[Secure-testing-commits] r22461 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2013-06-03 16:51:30 +0000 (Mon, 03 Jun 2013)
New Revision: 22461

Modified:
   data/CVE/list
Log:
xen CVE-2013-2076, CVE-2013-2077, CVE-2013-2078

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-06-03 13:19:35 UTC (rev 22460)
+++ data/CVE/list	2013-06-03 16:51:30 UTC (rev 22461)
@@ -3833,12 +3833,21 @@
 CVE-2013-2079 (mod/assign/locallib.php in the assignment module in Moodle 2.3.x ...)
 	- moodle <not-affected> (Only affects 2.3 and later)
 	NOTE: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38443
-CVE-2013-2078
+CVE-2013-2078 [xen: Hypervisor crash due to missing exception recovery on XSETBV]
 	RESERVED
-CVE-2013-2077
+	- xen <unfixed>
+	NOTE: http://lists.xen.org/archives/html/xen-announce/2013-06/msg00000.html
+	TODO: check
+CVE-2013-2077 [xen: Hypervisor crash due to missing exception recovery on XRSTOR]
 	RESERVED
-CVE-2013-2076
+	- xen <unfixed>
+	NOTE: http://lists.xen.org/archives/html/xen-announce/2013-06/msg00001.html
+	TODO: check
+CVE-2013-2076 [xen: Information leak on XSAVE/XRSTOR capable AMD CPUs]
 	RESERVED
+	- xen <unfixed>
+	NOTE: http://lists.xen.org/archives/html/xen-announce/2013-06/msg00002.html
+	TODO: check
 CVE-2013-2075
 	RESERVED
 	- chicken <not-affected> (Incomplete fix was never applied)