[Secure-testing-commits] r35997 - data/CVE

Wed Aug 12 08:52:34 UTC 2015

Author: agx
Date: 2015-08-12 08:52:34 +0000 (Wed, 12 Aug 2015)
New Revision: 35997

Modified:
   data/CVE/list
Log:
libvirt unsupported in squeeze-lts

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-08-12 08:48:29 UTC (rev 35996)
+++ data/CVE/list	2015-08-12 08:52:34 UTC (rev 35997)
@@ -2012,7 +2012,9 @@
 CVE-2015-5160 [Ceph id/key leaked in the process list]
 	RESERVED
 	- libvirt <unfixed>
+	[squeeze] - libvirt <end-of-life> (Unsupported in squeeze-lts)
 	NOTE: https://www.redhat.com/archives/libvir-list/2011-November/msg00853.html
+	NOTE: Needs changes in QEMU for passing passwords. Affects at least iSCSI and rbd/ceph.
 CVE-2015-5159
 	RESERVED
 	NOT-FOR-US: kdcproxy


