[Secure-testing-commits] r38397 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2015-12-17 20:50:04 +0000 (Thu, 17 Dec 2015)
New Revision: 38397

Modified:
   data/CVE/list
Log:
Mark xen CVE as end-of-life on squeeze

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-17 20:49:54 UTC (rev 38396)
+++ data/CVE/list	2015-12-17 20:50:04 UTC (rev 38397)
@@ -1,5 +1,6 @@
 CVE-2015-XXXX [XSA-166: ioreq handling possibly susceptible to multiple read issue]
 	- xen <unfixed>
+	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-166.html
 CVE-2015-8572 (Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 ...)
 	TODO: check
@@ -26,10 +27,12 @@
 CVE-2015-8555 [information leak in legacy x86 FPU/XMM initialization]
 	RESERVED
 	- xen <unfixed>
+	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-165.html
 CVE-2015-8554 [qemu-dm buffer overrun in MSI-X handling]
 	RESERVED
 	- xen <unfixed>
+	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-164.html
 	TODO: check
 CVE-2015-8553
@@ -37,16 +40,19 @@
 CVE-2015-8552 [Linux pciback missing sanity checks leading to crash]
 	RESERVED
 	- xen <unfixed>
+	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-157.html
 	TODO: check
 CVE-2015-8551 [Linux pciback missing sanity checks leading to crash]
 	RESERVED
 	- xen <unfixed>
+	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-157.html
 	TODO: check
 CVE-2015-8550 [paravirtualized drivers incautious about shared memory contents]
 	RESERVED
 	- xen <unfixed>
+	[squeeze] - xen <end-of-life> (Unsupported in Squeeze LTS)
 	NOTE: http://xenbits.xen.org/xsa/advisory-155.html
 	TODO: check
 CVE-2015-8549