[Secure-testing-commits] r47505 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-12-27 18:52:45 +0000 (Tue, 27 Dec 2016)
New Revision: 47505

Modified:
   data/CVE/list
Log:
Add note for CVE-2012-5564/android-tools

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-27 18:43:00 UTC (rev 47504)
+++ data/CVE/list	2016-12-27 18:52:45 UTC (rev 47505)
@@ -113975,6 +113975,9 @@
 	- php-horde-imp <not-affected> (This doesn't seem to be packaged in sid's Horde and the imp3 and dimp1 packages from stable do not include the affected code)
 CVE-2012-5564 (android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users ...)
 	- android-tools <unfixed> (unimportant; bug #688280)
+	NOTE: Since android-tools/5.1.1.r38-1 the android-tools-adb binary package
+	NOTE: is not built anymore which used to contain /usr/bin/adb.
+	NOTE: Package still affected source-wise
 	- android-platform-system-core 1:7.0.0+r1-1 (unimportant; bug #823792)
 	NOTE: Neutralised by kernel hardening
 CVE-2012-5563 (OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not ...)