[Git][security-tracker-team/security-tracker][master] Add CVE-2018-16883/sssd

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
910fea81 by Salvatore Bonaccorso at 2018-12-19T05:04:08Z
Add CVE-2018-16883/sssd

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14984,8 +14984,11 @@ CVE-2018-16884 [nfs: use-after-free in svc_process_common()]
 	NOTE: https://patchwork.kernel.org/cover/10733767/
 	NOTE: https://patchwork.kernel.org/patch/10733769/
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1660375
-CVE-2018-16883
+CVE-2018-16883 [Information leak in infopipe due to an improper uid restriction]
 	RESERVED
+	- sssd <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1659862
+	NOTE: Fixed in upstream 2.0.0 while refactoring code
 CVE-2018-16882 [KVM: nVMX: use after free in posted interrupt processing]
 	RESERVED
 	- linux <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/910fea819a39f40a2d3af76ee7534c0161d37623

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/910fea819a39f40a2d3af76ee7534c0161d37623
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181219/5f35af50/attachment.html>