Bug 2043471
Summary: | CVE-2021-45417 aide: heap-based buffer overflow on outputs larger than B64_BUF [ovirt-4.4] | ||
---|---|---|---|
Product: | [oVirt] ovirt-node | Reporter: | Sandro Bonazzola <sbonazzo> |
Component: | Included packages | Assignee: | Sandro Bonazzola <sbonazzo> |
Status: | CLOSED CURRENTRELEASE | QA Contact: | cshao <cshao> |
Severity: | high | Docs Contact: | |
Priority: | unspecified | ||
Version: | 4.4.10 | CC: | ahadas, arachman, bugs, cshao, lsvaty, lveyde, mavital, peyu, sanja, sbonazzo, weiwang, yaniwang |
Target Milestone: | ovirt-4.4.10-2 | Keywords: | Security, SecurityTracking |
Target Release: | 4.4.10.2 | Flags: | pm-rhel:
ovirt-4.4+
cshao: testing_ack+ |
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | aide-0.16-14.el8_5.1 | Doc Type: | No Doc Update |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2022-03-07 12:23:24 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | Node | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 2041956 | ||
Bug Blocks: | 2041489 |
Description
Sandro Bonazzola
2022-01-21 10:05:42 UTC
looking at https://koji.mbox.centos.org/koji/packageinfo?packageID=118 I don't see any build triggered for aide following https://access.redhat.com/errata/RHSA-2022:0441 yet. I see it pushed to https://git.centos.org/rpms/aide/commits/c8 but not to https://git.centos.org/rpms/aide/commits/c8s. I reached out to CentOS Stream IRC channel asking to check. Build landed on CentOS Stream Koji: aide-0.16-14.el8_5.1 https://koji.mbox.centos.org/koji/buildinfo?buildID=21066 but still not available on http://mirror.centos.org/centos/8-stream/AppStream/x86_64/os/Packages/ Now landed: http://mirror.centos.org/centos/8-stream/AppStream/x86_64/os/Packages/aide-0.16-14.el8_5.1.x86_64.rpm Will be included in next oVirt Node async 0.16-14.el8_5.1 included: https://da.gd/ov4410-2 |