From 68c49c4410b915dd88dc91b69b2f5f64ba894e69 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 09:52:02 +0000 Subject: [PATCH] chore(audit): refresh the minimum version table The daily refresh job read the upstream advisory feeds and wrote the new minimums. --- cmax/scripts/1-audit/minimum-versions.json | 598 +++++++++++++-------- 1 file changed, 373 insertions(+), 225 deletions(-) diff --git a/cmax/scripts/1-audit/minimum-versions.json b/cmax/scripts/1-audit/minimum-versions.json index 36e522e..4ce367e 100644 --- a/cmax/scripts/1-audit/minimum-versions.json +++ b/cmax/scripts/1-audit/minimum-versions.json @@ -235,6 +235,15 @@ "title": "Security Bulletin: NVIDIA Networking Bluefield and ConnectX - June 2026", "url": "https://github.com/NVIDIA/product-security/blob/main/2026/5699/5699.json" }, + "sources": [ + { + "aId": 5699, + "feed": "nvidia-csaf", + "released": "2026-06-30T00:00:00.000Z", + "title": "Security Bulletin: NVIDIA Networking Bluefield and ConnectX - June 2026", + "url": "https://github.com/NVIDIA/product-security/blob/main/2026/5699/5699.json" + } + ], "trains": { "28": 4702, "32": 1908, @@ -382,20 +391,24 @@ } }, "nvidiaDriver": { - "advisory": "https://nvidia.custhelp.com/app/answers/detail/a_id/5821/", + "advisory": "https://nvidia.custhelp.com/app/answers/detail/a_id/5861/", "branchSources": { "535": 5821, "570": 5747, - "580": 5821, + "580": 5861, "590": 5747, - "595": 5821 + "595": 5861, + "610": 5861, + "615": 5861 }, "branches": { "535": "535.309.01", "570": "570.211.01", - "580": "580.159.03", + "580": "580.178.04", "590": "590.48.01", - "595": "595.71.05" + "595": "595.91.07", + "610": "610.57.04", + "615": "615.71.09" }, "floorAvailability": { "535": { @@ -419,14 +432,14 @@ "version": "570.211.01" }, "580": { - "available": "2026-04-28T18:06:04Z", - "bulletinReleased": "2026-05-19T00:00:00Z", + "available": "2026-08-03T21:26:50Z", + "bulletinReleased": "2026-09-30T00:00:00Z", "feed": "github-release", "repo": "NVIDIA/open-gpu-kernel-modules", "status": "confirmed", - "tag": "580.159.03", - "url": "https://github.com/NVIDIA/open-gpu-kernel-modules/releases/tag/580.159.03", - "version": "580.159.03" + "tag": "580.178.04", + "url": "https://github.com/NVIDIA/open-gpu-kernel-modules/releases/tag/580.178.04", + "version": "580.178.04" }, "590": { "available": "2025-12-18T17:17:52Z", @@ -439,23 +452,43 @@ "version": "590.48.01" }, "595": { - "available": "2026-04-28T15:59:29Z", - "bulletinReleased": "2026-05-19T00:00:00Z", + "available": "2026-08-03T21:39:37Z", + "bulletinReleased": "2026-09-30T00:00:00Z", "feed": "github-release", "repo": "NVIDIA/open-gpu-kernel-modules", "status": "confirmed", - "tag": "595.71.05", - "url": "https://github.com/NVIDIA/open-gpu-kernel-modules/releases/tag/595.71.05", - "version": "595.71.05" + "tag": "595.91.07", + "url": "https://github.com/NVIDIA/open-gpu-kernel-modules/releases/tag/595.91.07", + "version": "595.91.07" + }, + "610": { + "available": "2026-08-03T21:42:57Z", + "bulletinReleased": "2026-09-30T00:00:00Z", + "feed": "github-release", + "repo": "NVIDIA/open-gpu-kernel-modules", + "status": "confirmed", + "tag": "610.57.04", + "url": "https://github.com/NVIDIA/open-gpu-kernel-modules/releases/tag/610.57.04", + "version": "610.57.04" + }, + "615": { + "available": "2026-09-09T18:57:49Z", + "bulletinReleased": "2026-09-30T00:00:00Z", + "feed": "github-release", + "repo": "NVIDIA/open-gpu-kernel-modules", + "status": "confirmed", + "tag": "615.71.09", + "url": "https://github.com/NVIDIA/open-gpu-kernel-modules/releases/tag/615.71.09", + "version": "615.71.09" } }, "kind": "branchMap", "source": { - "aId": 5821, + "aId": 5861, "feed": "nvidia-csaf", - "released": "2026-05-19T00:00:00Z", - "title": "Security Bulletin: GPU Display Driver - May 2026", - "url": "https://github.com/NVIDIA/product-security/blob/main/2026/5821/5821.json" + "released": "2026-09-30T00:00:00Z", + "title": "Security Bulletin: GPU Display Driver \u2013 September 2026", + "url": "https://github.com/NVIDIA/product-security/blob/main/2026/5861/5861.json" }, "sources": [ { @@ -471,117 +504,161 @@ "released": "2026-05-19T00:00:00Z", "title": "Security Bulletin: GPU Display Driver - May 2026", "url": "https://github.com/NVIDIA/product-security/blob/main/2026/5821/5821.json" + }, + { + "aId": 5861, + "feed": "nvidia-csaf", + "released": "2026-09-30T00:00:00Z", + "title": "Security Bulletin: GPU Display Driver \u2013 September 2026", + "url": "https://github.com/NVIDIA/product-security/blob/main/2026/5861/5861.json" } ] }, "rocm": { - "advisory": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html", + "advisory": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", "cves": [ - "CVE-2025-21940", - "CVE-2025-66660", - "CVE-2025-66664", - "CVE-2026-0428" + "CVE-2026-43598" ], "floorAvailability": { "MI210": { - "aId": "AMD-SB-6027", - "available": "2025-09-15T00:00:00Z", - "bulletinReleased": "2026-05-12T00:00:00Z", + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", "feed": "amd-security-bulletin", "status": "confirmed", - "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html", - "version": "7.0.1" + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" }, "MI250": { - "aId": "AMD-SB-6027", - "available": "2025-09-15T00:00:00Z", - "bulletinReleased": "2026-05-12T00:00:00Z", + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", + "feed": "amd-security-bulletin", + "status": "confirmed", + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" + }, + "MI250X": { + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", "feed": "amd-security-bulletin", "status": "confirmed", - "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html", - "version": "7.0.1" + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" }, "MI300A": { - "aId": "AMD-SB-6027", - "available": "2025-10-06T00:00:00Z", - "bulletinReleased": "2026-05-12T00:00:00Z", + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", "feed": "amd-security-bulletin", "status": "confirmed", - "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html", - "version": "7.0.1" + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" }, "MI300X": { - "aId": "AMD-SB-6024", - "available": "2025-07-21T00:00:00Z", - "bulletinReleased": "2026-02-10T00:00:00Z", + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", "feed": "amd-security-bulletin", "status": "confirmed", - "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6024.html", - "version": "6.4.2" + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" }, "MI308X": { - "aId": "AMD-SB-6027", - "available": "2025-06-09T00:00:00Z", - "bulletinReleased": "2026-05-12T00:00:00Z", + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", "feed": "amd-security-bulletin", "status": "confirmed", - "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html", - "version": "6.4.2" + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" }, "MI325X": { - "aId": "AMD-SB-6024", - "available": "2025-07-21T00:00:00Z", - "bulletinReleased": "2026-02-10T00:00:00Z", + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", + "feed": "amd-security-bulletin", + "status": "confirmed", + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" + }, + "MI350X": { + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", "feed": "amd-security-bulletin", "status": "confirmed", - "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6024.html", - "version": "6.4.2" + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" + }, + "MI355X": { + "aId": "AMD-SB-6033", + "available": "2026-07-15T00:00:00Z", + "bulletinReleased": "2026-09-30T00:00:00Z", + "feed": "amd-security-bulletin", + "status": "confirmed", + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html", + "version": "7.14" } }, "kind": "programMap", "programCves": { "MI210": [ - "CVE-2025-66660" + "CVE-2026-43598" ], "MI250": [ - "CVE-2025-66660" + "CVE-2026-43598" + ], + "MI250X": [ + "CVE-2026-43598" ], "MI300A": [ - "CVE-2025-66664" + "CVE-2026-43598" ], "MI300X": [ - "CVE-2025-21940" + "CVE-2026-43598" ], "MI308X": [ - "CVE-2025-66660", - "CVE-2025-66664", - "CVE-2026-0428" + "CVE-2026-43598" ], "MI325X": [ - "CVE-2025-21940" + "CVE-2026-43598" + ], + "MI350X": [ + "CVE-2026-43598" + ], + "MI355X": [ + "CVE-2026-43598" ] }, "programSources": { - "MI210": "AMD-SB-6027", - "MI250": "AMD-SB-6027", - "MI300A": "AMD-SB-6027", - "MI300X": "AMD-SB-6024", - "MI308X": "AMD-SB-6027", - "MI325X": "AMD-SB-6024" + "MI210": "AMD-SB-6033", + "MI250": "AMD-SB-6033", + "MI250X": "AMD-SB-6033", + "MI300A": "AMD-SB-6033", + "MI300X": "AMD-SB-6033", + "MI308X": "AMD-SB-6033", + "MI325X": "AMD-SB-6033", + "MI350X": "AMD-SB-6033", + "MI355X": "AMD-SB-6033" }, "programs": { - "MI210": "7.0.1", - "MI250": "7.0.1", - "MI300A": "7.0.1", - "MI300X": "6.4.2", - "MI308X": "6.4.2", - "MI325X": "6.4.2" + "MI210": "7.14", + "MI250": "7.14", + "MI250X": "7.14", + "MI300A": "7.14", + "MI300X": "7.14", + "MI308X": "7.14", + "MI325X": "7.14", + "MI350X": "7.14", + "MI355X": "7.14" }, "source": { - "aId": "AMD-SB-6027", + "aId": "AMD-SB-6033", "feed": "amd-security-bulletin", - "released": "2026-05-12T00:00:00Z", - "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html" + "released": "2026-09-30T00:00:00Z", + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html" }, "sources": [ { @@ -601,6 +678,12 @@ "feed": "amd-security-bulletin", "released": "2026-05-12T00:00:00Z", "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6027.html" + }, + { + "aId": "AMD-SB-6033", + "feed": "amd-security-bulletin", + "released": "2026-09-30T00:00:00Z", + "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6033.html" } ] }, @@ -968,93 +1051,119 @@ ] }, "ubuntuJammy": { - "advisory": "https://ubuntu.com/security/CVE-2026-46242", + "advisory": "https://ubuntu.com/security/notices", "kind": "distroPackages", - "release": "jammy", "packages": { - "linuxPwnescape": { - "cve": "CVE-2026-99999", - "fixed": "", - "package": "linux-hwe-6.8", - "priority": "medium", - "source": { - "feed": "ubuntu-security-api", - "reviewedAt": "2026-10-23", - "url": "https://ubuntu.com/security/CVE-2026-99999" - }, - "status": "needed" - }, "linuxBadEpoll": { "cve": "CVE-2026-46242", + "fixAvailability": { + "available": "2026-08-20T21:21:56.173677", + "bulletinReleased": "2026-08-20T21:21:56.173677", + "feed": "ubuntu-security-notice", + "id": "USN-8656-1", + "status": "confirmed", + "url": "https://ubuntu.com/security/notices/USN-8656-1.json", + "version": "6.8.0-138.138~22.04.1" + }, "fixed": "6.8.0-138.138~22.04.1", "package": "linux-hwe-6.8", "priority": "high", - "status": "released", + "released": "2026-08-20T21:21:56.173677", "source": { - "feed": "ubuntu-security-api", - "url": "https://ubuntu.com/security/CVE-2026-46242" - } + "feed": "ubuntu-security-notice", + "id": "USN-8656-1", + "url": "https://ubuntu.com/security/notices/USN-8656-1.json" + }, + "status": "released" + }, + "linuxPwnescape": { + "cve": "CVE-2026-99999", + "fixed": "", + "package": "linux-hwe-6.8", + "priority": "medium", + "status": "needed" } + }, + "release": "jammy", + "source": { + "feed": "ubuntu-security-notices", + "url": "https://ubuntu.com/security/notices.json" } }, "ubuntuNoble": { "advisory": "https://ubuntu.com/security/notices", "kind": "distroPackages", "packages": { - "linuxPwnescape": { - "cve": "CVE-2026-99999", + "linux": { + "abi": 147, + "coverage": { + "feed": "https://ubuntu.com/security/notices.json", + "matchedNotices": 51, + "query": "linux" + }, + "cveCount": 1050, "fixAvailability": { - "status": "unconfirmed", - "feed": "ubuntu-security-api", - "version": "6.8.0-149.149i1", - "url": "https://ubuntu.com/security/CVE-2026-99999" + "available": "2026-10-13T14:54:50.078429", + "bulletinReleased": "2026-10-13T14:54:50.078429", + "feed": "ubuntu-security-notice", + "id": "USN-8917-1", + "status": "confirmed", + "url": "https://ubuntu.com/security/notices/USN-8917-1.json", + "version": "6.8.0-147.147" }, - "fixed": "6.8.0-149.149i1", + "fixed": "6.8.0-147.147", "package": "linux", - "priority": "medium", + "released": "2026-10-13T14:54:50.078429", "source": { - "feed": "ubuntu-security-api", - "reviewedAt": "2026-10-23", - "url": "https://ubuntu.com/security/CVE-2026-99999" + "feed": "ubuntu-security-notice", + "id": "USN-8917-1", + "url": "https://ubuntu.com/security/notices/USN-8917-1.json" }, - "status": "pending" + "status": "released" }, - "linuxFragnesiaNvidia617": { - "cve": "CVE-2026-46300", - "relatedCves": [ - "CVE-2026-43284", - "CVE-2026-43500" - ], - "fixed": "6.17.0-1021.21", - "package": "linux-nvidia-6.17", + "linuxBadEpoll": { + "cve": "CVE-2026-46242", + "fixAvailability": { + "available": "2026-08-12T19:43:13.556058", + "bulletinReleased": "2026-08-12T19:43:13.556058", + "feed": "ubuntu-security-notice", + "id": "USN-8630-1", + "status": "confirmed", + "url": "https://ubuntu.com/security/notices/USN-8630-1.json", + "version": "6.8.0-137.137" + }, + "fixed": "6.8.0-137.137", + "package": "linux", "priority": "high", - "status": "released", + "released": "2026-08-12T19:43:13.556058", "source": { - "feed": "ubuntu-security-api", - "url": "https://ubuntu.com/security/CVE-2026-46300" - } + "feed": "ubuntu-security-notice", + "id": "USN-8630-1", + "url": "https://ubuntu.com/security/notices/USN-8630-1.json" + }, + "status": "released" }, "linuxBadEpollNvidia617": { "cve": "CVE-2026-46242", + "fixAvailability": { + "available": "2026-08-21T19:59:28.280059", + "bulletinReleased": "2026-08-21T19:59:28.280059", + "feed": "ubuntu-security-notice", + "id": "USN-8669-1", + "status": "confirmed", + "url": "https://ubuntu.com/security/notices/USN-8669-1.json", + "version": "6.17.0-1031.31" + }, "fixed": "6.17.0-1031.31", "package": "linux-nvidia-6.17", "priority": "high", - "status": "released", - "source": { - "feed": "ubuntu-security-api", - "url": "https://ubuntu.com/security/CVE-2026-46242" - } - }, - "linuxBadEpoll": { - "cve": "CVE-2026-46242", - "fixed": "6.8.0-137.137", - "package": "linux", - "priority": "high", - "status": "released", + "released": "2026-08-21T19:59:28.280059", "source": { - "feed": "ubuntu-security-api", - "url": "https://ubuntu.com/security/CVE-2026-46242" - } + "feed": "ubuntu-security-notice", + "id": "USN-8669-1", + "url": "https://ubuntu.com/security/notices/USN-8669-1.json" + }, + "status": "released" }, "linuxFragnesia": { "abi": 124, @@ -1083,6 +1192,32 @@ }, "status": "released" }, + "linuxFragnesiaNvidia617": { + "cve": "CVE-2026-46300", + "fixAvailability": { + "available": "2026-06-02T14:46:10.600402", + "bulletinReleased": "2026-06-02T14:46:10.600402", + "feed": "ubuntu-security-notice", + "id": "USN-8371-1", + "status": "confirmed", + "url": "https://ubuntu.com/security/notices/USN-8371-1.json", + "version": "6.17.0-1021.21" + }, + "fixed": "6.17.0-1021.21", + "package": "linux-nvidia-6.17", + "priority": "high", + "relatedCves": [ + "CVE-2026-43284", + "CVE-2026-43500" + ], + "released": "2026-06-02T14:46:10.600402", + "source": { + "feed": "ubuntu-security-notice", + "id": "USN-8371-1", + "url": "https://ubuntu.com/security/notices/USN-8371-1.json" + }, + "status": "released" + }, "linuxJanuscape": { "cve": "CVE-2026-53359", "fixAvailability": { @@ -1105,6 +1240,19 @@ }, "status": "released" }, + "linuxPwnescape": { + "cve": "CVE-2026-99999", + "fixAvailability": { + "feed": "ubuntu-security-api", + "status": "unconfirmed", + "url": "https://ubuntu.com/security/cves/CVE-2026-99999", + "version": "6.8.0-149.149i1" + }, + "fixed": "6.8.0-149.149i1", + "package": "linux", + "priority": "medium", + "status": "pending" + }, "linuxVmscape": { "cve": "CVE-2025-40300", "fixAvailability": { @@ -1128,32 +1276,110 @@ "status": "released" }, "qemu": { + "coverage": { + "feed": "https://ubuntu.com/security/notices.json", + "matchedNotices": 5, + "query": "qemu" + }, "cve": "CVE-2024-3446", + "cveCount": 5, "fixAvailability": { - "available": "2025-09-11T12:41:28.262010", - "bulletinReleased": "2025-09-11T12:41:28.262010", + "available": "2026-04-09T14:22:10.893048", + "bulletinReleased": "2026-04-09T14:22:10.893048", "feed": "ubuntu-security-notice", - "id": "USN-7744-1", + "id": "USN-8161-1", "status": "confirmed", - "url": "https://ubuntu.com/security/notices/USN-7744-1.json", - "version": "1:8.2.2+ds-0ubuntu1.10" + "url": "https://ubuntu.com/security/notices/USN-8161-1.json", + "version": "1:8.2.2+ds-0ubuntu1.16" }, - "fixed": "1:8.2.2+ds-0ubuntu1.10", + "fixed": "1:8.2.2+ds-0ubuntu1.16", "package": "qemu", - "priority": "medium", - "released": "2025-09-11T12:41:28.262010", + "released": "2026-04-09T14:22:10.893048", "source": { "feed": "ubuntu-security-notice", - "id": "USN-7744-1", - "url": "https://ubuntu.com/security/notices/USN-7744-1.json" + "id": "USN-8161-1", + "url": "https://ubuntu.com/security/notices/USN-8161-1.json" }, "status": "released" } }, "release": "noble", "source": { - "feed": "ubuntu-osv", - "url": "https://api.osv.dev/v1/vulns/" + "feed": "ubuntu-security-notices", + "url": "https://ubuntu.com/security/notices.json" + } + }, + "ubuntuResolute": { + "advisory": "https://ubuntu.com/security/notices", + "kind": "distroPackages", + "packages": { + "linuxBadEpoll": { + "cve": "CVE-2026-46242", + "fixAvailability": { + "available": "2026-07-20T15:24:18.747835", + "bulletinReleased": "2026-07-20T15:24:18.747835", + "feed": "ubuntu-security-notice", + "id": "USN-8566-1", + "status": "confirmed", + "url": "https://ubuntu.com/security/notices/USN-8566-1.json", + "version": "7.0.0-28.28" + }, + "fixed": "7.0.0-28.28", + "package": "linux", + "priority": "high", + "released": "2026-07-20T15:24:18.747835", + "source": { + "feed": "ubuntu-security-notice", + "id": "USN-8566-1", + "url": "https://ubuntu.com/security/notices/USN-8566-1.json" + }, + "status": "released" + }, + "linuxFragnesia": { + "abi": 22, + "cve": "CVE-2026-46300", + "fixAvailability": { + "available": "2026-06-02T13:52:18.176491", + "bulletinReleased": "2026-06-02T13:52:18.176491", + "feed": "ubuntu-security-notice", + "id": "USN-8370-1", + "status": "confirmed", + "url": "https://ubuntu.com/security/notices/USN-8370-1.json", + "version": "7.0.0-22.22" + }, + "fixed": "7.0.0-22.22", + "package": "linux", + "priority": "high", + "relatedCves": [ + "CVE-2026-43284", + "CVE-2026-43500" + ], + "released": "2026-06-02T13:52:18.176491", + "source": { + "feed": "ubuntu-security-notice", + "id": "USN-8370-1", + "url": "https://ubuntu.com/security/notices/USN-8370-1.json" + }, + "status": "released" + }, + "linuxPwnescape": { + "cve": "CVE-2026-99999", + "fixAvailability": { + "feed": "ubuntu-security-api", + "status": "unconfirmed", + "url": "https://ubuntu.com/security/cves/CVE-2026-99999", + "version": "7.0.0-43.43i1" + }, + "fixed": "7.0.0-43.43i1", + "package": "linux", + "priority": "medium", + "status": "pending" + } + }, + "release": "resolute", + "source": { + "feed": "ubuntu-security-notices", + "url": "https://ubuntu.com/security/notices.json" } }, "virtioNetBluefield": { @@ -1222,87 +1448,9 @@ "title": "Security Bulletin: NVIDIA Networking Bluefield, ConnectX - July 2026", "url": "https://github.com/NVIDIA/product-security/blob/main/2026/5815/5815.json" } - }, - "ubuntuResolute": { - "advisory": "https://ubuntu.com/security/notices", - "kind": "distroPackages", - "packages": { - "linuxPwnescape": { - "cve": "CVE-2026-99999", - "fixAvailability": { - "status": "unconfirmed", - "feed": "ubuntu-security-api", - "version": "7.0.0-43.43i1", - "url": "https://ubuntu.com/security/CVE-2026-99999" - }, - "fixed": "7.0.0-43.43i1", - "package": "linux", - "priority": "medium", - "source": { - "feed": "ubuntu-security-api", - "reviewedAt": "2026-10-23", - "url": "https://ubuntu.com/security/CVE-2026-99999" - }, - "status": "pending" - }, - "linuxBadEpoll": { - "cve": "CVE-2026-46242", - "fixAvailability": { - "available": "2026-07-20T15:24:18.747835", - "bulletinReleased": "2026-07-20T15:24:18.747835", - "feed": "ubuntu-security-notice", - "id": "USN-8566-1", - "status": "confirmed", - "url": "https://ubuntu.com/security/notices/USN-8566-1.json", - "version": "7.0.0-28.28" - }, - "fixed": "7.0.0-28.28", - "package": "linux", - "priority": "high", - "released": "2026-07-20T15:24:18.747835", - "source": { - "feed": "ubuntu-security-notice", - "id": "USN-8566-1", - "url": "https://ubuntu.com/security/notices/USN-8566-1.json" - }, - "status": "released" - }, - "linuxFragnesia": { - "abi": 22, - "cve": "CVE-2026-46300", - "fixAvailability": { - "available": "2026-06-02T13:52:18.176491", - "bulletinReleased": "2026-06-02T13:52:18.176491", - "feed": "ubuntu-security-notice", - "id": "USN-8370-1", - "status": "confirmed", - "url": "https://ubuntu.com/security/notices/USN-8370-1.json", - "version": "7.0.0-22.22" - }, - "fixed": "7.0.0-22.22", - "package": "linux", - "priority": "high", - "relatedCves": [ - "CVE-2026-43284", - "CVE-2026-43500" - ], - "released": "2026-06-02T13:52:18.176491", - "source": { - "feed": "ubuntu-security-notice", - "id": "USN-8370-1", - "url": "https://ubuntu.com/security/notices/USN-8370-1.json" - }, - "status": "released" - } - }, - "release": "resolute", - "source": { - "feed": "ubuntu-security-notices", - "url": "https://ubuntu.com/security/notices.json" - } } }, - "generated": "2026-10-21T07:34:42Z", + "generated": "2026-10-26T09:50:44Z", "gracePeriodDays": 3, "maxAgeDays": 10, "schemaVersion": 1