[Secure-testing-commits] r34246 - in data: . CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-05-13 16:05:25 +0000 (Wed, 13 May 2015)
New Revision: 34246

Modified:
   data/CVE/list
   data/DSA/list
   data/dsa-needed.txt
Log:
qemu DSA(s)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-13 15:45:20 UTC (rev 34245)
+++ data/CVE/list	2015-05-13 16:05:25 UTC (rev 34246)
@@ -914,9 +914,8 @@
 	RESERVED
 	- qemu <unfixed>
 	- qemu-kvm <removed>
-	- xen <unfixed>
-	[squeeze] - xen <end-of-life> (Not supported in Squeeze LTS)
-	NOTE: xen: need to add version were system qemu is used, wheezy has vulnerable code
+	- xen 4.4.0-1
+	NOTE: Xen switched to qemu-system in 4.4.0-1
 	- xen-qemu-dm-4.0 <removed>
 	[squeeze] - xen-qemu-dm-4.0 <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: http://venom.crowdstrike.com/

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2015-05-13 15:45:20 UTC (rev 34245)
+++ data/DSA/list	2015-05-13 16:05:25 UTC (rev 34246)
@@ -1,3 +1,8 @@
+[13 May 2015] DSA-3259-1 qemu - security update
+	{CVE-2014-9718 CVE-2015-1779 CVE-2015-2756 CVE-2015-3456}
+	[wheezy] - qemu 1.1.2+dfsg-6a+deb7u7
+	[wheezy] - qemu-kvm 1.1.2+dfsg-6+deb7u7
+	[jessie] - qemu 1:2.1+dfsg-12
 [12 May 2015] DSA-3258-1 quassel - security update
 	{CVE-2015-3427}
 	[jessie] - quassel 1:0.10.0-2.3+deb8u1

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2015-05-13 15:45:20 UTC (rev 34245)
+++ data/dsa-needed.txt	2015-05-13 16:05:25 UTC (rev 34246)
@@ -63,11 +63,6 @@
 proftpd-dfsg (seb)
   Maintainer said that he is going to prepare updates for jessie-security and wheezy-security
 --
-qemu
-  Maintainer preparing an update targetting jessie-security
---
-qemu-kvm/oldstable
---
 smarty3
 --
 sqlite3/oldstable