Public date and copyright year missing for CVE-2020-11935 in OVAL

Bug #1886906 reported by Steen Schutt
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu CVE Tracker
Fix Released
Undecided
Unassigned

Bug Description

When reading the OVAL file, the public_date tag contains "unknown", and the rights tag says "Copyright (C) unknown Canonical Ltd.".

Excerpt:
```
<definition class="vulnerability" id="oval:com.ubuntu.bionic:def:2020119350000000" version="1">
    <metadata>
        <title>CVE-2020-11935 on Ubuntu 18.04 LTS (bionic) - medium.</title>
        <description>It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.</description>
        <affected family="unix">
            <platform>Ubuntu 18.04 LTS</platform>
        </affected>
        <reference source="CVE" ref_id="CVE-2020-11935" ref_url="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11935" />
        <advisory>
            <severity>Medium</severity>
            <rights>Copyright (C) unknown Canonical Ltd.</rights>
            <public_date>unknown</public_date>
            <discovered_by>Mauricio Faria de Oliveira</discovered_by>
            <crd>unknown</crd>
            <bug>https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1873074</bug>
            <ref>http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-11935.html</ref>
        </advisory>
    </metadata>
    ...
</definition>

```

Revision history for this message
Alex Murray (alexmurray) wrote :

Thanks for bringing this to our attention - this should be fixed via https://git.launchpad.net/ubuntu-cve-tracker/commit/?id=547b2607f0309d3aa4fe421bbce672fd29103547 - the OVAL will be automatically re-generated within a few hours and so it should also be fixed there soon.

Changed in ubuntu-cve-tracker:
status: New → Fix Committed
Changed in ubuntu-cve-tracker:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.