Subject: Re: bug#29182: CVE-2017-1000383: umask and backup files

From: Noam Postavsky <[email-masked]>
Date: Sun, 06 Oct 2019 09:17:25 -0400

Stefan Kangas <[email-masked]> writes:

> PS. This CVE has the tag "withdrawn" in a Github repository which seems
> to be handled by the CVE team at MITRE.  Not sure what that means, if
> anything, but it seemed interesting enough to mention.
>
> https://github.com/CVEProject/cvelist/pull/19

I think it's just that specific pull request which has status
"withdrawn", because it accidentally lumps together unrelated commits.

The CVE file itself doesn't mention anything about "withdrawn".

https://github.com/CVEProject/cvelist/blob/master/2017/1000xxx/CVE-2017-1000383.json