Bug 14081

Summary:	[CVE21] pcs 0.10.7 CVEs
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Vladimir Potapov <v.potapov>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	VERIFIED FIXED	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	critical
Priority:	Highest	CC:	a.proklov, pastordidi
Version:	All	Flags:	v.potapov: qa_verified+ v.potapov: secteam_verified? a.proklov: published+
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	CVE-2022-1049
Whiteboard:
Platform:	---	ROSA Vulnerability identifier:
RPM Package:		ISO-related:
Bad POT generating:		Upstream:

Description Vladimir Potapov 2023-12-01 12:33:27 MSK

https://nvd.nist.gov/vuln/detail/CVE-2022-1049 Base Score: 8.8 HIGH

Comment 1 Aleksandr Proklov 2023-12-04 10:02:09 MSK

уязвимость закрыта патчем

pcs	0.10.7-5

https://abf.io/build_lists/4856493
https://abf.io/build_lists/4856494 x64
https://abf.io/build_lists/4856495
https://abf.io/build_lists/4856496

Comment 2 Dmitry Postnikov 2023-12-04 17:00:27 MSK

*****************************
Обновление отослано в Тестинг

Comment 3 Vladimir Potapov 2023-12-14 07:54:52 MSK

pcs-0.10.7-5
https://abf.io/build_lists/4856493
https://abf.io/build_lists/4856494 x64
https://abf.io/build_lists/4856495
https://abf.io/build_lists/4856496
*********************** Advisory ******************
CVE closed by patch
***************************************************
QA Verified