{"action":"created","comment":{"url":"https://api.github.com/repos/CVEProject/cvelist/pulls/comments/192080251","pull_request_review_id":124781604,"id":192080251,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDE5MjA4MDI1MQ==","diff_hunk":"@@ -1,18 +1,92 @@\n {\n    \"CVE_data_meta\" : {\n-      \"ASSIGNER\" : \"cve@mitre.org\",\n+      \"ASSIGNER\" : \"security@ubuntu.com\",\n+      \"DATE_PUBLIC\": \"2018-05-30T18:00:00.000Z\",\n       \"ID\" : \"CVE-2018-6552\",\n-      \"STATE\" : \"RESERVED\"\n+      \"STATE\" : \"PUBLIC\",\n+      \"TITLE\": \"Apport treats the container PID as the global PID when /proc/<global_pid>/  is missing\"\n    },\n+   \"affects\": {\n+      \"vendor\": {\n+         \"vendor_data\": [\n+            {\n+               \"product\": {\n+                  \"product_data\": [\n+                     {\n+                        \"product_name\": \"Apport\",\n+                        \"version\": {\n+                           \"version_data\": [\n+                              {\n+                                 \"affected\": \"<\",\n+                                 \"platform\": \"Ubuntu 18.04\",\n+                                 \"version_value\": \"2.20.9-0ubuntu7.1\"\n+                              },\n+                              {\n+                                 \"affected\": \"<\",\n+                                 \"platform\": \"Ubuntu 16.04\",\n+                                 \"version_value\": \"2.20.1-0ubuntu2.18\"\n+                              },\n+                              {\n+                                 \"affected\": \"<\",\n+                                 \"platform\": \"Ubuntu 17.10\",\n+                                 \"version_value\": \"2.20.7-0ubuntu3.9\"\n+                              }\n+                           ]\n+                        }\n+                     }\n+                  ]\n+               },\n+               \"vendor_name\": \"n/a\"\n+            }\n+         ]\n+      }\n+   },\n+   \"credit\": [\n+      {\n+         \"lang\": \"eng\",\n+         \"value\": \"Sander Bos\"\n+      }\n+   ],\n    \"data_format\" : \"MITRE\",\n    \"data_type\" : \"CVE\",\n    \"data_version\" : \"4.0\",\n    \"description\" : {\n       \"description_data\" : [\n          {\n             \"lang\" : \"eng\",\n-            \"value\" : \"** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided.\"\n+            \"value\" : \"Apport does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers.\\n\\nThis flaw was introduced by the fix for bug 1733366. The is_same_ns() function returns True when /proc/<global pid>/ does not exist in order to indicate that the crash should be handled in the global namespace rather than inside of a container. However, the portion of the data/apport code that decides whether or not to forward a crash to a container does not always replace sys.argv[1] with the value stored in the host_pid variable when /proc/<global pid>/ does not exist which results in the container pid being used in the global namespace.\"\n+         }\n+      ]\n+   },\n+   \"problemtype\": {\n+      \"problemtype_data\": [\n+         {\n+            \"description\": [\n+               {\n+                  \"lang\": \"eng\",\n+                  \"value\": \"Denial of service via resource exhaustion, privilege escalation, and escape from containers\"\n+               }\n+            ]\n          }\n       ]\n+   },\n+   \"references\": {\n+      \"reference_data\": [\n+         {\n+            \"refsource\": \"UBUNTU\",","path":"2018/6xxx/CVE-2018-6552.json","position":79,"original_position":79,"commit_id":"e5982de10e0950033bc06b76d0dded5cd1642d39","original_commit_id":"e5982de10e0950033bc06b76d0dded5cd1642d39","user":{"login":"cve-team","id":32679304,"node_id":"MDQ6VXNlcjMyNjc5MzA0","avatar_url":"https://avatars1.githubusercontent.com/u/32679304?v=4","gravatar_id":"","url":"https://api.github.com/users/cve-team","html_url":"https://github.com/cve-team","followers_url":"https://api.github.com/users/cve-team/followers","following_url":"https://api.github.com/users/cve-team/following{/other_user}","gists_url":"https://api.github.com/users/cve-team/gists{/gist_id}","starred_url":"https://api.github.com/users/cve-team/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cve-team/subscriptions","organizations_url":"https://api.github.com/users/cve-team/orgs","repos_url":"https://api.github.com/users/cve-team/repos","events_url":"https://api.github.com/users/cve-team/events{/privacy}","received_events_url":"https://api.github.com/users/cve-team/received_events","type":"User","site_admin":false},"body":"The 'refsource' attribute is optional, but if you supply it, you should also supply the 'name' attribute, which, for the 'UBUNTU' refsource, is the associated USN; eg, \"USN-3664-1\". ","created_at":"2018-05-31T12:22:17Z","updated_at":"2018-05-31T12:22:17Z","html_url":"https://github.com/CVEProject/cvelist/pull/547#discussion_r192080251","pull_request_url":"https://api.github.com/repos/CVEProject/cvelist/pulls/547","author_association":"COLLABORATOR","_links":{"self":{"href":"https://api.github.com/repos/CVEProject/cvelist/pulls/comments/192080251"},"html":{"href":"https://github.com/CVEProject/cvelist/pull/547#discussion_r192080251"},"pull_request":{"href":"https://api.github.com/repos/CVEProject/cvelist/pulls/547"}}},"pull_request":{"url":"https://api.github.com/repos/CVEProject/cvelist/pulls/547","id":191580773,"node_id":"MDExOlB1bGxSZXF1ZXN0MTkxNTgwNzcz","html_url":"https://github.com/CVEProject/cvelist/pull/547","diff_url":"https://github.com/CVEProject/cvelist/pull/547.diff","patch_url":"https://github.com/CVEProject/cvelist/pull/547.patch","issue_url":"https://api.github.com/repos/CVEProject/cvelist/issues/547","number":547,"state":"open","locked":false,"title":"New CVE assignment for CVE-2018-6552 from Canonical","user":{"login":"ejratl","id":1165700,"node_id":"MDQ6VXNlcjExNjU3MDA=","avatar_url":"https://avatars1.githubusercontent.com/u/1165700?v=4","gravatar_id":"","url":"https://api.github.com/users/ejratl","html_url":"https://github.com/ejratl","followers_url":"https://api.github.com/users/ejratl/followers","following_url":"https://api.github.com/users/ejratl/following{/other_user}","gists_url":"https://api.github.com/users/ejratl/gists{/gist_id}","starred_url":"https://api.github.com/users/ejratl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ejratl/subscriptions","organizations_url":"https://api.github.com/users/ejratl/orgs","repos_url":"https://api.github.com/users/ejratl/repos","events_url":"https://api.github.com/users/ejratl/events{/privacy}","received_events_url":"https://api.github.com/users/ejratl/received_events","type":"User","site_admin":false},"body":"CVE-2018-6552 from the range allocated to Canonical was assigned to apport and made public today.","created_at":"2018-05-30T21:05:50Z","updated_at":"2018-05-31T12:22:17Z","closed_at":null,"merged_at":null,"merge_commit_sha":"a8ac37c64e67b760e09978dedea33f28422d45ec","assignee":{"login":"cve-team","id":32679304,"node_id":"MDQ6VXNlcjMyNjc5MzA0","avatar_url":"https://avatars1.githubusercontent.com/u/32679304?v=4","gravatar_id":"","url":"https://api.github.com/users/cve-team","html_url":"https://github.com/cve-team","followers_url":"https://api.github.com/users/cve-team/followers","following_url":"https://api.github.com/users/cve-team/following{/other_user}","gists_url":"https://api.github.com/users/cve-team/gists{/gist_id}","starred_url":"https://api.github.com/users/cve-team/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cve-team/subscriptions","organizations_url":"https://api.github.com/users/cve-team/orgs","repos_url":"https://api.github.com/users/cve-team/repos","events_url":"https://api.github.com/users/cve-team/events{/privacy}","received_events_url":"https://api.github.com/users/cve-team/received_events","type":"User","site_admin":false},"assignees":[{"login":"cve-team","id":32679304,"node_id":"MDQ6VXNlcjMyNjc5MzA0","avatar_url":"https://avatars1.githubusercontent.com/u/32679304?v=4","gravatar_id":"","url":"https://api.github.com/users/cve-team","html_url":"https://github.com/cve-team","followers_url":"https://api.github.com/users/cve-team/followers","following_url":"https://api.github.com/users/cve-team/following{/other_user}","gists_url":"https://api.github.com/users/cve-team/gists{/gist_id}","starred_url":"https://api.github.com/users/cve-team/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cve-team/subscriptions","organizations_url":"https://api.github.com/users/cve-team/orgs","repos_url":"https://api.github.com/users/cve-team/repos","events_url":"https://api.github.com/users/cve-team/events{/privacy}","received_events_url":"https://api.github.com/users/cve-team/received_events","type":"User","site_admin":false}],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":736789159,"node_id":"MDU6TGFiZWw3MzY3ODkxNTk=","url":"https://api.github.com/repos/CVEProject/cvelist/labels/JSON%20Valid","name":"JSON Valid","color":"0052cc","default":false},{"id":779428261,"node_id":"MDU6TGFiZWw3Nzk0MjgyNjE=","url":"https://api.github.com/repos/CVEProject/cvelist/labels/Ownership%20Validated","name":"Ownership Validated","color":"ededed","default":false}],"milestone":null,"commits_url":"https://api.github.com/repos/CVEProject/cvelist/pulls/547/commits","review_comments_url":"https://api.github.com/repos/CVEProject/cvelist/pulls/547/comments","review_comment_url":"https://api.github.com/repos/CVEProject/cvelist/pulls/comments{/number}","comments_url":"https://api.github.com/repos/CVEProject/cvelist/issues/547/comments","statuses_url":"https://api.github.com/repos/CVEProject/cvelist/statuses/e5982de10e0950033bc06b76d0dded5cd1642d39","head":{"label":"ejratl:USN-3664-1","ref":"USN-3664-1","sha":"e5982de10e0950033bc06b76d0dded5cd1642d39","user":{"login":"ejratl","id":1165700,"node_id":"MDQ6VXNlcjExNjU3MDA=","avatar_url":"https://avatars1.githubusercontent.com/u/1165700?v=4","gravatar_id":"","url":"https://api.github.com/users/ejratl","html_url":"https://github.com/ejratl","followers_url":"https://api.github.com/users/ejratl/followers","following_url":"https://api.github.com/users/ejratl/following{/other_user}","gists_url":"https://api.github.com/users/ejratl/gists{/gist_id}","starred_url":"https://api.github.com/users/ejratl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ejratl/subscriptions","organizations_url":"https://api.github.com/users/ejratl/orgs","repos_url":"https://api.github.com/users/ejratl/repos","events_url":"https://api.github.com/users/ejratl/events{/privacy}","received_events_url":"https://api.github.com/users/ejratl/received_events","type":"User","site_admin":false},"repo":{"id":135489144,"node_id":"MDEwOlJlcG9zaXRvcnkxMzU0ODkxNDQ=","name":"cvelist","full_name":"ejratl/cvelist","owner":{"login":"ejratl","id":1165700,"node_id":"MDQ6VXNlcjExNjU3MDA=","avatar_url":"https://avatars1.githubusercontent.com/u/1165700?v=4","gravatar_id":"","url":"https://api.github.com/users/ejratl","html_url":"https://github.com/ejratl","followers_url":"https://api.github.com/users/ejratl/followers","following_url":"https://api.github.com/users/ejratl/following{/other_user}","gists_url":"https://api.github.com/users/ejratl/gists{/gist_id}","starred_url":"https://api.github.com/users/ejratl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ejratl/subscriptions","organizations_url":"https://api.github.com/users/ejratl/orgs","repos_url":"https://api.github.com/users/ejratl/repos","events_url":"https://api.github.com/users/ejratl/events{/privacy}","received_events_url":"https://api.github.com/users/ejratl/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/ejratl/cvelist","description":"Pilot program for CVE submission through GitHub","fork":true,"url":"https://api.github.com/repos/ejratl/cvelist","forks_url":"https://api.github.com/repos/ejratl/cvelist/forks","keys_url":"https://api.github.com/repos/ejratl/cvelist/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ejratl/cvelist/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ejratl/cvelist/teams","hooks_url":"https://api.github.com/repos/ejratl/cvelist/hooks","issue_events_url":"https://api.github.com/repos/ejratl/cvelist/issues/events{/number}","events_url":"https://api.github.com/repos/ejratl/cvelist/events","assignees_url":"https://api.github.com/repos/ejratl/cvelist/assignees{/user}","branches_url":"https://api.github.com/repos/ejratl/cvelist/branches{/branch}","tags_url":"https://api.github.com/repos/ejratl/cvelist/tags","blobs_url":"https://api.github.com/repos/ejratl/cvelist/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ejratl/cvelist/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ejratl/cvelist/git/refs{/sha}","trees_url":"https://api.github.com/repos/ejratl/cvelist/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ejratl/cvelist/statuses/{sha}","languages_url":"https://api.github.com/repos/ejratl/cvelist/languages","stargazers_url":"https://api.github.com/repos/ejratl/cvelist/stargazers","contributors_url":"https://api.github.com/repos/ejratl/cvelist/contributors","subscribers_url":"https://api.github.com/repos/ejratl/cvelist/subscribers","subscription_url":"https://api.github.com/repos/ejratl/cvelist/subscription","commits_url":"https://api.github.com/repos/ejratl/cvelist/commits{/sha}","git_commits_url":"https://api.github.com/repos/ejratl/cvelist/git/commits{/sha}","comments_url":"https://api.github.com/repos/ejratl/cvelist/comments{/number}","issue_comment_url":"https://api.github.com/repos/ejratl/cvelist/issues/comments{/number}","contents_url":"https://api.github.com/repos/ejratl/cvelist/contents/{+path}","compare_url":"https://api.github.com/repos/ejratl/cvelist/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ejratl/cvelist/merges","archive_url":"https://api.github.com/repos/ejratl/cvelist/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ejratl/cvelist/downloads","issues_url":"https://api.github.com/repos/ejratl/cvelist/issues{/number}","pulls_url":"https://api.github.com/repos/ejratl/cvelist/pulls{/number}","milestones_url":"https://api.github.com/repos/ejratl/cvelist/milestones{/number}","notifications_url":"https://api.github.com/repos/ejratl/cvelist/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ejratl/cvelist/labels{/name}","releases_url":"https://api.github.com/repos/ejratl/cvelist/releases{/id}","deployments_url":"https://api.github.com/repos/ejratl/cvelist/deployments","created_at":"2018-05-30T19:36:12Z","updated_at":"2018-05-30T19:36:16Z","pushed_at":"2018-05-30T21:00:57Z","git_url":"git://github.com/ejratl/cvelist.git","ssh_url":"git@github.com:ejratl/cvelist.git","clone_url":"https://github.com/ejratl/cvelist.git","svn_url":"https://github.com/ejratl/cvelist","homepage":"","size":95722,"stargazers_count":0,"watchers_count":0,"language":null,"has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":null,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"CVEProject:master","ref":"master","sha":"11a2f827ecdf0e5a3bbf56ae1ff7b3242b5d14ed","user":{"login":"CVEProject","id":18195825,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE4MTk1ODI1","avatar_url":"https://avatars3.githubusercontent.com/u/18195825?v=4","gravatar_id":"","url":"https://api.github.com/users/CVEProject","html_url":"https://github.com/CVEProject","followers_url":"https://api.github.com/users/CVEProject/followers","following_url":"https://api.github.com/users/CVEProject/following{/other_user}","gists_url":"https://api.github.com/users/CVEProject/gists{/gist_id}","starred_url":"https://api.github.com/users/CVEProject/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CVEProject/subscriptions","organizations_url":"https://api.github.com/users/CVEProject/orgs","repos_url":"https://api.github.com/users/CVEProject/repos","events_url":"https://api.github.com/users/CVEProject/events{/privacy}","received_events_url":"https://api.github.com/users/CVEProject/received_events","type":"Organization","site_admin":false},"repo":{"id":107153495,"node_id":"MDEwOlJlcG9zaXRvcnkxMDcxNTM0OTU=","name":"cvelist","full_name":"CVEProject/cvelist","owner":{"login":"CVEProject","id":18195825,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE4MTk1ODI1","avatar_url":"https://avatars3.githubusercontent.com/u/18195825?v=4","gravatar_id":"","url":"https://api.github.com/users/CVEProject","html_url":"https://github.com/CVEProject","followers_url":"https://api.github.com/users/CVEProject/followers","following_url":"https://api.github.com/users/CVEProject/following{/other_user}","gists_url":"https://api.github.com/users/CVEProject/gists{/gist_id}","starred_url":"https://api.github.com/users/CVEProject/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CVEProject/subscriptions","organizations_url":"https://api.github.com/users/CVEProject/orgs","repos_url":"https://api.github.com/users/CVEProject/repos","events_url":"https://api.github.com/users/CVEProject/events{/privacy}","received_events_url":"https://api.github.com/users/CVEProject/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/CVEProject/cvelist","description":"Pilot program for CVE submission through GitHub","fork":false,"url":"https://api.github.com/repos/CVEProject/cvelist","forks_url":"https://api.github.com/repos/CVEProject/cvelist/forks","keys_url":"https://api.github.com/repos/CVEProject/cvelist/keys{/key_id}","collaborators_url":"https://api.github.com/repos/CVEProject/cvelist/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/CVEProject/cvelist/teams","hooks_url":"https://api.github.com/repos/CVEProject/cvelist/hooks","issue_events_url":"https://api.github.com/repos/CVEProject/cvelist/issues/events{/number}","events_url":"https://api.github.com/repos/CVEProject/cvelist/events","assignees_url":"https://api.github.com/repos/CVEProject/cvelist/assignees{/user}","branches_url":"https://api.github.com/repos/CVEProject/cvelist/branches{/branch}","tags_url":"https://api.github.com/repos/CVEProject/cvelist/tags","blobs_url":"https://api.github.com/repos/CVEProject/cvelist/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/CVEProject/cvelist/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/CVEProject/cvelist/git/refs{/sha}","trees_url":"https://api.github.com/repos/CVEProject/cvelist/git/trees{/sha}","statuses_url":"https://api.github.com/repos/CVEProject/cvelist/statuses/{sha}","languages_url":"https://api.github.com/repos/CVEProject/cvelist/languages","stargazers_url":"https://api.github.com/repos/CVEProject/cvelist/stargazers","contributors_url":"https://api.github.com/repos/CVEProject/cvelist/contributors","subscribers_url":"https://api.github.com/repos/CVEProject/cvelist/subscribers","subscription_url":"https://api.github.com/repos/CVEProject/cvelist/subscription","commits_url":"https://api.github.com/repos/CVEProject/cvelist/commits{/sha}","git_commits_url":"https://api.github.com/repos/CVEProject/cvelist/git/commits{/sha}","comments_url":"https://api.github.com/repos/CVEProject/cvelist/comments{/number}","issue_comment_url":"https://api.github.com/repos/CVEProject/cvelist/issues/comments{/number}","contents_url":"https://api.github.com/repos/CVEProject/cvelist/contents/{+path}","compare_url":"https://api.github.com/repos/CVEProject/cvelist/compare/{base}...{head}","merges_url":"https://api.github.com/repos/CVEProject/cvelist/merges","archive_url":"https://api.github.com/repos/CVEProject/cvelist/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/CVEProject/cvelist/downloads","issues_url":"https://api.github.com/repos/CVEProject/cvelist/issues{/number}","pulls_url":"https://api.github.com/repos/CVEProject/cvelist/pulls{/number}","milestones_url":"https://api.github.com/repos/CVEProject/cvelist/milestones{/number}","notifications_url":"https://api.github.com/repos/CVEProject/cvelist/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/CVEProject/cvelist/labels{/name}","releases_url":"https://api.github.com/repos/CVEProject/cvelist/releases{/id}","deployments_url":"https://api.github.com/repos/CVEProject/cvelist/deployments","created_at":"2017-10-16T16:24:54Z","updated_at":"2018-05-31T12:06:37Z","pushed_at":"2018-05-31T12:06:35Z","git_url":"git://github.com/CVEProject/cvelist.git","ssh_url":"git@github.com:CVEProject/cvelist.git","clone_url":"https://github.com/CVEProject/cvelist.git","svn_url":"https://github.com/CVEProject/cvelist","homepage":"","size":95944,"stargazers_count":216,"watchers_count":216,"language":null,"has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":89,"mirror_url":null,"archived":false,"open_issues_count":2,"license":null,"forks":89,"open_issues":2,"watchers":216,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/CVEProject/cvelist/pulls/547"},"html":{"href":"https://github.com/CVEProject/cvelist/pull/547"},"issue":{"href":"https://api.github.com/repos/CVEProject/cvelist/issues/547"},"comments":{"href":"https://api.github.com/repos/CVEProject/cvelist/issues/547/comments"},"review_comments":{"href":"https://api.github.com/repos/CVEProject/cvelist/pulls/547/comments"},"review_comment":{"href":"https://api.github.com/repos/CVEProject/cvelist/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/CVEProject/cvelist/pulls/547/commits"},"statuses":{"href":"https://api.github.com/repos/CVEProject/cvelist/statuses/e5982de10e0950033bc06b76d0dded5cd1642d39"}},"author_association":"NONE"}}
{"actor":{"display_login":"cve-team"}}