I have two "injected" entries in /var/lib/portage/glsa_injected:
(for an old Gtk-based binary package). However, `glsa-check --list` doesn't list them as injected:
# glsa-check --list
[A] means this GLSA was marked as applied (injected),
[U] means the system is not affected and
[N] indicates that the system might be affected.
On the other hand, `glsa-check -t` all does show them, while it shouldn't:
# glsa-check -t all
This system is affected by the following GLSAs:
This is contrary to what the glsa-check(1) manpage says:
List of GLSA ids that have been injected and will _never_ show up
as 'affected' on this system.
glsa-check is included with >=sys-apps/portage-2.3.72 (bug 463952).