Public date and copyright year missing for CVE-2020-11935 in OVAL

Bug #1886906 reported by Steen Schutt on 2020-07-09
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu CVE Tracker
Undecided
Unassigned

Bug Description

When reading the OVAL file, the public_date tag contains "unknown", and the rights tag says "Copyright (C) unknown Canonical Ltd.".

Excerpt:
```
<definition class="vulnerability" id="oval:com.ubuntu.bionic:def:2020119350000000" version="1">
    <metadata>
        <title>CVE-2020-11935 on Ubuntu 18.04 LTS (bionic) - medium.</title>
        <description>It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.</description>
        <affected family="unix">
            <platform>Ubuntu 18.04 LTS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2020-11935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11935" />
        <advisory>
            <severity>Medium</severity>
            <rights>Copyright (C) unknown Canonical Ltd.</rights>
            <public_date>unknown</public_date>
            <discovered_by>Mauricio Faria de Oliveira</discovered_by>
            <crd>unknown</crd>
            <bug>https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1873074</bug>
            <ref>http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-11935.html</ref>
        </advisory>
    </metadata>
    ...
</definition>

```

Alex Murray (alexmurray) wrote :

Thanks for bringing this to our attention - this should be fixed via https://git.launchpad.net/ubuntu-cve-tracker/commit/?id=547b2607f0309d3aa4fe421bbce672fd29103547 - the OVAL will be automatically re-generated within a few hours and so it should also be fixed there soon.

Changed in ubuntu-cve-tracker:
status: New → Fix Committed
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers