Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

shadow: CVE-2018-7169 #1085

Closed
l2dy opened this issue Mar 19, 2018 · 6 comments
Closed

shadow: CVE-2018-7169 #1085

l2dy opened this issue Mar 19, 2018 · 6 comments
Labels
security Topic/issue involves a security issue/fixed

Comments

@l2dy
Copy link
Member

l2dy commented Mar 19, 2018

https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/1729357
@l2dy l2dy added the security Topic/issue involves a security issue/fixed label Mar 19, 2018
@MingcongBai
Copy link
Member

Upstream still working on a fix... shadow-maint/shadow#99

@MingcongBai MingcongBai added the no-fix-yet No fix available yet from the upstream label Mar 21, 2018
@MingcongBai
Copy link
Member

Fix merged, but no adoption in any distribution yet.

@liushuyu
Copy link
Member

Update: shadow release 4.6 contains the fix.

@liushuyu liushuyu removed the no-fix-yet No fix available yet from the upstream label May 22, 2018
@l2dy
Copy link
Member Author

l2dy commented May 23, 2018

Cross-References: GLSA 201805-09

MingcongBai added a commit that referenced this issue May 24, 2018
@MingcongBai
shadow: update to 4.6; fix #1085
16dc224
@MingcongBai
Copy link
Member

Fixed with 16dc224. Closing.

@l2dy
Copy link
Member Author

l2dy commented May 24, 2018

Use AOSA-2018-0242.

MingcongBai added a commit that referenced this issue Jul 5, 2018
@MingcongBai
shadow: update to 4.6; fix #1085
6bc80e8
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security Topic/issue involves a security issue/fixed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@MingcongBai @liushuyu @l2dy