Bug 18596 - kinit new security issue fixed upstream after 5.22.0 (CVE-2016-3100)
Summary: kinit new security issue fixed upstream after 5.22.0 (CVE-2016-3100)
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Nicolas Lécureuil
QA Contact: Sec team
URL: http://lwn.net/Vulnerabilities/689256/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-06-01 13:28 CEST by David Walser
Modified: 2016-07-05 21:02 CEST (History)
1 user (show)

See Also:
Source RPM: kinit-5.22.0-1.mga6.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2016-06-01 13:28:09 CEST 
Fedora has issued an advisory on May 24:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KNUGLEN6CX2PXMLBRZJVDF2JPUCV2U6G/

They added upstream patches referenced here:
http://bugs.kde.org/358593
Comment 1 David GEIGER 2016-06-10 12:26:42 CEST 
Done!

CC: (none) => geiger.david68210

Comment 2 David Walser 2016-06-10 12:30:39 CEST 
Thanks!

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 3 David Walser 2016-07-05 21:02:47 CEST 
This is apparently CVE-2016-3100:
http://lwn.net/Vulnerabilities/693481/

Summary: kinit new security issue fixed upstream after 5.22.0 => kinit new security issue fixed upstream after 5.22.0 (CVE-2016-3100)
Note You need to log in before you can comment on or make changes to this bug.