Bug 24079 - pam new security issue CVE-2018-17953
Summary: pam new security issue CVE-2018-17953
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Base system maintainers
QA Contact: Sec team
URL:
Whiteboard: MGA7TOO
Keywords:
Depends on:
Blocks:
 
Reported: 2018-12-26 03:48 CET by David Walser
Modified: 2020-05-31 20:55 CEST (History)
5 users (show)

See Also:
Source RPM: pam-1.3.0-8.mga7.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2018-12-26 03:48:38 CET 
openSUSE has issued an advisory on December 8:
https://lists.opensuse.org/opensuse-updates/2018-12/msg00028.html

Mageia 6 is also affected.
David Walser 2018-12-26 03:48:44 CET

Whiteboard: (none) => MGA6TOO

Comment 1 Marja Van Waes 2018-12-26 08:21:20 CET 
Pam has no registered maintainer, assuming it counts as a BaseSystem application so assigning to the Base System maintainers and CC'ing some committers.

Please reassign to all packagers collectively if I'm wrong.

CC: (none) => makowski.mageia, marja11, thierry.vignaud, tmb
Assignee: bugsquad => basesystem

David Walser 2019-06-23 19:23:09 CEST

Whiteboard: MGA6TOO => MGA7TOO, MGA6TOO

Nicolas Lécureuil 2020-05-22 14:05:07 CEST

Whiteboard: MGA7TOO, MGA6TOO => MGA7TOO
CC: (none) => mageia

Comment 2 Nicolas Lécureuil 2020-05-31 20:55:57 CEST 
as explained here:  https://security-tracker.debian.org/tracker/CVE-2018-17953

this CVE is introduced by a suse specific patch, so we are not affected

Status: NEW => RESOLVED
Resolution: (none) => INVALID
Note You need to log in before you can comment on or make changes to this bug.