Bug#890557: shadow: CVE-2018-7169: unprivileged user can drop supplementary groups

2019-07-15 Thread Bálint Réczey
Control: fixed -1 1:4.7-1 Salvatore Bonaccorso ezt írta (időpont: 2018. febr. 15., Cs, 22:33): > > Source: shadow > Version: 1:4.5-1 > Severity: important > Tags: security upstream > > Hi, > > the following vulnerability was published for shadow. > > CVE-2018-7169[0]: > | An issue was discovered

Bug#890557: shadow: CVE-2018-7169: unprivileged user can drop supplementary groups

2018-02-15 Thread Salvatore Bonaccorso
Source: shadow Version: 1:4.5-1 Severity: important Tags: security upstream Hi, the following vulnerability was published for shadow. CVE-2018-7169[0]: | An issue was discovered in shadow 4.5. newgidmap (in shadow-utils) is | setuid and allows an unprivileged user to be placed in a user