[Secure-testing-commits] r36617 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-09-11 17:52:32 +0000 (Fri, 11 Sep 2015)
New Revision: 36617

Modified:
   data/CVE/list
Log:
Add fixed version for CVE-2015-6815 and CVE-2015-6855

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-11 17:13:13 UTC (rev 36616)
+++ data/CVE/list	2015-09-11 17:52:32 UTC (rev 36617)
@@ -25,7 +25,7 @@
 	NOTE: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8b281f83e8516535756f92dbf90940ac44bd45e1 (VER-2-5-3)
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/09/11/4
 CVE-2015-6855 [commands which are illegal to sent to an ATAPI device should be rejected]
-	- qemu <unfixed>
+	- qemu 1:2.4+dfsg-2
 	- qemu-kvm <removed>
 	[squeeze] - qemu <end-of-life> (Not supported in Squeeze LTS)
 	[squeeze] - qemu-kvm <end-of-life> (Not supported in Squeeze LTS)
@@ -136,7 +136,7 @@
 	TODO: check
 CVE-2015-6815 [Qemu: net: e1000 infinite loop issue]
 	RESERVED
-	- qemu <unfixed> (bug #798101)
+	- qemu 1:2.4+dfsg-2 (bug #798101)
 	[jessie] - qemu <no-dsa> (Minor issue; Can be fixed along with a future DSA)
 	[wheezy] - qemu <no-dsa> (Minor issue; Can be fixed along with a future DSA)
 	[squeeze] - qemu <end-of-life> (Not supported in Squeeze LTS)