[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add clarifying note for CVE-2018-1000028

Salvatore Bonaccorso carnil at debian.org
Sun Jan 28 20:17:29 UTC 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
91c89b2b by Salvatore Bonaccorso at 2018-01-28T21:17:08+01:00
Add clarifying note for CVE-2018-1000028

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2664,6 +2664,8 @@ CVE-2018-1000028 [nfsd: auth: Fix gid sorting when rootsquash enabled]
 	[jessie] - linux <not-affected> (Vulnerable code introduced later)
 	[wheezy] - linux <not-affected> (Vulnerable code introduced later)
 	NOTE: Fixed by: https://git.kernel.org/linus/1995266727fa8143897e89b55f5d3c79aa828420
+	NOTE: Introducing commit backported to 4.14.8 and 4.9.76. But Debian stretch
+	NOTE: did never contain the vulnerable code alone without the fix.
 CVE-2018-1000022 [Password protect the JSONRPC interface]
 	- electrum 3.0.5-1 (bug #886683)
 	[stretch] - electrum <ignored> (Unable to connect to current Etherum servers and thus not exploitable, scheduled for removal at #887412)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/91c89b2b8d1f721d0c25aec9134b2d72fb0c2664

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/91c89b2b8d1f721d0c25aec9134b2d72fb0c2664
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180128/9957ef76/attachment.html>


More information about the Secure-testing-commits mailing list