[Bug 2080555] Re: ubunutu 20 has many vulnerability for the package linux-aws-5.15

2024-10-01 Thread Varun Agarwal
Thanks team for your comments, we agree that the number of incoming CVE has increased drastically. And the team is doing a great job in providing the fixes as quickly as possible. I can now confirm the reported vulnerability has been fixed. and we are good to close this bug -- You received this

[Bug 2080555] Re: ubunutu 20 has many vulnerability for the package linux-aws-5.15

2024-09-24 Thread Marc Deslauriers
** Changed in: linux-aws-5.15 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2080555 Title: ubunutu 20 has many vulnerability for the package linux-aws-5.15

[Bug 2080555] Re: ubunutu 20 has many vulnerability for the package linux-aws-5.15

2024-09-13 Thread Cengiz Can
Hello Varun, Thank you for your report. Since February 2024, Linux Kernel CVEs have been assigned and published by people at kernel.org. Their understanding of a CVE sadly differs from the commonly accepted CVE standards, especially regarding selection criteria, vulnerability descriptions, and s

[Bug 2080555] Re: ubunutu 20 has many vulnerability for the package linux-aws-5.15

2024-09-12 Thread Mark Esler
For the 8 non-kernel cves, I matched our internal priority to NVDs CVSS ratings when higher. https://git.launchpad.net/ubuntu-cve-tracker/commit/?id=ef4355cdd0cb2677d21681b42615d7208eb0c187 ** Information type changed from Private Security to Public Security -- You received this bug notificatio