[Secure-testing-commits] r23831 - data/CVE

Salvatore Bonaccorso carnil at alioth.debian.org
Mon Sep 30 12:24:13 UTC 2013


Author: carnil
Date: 2013-09-30 12:24:13 +0000 (Mon, 30 Sep 2013)
New Revision: 23831

Modified:
   data/CVE/list
Log:
Add CVE-2013-4356/xen (with TODO item)

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-09-30 12:21:51 UTC (rev 23830)
+++ data/CVE/list	2013-09-30 12:24:13 UTC (rev 23831)
@@ -3510,8 +3510,11 @@
 	- eglibc <unfixed>
 	NOTE: http://sourceware.org/bugzilla/show_bug.cgi?id=12671
 	TODO: check
-CVE-2013-4356
+CVE-2013-4356 [Memory accessible by 64-bit PV guests under live migration]
 	RESERVED
+	- xen <unfixed>
+	NOTE: according to XSA-64, 4.2.x and earlier releases are not vulnerable
+	TODO: check
 CVE-2013-4355 [Information leaks through I/O instruction emulation]
 	RESERVED
 	- xen <unfixed>




More information about the Secure-testing-commits mailing list