[Secure-testing-commits] r49099 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-21 13:11:05 +0000 (Tue, 21 Feb 2017)
New Revision: 49099

Modified:
   data/CVE/list
Log:
Add CVE-2017-2620

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-21 13:07:06 UTC (rev 49098)
+++ data/CVE/list	2017-02-21 13:11:05 UTC (rev 49099)
@@ -9606,8 +9606,13 @@
 	RESERVED
 	- heat <not-affected> (heat-common postinst chmod's 0750 /var/log/heat)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1420990
-CVE-2017-2620
+CVE-2017-2620 [display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo]
 	RESERVED
+	- qemu <unfixed>
+	- qemu-kvm <removed>
+	- xen 4.4.0-1
+	NOTE: Xen switched to qemu-system in 4.4.0-1
+	NOTE: https://xenbits.xen.org/xsa/advisory-209.html
 CVE-2017-2619
 	RESERVED
 CVE-2017-2618 [selinux: fix off-by-one in setprocattr]