[Secure-testing-commits] r47250 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-12-20 16:30:40 +0000 (Tue, 20 Dec 2016)
New Revision: 47250

Modified:
   data/CVE/list
Log:
Add another issue for qemu

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-20 16:29:05 UTC (rev 47249)
+++ data/CVE/list	2016-12-20 16:30:40 UTC (rev 47250)
@@ -1,3 +1,10 @@
+CVE-2016-XXXX [display: virtio-gpu-3d: OOB access while reading virgl capabilities]
+	- qemu <unfixed>
+	[jessie] - qemu <not-affected> (Vulnerable code not present)
+	[wheezy] - qemu <not-affected> (Vulnerable code not present)
+	- qemu-kvm <not-affected> (Vulnerable code not present)
+	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg01903.html
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/12/20/1
 CVE-2016-XXXX [display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout]
 	- qemu 1:2.7+dfsg-1
 	[jessie] - qemu <not-affected> (Vulnerable code not present)