[Secure-testing-commits] r41093 - data/CVE

Sat Apr 23 17:40:02 UTC 2016

Author: carnil
Date: 2016-04-23 17:40:02 +0000 (Sat, 23 Apr 2016)
New Revision: 41093

Modified:
   data/CVE/list
Log:
Add runc for CVE-2016-3697, add commit references for upstream fixes

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-04-23 17:29:40 UTC (rev 41092)
+++ data/CVE/list	2016-04-23 17:40:02 UTC (rev 41093)
@@ -1103,6 +1103,9 @@
 CVE-2016-3697 [privilege escalation via confusion of usernames and UIDs]
 	RESERVED
 	- docker.io <unfixed>
+	- runc <unfixed>
+	NOTE: https://github.com/opencontainers/runc/commit/69af385de62ea68e2e608335cffbb0f4aa3db091 (runc)
+	NOTE: https://github.com/docker/docker/commit/da38ac6c79fe902ed0687afc73d731c95c6d491a (docker)
 	TODO: check
 CVE-2016-3696
 	RESERVED


