[Bugs] [Bug 13328] [CVE 21] thrift 0.10.0 CVEs found

[bugzilla]

https://bugzilla.rosalinux.ru/show_bug.cgi?id=13328

Svyatoslav Matveev <s.matveev на rosalinux.ru> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|Normal                      |High
             Status|CONFIRMED                   |RESOLVED
         Resolution|---                         |FIXED
   Target Milestone|---                         |2021.1 Fresh R12
              Flags|                            |qa_verified?
           Severity|normal                      |critical

--- Comment #1 from Svyatoslav Matveev <s.matveev на rosalinux.ru> ---
********** QA ADVISORY **********

CVE-2018-11798 не собираем под nodejs

CVE-2019-11938 CVE-2019-11939 CVE-2019-3552 
CVE-2019-3553  CVE-2019-3558  CVE-2019-3559
CVE-2019-3564  CVE-2019-3565  CVE-2021-24028
не относится к нашему пакету,
https://github.com/facebook/fbthrift

CVE-2020-13949 не могу найти патч.

CVE-2018-1320 CVE-2019-0210 закрыты.

*** thrift

https://abf.io/build_lists/4444059
https://abf.io/build_lists/4444058

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
----------- следущая часть -----------
Вложение в формате HTML было извлечено&hellip;
URL: <http://lists.rosalinux.ru/pipermail/bugs/attachments/20230525/a2007331/attachment-0001.html>