[Secure-testing-commits] r35736 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-07-27 17:44:30 +0000 (Mon, 27 Jul 2015)
New Revision: 35736

Modified:
   data/CVE/list
Log:
update descriptions


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-27 17:41:26 UTC (rev 35735)
+++ data/CVE/list	2015-07-27 17:44:30 UTC (rev 35736)
@@ -1164,12 +1164,12 @@
 	RESERVED
 CVE-2015-5154 (QEMU heap overflow flaw while processing certain ATAPI commands)
 	- qemu <unfixed>
-	[wheezy] - qemu <not-affected> (Vulnerable code not present)
-	[squeeze] - qemu <not-affected> (Vulnerable code not present)
-	- qemu-kvm <not-affected> (Vulnerable code not present)
+	[wheezy] - qemu <not-affected> (Vulnerable code not present, introduced in 1.3)
+	[squeeze] - qemu <not-affected> (Vulnerable code not present, introduced in 1.3)
+	- qemu-kvm <not-affected> (Vulnerable code not present, introduced in 1.3)
 	- xen <unfixed>
-	[wheezy] - xen <not-affected> (Vulnerable code not present)
-	[squeeze] - xen <not-affected> (Vulnerable code not present)
+	[wheezy] - xen <not-affected> (Vulnerable code not present, introduced in 4.2)
+	[squeeze] - xen <not-affected> (Vulnerable code not present, introduced in 4.2)
 	NOTE: http://xenbits.xen.org/xsa/advisory-138.html
 	NOTE: qemu patches:
 	NOTE: http://git.qemu.org/?p=qemu.git;a=commit;h=d2ff85854512574e7209f295e87b0835d5b032c6