[Secure-testing-commits] r48819 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-09 22:48:27 +0000 (Thu, 09 Feb 2017)
New Revision: 48819

Modified:
   data/CVE/list
Log:
qemu bugs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-09 22:42:48 UTC (rev 48818)
+++ data/CVE/list	2017-02-09 22:48:27 UTC (rev 48819)
@@ -35,7 +35,7 @@
 	NOTE: Fix http://git.savannah.gnu.org/cgit/bash.git/commit/?id=4f747edc625815f449048579f6e65869914dd715
 CVE-2017-5931
 	RESERVED
-	- qemu <unfixed>
+	- qemu <unfixed> (bug #854730)
 	[jessie] - qemu <not-affected> (Vulnerable code not present)
 	- qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.nongnu.org/archive/html/qemu-devel/2017-01/msg01368.html
@@ -125,7 +125,7 @@
 	RESERVED
 CVE-2017-5898 [Qemu: usb: integer overflow in emulated_apdu_from_guest]
 	RESERVED
-	- qemu <unfixed>
+	- qemu <unfixed> (bug #854729)
 	[jessie] - qemu <not-affected> (Vulnerable code not present)
 	- qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.nongnu.org/archive/html/qemu-devel/2017-02/msg01075.html
@@ -9143,7 +9143,7 @@
 	RESERVED
 CVE-2017-2615
 	RESERVED
-	- qemu <unfixed> (low)
+	- qemu <unfixed> (low; bug #854731)
 	[jessie] - qemu <no-dsa> (Minor issue)
 	NOTE: Introduced with http://git.qemu.org/?p=qemu.git;a=commit;h=d3532a0db02296e687711b8cdc7791924efccea0 (which got backported to jessie)
 	NOTE: Patch: https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html