Bug 12945

Summary:	Libtar Security fixed CVEs
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Svyatoslav Matveev <s.matveev>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	VERIFIED FIXED	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	critical
Priority:	High	CC:	a.proklov, pastordidi, v.potapov
Version:	All	Flags:	v.potapov: qa_verified+ a.proklov: published+
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Platform:	2021.1	ROSA Vulnerability identifier:
RPM Package:		ISO-related:
Bad POT generating:		Upstream:

Description Svyatoslav Matveev 2022-11-30 22:02:25 MSK

********** QA ADVISORY **********

Security fixed:
CVE-2021-33643
CVE-2021-33644
CVE-2021-33645
CVE-2021-33646

*** libtar
https://abf.io/build_lists/4180014
https://abf.io/build_lists/4180013
https://abf.io/build_lists/4180015
https://abf.io/build_lists/4180016
https://abf.io/build_lists/4180017

Comment 1 Dmitry Postnikov 2022-12-01 23:20:36 MSK

***************************
The update sent to testings

Comment 2 Vladimir Potapov 2022-12-07 16:47:14 MSK

libtar-1.2.20-16
https://abf.io/build_lists/4180014
https://abf.io/build_lists/4180013
https://abf.io/build_lists/4180015
https://abf.io/build_lists/4180016
https://abf.io/build_lists/4180017
*********************** Advisory ************************
Security fixed:
CVE-2021-33643
CVE-2021-33644
CVE-2021-33645
CVE-2021-33646
*********************************************************
QA Verified