[Secure-testing-commits] r30667 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-12-11 10:02:20 +0000 (Thu, 11 Dec 2014)
New Revision: 30667

Modified:
   data/CVE/list
Log:
Update entry for CVE-2014-8131/libvirt

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-11 09:10:19 UTC (rev 30666)
+++ data/CVE/list	2014-12-11 10:02:20 UTC (rev 30667)
@@ -3682,10 +3682,11 @@
 CVE-2014-8131 [deadlock and segfault in qemuConnectGetAllDomainStats]
 	RESERVED
 	- libvirt <unfixed>
-	NOTE: Introduced by http://libvirt.org/git/?p=libvirt.git;a=commit;h=d1bde8ed
-	NOTE: Introduced by http://libvirt.org/git/?p=libvirt.git;a=commit;h=1f4831ee
+	[wheezy] - libvirt <not-affected> (Vulnerable code introduced later)
+	[squeeze] - libvirt <not-affected> (Vulnerable code introduced later)
+	NOTE: Introduced by http://libvirt.org/git/?p=libvirt.git;a=commit;h=d1bde8ed (v1.2.9-rc1)
+	NOTE: Introduced by http://libvirt.org/git/?p=libvirt.git;a=commit;h=1f4831ee (v1.2.9-rc1)
 	NOTE: https://www.redhat.com/archives/libvir-list/2014-December/msg00551.html
-	TODO: check
 CVE-2014-8130
 	RESERVED
 CVE-2014-8129