[Secure-testing-commits] r49120 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-22 09:45:03 +0000 (Wed, 22 Feb 2017)
New Revision: 49120

Modified:
   data/CVE/list
Log:
Add CVE-2017-2616/util-linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-22 09:20:48 UTC (rev 49119)
+++ data/CVE/list	2017-02-22 09:45:03 UTC (rev 49120)
@@ -9803,8 +9803,11 @@
 CVE-2017-2617
 	RESERVED
 	NOT-FOR-US: hawtio
-CVE-2017-2616
+CVE-2017-2616 [Sending SIGKILL to other processes with root privileges via su]
 	RESERVED
+	- util-linux <unfixed> (unimportant)
+	NOTE: https://github.com/karelzak/util-linux/commit/dffab154d29a288aa171ff50263ecc8f2e14a891
+	TODO: double-check unimportant severity, since we do not compile su from util-linux
 CVE-2017-2615
 	RESERVED
 	- qemu <unfixed> (low; bug #854731)