[Secure-testing-commits] r36464 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-09-04 05:11:10 +0000 (Fri, 04 Sep 2015)
New Revision: 36464

Modified:
   data/CVE/list
Log:
Add CVE-2015-3247/spice

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-04 04:49:22 UTC (rev 36463)
+++ data/CVE/list	2015-09-04 05:11:10 UTC (rev 36464)
@@ -9196,8 +9196,11 @@
 	[wheezy] - openhpi <no-dsa> (Minor issue)
 	[squeeze] - openhpi <no-dsa> (Minor issue)
 	NOTE: In Debian directory is not world-writable
-CVE-2015-3247
+CVE-2015-3247 [memory corruption in worker_update_monitors_config()]
 	RESERVED
+	- spice <unfixed>
+	NOTE: Referenced Bug with patch from Red Hat is currently private
+	TODO: check
 CVE-2015-3246 (libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the ...)
 	- libuser <unfixed> (bug #793465)
 CVE-2015-3245 (Incomplete blacklist vulnerability in the chfn function in libuser ...)