Bug 2080938
| Summary: | CVE-2022-1271 | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Kamil Páral <kparal> |
| Component: | xz | Assignee: | Matej Mužila <mmuzila> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 36 | CC: | bugzilla, gmarr, jnovy, mmuzila, odubaj, panovotn, pkubat, praiskup, rjones, robatino |
| Target Milestone: | --- | Flags: | mmuzila:
needinfo-
|
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | RejectedBlocker AcceptedFreezeException | ||
| Fixed In Version: | xz-5.2.5-9.fc36 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-05-02 19:43:12 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1953786 | ||
|
Description
Kamil Páral
2022-05-02 12:03:51 UTC
Matej or Richard, can you please edit https://bodhi.fedoraproject.org/updates/FEDORA-2022-07cd35f6b8 and mark it as fixing this bug? Thanks! https://fedoraproject.org/wiki/Fedora_36_Final_Release_Criteria#Security_bugs "The release must contain no known security bugs of 'important' or higher impact according to the Red Hat severity classification scale which cannot be satisfactorily resolved by a package update (e.g. issues during installation)." https://access.redhat.com/security/cve/cve-2022-1271 Looks like impact is considered important, thus a clear blocker. Discussed during the 2022-05-02 blocker review meeting: [0] The decision to classify this bug as a "RejectedBlocker (Final)" and an "AcceptedFreezeException (Final)" was made based off precedent set with the same bug in gzip (2073312) which was rejected as a blocker, this is rejected as it can be satisfactorily resolved with an update; the issue is not likely to be encountered during installation or typical use of a live image. [0] https://meetbot.fedoraproject.org/fedora-blocker-review/2022-05-02/f36-blocker-review.2022-05-02-16.00.txt FEDORA-2022-07cd35f6b8 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2022-07cd35f6b8 FEDORA-2022-07cd35f6b8 has been pushed to the Fedora 36 stable repository. If problem still persists, please make note of it in this bug report. |