Bug 14409

Summary: [CVE 21] libarchive 3.6.2 CVE found
Product: [ROSA-based products] ROSA Fresh Reporter: Arsenii <a.konovalov>
Component: Contributed PackagesAssignee: ROSA Linux Bugs <bugs>
Status: RESOLVED WONTFIX QA Contact: ROSA Linux Bugs <bugs>
Severity: normal    
Priority: Normal CC: s.matveev
Version: AllFlags: a.konovalov: secteam_verified?
Target Milestone: 2021.1 Fresh R12   
Hardware: All   
OS: Linux   
Whiteboard:
Platform: 2021.1 ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Arsenii 2024-04-11 11:32:58 MSK
https://nvd.nist.gov/vuln/detail/CVE-2023-30571 MEDIUM
Comment 1 Svyatoslav Matveev 2024-04-11 13:13:09 MSK
Патча нет.
Разработчики игнорируют уязвимость.
Доп. информация:
https://github.com/openembedded/openembedded-core/commit/ffa8f92aa6f8405d8fea117af2f212ba190de393