Bug 14421

Summary: [CVE 21] dnsmasq 2.87 CVE found
Product: [ROSA-based products] ROSA Fresh Reporter: Arsenii <a.konovalov>
Component: Net (ssh, samba, ssl, NM...)Assignee: Mikhail Novosyolov <m.novosyolov>
Status: VERIFIED FIXED QA Contact: ROSA Linux Bugs <bugs>
Severity: major    
Priority: Normal CC: a.proklov, e.malashin, v.potapov
Version: AllFlags: v.potapov: qa_verified+
a.konovalov: secteam_verified?
a.proklov: published+
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Platform: 2021.1 ROSA Vulnerability identifier:
RPM Package: ISO-related:
Bad POT generating: Upstream:

Description Arsenii 2024-04-15 18:16:18 MSK
https://nvd.nist.gov/vuln/detail/CVE-2023-50387 HIGH
Comment 1 Aleksandr Proklov 2024-04-16 05:23:06 MSK
уязвимость закрыта обновлением версии

dnsmasq	2.90-1

https://abf.io/build_lists/5022573
https://abf.io/build_lists/5022574 х64
https://abf.io/build_lists/5022575
https://abf.io/build_lists/5022576
https://abf.io/build_lists/5022577
Comment 2 e.malashin@rosalinux.ru 2024-04-18 17:00:26 MSK
The update sent to testings
Comment 3 Vladimir Potapov 2024-04-25 05:27:21 MSK
dnsmasq-2.90-1
https://abf.io/build_lists/5022573
https://abf.io/build_lists/5022574 х64
https://abf.io/build_lists/5022575
https://abf.io/build_lists/5022576
https://abf.io/build_lists/5022577
*********************** Advisory ************************
CVE closed by version update
*********************************************************
QA Verified