Bug 14136

Summary: [CVE 21]yajl 2.1.0 CVE
Product: [ROSA-based products] ROSA Fresh Reporter: Vladimir Potapov <v.potapov>
Component: Packages from MainAssignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: blocker    
Priority: Highest CC: a.proklov, pastordidi
Version: AllFlags: v.potapov: qa_verified+
v.potapov: secteam_verified?
a.proklov: published+
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: CVE-2023-33460
Whiteboard:
Platform: --- ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Vladimir Potapov 2023-12-08 13:28:37 MSK
https://nvd.nist.gov/vuln/detail/CVE-2023-33460 Exploit!
Comment 2 Dmitry Postnikov 2023-12-11 12:02:56 MSK
*****************************
Обновление отослано в Тестинг
Comment 3 Vladimir Potapov 2023-12-14 17:05:00 MSK
yajl-2.1.0-2
https://abf.io/build_lists/4885155
https://abf.io/build_lists/4885156 х64
https://abf.io/build_lists/4885157
https://abf.io/build_lists/4885158
https://abf.io/build_lists/4885159
*********************** Advisory *******************
CVE closed by patch
****************************************************
QA Verified