[Secure-testing-commits] r50109 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-03-28 04:19:58 +0000 (Tue, 28 Mar 2017)
New Revision: 50109

Modified:
   data/CVE/list
Log:
CVE-2017-6964/eject

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-28 04:19:31 UTC (rev 50108)
+++ data/CVE/list	2017-03-28 04:19:58 UTC (rev 50109)
@@ -846,8 +846,10 @@
 	[wheezy] - binutils <no-dsa> (Minor issue)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21137
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=03f7786e2f440b9892b1c34a58fb26222ce1b493
-CVE-2017-6964
+CVE-2017-6964 [dmcrypt-get-device does not check the return values of setuid() or setgid()]
 	RESERVED
+	- eject <unfixed>
+	NOTE: https://bugs.launchpad.net/ubuntu/+source/eject/+bug/1673627
 CVE-2017-6963
 	RESERVED
 CVE-2017-6962 (An issue was discovered in apng2gif 1.7. There is an integer overflow ...)