[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-14345/sddm as not-affected for stretch

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
415ddaf6 by Salvatore Bonaccorso at 2018-07-18T13:16:41+02:00
Mark CVE-2018-14345/sddm as not-affected for stretch

The feature was introduced in 0.16.0 upstream to re-use sessions
(ReuseSession=true in sddm.conf).

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -121,6 +121,7 @@ CVE-2018-14346 (GNU Libextractor before 1.7 has a stack-based buffer overflow in
 	NOTE: https://gnunet.org/git/libextractor.git/commit/?id=ad19e7fe0adc99d5710eff1ed48d91a7b75a950e
 CVE-2018-14345 (An issue was discovered in SDDM through 0.17.0. If configured with ...)
 	- sddm <unfixed>
+	[stretch] - sddm <not-affected> (Re-use session feature introduced in 0.16.0)
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1101450
 	NOTE: https://github.com/sddm/sddm/commit/147cec383892d143b5e02daa70f1e7def50f5d98
 CVE-2018-14344



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/415ddaf69ef0ba04408d725e884aff3081ae3a30

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/415ddaf69ef0ba04408d725e884aff3081ae3a30
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180718/ecb1f09b/attachment.html>