[Secure-testing-commits] r28909 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-09-19 07:13:34 +0000 (Fri, 19 Sep 2014)
New Revision: 28909

Modified:
   data/CVE/list
Log:
Update information for CVE-2014-3633/libvirt

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-09-19 07:07:07 UTC (rev 28908)
+++ data/CVE/list	2014-09-19 07:13:34 UTC (rev 28909)
@@ -6849,7 +6849,9 @@
 CVE-2014-3633 [qemu: out-of-bounds read access in qemuDomainGetBlockIoTune() due to invalid index]
 	RESERVED
 	- libvirt <unfixed>
-	NOTE: http://libvirt.org/git/?p=libvirt.git;a=commit;h=3e745e8f775dfe6f64f18b5c2fe4791b35d3546b
+	[squeeze] - libvirt <not-affected> (Vulnerable code introduced in v0.9.8)
+	NOTE: Upstream fix: http://libvirt.org/git/?p=libvirt.git;a=commit;h=3e745e8f775dfe6f64f18b5c2fe4791b35d3546b
+	NOTE: Introduced in http://libvirt.org/git/?p=libvirt.git;a=commitdiff;h=eca96694a7f992be633d48d5ca03cedc9bbc3c9a (v0.9.8) 
 CVE-2014-3632
 	RESERVED
 	- neutron <unfixed>