Bug 14404

Summary: [CVE 21] postgresql 12.17 CVE found
Product: [ROSA-based products] ROSA Fresh Reporter: Arsenii <a.konovalov>
Component: Contributed PackagesAssignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: critical    
Priority: High CC: a.proklov, pastordidi, s.matveev, v.potapov
Version: AllFlags: v.potapov: qa_verified+
a.konovalov: secteam_verified?
a.proklov: published+
Target Milestone: 2021.1 Fresh R12   
Hardware: All   
OS: Linux   
Whiteboard:
Platform: 2021.1 ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Arsenii 2024-04-09 16:16:36 MSK
https://nvd.nist.gov/vuln/detail/CVE-2024-0985 HIGH
Comment 1 Svyatoslav Matveev 2024-04-09 22:31:14 MSK
********** QA ADVISORY **********
Уязвимость закрыто патчем.

Ссылка на коммит исправления:
https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=2699fc035a75d0774c1f013e9320882287f78adb

https://security-tracker.debian.org/tracker/CVE-2024-0985
пишет что в коммите не правильно указан номер уязвимости

*** postgresql
**  12.17 release +1

https://abf.io/build_lists/5016797 (x86_64)
https://abf.io/build_lists/5016798
https://abf.io/build_lists/5016799
https://abf.io/build_lists/5016800
https://abf.io/build_lists/5016801
Comment 2 Dmitry Postnikov 2024-04-10 00:30:15 MSK
******************************
Обновление отослано в Тестинг
Comment 3 Vladimir Potapov 2024-04-17 09:34:52 MSK
postgresql-12.17-2
https://abf.io/build_lists/5016797 (x86_64)
https://abf.io/build_lists/5016798
https://abf.io/build_lists/5016799
https://abf.io/build_lists/5016800
https://abf.io/build_lists/5016801
************************ Advisory ****************************
CVE-2024-0985 fixed by patch
**************************************************************
QA Verified
Comment 4 Vladimir Potapov 2024-04-17 09:35:02 MSK
postgresql-12.17-2
https://abf.io/build_lists/5016797 (x86_64)
https://abf.io/build_lists/5016798
https://abf.io/build_lists/5016799
https://abf.io/build_lists/5016800
https://abf.io/build_lists/5016801
************************ Advisory ****************************
CVE-2024-0985 fixed by patch
**************************************************************
QA Verified