[Secure-testing-commits] r52855 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-23 18:50:05 +0000 (Fri, 23 Jun 2017)
New Revision: 52855

Modified:
   data/CVE/list
Log:
Add CVE-2017-9772/ocaml

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-23 17:31:02 UTC (rev 52854)
+++ data/CVE/list	2017-06-23 18:50:05 UTC (rev 52855)
@@ -1334,8 +1334,11 @@
 	- php-horde-image <unfixed> (bug #865504)
 	[jessie] - php-horde-image <not-affected> (Only Horde_Image above 2.3.0 affected)
 	NOTE: https://lists.horde.org/archives/announce/2017/001234.html
-CVE-2017-9772
+CVE-2017-9772 [local privilege escalation issue with ocaml binaries]
 	RESERVED
+	- ocaml <not-affected> (Only affects 4.04.0 and 4.04.1)
+	NOTE: https://caml.inria.fr/mantis/view.php?id=7557
+	TODO: double-check
 CVE-2017-9771 (install\save.php in WebsiteBaker v2.10.0 allows remote attackers to ...)
 	NOT-FOR-US: WebsiteBaker
 CVE-2017-9770