[Secure-testing-commits] r29276 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-10-05 11:47:55 +0000 (Sun, 05 Oct 2014)
New Revision: 29276

Modified:
   data/CVE/list
Log:
Add bug references for qemu issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-05 11:47:48 UTC (rev 29275)
+++ data/CVE/list	2014-10-05 11:47:55 UTC (rev 29276)
@@ -19474,7 +19474,7 @@
 CVE-2014-0223 [qcow1: Validate image size]
 	RESERVED
 	{DSA-3045-1 DSA-3044-1}
-	- qemu 2.0.0+dfsg-6
+	- qemu 2.0.0+dfsg-6 (bug #742730)
 	- qemu-kvm <removed>
 	[squeeze] - qemu <end-of-life> (Unsupported in squeeze-lts)
 	[squeeze] - qemu-kvm <end-of-life> (Unsupported in squeeze-lts)
@@ -19482,7 +19482,7 @@
 CVE-2014-0222 [qcow1: Validate L2 table size]
 	RESERVED
 	{DSA-3045-1 DSA-3044-1}
-	- qemu 2.0.0+dfsg-6
+	- qemu 2.0.0+dfsg-6 (bug #742730)
 	- qemu-kvm <removed>
 	[squeeze] - qemu <end-of-life> (Unsupported in squeeze-lts)
 	[squeeze] - qemu-kvm <end-of-life> (Unsupported in squeeze-lts)
@@ -19627,7 +19627,7 @@
 	NOT-FOR-US: Katello
 CVE-2014-0182 [virtio: out-of-bounds buffer write on state load with invalid config_len]
 	RESERVED
-	- qemu 2.1+dfsg-1
+	- qemu 2.1+dfsg-1 (bug #739589)
 	- qemu-kvm <removed>
 	[wheezy] - qemu <no-dsa> (Too intrusive to backport, minor risk)
 	[wheezy] - qemu-kvm <no-dsa> (Too intrusive to backport, minor risk)