Bug 14413

Summary: [CVE 21] libxml2 CVE found
Product: [ROSA-based products] ROSA Fresh Reporter: Arsenii <a.konovalov>
Component: Contributed PackagesAssignee: ROSA Linux Bugs <bugs>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: critical    
Priority: High CC: a.proklov, pastordidi, s.matveev, v.potapov
Version: AllFlags: v.potapov: qa_verified+
a.konovalov: secteam_verified?
a.proklov: published+
Target Milestone: 2021.1 Fresh R12   
Hardware: All   
OS: Linux   
URL: CVE-2024-25062
Whiteboard:
Platform: 2021.1 ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Arsenii 2024-04-11 12:58:43 MSK
https://nvd.nist.gov/vuln/detail/CVE-2024-25062 HIGH
Comment 1 Svyatoslav Matveev 2024-04-11 13:42:57 MSK
********** QA ADVISORY **********

Уязвимость закрыто патчем.

Ссылка на исправления:
https://gitlab.gnome.org/GNOME/libxml2/-/commit/1a66b176055d25ee635bf328c7b35b381db0b71d

*** libxml2
**  2.9.14 release +1

https://abf.io/build_lists/5018607 (x86_64)
https://abf.io/build_lists/5018608
https://abf.io/build_lists/5018609
https://abf.io/build_lists/5018610
https://abf.io/build_lists/5018611
Comment 2 Dmitry Postnikov 2024-04-11 19:42:32 MSK
*******************************
Обнволение отпубликовано в Тестинг
Comment 3 Vladimir Potapov 2024-04-17 16:31:40 MSK
libxml2-2.9.14-6
https://abf.io/build_lists/5018607 (x86_64)
https://abf.io/build_lists/5018608
https://abf.io/build_lists/5018609
https://abf.io/build_lists/5018610
https://abf.io/build_lists/5018611
************************* Advisory ****************************
CVE-2024-25062 closed by patch
***************************************************************
QA Verified