Understanding the Ubuntu Pro cve scan results

Support and Help
, ,
21

Did you look up the correct source package name(s)?
A common new-user mistake is to read the result from the wrong source package on the list.

1 Like
22

Could you please explain how to do this? I am not sure I understand what you mean.

If you mean that the security site lists linux and the pro cves lists linux-modules-7.0.0-28-generic and similar - security site shows the source package name and pro cves shows the binary package names which are built from the corresponding source package. If you mean something else - please, explain.

23

2 posts were split to a new topic: Ubuntu Pro: No CVES in 26.10

24

Because,

mario@mario-Vivobook ~ > pro cves -h
usage: pro cves [-h] [--unfixable] [--fixable]

List the CVE vulnerabilities that *affects* the system.
 
options:
  -h, --help   show this help message and exit
  --unfixable  List only vulnerabilities without a fix available
  --fixable    List only vulnerabilities with a fix available
mario@mario-Vivobook ~ >

regardless of whether fixed or not. Uninstall any software affected by the CVE and the CVE will no longer be displayed.

1 Like
25

Thanks for that information Ian. It was very illuminating. I think my original question has been answered. Thanks for all the replies.

2 Likes