[Secure-testing-commits] r42510 - data/CVE

[Ben Hutchings]

Author: benh
Date: 2016-06-13 17:41:18 +0000 (Mon, 13 Jun 2016)
New Revision: 42510

Modified:
   data/CVE/list
Log:
Mark qemu/qemu-kvm esp emulation issues as <no-dsa>

This device is not enabled by default and Michael Tokarev says there
is no reason to enable it.


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-06-13 17:34:43 UTC (rev 42509)
+++ data/CVE/list	2016-06-13 17:41:18 UTC (rev 42510)
@@ -90,7 +90,9 @@
 	RESERVED
 	- qemu 1:2.6+dfsg-2 (bug #827024)
 	[jessie] - qemu <no-dsa> (Minor issue)
+	[wheezy] - qemu <no-dsa> (Minor issue)
 	- qemu-kvm <removed>
+	[wheezy] - qemu-kvm <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1343323
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html
 	NOTE: http://git.qemu.org/?p=qemu.git;a=commit;h=ff589551c8e8e9e95e211b9d8daafb4ed39f1aec
@@ -635,7 +637,10 @@
 CVE-2016-5238 [scsi: esp: OOB write when using non-DMA mode in get_cmd]
 	RESERVED
 	- qemu <unfixed> (bug #826152)
+	[jessie] - qemu <no-dsa> (Minor issue)
+	[wheezy] - qemu <no-dsa> (Minor issue)
 	- qemu-kvm <removed>
+	[wheezy] - qemu-kvm <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1341931
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg00150.html
 CVE-2016-5234