revparse.c` uses a loop to parse the user-provided spec
- string. There is an edge-case during parsing that allows a bad actor to
- force the loop conditions to access arbitrary memory. Potentially, this
- could also leak memory if the extracted rev spec is reflected back to the
- attacker. As such, libgit2 versions before 1.4.0 are not affected. Users
- should upgrade to version 1.6.5 or 1.7.2.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to: fabian
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]
-
-
-Patches_libgit2:
-upstream_libgit2: needs-triage
-trusty_libgit2: ignored (end of standard support)
-trusty/esm_libgit2: not-affected
-xenial_libgit2: ignored (end of standard support)
-esm-apps/xenial_libgit2: not-affected
-bionic_libgit2: ignored (end of standard support)
-esm-apps/bionic_libgit2: not-affected
-focal_libgit2: not-affected
-esm-apps/focal_libgit2: not-affected
-jammy_libgit2: not-affected
-esm-apps/jammy_libgit2: not-affected
-mantic_libgit2: released (1.5.1+ds-1ubuntu1.1)
-noble_libgit2: not-affected
-devel_libgit2: not-affected
diff --git a/active/CVE-2024-2466 b/active/CVE-2024-2466
deleted file mode 100644
index 534bf6a..0000000
--- a/active/CVE-2024-2466
+++ /dev/null
@@ -1,36 +0,0 @@
-Candidate: CVE-2024-2466
-PublicDate: 2024-03-27 08:15:00 UTC
-CRD: 2024-03-27 07:00:00 UTC
-References:
- https://curl.se/docs/CVE-2024-2466.html
- https://www.cve.org/CVERecord?id=CVE-2024-2466
-Description:
- libcurl did not check the server certificate of TLS connections done to a
- host specified as an IP address, when built to use mbedTLS.  libcurl would
- wrongly avoid using the set hostname function when the specified hostname
- was given as an IP address, therefore completely skipping the certificate
- check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3,
- SMTPS, etc).
-Ubuntu-Description:
-Notes:
- mdeslaur> Ubuntu package does not use the wolfSSL backend.
- mdeslaur> affects curl 8.5.0 to and including 8.6.0
- mdeslaur> introduced in https://github.com/curl/curl/commit/fa714830e92cba7b16b9d3f
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Frank Yueh
-Assigned-to:
-CVSS:
-
-Patches_curl:
- upstream: https://github.com/curl/curl/commit/3d0fd382a29b95561b90b7ea3e7e
-upstream_curl: released (8.7.0)
-trusty/esm_curl: not-affected (code not compiled)
-esm-infra/xenial_curl: not-affected (code not compiled)
-esm-infra/bionic_curl: not-affected (code not compiled)
-focal_curl: not-affected (code not compiled)
-jammy_curl: not-affected (code not compiled)
-mantic_curl: not-affected (code not compiled)
-noble_curl: not-affected (code not compiled)
-devel_curl: not-affected (code not compiled)
diff --git a/active/CVE-2024-24761 b/active/CVE-2024-24761
deleted file mode 100644
index a6000d8..0000000
--- a/active/CVE-2024-24761
+++ /dev/null
@@ -1,29 +0,0 @@
-Candidate: CVE-2024-24761
-PublicDate: 2024-03-06 18:15:00 UTC
-References:
- https://github.com/galette/galette/security/advisories/GHSA-jrqg-mpwv-pxpv
- https://github.com/galette/galette/commit/a5c18bb9819b8da1b3ef58f3e79577083c657fbb
- https://www.cve.org/CVERecord?id=CVE-2024-24761
-Description:
- Galette is a membership management web application for non profit
- organizations. Starting in version 1.0.0 and prior to version 1.0.2, public
- pages are per default restricted to only administrators and staff members.
- From configuration, it is possible to restrict to up-to-date members or to
- everyone. Version 1.0.2 fixes this issue.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_galette:
-upstream_galette: needs-triage
-esm-apps/xenial_galette: not-affected (code not present)
-focal_galette: DNE
-jammy_galette: DNE
-mantic_galette: DNE
-noble_galette: DNE
-devel_galette: DNE
diff --git a/active/CVE-2024-24806 b/active/CVE-2024-24806
deleted file mode 100644
index eeca043..0000000
--- a/active/CVE-2024-24806
+++ /dev/null
@@ -1,53 +0,0 @@
-PublicDateAtUSN: 2024-02-07 22:15:00 UTC
-Candidate: CVE-2024-24806
-PublicDate: 2024-02-07 22:15:00 UTC
-References:
- https://github.com/libuv/libuv/security/advisories/GHSA-f74f-cvh7-c6q6
- http://www.openwall.com/lists/oss-security/2024/02/08/2
- https://ubuntu.com/security/notices/USN-6666-1
- https://www.cve.org/CVERecord?id=CVE-2024-24806
-Description:
- libuv is a multi-platform support library with a focus on asynchronous I/O.
- The `uv_getaddrinfo` function in `src/unix/getaddrinfo.c` (and its windows
- counterpart `src/win/getaddrinfo.c`), truncates hostnames to 256 characters
- before calling `getaddrinfo`. This behavior can be exploited to create
- addresses like `0x00007f000001`, which are considered valid by
- `getaddrinfo` and could allow an attacker to craft payloads that resolve to
- unintended IP addresses, bypassing developer checks. The vulnerability
- arises due to how the `hostname_ascii` variable (with a length of 256
- bytes) is handled in `uv_getaddrinfo` and subsequently in
- `uv__idna_toascii`. When the hostname exceeds 256 characters, it gets
- truncated without a terminating null byte. As a result attackers may be
- able to access internal APIs or for websites (similar to MySpace) that
- allows users to have `username.example.com` pages. Internal services that
- crawl or cache these user pages can be exposed to SSRF attacks if a
- malicious user chooses a long vulnerable username. This issue has been
- addressed in release version 1.48.0. Users are advised to upgrade. There
- are no known workarounds for this vulnerability.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063484
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L [7.3 HIGH]
-
-
-Patches_libuv1:
- upstream: https://github.com/libuv/libuv/commit/0f2d7e784a256b54b2385043438848047bc2a629 (v1.48.0)
- upstream: https://github.com/libuv/libuv/commit/3530bcc30350d4a6ccf35d2f7b33e23292b9de70 (v1.48.0)
- upstream: https://github.com/libuv/libuv/commit/e0327e1d508b8207c9150b6e582f0adf26213c39 (v1.48.0)
-upstream_libuv1: needs-triage
-trusty_libuv1: DNE
-xenial_libuv1: ignored (end of standard support)
-esm-apps/xenial_libuv1: not-affected (code not present)
-bionic_libuv1: ignored (end of standard support)
-esm-infra/bionic_libuv1: not-affected (code not present)
-focal_libuv1: released (1.34.2-1ubuntu1.5)
-jammy_libuv1: released (1.43.0-1ubuntu0.1)
-mantic_libuv1: released (1.44.2-1ubuntu0.1)
-noble_libuv1: not-affected (1.48.0-1)
-devel_libuv1: not-affected (1.48.0-1)
diff --git a/active/CVE-2024-24826 b/active/CVE-2024-24826
deleted file mode 100644
index 266072c..0000000
--- a/active/CVE-2024-24826
+++ /dev/null
@@ -1,37 +0,0 @@
-Candidate: CVE-2024-24826
-PublicDate: 2024-02-12 23:15:00 UTC
-References:
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-g9xm-7538-mq8w
- https://github.com/Exiv2/exiv2/pull/2337
- https://www.cve.org/CVERecord?id=CVE-2024-24826
-Description:
- Exiv2 is a command-line utility and C++ library for reading, writing,
- deleting, and modifying the metadata of image files. An out-of-bounds read
- was found in Exiv2 version v0.28.1. The vulnerable function,
- `QuickTimeVideo::NikonTagsDecoder`, was new in v0.28.0, so Exiv2 versions
- before v0.28 are _not_ affected. The out-of-bounds read is triggered when
- Exiv2 is used to read the metadata of a crafted video file. In most cases
- this out of bounds read will result in a crash. This bug is fixed in
- version v0.28.2. Users are advised to upgrade. There are no known
- workarounds for this vulnerability.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_exiv2:
-upstream_exiv2: released (v0.28.2)
-trusty_exiv2: ignored (end of standard support)
-xenial_exiv2: ignored (end of standard support)
-esm-infra/xenial_exiv2: not-affected
-bionic_exiv2: ignored (end of standard support)
-esm-infra/bionic_exiv2: not-affected
-focal_exiv2: not-affected
-jammy_exiv2: not-affected
-mantic_exiv2: not-affected (0.27.6-1)
-noble_exiv2: not-affected
-devel_exiv2: not-affected
diff --git a/active/CVE-2024-24989 b/active/CVE-2024-24989
deleted file mode 100644
index b651bd1..0000000
--- a/active/CVE-2024-24989
+++ /dev/null
@@ -1,39 +0,0 @@
-Candidate: CVE-2024-24989
-PublicDate: 2024-02-14 17:15:00 UTC
-References:
- https://mailman.nginx.org/pipermail/nginx-announce/2024/NW6MNW34VZ6HDIHH5YFBIJYZJN7FGNAV.html
- https://www.cve.org/CVERecord?id=CVE-2024-24989
-Description:
- When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module,
- undisclosed requests can cause NGINX worker processes to terminate. Note:
- The HTTP/3 QUIC module is not enabled by default and is considered
- experimental. For more information, refer to Support for QUIC and HTTP/3
- https://nginx.org/en/docs/quic.html . NOTE: Software versions which have
- reached End of Technical Support (EoTS) are not evaluated
-Ubuntu-Description:
-Notes:
- mdeslaur> only when built with ngx_http_v3_module
- mdeslaur> introduced in 1.25.0+
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_nginx:
- upstream: https://github.com/nginx/nginx/commit/ed47f72a85fb6279e2ba5d431f64ea4db695cf4e (maybe?)
- upstream: https://github.com/nginx/nginx/commit/5902baf680609f884a1e11ff2b82a0bffb3724cc
- upstream: https://github.com/nginx/nginx/commit/5818f8a6693b3c0d95021f2ee58b69dcf848911c
-upstream_nginx: released (1.25.4)
-trusty_nginx: ignored (end of standard support)
-trusty/esm_nginx: not-affected (code not present)
-xenial_nginx: ignored (end of standard support)
-esm-infra/xenial_nginx: not-affected (code not present)
-bionic_nginx: ignored (end of standard support)
-esm-infra/bionic_nginx: not-affected (code not present)
-focal_nginx: not-affected (code not present)
-jammy_nginx: not-affected (code not present)
-mantic_nginx: not-affected (code not present)
-noble_nginx: not-affected (code not present)
-devel_nginx: not-affected (code not present)
diff --git a/active/CVE-2024-24990 b/active/CVE-2024-24990
deleted file mode 100644
index 3aa5be4..0000000
--- a/active/CVE-2024-24990
+++ /dev/null
@@ -1,39 +0,0 @@
-Candidate: CVE-2024-24990
-PublicDate: 2024-02-14 17:15:00 UTC
-References:
- https://mailman.nginx.org/pipermail/nginx-announce/2024/NW6MNW34VZ6HDIHH5YFBIJYZJN7FGNAV.html
- https://www.cve.org/CVERecord?id=CVE-2024-24990
-Description:
- When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module,
- undisclosed requests can cause NGINX worker processes to terminate. Note:
- The HTTP/3 QUIC module is not enabled by default and is considered
- experimental. For more information, refer to Support for QUIC and HTTP/3
- https://nginx.org/en/docs/quic.html . Note: Software versions which have
- reached End of Technical Support (EoTS) are not evaluated
-Ubuntu-Description:
-Notes:
- mdeslaur> only when built with ngx_http_v3_module
- mdeslaur> introduced in 1.25.0+
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_nginx:
- upstream: https://github.com/nginx/nginx/commit/ed47f72a85fb6279e2ba5d431f64ea4db695cf4e (maybe?)
- upstream: https://github.com/nginx/nginx/commit/5902baf680609f884a1e11ff2b82a0bffb3724cc
- upstream: https://github.com/nginx/nginx/commit/5818f8a6693b3c0d95021f2ee58b69dcf848911c
-upstream_nginx: released (1.25.4)
-trusty_nginx: ignored (end of standard support)
-trusty/esm_nginx: not-affected (code not present)
-xenial_nginx: ignored (end of standard support)
-esm-infra/xenial_nginx: not-affected (code not present)
-bionic_nginx: ignored (end of standard support)
-esm-infra/bionic_nginx: not-affected (code not present)
-focal_nginx: not-affected (code not present)
-jammy_nginx: not-affected (code not present)
-mantic_nginx: not-affected (code not present)
-noble_nginx: not-affected (code not present)
-devel_nginx: not-affected (code not present)
diff --git a/active/CVE-2024-25112 b/active/CVE-2024-25112
deleted file mode 100644
index 84bb3d9..0000000
--- a/active/CVE-2024-25112
+++ /dev/null
@@ -1,37 +0,0 @@
-Candidate: CVE-2024-25112
-PublicDate: 2024-02-12 23:15:00 UTC
-References:
- https://github.com/Exiv2/exiv2/security/advisories/GHSA-crmj-qh74-2r36
- https://github.com/Exiv2/exiv2/pull/2337
- https://www.cve.org/CVERecord?id=CVE-2024-25112
-Description:
- Exiv2 is a command-line utility and C++ library for reading, writing,
- deleting, and modifying the metadata of image files. A denial-of-service
- was found in Exiv2 version v0.28.1: an unbounded recursion can cause Exiv2
- to crash by exhausting the stack. The vulnerable function,
- `QuickTimeVideo::multipleEntriesDecoder`, was new in v0.28.0, so Exiv2
- versions before v0.28 are _not_ affected. The denial-of-service is
- triggered when Exiv2 is used to read the metadata of a crafted video file.
- This bug is fixed in version v0.28.2. Users are advised to upgrade. There
- are no known workarounds for this vulnerability.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_exiv2:
-upstream_exiv2: released (v0.28.2)
-trusty_exiv2: ignored (end of standard support)
-xenial_exiv2: ignored (end of standard support)
-esm-infra/xenial_exiv2: not-affected
-bionic_exiv2: ignored (end of standard support)
-esm-infra/bionic_exiv2: not-affected
-focal_exiv2: not-affected
-jammy_exiv2: not-affected
-mantic_exiv2: not-affected (0.27.6-1)
-noble_exiv2: not-affected
-devel_exiv2: not-affected
diff --git a/active/CVE-2024-2625 b/active/CVE-2024-2625
deleted file mode 100644
index 2c545c9..0000000
--- a/active/CVE-2024-2625
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2625
-PublicDate: 2024-03-20 17:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2625
-Description:
- Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58
- allowed a remote attacker to potentially exploit object corruption via a
- crafted HTML page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2626 b/active/CVE-2024-2626
deleted file mode 100644
index 48a6876..0000000
--- a/active/CVE-2024-2626
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2626
-PublicDate: 2024-03-20 17:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2626
-Description:
- Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58
- allowed a remote attacker to perform out of bounds memory access via a
- crafted HTML page. (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N [6.5 MEDIUM]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2627 b/active/CVE-2024-2627
deleted file mode 100644
index 705d601..0000000
--- a/active/CVE-2024-2627
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2627
-PublicDate: 2024-03-20 17:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2627
-Description:
- Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a
- remote attacker to potentially exploit heap corruption via a crafted HTML
- page. (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2628 b/active/CVE-2024-2628
deleted file mode 100644
index 5cf9d33..0000000
--- a/active/CVE-2024-2628
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2628
-PublicDate: 2024-03-20 17:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2628
-Description:
- Inappropriate implementation in Downloads in Google Chrome prior to
- 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a
- crafted URL. (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N [4.3 MEDIUM]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2629 b/active/CVE-2024-2629
deleted file mode 100644
index 5587c83..0000000
--- a/active/CVE-2024-2629
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2629
-PublicDate: 2024-03-20 17:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2629
-Description:
- Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58
- allowed a remote attacker to perform UI spoofing via a crafted HTML page.
- (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N [4.3 MEDIUM]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2630 b/active/CVE-2024-2630
deleted file mode 100644
index b732685..0000000
--- a/active/CVE-2024-2630
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2630
-PublicDate: 2024-03-20 17:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2630
-Description:
- Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58
- allowed a remote attacker to leak cross-origin data via a crafted HTML
- page. (Chromium security severity: Medium)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N [6.5 MEDIUM]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-2631 b/active/CVE-2024-2631
deleted file mode 100644
index f4acd57..0000000
--- a/active/CVE-2024-2631
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2631
-PublicDate: 2024-03-20 17:15:00 UTC
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2631
-Description:
- Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58
- allowed a remote attacker to perform UI spoofing via a crafted HTML page.
- (Chromium security severity: Low)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
- nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N [4.3 MEDIUM]
-
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-27285 b/active/CVE-2024-27285
deleted file mode 100644
index dff6794..0000000
--- a/active/CVE-2024-27285
+++ /dev/null
@@ -1,42 +0,0 @@
-PublicDateAtUSN: 2024-02-29
-Candidate: CVE-2024-27285
-PublicDate: 2024-02-28 20:15:00 UTC
-References:
- https://github.com/lsegal/yard/security/advisories/GHSA-8mq4-9jjh-9xrc
- https://github.com/lsegal/yard/commit/d78fc393d603c4fc35975969296ed381146a29d4 (v0.9.35)
- https://github.com/lsegal/yard/commit/c88406e4b78f8dd4ba38c79eea0bcec716dbbef8 (v0.9.36)
- https://github.com/lsegal/yard/commit/2a0b9990b64ceeeb0456177c593e36e204a06df1 (v0.9.36)
- https://github.com/lsegal/yard/commit/a831a596b2a7cabdd2e17855dd179af2ebf3d559 (v0.9.36)
- https://github.com/lsegal/yard/commit/2069e2bf08293bda2fcc78f7d0698af6354054be
- https://www.cve.org/CVERecord?id=CVE-2024-27285
- https://ubuntu.com/security/notices/USN-6731-1
-Description:
- YARD is a Ruby Documentation tool. The "frames.html" file within the Yard
- Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS)
- attacks due to inadequate sanitization of user input within the JavaScript
- segment of the "frames.erb" template file. This vulnerability is fixed in
- 0.9.36.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: Aviv Keller
-Assigned-to:
-CVSS:
-
-Patches_yard:
-upstream_yard: released (0.9.36)
-trusty_yard: ignored (end of standard support)
-xenial_yard: ignored (end of standard support)
-esm-apps/xenial_yard: released (0.8.7.6+git20160220-3ubuntu0.1~esm1)
-bionic_yard: ignored (end of standard support)
-esm-apps/bionic_yard: released (0.9.12-2ubuntu0.1~esm1)
-focal_yard: released (0.9.24-1+deb11u1build0.20.04.1)
-esm-apps/focal_yard: not-affected (0.9.24-1+deb11u1build0.20.04.1)
-jammy_yard: released (0.9.26-1ubuntu0.1)
-esm-apps/jammy_yard: not-affected (0.9.26-1ubuntu0.1)
-mantic_yard: released (0.9.28-2ubuntu0.1)
-noble_yard: not-affected (0.9.36-1)
-esm-apps/noble_yard: not-affected (0.9.36-1)
-devel_yard: not-affected (0.9.36-1)
diff --git a/active/CVE-2024-27308 b/active/CVE-2024-27308
deleted file mode 100644
index 69b02b9..0000000
--- a/active/CVE-2024-27308
+++ /dev/null
@@ -1,55 +0,0 @@
-Candidate: CVE-2024-27308
-PublicDate: 2024-03-06 20:15:00 UTC
-References:
- https://rustsec.org/advisories/RUSTSEC-2024-0019.html
- https://github.com/tokio-rs/mio/security/advisories/GHSA-r8w9-5wcg-vfj7
- https://github.com/tokio-rs/tokio/issues/6369
- https://github.com/tokio-rs/mio/pull/1760
- https://github.com/tokio-rs/mio/commit/90d4fe00df870acd3d38f3dc4face9aacab8fbb9
- https://www.cve.org/CVERecord?id=CVE-2024-27308
-Description:
- Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio
- will under some circumstances return invalid tokens that correspond to
- named pipes that have already been deregistered from the mio registry. The
- impact of this vulnerability depends on how mio is used. For some
- applications, invalid tokens may be ignored or cause a warning or a crash.
- On the other hand, for applications that store pointers in the tokens, this
- vulnerability may result in a use-after-free. For users of Tokio, this
- vulnerability is serious and can result in a use-after-free in Tokio. The
- vulnerability is Windows-specific, and can only happen if you are using
- named pipes. Other IO resources are not affected. This vulnerability has
- been fixed in mio v0.8.11. All versions of mio between v0.7.2 and v0.8.10
- are vulnerable. Tokio is vulnerable when you are using a vulnerable version
- of mio AND you are using at least Tokio v1.30.0. Versions of Tokio prior to
- v1.30.0 will ignore invalid tokens, so they are not vulnerable. Vulnerable
- libraries that use mio can work around this issue by detecting and ignoring
- invalid tokens.
-Ubuntu-Description:
-Notes:
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_rust-mio:
-upstream_rust-mio: not-affected (debian: Windows-specific)
-focal_rust-mio: not-affected (Windows only)
-esm-apps/focal_rust-mio: not-affected (Windows only)
-jammy_rust-mio: not-affected (Windows only)
-esm-apps/jammy_rust-mio: not-affected (Windows only)
-mantic_rust-mio: not-affected (Windows only)
-noble_rust-mio: not-affected (Windows only)
-esm-apps/noble_rust-mio: not-affected (Windows only)
-devel_rust-mio: not-affected (Windows only)
-
-Patches_rust-mio-0.6:
-upstream_rust-mio-0.6: not-affected (debian: Vulnerable code not present)
-focal_rust-mio-0.6: DNE
-jammy_rust-mio-0.6: not-affected (code not present)
-esm-apps/jammy_rust-mio-0.6: not-affected (code not present)
-mantic_rust-mio-0.6: not-affected (code not present)
-noble_rust-mio-0.6: not-affected (code not present)
-esm-apps/noble_rust-mio-0.6: not-affected (code not present)
-devel_rust-mio-0.6: not-affected (code not present)
diff --git a/active/CVE-2024-27456 b/active/CVE-2024-27456
deleted file mode 100644
index 33ab5ee..0000000
--- a/active/CVE-2024-27456
+++ /dev/null
@@ -1,35 +0,0 @@
-Candidate: CVE-2024-27456
-PublicDate: 2024-02-26 16:28:00 UTC
-References:
- https://github.com/cyu/rack-cors/issues/274
- https://www.cve.org/CVERecord?id=CVE-2024-27456
-Description:
- rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions for the .rb
- files.
-Ubuntu-Description:
-Notes:
- alexmurray> Only affects the rack-cors gem, not the ruby-rack-cors package
-  as shipped in Ubuntu
-Mitigation:
-Bugs:
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064862
-Priority: negligible
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_ruby-rack-cors:
-upstream_ruby-rack-cors: not-affected
-trusty_ruby-rack-cors: ignored (end of standard support)
-xenial_ruby-rack-cors: ignored (end of standard support)
-esm-apps/xenial_ruby-rack-cors: not-affected
-bionic_ruby-rack-cors: ignored (end of standard support)
-esm-apps/bionic_ruby-rack-cors: not-affected
-focal_ruby-rack-cors: not-affected
-esm-apps/focal_ruby-rack-cors: not-affected
-jammy_ruby-rack-cors: not-affected
-esm-apps/jammy_ruby-rack-cors: not-affected
-mantic_ruby-rack-cors: not-affected
-noble_ruby-rack-cors: not-affected
-esm-apps/noble_ruby-rack-cors: not-affected
-devel_ruby-rack-cors: not-affected
diff --git a/active/CVE-2024-27508 b/active/CVE-2024-27508
deleted file mode 100644
index 118d32e..0000000
--- a/active/CVE-2024-27508
+++ /dev/null
@@ -1,34 +0,0 @@
-Candidate: CVE-2024-27508
-PublicDate: 2024-02-27 16:15:00 UTC
-References:
- https://github.com/LuMingYinDetect/Atheme_defects/blob/main/Atheme_detect_1.md
- https://www.cve.org/CVERecord?id=CVE-2024-27508
-Description:
- Atheme 7.2.12 contains a memory leak vulnerability in
- /atheme/src/crypto-benchmark/main.c.
-Ubuntu-Description:
-Notes:
- alexmurray> atheme-services in Ubuntu does not contain the affected
-  crypto-benchmark
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_atheme-services:
-upstream_atheme-services: not-affected (code not present)
-trusty_atheme-services: ignored (end of standard support)
-xenial_atheme-services: ignored (end of standard support)
-esm-apps/xenial_atheme-services: not-affected (code not present)
-bionic_atheme-services: ignored (end of standard support)
-esm-apps/bionic_atheme-services: not-affected (code not present)
-focal_atheme-services: not-affected (code not present)
-esm-apps/focal_atheme-services: not-affected (code not present)
-jammy_atheme-services: not-affected (code not present)
-esm-apps/jammy_atheme-services: not-affected (code not present)
-mantic_atheme-services: not-affected (code not present)
-noble_atheme-services: not-affected (code not present)
-esm-apps/noble_atheme-services: not-affected (code not present)
-devel_atheme-services: not-affected (code not present)
diff --git a/active/CVE-2024-2757 b/active/CVE-2024-2757
deleted file mode 100644
index 1a7e9b6..0000000
--- a/active/CVE-2024-2757
+++ /dev/null
@@ -1,86 +0,0 @@
-Candidate: CVE-2024-2757
-PublicDate: 2024-04-16
-References:
- https://www.cve.org/CVERecord?id=CVE-2024-2757
- https://github.com/php/php-src/security/advisories/GHSA-fjp9-9hwx-59fq
-Description:
- mb_encode_mimeheader runs endlessly for some inputs
-Ubuntu-Description:
-Notes:
- leosilva> version in noble is not affected see (LP: #2061147)
- leosilva> only affects 8.3
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by: leosilva
-Assigned-to:
-CVSS:
-
-Patches_php5:
-upstream_php5: not-affected
-trusty/esm_php5: not-affected
-focal_php5: DNE
-jammy_php5: DNE
-mantic_php5: DNE
-noble_php5: DNE
-devel_php5: DNE
-
-Patches_php7.0:
-upstream_php7.0: not-affected
-esm-infra/xenial_php7.0: not-affected
-focal_php7.0: DNE
-jammy_php7.0: DNE
-mantic_php7.0: DNE
-noble_php7.0: DNE
-devel_php7.0: DNE
-
-Patches_php7.2:
-upstream_php7.2: not-affected
-esm-infra/bionic_php7.2: not-affected
-focal_php7.2: DNE
-jammy_php7.2: DNE
-mantic_php7.2: DNE
-noble_php7.2: DNE
-devel_php7.2: DNE
-
-Patches_php7.4:
-upstream_php7.4: not-affected
-focal_php7.4: not-affected
-jammy_php7.4: DNE
-mantic_php7.4: DNE
-noble_php7.4: DNE
-devel_php7.4: DNE
-
-Patches_php8.1:
-upstream_php8.1: not-affected
-focal_php8.1: DNE
-jammy_php8.1: not-affected
-mantic_php8.1: DNE
-noble_php8.1: DNE
-devel_php8.1: DNE
-
-Patches_php8.2:
-upstream_php8.2: not-affected
-trusty_php8.2: DNE
-trusty/esm_php8.2: DNE
-xenial_php8.2: DNE
-bionic_php8.2: DNE
-focal_php8.2: DNE
-jammy_php8.2: DNE
-mantic_php8.2: not-affected
-noble_php8.2: DNE
-devel_php8.2: DNE
-
-Patches_php8.3:
- upstream: https://github.com/php/php-src/commit/3394efc63e52a017995f92d8da4ef28224247bb3
-upstream_php8.3: released (8.3.6)
-trusty_php8.3: DNE
-trusty/esm_php8.3: DNE
-xenial_php8.3: DNE
-bionic_php8.3: DNE
-focal_php8.3: DNE
-jammy_php8.3: DNE
-mantic_php8.3: DNE
-noble_php8.3: released (8.3.6-0maysync1)
-devel_php8.3: released (8.3.6-0maysync1)
-
diff --git a/active/CVE-2024-27913 b/active/CVE-2024-27913
deleted file mode 100644
index 1a73b11..0000000
--- a/active/CVE-2024-27913
+++ /dev/null
@@ -1,47 +0,0 @@
-PublicDateAtUSN: 2024-02-29
-Candidate: CVE-2024-27913
-PublicDate: 2024-02-28 07:15:00 UTC
-References:
- https://ubuntu.com/security/notices/USN-6679-1
- https://www.cve.org/CVERecord?id=CVE-2024-27913
-Description:
- ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows
- remote attackers to cause a denial of service (ospfd daemon crash) via a
- malformed OSPF LSA packet, because of an attempted access to a missing
- attribute field.
-Ubuntu-Description:
-Notes:
- sbeattie> the quagga project was renamed to frr
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_frr:
- upstream: https://github.com/FRRouting/frr/pull/15431
- upstream: https://github.com/FRRouting/frr/commit/9df81b483e6734c8762727d49445e3cf16657e6f (9.0.x)
-upstream_frr: needs-triage
-trusty_frr: DNE
-xenial_frr: DNE
-bionic_frr: DNE
-focal_frr: not-affected (code not present)
-esm-apps/focal_frr: not-affected (code not present)
-jammy_frr: released (8.1-1ubuntu1.9)
-mantic_frr: released (8.4.4-1.1ubuntu1.3)
-noble_frr: released (8.4.4-1.1ubuntu4)
-devel_frr: released (8.4.4-1.1ubuntu4)
-
-Patches_quagga:
-upstream_quagga: needs-triage
-trusty_quagga: ignored (end of standard support)
-xenial_quagga: ignored (end of standard support)
-esm-infra/xenial_quagga: not-affected (code not present)
-bionic_quagga: ignored (end of standard support)
-esm-infra/bionic_quagga: not-affected (code not present)
-focal_quagga: not-affected (code not present)
-jammy_quagga: DNE
-mantic_quagga: DNE
-noble_quagga: DNE
-devel_quagga: DNE
diff --git a/active/CVE-2024-2883 b/active/CVE-2024-2883
deleted file mode 100644
index e345c68..0000000
--- a/active/CVE-2024-2883
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2883
-PublicDate: 2024-03-26 21:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html
- https://issues.chromium.org/issues/327807820
- https://www.cve.org/CVERecord?id=CVE-2024-2883
-Description:
- Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a
- remote attacker to potentially exploit heap corruption via a crafted HTML
- page. (Chromium security severity: Critical)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)
-noble_chromium-browser: not-affected (code not present)
-esm-apps/noble_chromium-browser: not-affected (code not present)
-devel_chromium-browser: not-affected (code not present)
diff --git a/active/CVE-2024-28834 b/active/CVE-2024-28834
deleted file mode 100644
index ea47cdc..0000000
--- a/active/CVE-2024-28834
+++ /dev/null
@@ -1,41 +0,0 @@
-PublicDateAtUSN: 2024-03-21 14:15:00 UTC
-Candidate: CVE-2024-28834
-PublicDate: 2024-03-21 14:15:00 UTC
-References:
- https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2023-12-04
- https://access.redhat.com/security/cve/CVE-2024-28834
- https://people.redhat.com/~hkario/marvin/
- https://www.cve.org/CVERecord?id=CVE-2024-28834
- https://ubuntu.com/security/notices/USN-6733-1
- https://ubuntu.com/security/notices/USN-6733-2
-Description:
- A flaw was found in GnuTLS. The Minerva attack is a cryptographic
- vulnerability that exploits deterministic behavior in systems like GnuTLS,
- leading to side-channel leaks. In specific scenarios, such as when using
- the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable
- step in nonce size from 513 to 512 bits, exposing a potential timing
- side-channel.
-Ubuntu-Description:
-Notes:
- mdeslaur> per Debian, introduced in 3.6.10
-Mitigation:
-Bugs:
- https://gitlab.com/gnutls/gnutls/-/issues/1516
- https://bugzilla.redhat.com/show_bug.cgi?id=2269228
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_gnutls28:
- upstream: https://gitlab.com/gnutls/gnutls/-/commit/4a4cefef6c194f8fbbffd7fb19651219421b085b (complete merge)
- upstream: https://gitlab.com/gnutls/gnutls/-/commit/1c4701ffc342259fc5965d5a0de90d87f780e3e5
-upstream_gnutls28: needs-triage
-esm-infra/xenial_gnutls28: not-affected (code not present)
-esm-infra/bionic_gnutls28: not-affected (code not present)
-focal_gnutls28: released (3.6.13-2ubuntu1.11)
-jammy_gnutls28: released (3.7.3-4ubuntu1.5)
-mantic_gnutls28: released (3.8.1-4ubuntu1.3)
-noble_gnutls28: released (3.8.3-1.1ubuntu3.1)
-devel_gnutls28: released (3.8.3-1.1ubuntu3.1)
diff --git a/active/CVE-2024-28835 b/active/CVE-2024-28835
deleted file mode 100644
index 8878c48..0000000
--- a/active/CVE-2024-28835
+++ /dev/null
@@ -1,38 +0,0 @@
-PublicDateAtUSN: 2024-03-21 06:15:00 UTC
-Candidate: CVE-2024-28835
-PublicDate: 2024-03-21 06:15:00 UTC
-References:
- https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2024-01-23
- https://access.redhat.com/security/cve/CVE-2024-28835
- https://www.cve.org/CVERecord?id=CVE-2024-28835
- https://ubuntu.com/security/notices/USN-6733-1
- https://ubuntu.com/security/notices/USN-6733-2
-Description:
- A flaw has been discovered in GnuTLS where an application crash can be
- induced when attempting to verify a specially crafted .pem bundle using the
- "certtool --verify-chain" command.
-Ubuntu-Description:
-Notes:
- mdeslaur> per Debian, introduced in 3.7.0
-Mitigation:
-Bugs:
- https://bugzilla.redhat.com/show_bug.cgi?id=2269084
- https://gitlab.com/gnutls/gnutls/-/issues/1525
- https://gitlab.com/gnutls/gnutls/-/issues/1527
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_gnutls28:
- upstream: https://gitlab.com/gnutls/gnutls/-/commit/4a4cefef6c194f8fbbffd7fb19651219421b085b (complete merge)
- upstream: https://gitlab.com/gnutls/gnutls/-/commit/e369e67a62f44561d417cb233acc566cc696d82d
-upstream_gnutls28: needs-triage
-esm-infra/xenial_gnutls28: not-affected (code not present)
-esm-infra/bionic_gnutls28: not-affected (code not present)
-focal_gnutls28: not-affected (3.6.13-2ubuntu1.10)
-jammy_gnutls28: released (3.7.3-4ubuntu1.5)
-mantic_gnutls28: released (3.8.1-4ubuntu1.3)
-noble_gnutls28: released (3.8.3-1.1ubuntu3.1)
-devel_gnutls28: released (3.8.3-1.1ubuntu3.1)
diff --git a/active/CVE-2024-2885 b/active/CVE-2024-2885
deleted file mode 100644
index 65e11c9..0000000
--- a/active/CVE-2024-2885
+++ /dev/null
@@ -1,31 +0,0 @@
-Candidate: CVE-2024-2885
-PublicDate: 2024-03-26 21:15:00 UTC
-References:
- https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html
- https://issues.chromium.org/issues/328958020
- https://www.cve.org/CVERecord?id=CVE-2024-2885
-Description:
- Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a
- remote attacker to potentially exploit heap corruption via a crafted HTML
- page. (Chromium security severity: High)
-Ubuntu-Description:
-Notes:
- alexmurray> The Debian chromium source package is called chromium-browser
- alexmurray> in Ubuntu
- mdeslaur> starting with Ubuntu 19.10, the chromium-browser package is just
- mdeslaur> a script that installs the Chromium snap
-Mitigation:
-Bugs:
-Priority: medium
-Discovered-by:
-Assigned-to:
-CVSS:
-
-Patches_chromium-browser:
-upstream_chromium-browser: released
-focal_chromium-browser: not-affected (code not present)
-jammy_chromium-browser: not-affected (code not present)
-mantic_chromium-browser: not-affected (code not present)