Ubuntu-devel-discuss Digest, Vol 131, Issue 7

[John Johansen]

On 10/11/2017 07:20 AM, Thomas Gertin wrote:
> Thanks guys,
> 
> Here are my CVE identifiers:
> 
> CVE-2016-9843
> 
> CVE-2016-9842
> 
> CVE-2016-9841
> 
> CVE-2016-9840
> 
> I looked them up on the Ubuntu CVE tracker
> (https://people.canonical.com/~ubuntu-security/cve/)
> 
> I am having trouble reading the results and determining if there exist
> any fixes for these CVEs. In the package list all of the CVEs state
> "needs-triage" for Ubuntu 14.04 LTS. Does this mean that none of these
> CVEs have fixes?
> 

It means they haven't been triaged so the state of these CVEs is currently
unknown. Its possible that the fixes have been synced from debian but
they also might not be.