Bug#918841: systemd: CVE-2018-16864

Michael Biebl biebl at debian.org
Thu Jan 10 00:41:17 GMT 2019


On Wed, 09 Jan 2019 21:08:51 +0100 Salvatore Bonaccorso
<carnil at debian.org> wrote:
> Source: systemd
> Version: 204-1
> Severity: grave
> Tags: security upstream
> Justification: user security hole
> Control: found -1 232-25+deb9u6
> Control: found -1 240-2
> 
> Hi,
> 
> The following vulnerability was published for systemd.
> 
> CVE-2018-16864[0]:
> memory corruption


Should we mark old-stable as not affected given the remark that the
vulnerability is exploitable since v230?

https://security-tracker.debian.org/tracker/CVE-2018-16864
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20190110/c11cf657/attachment.sig>


More information about the Pkg-systemd-maintainers mailing list