Bug 14074

Summary: [CVE21]zlib 1.2.11 CVEs
Product: [ROSA-based products] ROSA Fresh Reporter: Vladimir Potapov <v.potapov>
Component: System (kernel, glibc, systemd, bash, PAM...)Assignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: blocker    
Priority: Highest CC: a.proklov, e.malashin
Version: AllFlags: v.potapov: qa_verified+
v.potapov: secteam_verified?
a.proklov: published+
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: CVE-2023-45853,CVE-2018-25032,CVE-2022-37434
Whiteboard:
Platform: --- ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Vladimir Potapov 2023-11-30 17:24:17 MSK
https://nvd.nist.gov/vuln/detail/CVE-2023-45853 Base Score: 9.8 CRITICAL
https://nvd.nist.gov/vuln/detail/CVE-2018-25032 Base Score: 7.5 HIGH
https://nvd.nist.gov/vuln/detail/CVE-2022-37434 Base Score: 9.8 CRITICAL
Comment 2 e.malashin@rosalinux.ru 2023-12-05 14:34:00 MSK
The update sent to testings