Bug 25743 - networkmanager possible new security issue CVE-2018-1000135
Summary: networkmanager possible new security issue CVE-2018-1000135
Status: RESOLVED INVALID
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Jani Välimaa
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-11-25 21:53 CET by David Walser
Modified: 2019-11-26 21:10 CET (History)
0 users

See Also:
Source RPM: networkmanager-1.18.2-1.mga7.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2019-11-25 21:53:01 CET 
openSUSE has issued an advisory on June 3:
https://lists.opensuse.org/opensuse-updates/2019-06/msg00011.html

I've found info saying it was never addressed upstream, but Ubuntu's info page had a link to an upstream commit, and SUSE said some fix had been backported.  RH/Fedora had said it wasn't affected because of a config option that I don't see in Fedora's current package (and we don't have our own local config like they do), so I'm not sure if it affects us (still) or not.
Comment 1 Lewis Smith 2019-11-26 20:22:34 CET 
Assigning to wally as the registered maintainer for this package.

Assignee: bugsquad => jani.valimaa

Comment 2 Jani Välimaa 2019-11-26 21:03:51 CET 
IINM this was fixed in 1.12.0 and backported later to 1.10.14. In mga7 we have 1.18.2.
Comment 3 David Walser 2019-11-26 21:10:36 CET 
Thanks.

Resolution: (none) => INVALID
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.