[Secure-testing-commits] r26160 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2014-03-18 13:52:24 +0000 (Tue, 18 Mar 2014)
New Revision: 26160

Modified:
   data/CVE/list
Log:
libvirt crash during spice migration

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-03-18 07:56:56 UTC (rev 26159)
+++ data/CVE/list	2014-03-18 13:52:24 UTC (rev 26160)
@@ -1,3 +1,9 @@
+CVE-2013-XXXX [libvirt: unprivileged user can crash libvirtd during spice migration]
+	- libvirt 0.1.7-2
+	NOTE: Fix is present since at least 0.1.7-2. Commit in git 2013-03-01 623674a2
+	NOTE: http://www.redhat.com/archives/libvir-list/2013-September/msg01208.html
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1009886
+	NOTE: CVE request http://www.openwall.com/lists/oss-security/2014/03/18/1
 CVE-2014-XXXX [Apostrophes not properly escaped]
 	- k4dirstat 2.7.5-1 (bug #741659)
 CVE-2014-XXXX [MSA-14-0004: Incorrect filtering in Quiz]