14076 – [CVE21] rpm 4.17 CVEs

Bug 14076 - [CVE21] rpm 4.17 CVEs

Summary: [CVE21] rpm 4.17 CVEs

Status:	RESOLVED DUPLICATE of bug 13307

Alias:	None

Product:	ROSA Fresh
Classification:	ROSA-based products
Component:	Installer and live mode (show other bugs)
Version:	All
Hardware:	All Linux

Importance:	Highest blocker
Target Milestone:	---
Assignee:	ROSA Linux Bugs

URL:	CVE-2021-35937,CVE-2021-35938,CVE-202...
Whiteboard:

Depends on:
Blocks:

Reported:	2023-11-30 17:50 MSK by Vladimir Potapov
Modified:	2023-12-01 08:41 MSK (History)
CC List:	2 users (show)

See Also:
Platform:	---
ROSA Vulnerability identifier:
RPM Package:
Upstream:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Vladimir Potapov 2023-11-30 17:50:42 MSK

https://nvd.nist.gov/vuln/detail/CVE-2021-35937 Exploit
https://nvd.nist.gov/vuln/detail/CVE-2021-35938 Exploit
https://nvd.nist.gov/vuln/detail/CVE-2021-35939 Exploit
https://nvd.nist.gov/vuln/detail/CVE-2021-3521 4.7 MEDIUM

Comment 1 Aleksandr Proklov 2023-12-01 05:47:35 MSK

на него уже есть какой-то баг https://bugzilla.rosalinux.ru/show_bug.cgi?id=13307

Comment 2 Vladimir Potapov 2023-12-01 08:41:17 MSK


*** This bug has been marked as a duplicate of bug 13307 ***