Bug 14077

Summary: [CVE21] libxml2 2.9.24 CVEs
Product: [ROSA-based products] ROSA Fresh Reporter: Vladimir Potapov <v.potapov>
Component: System (kernel, glibc, systemd, bash, PAM...)Assignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: critical    
Priority: Highest CC: a.proklov, pastordidi
Version: AllFlags: v.potapov: qa_verified+
v.potapov: secteam_verified?
a.proklov: published+
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: CVE-2023-45322?CVE-2022-2309
Whiteboard:
Platform: --- ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Vladimir Potapov 2023-11-30 18:04:48 MSK
https://nvd.nist.gov/vuln/detail/CVE-2023-45322 Base Score: 6.5 MEDIUM
https://nvd.nist.gov/vuln/detail/CVE-2022-2309 Base Score: 7.5 HIGH
Comment 2 Dmitry Postnikov 2023-12-04 13:58:10 MSK
*****************************
Обновление отослано в Тестинг
Comment 3 Vladimir Potapov 2023-12-13 18:16:41 MSK
libxml2-2.9.14-5
https://abf.io/build_lists/4849775
https://abf.io/build_lists/4849776
https://abf.io/build_lists/4849777
https://abf.io/build_lists/4849778
https://abf.io/build_lists/4849779
**************************** Advisory **************************
CVEs closed by patches
****************************************************************
QA Verified