[Secure-testing-commits] r22815 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-07-01 20:52:52 +0000 (Mon, 01 Jul 2013)
New Revision: 22815

Modified:
   data/CVE/list
Log:
update entry for CVE-2013-2218/libvirt; add bugnumber and notes

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-01 20:26:15 UTC (rev 22814)
+++ data/CVE/list	2013-07-01 20:52:52 UTC (rev 22815)
@@ -5612,9 +5612,12 @@
 	RESERVED
 CVE-2013-2218 [crash when listing network interfaces with filters]
 	RESERVED
-	- libvirt <unfixed>
+	- libvirt <unfixed> (bug #714699)
+	[squeeze] - libvirt <not-affected> (Vulnerable code introduced in 1.0.6)
+	[wheezy] - libvirt <not-affected> (Vulnerable code introduced in 1.0.6)
+	[jessie] - libvirt <not-affected> (Vulnerable code introduced in 1.0.6)
 	NOTE: http://libvirt.org/git/?p=libvirt.git;a=commit;h=244e0b8cf15ca2ef48d82058e728656e6c4bad11
-	TODO: check
+	NOTE: Vulnerable code introduced in http://libvirt.org/git/?p=libvirt.git;a=commit;h=7ac2c4fe624f30f2c8270116513fa2ddab07631f
 CVE-2013-2217 [Insecure temporary directory use when initializing file-based URL cache]
 	RESERVED
 	- suds 0.4.1-8 (low; bug #714340)