Re: Reporting Security Vulnerabilities - libaom0

[Alex Murray]

On Sat, 2022-06-11 at 21:46:12 -0700, Steve Langasek wrote:
Hi Christine

The status of CVEs against the aom source package can be seen at
https://ubuntu.com/security/cves?q=&package=aom&priority=&version=&status=

As per https://wiki.ubuntu.com/SecurityTeam/FAQ the Ubuntu Security team
supports software within the main and restricted components of the
Ubuntu software archive. aom however is part of the universe component
and as such is maintained by the community.

To be notified of relevant security updates as they become available,
you can subscribe to the Ubuntu Security Announcements mailing list
https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce.

Thanks,
Alex


> Hi Christine,
>
> The best contact regarding security updates is secur...@ubuntu.com; adding
> them to Cc:.
>
> To see the status of a given CVE in Ubuntu, you can also use the website at
> https://ubuntu.com/security/cves
>
> On Fri, Jun 10, 2022 at 10:01:20AM +, Ruelo, Christine M. L. wrote:
>> Hello libaom0 Maintainers,
>> 
>> Good day, We have used the libaom0 package and perform a security scan using 
>> Palo Alto Network - Prisma Cloud and these vulnerabilities below are 
>> reported.
>> We would like to report it and let us know once the fix is available so we 
>> can update accordingly.
>> 
>> CVE-2020-36130
>> CVE-2020-36131
>> CVE-2020-36133
>> CVE-2020-36135
>> 
>> Thank you
>> 
>> Regards,
>> 
>> [cid:image001.png@01D87CBC.A4D862D0]
>> I CHRISTINE MAE RUELO
>> I ATCP | Data + AI
>> I Global One Eastwood
>> I E: 
>> christine.m.l.ru...@accenture.com
>> I M: +63 927 088 6796
>> Accenture Confidential
>> PTO:
>> Holiday:
>> Training:
>> 
>> 
>> 
>> 
>> This message is for the designated recipient only and may contain 
>> privileged, proprietary, or otherwise confidential information. If you have 
>> received it in error, please notify the sender immediately and delete the 
>> original. Any other use of the e-mail by you is prohibited. Where allowed by 
>> local law, electronic communications with Accenture and its affiliates, 
>> including e-mail and instant messaging (including content), may be scanned 
>> by our systems for the purposes of information security and assessment of 
>> internal compliance with Accenture policy. Your privacy is important to us. 
>> Accenture uses your personal data only in compliance with data protection 
>> laws. For further information on how Accenture processes your personal data, 
>> please see our privacy statement at 
>> https://www.accenture.com/us-en/privacy-policy.
>> __
>> 
>> www.accenture.com
>
> -- 
> Steve Langasek   Give me a lever long enough and a Free OS
> Debian Developer   to set it on, and I can move the world.
> Ubuntu Developer   https://www.debian.org/
> slanga...@ubuntu.com vor...@debian.org

-- 
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu

Re: Reporting Security Vulnerabilities - libaom0

[Steve Langasek]

Hi Christine,

The best contact regarding security updates is secur...@ubuntu.com; adding
them to Cc:.

To see the status of a given CVE in Ubuntu, you can also use the website at
https://ubuntu.com/security/cves

On Fri, Jun 10, 2022 at 10:01:20AM +, Ruelo, Christine M. L. wrote:
> Hello libaom0 Maintainers,
> 
> Good day, We have used the libaom0 package and perform a security scan using 
> Palo Alto Network - Prisma Cloud and these vulnerabilities below are reported.
> We would like to report it and let us know once the fix is available so we 
> can update accordingly.
> 
> CVE-2020-36130
> CVE-2020-36131
> CVE-2020-36133
> CVE-2020-36135
> 
> Thank you
> 
> Regards,
> 
> [cid:image001.png@01D87CBC.A4D862D0]
> I CHRISTINE MAE RUELO
> I ATCP | Data + AI
> I Global One Eastwood
> I E: 
> christine.m.l.ru...@accenture.com
> I M: +63 927 088 6796
> Accenture Confidential
> PTO:
> Holiday:
> Training:
> 
> 
> 
> 
> This message is for the designated recipient only and may contain privileged, 
> proprietary, or otherwise confidential information. If you have received it 
> in error, please notify the sender immediately and delete the original. Any 
> other use of the e-mail by you is prohibited. Where allowed by local law, 
> electronic communications with Accenture and its affiliates, including e-mail 
> and instant messaging (including content), may be scanned by our systems for 
> the purposes of information security and assessment of internal compliance 
> with Accenture policy. Your privacy is important to us. Accenture uses your 
> personal data only in compliance with data protection laws. For further 
> information on how Accenture processes your personal data, please see our 
> privacy statement at https://www.accenture.com/us-en/privacy-policy.
> __
> 
> www.accenture.com

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
Ubuntu Developer   https://www.debian.org/
slanga...@ubuntu.com vor...@debian.org


signature.asc
Description: PGP signature
-- 
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu