Activity log for bug #1976184

Date Who What changed Old value New value Message
2022-05-29 11:38:37 Luís Infante da Câmara bug added bug
2022-05-29 11:38:48 Luís Infante da Câmara information type Private Security Public Security
2022-05-29 11:39:08 Luís Infante da Câmara bug task added linux-hwe-5.4 (Ubuntu)
2022-05-29 11:56:59 Luís Infante da Câmara bug task added linux-aws (Ubuntu)
2022-05-29 11:57:07 Luís Infante da Câmara bug task added linux-aws-5.13 (Ubuntu)
2022-05-29 11:57:15 Luís Infante da Câmara bug task added linux-aws-5.4 (Ubuntu)
2022-05-29 11:57:25 Luís Infante da Câmara bug task added linux-azure (Ubuntu)
2022-05-29 11:57:30 Luís Infante da Câmara bug task added linux-azure-5.13 (Ubuntu)
2022-05-29 11:58:24 Luís Infante da Câmara bug task added linux-azure-5.4 (Ubuntu)
2022-05-29 11:58:43 Luís Infante da Câmara bug task added linux-bluefield (Ubuntu)
2022-05-29 11:59:23 Luís Infante da Câmara bug task deleted linux (Ubuntu)
2022-05-29 11:59:29 Luís Infante da Câmara bug task added linux-gcp (Ubuntu)
2022-05-29 11:59:43 Luís Infante da Câmara bug task added linux-gcp-5.13 (Ubuntu)
2022-05-29 11:59:48 Luís Infante da Câmara bug task added linux-gcp-5.4 (Ubuntu)
2022-05-29 11:59:52 Luís Infante da Câmara bug task added linux-gke (Ubuntu)
2022-05-29 11:59:57 Luís Infante da Câmara bug task added linux-gke-5.4 (Ubuntu)
2022-05-29 12:00:01 Luís Infante da Câmara bug task added linux-gkeop (Ubuntu)
2022-05-29 12:00:06 Luís Infante da Câmara bug task added linux-gkeop-5.4 (Ubuntu)
2022-05-29 12:00:12 Luís Infante da Câmara bug task added linux-hwe-5.13 (Ubuntu)
2022-05-29 12:00:18 Luís Infante da Câmara bug task added linux-ibm (Ubuntu)
2022-05-29 12:17:14 Luís Infante da Câmara bug task added linux-ibm-5.4 (Ubuntu)
2022-05-29 12:17:18 Luís Infante da Câmara bug task added linux-kvm (Ubuntu)
2022-05-29 12:17:25 Luís Infante da Câmara bug task added linux-oem-5.14 (Ubuntu)
2022-05-29 12:17:31 Luís Infante da Câmara bug task added linux-oracle (Ubuntu)
2022-05-29 12:17:38 Luís Infante da Câmara bug task added linux-oracle-5.13 (Ubuntu)
2022-05-29 12:17:45 Luís Infante da Câmara bug task added linux-oracle-5.4 (Ubuntu)
2022-05-29 12:17:54 Luís Infante da Câmara bug task added linux-raspi (Ubuntu)
2022-05-29 12:18:08 Luís Infante da Câmara bug task added linux-raspi-5.4 (Ubuntu)
2022-05-29 12:18:18 Luís Infante da Câmara bug task added linux-riscv (Ubuntu)
2022-05-29 13:52:16 Luís Infante da Câmara summary CVE-2022-23036 CVE-2022-23036 and CVE-2022-23037
2022-05-29 13:52:21 Luís Infante da Câmara cve linked 2022-23036
2022-05-29 13:52:27 Luís Infante da Câmara cve linked 2022-23037
2022-05-29 13:56:15 Luís Infante da Câmara summary CVE-2022-23036 and CVE-2022-23037 CVE-2022-23036, CVE-2022-23037 and CVE-2022-23038
2022-05-29 13:56:31 Luís Infante da Câmara description The following packages are vulnerable in at least one Ubuntu release, as stated in the Ubuntu CVE Tracker. Please release fixed packages. Xen released a security advisory on March 10. (I was informed by the security team that it does not track security issues via Launchpad bugs, but in the Ubuntu CVE Tracker. However, the issue is unpatched for over 2.5 months and marked as needed for these combinations of source package and Ubuntu version in the Tracker, and therefore I am filing this bug.) The following packages are vulnerable to CVE-2022-23036, CVE-2022-23037 and CVE-2022-23038 in at least one Ubuntu release, as stated in the Ubuntu CVE Tracker. Please release fixed packages. Xen released a security advisory on March 10. (I was informed by the security team that it does not track security issues via Launchpad bugs, but in the Ubuntu CVE Tracker. However, the issue is unpatched for over 2.5 months and marked as needed for these combinations of source package and Ubuntu version in the Tracker, and therefore I am filing this bug.)
2022-05-29 13:56:48 Luís Infante da Câmara cve linked 2022-23038
2022-05-29 14:05:41 Luís Infante da Câmara summary CVE-2022-23036, CVE-2022-23037 and CVE-2022-23038 Linux PV device frontends vulnerable to attacks by backends
2022-05-29 14:05:55 Luís Infante da Câmara cve linked 2022-23039
2022-05-29 14:07:45 Luís Infante da Câmara description The following packages are vulnerable to CVE-2022-23036, CVE-2022-23037 and CVE-2022-23038 in at least one Ubuntu release, as stated in the Ubuntu CVE Tracker. Please release fixed packages. Xen released a security advisory on March 10. (I was informed by the security team that it does not track security issues via Launchpad bugs, but in the Ubuntu CVE Tracker. However, the issue is unpatched for over 2.5 months and marked as needed for these combinations of source package and Ubuntu version in the Tracker, and therefore I am filing this bug.) The packages listed above are vulnerable to the CVEs below in at least one Ubuntu release, as stated in the Ubuntu CVE Tracker. Please release fixed packages. Xen released a security advisory on March 10. (I was informed by the security team that it does not track security issues via Launchpad bugs, but in the Ubuntu CVE Tracker. However, the issue is unpatched for over 2.5 months and marked as needed for these combinations of source package and Ubuntu version in the Tracker, and therefore I am filing this bug.)
2022-05-29 14:07:53 Luís Infante da Câmara cve linked 2022-23040
2022-05-29 14:23:34 Luís Infante da Câmara bug task added linux-azure-4.15 (Ubuntu)
2022-05-29 14:24:00 Luís Infante da Câmara bug task added linux-dell300x (Ubuntu)
2022-05-29 14:24:11 Luís Infante da Câmara bug task added linux-gcp-4.15 (Ubuntu)
2022-05-29 14:24:22 Luís Infante da Câmara bug task added linux-snapdragon (Ubuntu)
2022-05-29 14:33:51 Luís Infante da Câmara cve linked 2022-23041
2022-05-29 14:44:49 Luís Infante da Câmara cve linked 2022-23042
2022-05-29 14:45:39 Luís Infante da Câmara description The packages listed above are vulnerable to the CVEs below in at least one Ubuntu release, as stated in the Ubuntu CVE Tracker. Please release fixed packages. Xen released a security advisory on March 10. (I was informed by the security team that it does not track security issues via Launchpad bugs, but in the Ubuntu CVE Tracker. However, the issue is unpatched for over 2.5 months and marked as needed for these combinations of source package and Ubuntu version in the Tracker, and therefore I am filing this bug.) The packages listed above are vulnerable to the CVEs below in at least one Ubuntu release, as stated in the Ubuntu CVE Tracker, except for linux-azure-4.15, linux-dell300x, linux-gcp-4.15 and linux-snapdragon, that are only vulnerable to CVE-2022-23041. Please release fixed packages. Xen released a security advisory on March 10. (I was informed by the security team that it does not track security issues via Launchpad bugs, but in the Ubuntu CVE Tracker. However, the issue is unpatched for over 2.5 months and marked as needed for these combinations of source package and Ubuntu version in the Tracker, and therefore I am filing this bug.)
2022-08-25 11:16:11 Timo Aaltonen linux-oem-5.14 (Ubuntu): status New Won't Fix
2022-08-29 19:37:22 Luís Infante da Câmara bug task added linux-aws-5.15 (Ubuntu)
2022-08-29 19:38:21 Luís Infante da Câmara bug task added linux (Ubuntu)
2022-08-29 19:43:53 Luís Infante da Câmara linux-aws-5.4 (Ubuntu): status New Fix Released
2022-08-29 19:45:57 Luís Infante da Câmara linux-gcp-4.15 (Ubuntu): status New Fix Released
2022-08-29 19:46:05 Luís Infante da Câmara linux-ibm-5.4 (Ubuntu): status New Fix Released
2022-08-29 19:46:15 Luís Infante da Câmara linux-ibm (Ubuntu): status New Fix Released
2022-08-29 19:46:34 Luís Infante da Câmara linux-hwe-5.4 (Ubuntu): status New Fix Released
2022-08-29 19:46:45 Luís Infante da Câmara linux-gcp-4.15 (Ubuntu): status Fix Released New
2022-08-29 19:49:20 Luís Infante da Câmara linux-gke-5.4 (Ubuntu): status New Fix Released
2022-08-29 19:49:28 Luís Infante da Câmara linux-gkeop (Ubuntu): status New Fix Released
2022-08-29 19:49:41 Luís Infante da Câmara linux-azure-5.4 (Ubuntu): status New Fix Released
2022-08-29 19:50:01 Luís Infante da Câmara linux-bluefield (Ubuntu): status New Fix Released
2022-08-29 19:51:06 Luís Infante da Câmara linux-raspi-5.4 (Ubuntu): status New Fix Released
2022-08-29 19:51:15 Luís Infante da Câmara linux-oracle-5.4 (Ubuntu): status New Fix Released
2022-08-29 19:54:17 Luís Infante da Câmara bug task deleted linux-aws-5.13 (Ubuntu)
2022-08-29 19:54:33 Luís Infante da Câmara bug task deleted linux-oracle-5.13 (Ubuntu)
2022-08-29 19:54:36 Luís Infante da Câmara bug task deleted linux-gcp-5.13 (Ubuntu)
2022-08-29 19:54:38 Luís Infante da Câmara bug task deleted linux-azure-5.13 (Ubuntu)
2022-08-29 19:57:53 Luís Infante da Câmara bug task added linux-intel-iotg-5.15 (Ubuntu)
2022-08-29 20:00:09 Ubuntu Kernel Bot linux (Ubuntu): status New Incomplete
2022-08-29 20:00:20 Luís Infante da Câmara linux-aws-5.15 (Ubuntu): status New Fix Released
2022-08-29 20:01:29 Luís Infante da Câmara linux (Ubuntu): status Incomplete Confirmed
2022-08-29 20:02:45 Luís Infante da Câmara linux-azure (Ubuntu): status New Fix Released
2022-08-29 20:03:45 Luís Infante da Câmara linux-gcp (Ubuntu): status New Fix Released
2022-08-29 20:04:21 Luís Infante da Câmara linux-gcp-5.4 (Ubuntu): status New Fix Released
2022-08-29 20:04:55 Luís Infante da Câmara linux-gke (Ubuntu): status New Fix Released
2022-08-29 20:05:20 Luís Infante da Câmara linux-gkeop-5.4 (Ubuntu): status New Fix Released
2022-08-29 20:05:32 Luís Infante da Câmara bug task deleted linux-hwe-5.13 (Ubuntu)
2022-08-29 20:07:43 Luís Infante da Câmara linux-intel-iotg-5.15 (Ubuntu): status New Fix Released
2022-08-29 20:08:41 Luís Infante da Câmara linux-raspi (Ubuntu): status New Fix Released
2022-08-29 20:09:34 Luís Infante da Câmara bug task deleted linux-riscv (Ubuntu)