[Secure-testing-commits] r48658 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-02 08:04:03 +0000 (Thu, 02 Feb 2017)
New Revision: 48658

Modified:
   data/CVE/list
Log:
new qemu issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-02 07:54:40 UTC (rev 48657)
+++ data/CVE/list	2017-02-02 08:04:03 UTC (rev 48658)
@@ -1,3 +1,17 @@
+CVE-2017-5857
+	- qemu <unfixed>
+	[jessie] - qemu <not-affected> (Vulnerable code not present)
+	- qemu-kvm <not-affected> (Vulnerable code not present)
+	NOTE: https://lists.nongnu.org/archive/html/qemu-devel/2017-01/msg04615.html
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1418382
+	NOTE: http://www.openwall.com/lists/oss-security/2017/02/01/21c
+CVE-2017-5856
+	- qemu <unfixed>
+	[jessie] - qemu <no-dsa> (Minor issue; can be fixed in future DSA or point release)
+	- qemu-kvm <removed>
+	NOTE: http://www.openwall.com/lists/oss-security/2017/02/01/19
+	NOTE: http://git.qemu.org/?p=qemu.git;a=commit;h=765a707000e838c30b18d712fe6cb3dd8e0435f3
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1418342
 CVE-2015-8981
 	NOT-FOR-US: podofo
 CVE-2017-5855