[Secure-testing-commits] r33485 - in data: . CVE
Raphaël Hertzog
hertzog at moszumanska.debian.org
Fri Apr 10 13:46:54 UTC 2015
Author: hertzog
Date: 2015-04-10 13:46:54 +0000 (Fri, 10 Apr 2015)
New Revision: 33485
Modified:
data/CVE/list
data/dla-needed.txt
Log:
Mark qemu CVE as end-of-life in squeeze and drop it from dla-needed.txt
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-04-10 09:03:22 UTC (rev 33484)
+++ data/CVE/list 2015-04-10 13:46:54 UTC (rev 33485)
@@ -3236,6 +3236,7 @@
- qemu <unfixed> (bug #781250)
[jessie] - qemu <no-dsa> (Postponed until fixed upstream)
[wheezy] - qemu <not-affected> (Websocket protocol support introduced in v1.4.0-rc0)
+ [squeeze] - qemu <not-affected> (Websocket protocol support introduced in v1.4.0-rc0)
- qemu-kvm <not-affected> (Websocket protocol support introduced in v1.4.0-rc0)
NOTE: https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04894.html
NOTE: Original patches have problem: https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04995.html
@@ -23330,6 +23331,7 @@
- qemu 2.1+dfsg-6 (bug #765496)
- qemu-kvm <removed>
[squeeze] - qemu-kvm <end-of-life>
+ [squeeze] - qemu <end-of-life>
NOTE: Upstream's quick and easy stopgap for this issue: compile out the hardware acceleration functions which lack sanity checks.
NOTE: http://git.qemu.org/?p=qemu.git;a=commitdiff;h=83afa38eb20ca27e30683edc7729880e091387fc
CVE-2014-3688 (The SCTP implementation in the Linux kernel before 3.17.4 allows ...)
@@ -23498,6 +23500,7 @@
- qemu 2.1+dfsg-5 (bug #762532)
- qemu-kvm <removed>
[squeeze] - qemu-kvm <end-of-life>
+ [squeeze] - qemu <end-of-life>
NOTE: http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg03543.html
CVE-2014-3639 (The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not ...)
{DSA-3026-1 DLA-87-1}
Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt 2015-04-10 09:03:22 UTC (rev 33484)
+++ data/dla-needed.txt 2015-04-10 13:46:54 UTC (rev 33485)
@@ -59,8 +59,6 @@
--
pound
--
-qemu (Nguyen Cong)
---
qt4-x11
--
roundup (Thorsten Alteholz)
More information about the Secure-testing-commits
mailing list