[Git][security-tracker-team/security-tracker][master] Add CVE-2018-16889/ceph

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e846b779 by Salvatore Bonaccorso at 2019-01-11T08:00:57Z
Add CVE-2018-16889/ceph

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -22130,8 +22130,12 @@ CVE-2018-16891
 	RESERVED
 CVE-2018-16890
 	RESERVED
-CVE-2018-16889
+CVE-2018-16889 [debug logging for v4 auth does not sanitize encryption keys]
 	RESERVED
+	- ceph <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1665334
+	NOTE: http://tracker.ceph.com/issues/37847
+	NOTE: https://github.com/ceph/ceph/commit/ba55e2a96c9dfcc7aa2311431beaaa23cb05c30d
 CVE-2018-16888 [kills privileged process if unprivileged PIDFile was tampered]
 	RESERVED
 	- systemd 237-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e846b7790845f282b644a88bd9c158b11d43c44d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e846b7790845f282b644a88bd9c158b11d43c44d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190111/5c3550ef/attachment.html>