Bug 14212

Summary:	[CVE 21] opensc 0.23.0 CVE
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Vladimir Potapov <v.potapov>
Component:	Packages from Main	Assignee:	ROSA Linux Bugs <bugs>
Status:	VERIFIED FIXED	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	a.proklov, s.matveev
Version:	All	Flags:	v.potapov: qa_verified+ v.potapov: secteam_verified? a.proklov: published+
Target Milestone:	2021.1 Fresh R12
Hardware:	All
OS:	Linux
URL:	CVE-2023-40661,CVE-2023-40660,CVE-2023-4535,
Whiteboard:
Platform:	2021.1	ROSA Vulnerability identifier:
RPM Package:		ISO-related:
Bad POT generating:		Upstream:

Description Vladimir Potapov 2024-01-11 07:58:32 MSK

https://nvd.nist.gov/vuln/detail/CVE-2023-40660 medium

В дебиане починили
https://security-tracker.debian.org/tracker/CVE-2023-40660

Comment 1 Vladimir Potapov 2024-01-11 08:09:58 MSK

https://nvd.nist.gov/vuln/detail/CVE-2023-40661 medium
debian fix https://security-tracker.debian.org/tracker/CVE-2023-40661

Comment 2 Vladimir Potapov 2024-01-11 08:11:21 MSK

https://nvd.nist.gov/vuln/detail/CVE-2023-4535 medium-low
https://security-tracker.debian.org/tracker/CVE-2023-4535 debian fix

Comment 3 Svyatoslav Matveev 2024-01-11 10:05:17 MSK

********** QA ADVISORY **********

Уязвимости закрыты патчами.

*** opensc
**   0.23.0 release +1

https://abf.io/build_lists/4953017 (x86_64)
https://abf.io/build_lists/4953018
https://abf.io/build_lists/4953019
https://abf.io/build_lists/4953020
https://abf.io/build_lists/4953021

**  rosa2021.15
*** opensc
**   0.23.0 release +1

https://abf.io/build_lists/4953022 (x86_64)
https://abf.io/build_lists/4953023
https://abf.io/build_lists/4953024

Comment 4 Vladimir Potapov 2024-01-17 14:34:40 MSK

(In reply to Svyatoslav Matveev from comment #3)
> ********** QA ADVISORY **********
> 
> Уязвимости закрыты патчами.
> 
> *** opensc
> **   0.23.0 release +1
> 
> https://abf.io/build_lists/4953017 (x86_64)
> https://abf.io/build_lists/4953018
> https://abf.io/build_lists/4953019
> https://abf.io/build_lists/4953020
> https://abf.io/build_lists/4953021
*********************************************
The update sent to testings


> **  rosa2021.15
> *** opensc
> **   0.23.0 release +1
> 
> https://abf.io/build_lists/4953022 (x86_64)
> https://abf.io/build_lists/4953023
> https://abf.io/build_lists/4953024
**********************************************
published

Comment 5 Vladimir Potapov 2024-01-23 14:38:47 MSK

opensc-0.23.0-2
https://abf.io/build_lists/4953017 (x86_64)
https://abf.io/build_lists/4953018
https://abf.io/build_lists/4953019
https://abf.io/build_lists/4953020
https://abf.io/build_lists/4953021
*********************** Advisory ***********************
CVEs are fixed
********************************************************
QA Verified