Bug 11937

Summary:	[upd 21] polkit: CVE-2021-4034 (!!!)
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Mikhail Novosyolov <m.novosyolov>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	VERIFIED FIXED	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	critical
Priority:	Highest	CC:	v.potapov
Version:	All	Flags:	v.potapov: qa_verified+ v.potapov: published+
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Platform:	2021.1	ROSA Vulnerability identifier:
RPM Package:		ISO-related:
Bad POT generating:		Upstream:

Description Mikhail Novosyolov 2022-01-25 22:23:33 MSK

*********** QA ADVISORY **********

polkit 0.119-5
- extremely urgent fix of CVE-2021-4034
  (https://www.openwall.com/lists/oss-security/2022/01/25/11)

https://abf.io/build_lists/3974056
https://abf.io/build_lists/3974057
https://abf.io/build_lists/3974058

Comment 1 Mikhail Novosyolov 2022-01-25 22:23:57 MSK

Priority: Highest Critical

Comment 2 Mikhail Novosyolov 2022-01-25 22:42:40 MSK

For rosa2016.1: bug#11938

Comment 3 Mikhail Novosyolov 2022-01-25 22:50:20 MSK

Failed tests in https://abf.io/build_lists/3974057 are OK.

Comment 4 Vladimir Potapov 2022-01-26 11:14:53 MSK

polkit-0.119-5
https://abf.io/build_lists/3974056
https://abf.io/build_lists/3974057
https://abf.io/build_lists/3974058
****************************************
The update is sent to testings

Comment 5 Vladimir Potapov 2022-01-27 12:34:30 MSK

polkit-0.119-5
https://abf.io/build_lists/3974056
https://abf.io/build_lists/3974057
https://abf.io/build_lists/3974058
************************* Advisory *******************
extremely urgent fix of CVE-2021-4034
******************************************************
QA Verified