Bug 24079

Summary:	pam new security issue CVE-2018-17953
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Base system maintainers <basesystem>
Status:	RESOLVED INVALID	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	mageia, makowski.mageia, marja11, thierry.vignaud, tmb
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA7TOO
Source RPM:	pam-1.3.0-8.mga7.src.rpm	CVE:
Status comment:

Description David Walser 2018-12-26 03:48:38 CET

openSUSE has issued an advisory on December 8:
https://lists.opensuse.org/opensuse-updates/2018-12/msg00028.html

Mageia 6 is also affected.

David Walser 2018-12-26 03:48:44 CET

Whiteboard: (none) => MGA6TOO

Comment 1 Marja Van Waes 2018-12-26 08:21:20 CET

Pam has no registered maintainer, assuming it counts as a BaseSystem application so assigning to the Base System maintainers and CC'ing some committers.

Please reassign to all packagers collectively if I'm wrong.

CC: (none) => makowski.mageia, marja11, thierry.vignaud, tmb
Assignee: bugsquad => basesystem

David Walser 2019-06-23 19:23:09 CEST

Whiteboard: MGA6TOO => MGA7TOO, MGA6TOO

Nicolas Lécureuil 2020-05-22 14:05:07 CEST

Whiteboard: MGA7TOO, MGA6TOO => MGA7TOO
CC: (none) => mageia

Comment 2 Nicolas Lécureuil 2020-05-31 20:55:57 CEST

as explained here:  https://security-tracker.debian.org/tracker/CVE-2018-17953

this CVE is introduced by a suse specific patch, so we are not affected

Status: NEW => RESOLVED
Resolution: (none) => INVALID