[Secure-testing-commits] r41966 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-05-23 18:06:40 +0000 (Mon, 23 May 2016)
New Revision: 41966

Modified:
   data/CVE/list
Log:
Add CVE-2016-4952/qemu

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-23 18:06:28 UTC (rev 41965)
+++ data/CVE/list	2016-05-23 18:06:40 UTC (rev 41966)
@@ -1,6 +1,11 @@
 CVE-2016-XXXX [mediawiki issues from 1.26.3, 1.25.6 and 1.23.14]
 	- mediawiki <removed>
 	NOTE: https://lists.wikimedia.org/pipermail/mediawiki-announce/2016-May/000188.html
+CVE-2016-4952 [scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines]
+	- qemu <unfixed>
+	- qemu-kvm <removed>
+	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg03774.html
+	TODO: check versions
 CVE-2016-4951 [Null pointer dereference in tipc_nl_publ_dump]
 	- linux <unfixed>
 	[jessie] - linux <not-affected> (Introduced in 3.19)