[Secure-testing-commits] r50823 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-20 04:47:40 +0000 (Thu, 20 Apr 2017)
New Revision: 50823

Modified:
   data/CVE/list
Log:
Three more CVEs fixed with qemu upload to unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-20 04:47:30 UTC (rev 50822)
+++ data/CVE/list	2017-04-20 04:47:40 UTC (rev 50823)
@@ -1695,7 +1695,7 @@
 	- libpodofo <unfixed> (bug #859330)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/04/01/1
 CVE-2017-7377 (The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in ...)
-	- qemu <unfixed> (bug #859854)
+	- qemu 1:2.8+dfsg-4 (bug #859854)
 	[jessie] - qemu <no-dsa> (Minor issue)
 	- qemu-kvm <removed>
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html
@@ -20698,7 +20698,7 @@
 	RESERVED
 CVE-2016-9603 [cirrus: heap buffer overflow via vnc connection]
 	RESERVED
-	- qemu <unfixed> (bug #857744)
+	- qemu 1:2.8+dfsg-4 (bug #857744)
 	- qemu-kvm <removed>
 	- xen 4.4.0-1
 	NOTE: Xen switched to qemu-system in 4.4.0-1
@@ -24005,7 +24005,7 @@
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02501.html
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1384896
 CVE-2016-8667 (The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick ...)
-	- qemu <unfixed> (bug #840950)
+	- qemu 1:2.8+dfsg-4 (bug #840950)
 	[jessie] - qemu <no-dsa> (Minor issue)
 	[wheezy] - qemu <no-dsa> (minor issue)
 	- qemu-kvm <removed>