[Secure-testing-commits] r34685 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Jun 3 16:31:37 UTC 2015


Author: carnil
Date: 2015-06-03 16:31:36 +0000 (Wed, 03 Jun 2015)
New Revision: 34685

Modified:
   data/CVE/list
Log:
Add fixed version for qemu upload to unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-06-03 15:55:11 UTC (rev 34684)
+++ data/CVE/list	2015-06-03 16:31:36 UTC (rev 34685)
@@ -107,28 +107,28 @@
 	RESERVED
 CVE-2015-4106 [Unmediated PCI register access in qemu]
 	RESERVED
-	- qemu <unfixed> (bug #787547)
+	- qemu 1:2.3+dfsg-5 (bug #787547)
 	- qemu-kvm <not-affected> (Vulnerable code not present)
 	- xen 4.4.0-1
 	NOTE: Xen switched to qemu-system in 4.4.0-1
 	NOTE: http://xenbits.xen.org/xsa/advisory-131.html
 CVE-2015-4105 [Guest triggerable qemu MSI-X pass-through error messages]
 	RESERVED
-	- qemu <unfixed> (bug #787547)
+	- qemu 1:2.3+dfsg-5 (bug #787547)
 	- qemu-kvm <not-affected> (Vulnerable code not present)
 	- xen 4.4.0-1
 	NOTE: Xen switched to qemu-system in 4.4.0-1
 	NOTE: http://xenbits.xen.org/xsa/advisory-130.html
 CVE-2015-4104 [PCI MSI mask bits inadvertently exposed to guests]
 	RESERVED
-	- qemu <unfixed> (bug #787547)
+	- qemu 1:2.3+dfsg-5 (bug #787547)
 	- qemu-kvm <not-affected> (Vulnerable code not present)
 	- xen 4.4.0-1
 	NOTE: Xen switched to qemu-system in 4.4.0-1
 	NOTE: http://xenbits.xen.org/xsa/advisory-129.html
 CVE-2015-4103 [Potential unintended writes to host MSI message data field via qemu]
 	RESERVED
-	- qemu <unfixed> (bug #787547)
+	- qemu 1:2.3+dfsg-5 (bug #787547)
 	- qemu-kvm <not-affected> (Vulnerable code not present)
 	- xen 4.4.0-1
 	NOTE: Xen switched to qemu-system in 4.4.0-1
@@ -313,7 +313,7 @@
 	RESERVED
 CVE-2015-4037
 	RESERVED
-	- qemu <unfixed>
+	- qemu 1:2.3+dfsg-5
 	[jessie] - qemu <no-dsa> (Minor issue)
 	[wheezy] - qemu <no-dsa> (Minor issue)
 	[squeeze] - qemu <end-of-life> (Not supported in Squeeze LTS)




More information about the Secure-testing-commits mailing list