[Secure-testing-commits] r44839 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-09-23 16:24:33 +0000 (Fri, 23 Sep 2016)
New Revision: 44839

Modified:
   data/CVE/list
Log:
Update information for CVE-2016-7466/qemu

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-09-23 16:10:13 UTC (rev 44838)
+++ data/CVE/list	2016-09-23 16:24:33 UTC (rev 44839)
@@ -51,11 +51,13 @@
 CVE-2016-7466 [usb: xhci memory leakage during device unplug]
 	RESERVED
 	- qemu <unfixed>
-	- qemu-kvm <removed>
+	[jessie] - qemu <not-affected> (Vulnerable code introduced with 2.2.0-rc0)
+	[wheezy] - qemu <not-affected> (Vulnerable code introduced with 2.2.0-rc0)
+	- qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg02773.html
 	NOTE: Fixed by: http://git.qemu.org/?p=qemu.git;a=commit;h=b53dd4495ced2432a0b652ea895e651d07336f7e
+	NOTE: Introduced by:  http://git.qemu.org/?p=qemu.git;a=commit;h=53c30545fb34c43c84d62ea1c2b0dc6b53303c34 (v2.2.0-rc0)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/09/19/8
-	TODO: check affected versions
 CVE-2016-8280
 	RESERVED
 CVE-2016-8279