[Secure-testing-commits] r47851 - data/CVE

Mon Jan 9 20:34:21 UTC 2017

Author: carnil
Date: 2017-01-09 20:34:21 +0000 (Mon, 09 Jan 2017)
New Revision: 47851

Modified:
   data/CVE/list
Log:
Add description and note for bubblewarp

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-01-09 20:30:57 UTC (rev 47850)
+++ data/CVE/list	2017-01-09 20:34:21 UTC (rev 47851)
@@ -5,8 +5,9 @@
 CVE-2017-XXXX [multiple new security issues]
 	- w3m 0.5.3-34 (bug #850432)
 	[jessie] - w3m <no-dsa> (Minor issues)
-CVE-2017-5226
+CVE-2017-5226 [escape via TIOCSTI ioctl]
 	- bubblewrap <unfixed> (bug #850702)
+	NOTE: https://github.com/projectatomic/bubblewrap/issues/142
 CVE-2017-5207 [Root shell via --bandwidth and --shell]
 	- firejail 0.9.44.4-1 (bug #850528)
 	NOTE: https://github.com/netblue30/firejail/issues/1023


