Bug 14403

Summary: [CVE 21] shadow-utils 4.10 CVE found
Product: [ROSA-based products] ROSA Fresh Reporter: Arsenii <a.konovalov>
Component: Contributed PackagesAssignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: normal    
Priority: Normal CC: a.proklov, pastordidi, v.potapov
Version: AllFlags: v.potapov: qa_verified+
a.konovalov: secteam_verified?
a.proklov: published+
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Platform: 2021.1 ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Arsenii 2024-04-09 16:01:57 MSK
https://nvd.nist.gov/vuln/detail/CVE-2023-4641 MEDIUM
Comment 1 Aleksandr Proklov 2024-04-10 04:33:28 MSK
уязвимость закрыта патчем

shadow-utils	4.10-7

https://abf.io/build_lists/5016873
https://abf.io/build_lists/5016874 х64
https://abf.io/build_lists/5016875
https://abf.io/build_lists/5016876
https://abf.io/build_lists/5016877
Comment 2 Dmitry Postnikov 2024-04-10 13:30:59 MSK
*******************************
Обновление отослано в Тестинг
Comment 3 Vladimir Potapov 2024-04-17 09:33:13 MSK
shadow-utils-4.10-7
https://abf.io/build_lists/5016873
https://abf.io/build_lists/5016874 х64
https://abf.io/build_lists/5016875
https://abf.io/build_lists/5016876
https://abf.io/build_lists/5016877
**************************** Advisory *************************
CVE-2023-4641 fixed by patch
***************************************************************
QA Verified