Bug 14201

Summary: [CVE 21] libsndfile 1.1.0 CVE
Product: [ROSA-based products] ROSA Fresh Reporter: Vladimir Potapov <v.potapov>
Component: Packages from MainAssignee: ROSA Linux Bugs <bugs>
Status: RESOLVED WONTFIX QA Contact: ROSA Linux Bugs <bugs>
Severity: blocker    
Priority: Highest CC: s.matveev
Version: AllFlags: v.potapov: secteam_verified?
Target Milestone: ---   
Hardware: All   
OS: Linux   
URL: CVE-2022-33064
Whiteboard:
Platform: --- ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Vladimir Potapov 2024-01-10 11:52:57 MSK
https://nvd.nist.gov/vuln/detail/CVE-2022-33064 exploit!
Comment 1 Svyatoslav Matveev 2024-01-10 13:58:11 MSK
Пока что нет исправления (если это вообще ошибка),
наблюдаем https://github.com/libsndfile/libsndfile/issues/832
Comment 2 Vladimir Potapov 2024-01-17 17:36:21 MSK
Признана малозначимой и игнорируется https://www.suse.com/security/cve/CVE-2022-33064.html https://security-tracker.debian.org/tracker/CVE-2022-33064