[Secure-testing-commits] r49145 - data/CVE

[Guido Guenther]

Author: agx
Date: 2017-02-23 13:42:10 +0000 (Thu, 23 Feb 2017)
New Revision: 49145

Modified:
   data/CVE/list
Log:
lts: mark CVE-2017-5667, CVE-2017-5987 as not affecting qemu

sdhci support was as added past 1.4.0

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-23 13:40:34 UTC (rev 49144)
+++ data/CVE/list	2017-02-23 13:42:10 UTC (rev 49145)
@@ -492,7 +492,9 @@
 CVE-2017-5987 [sd: infinite loop issue in multi block transfers]
 	RESERVED
 	- qemu <unfixed> (bug #855159)
+	[wheezy] - qemu <not-affected> (Vulnerable code not present)
 	- qemu-kvm <removed>
+	- qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html
 CVE-2017-5986 (Race condition in the sctp_wait_for_sndbuf function in ...)
 	- linux 4.9.10-1
@@ -1646,7 +1648,9 @@
 	RESERVED
 	- qemu <unfixed> (bug #853996)
 	[jessie] - qemu <no-dsa> (Minor issue)
+	[wheezy] - qemu <not-affected> (Vulnerable code not present)
 	- qemu-kvm <removed>
+	- qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06191.html
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1417559
 	NOTE: http://www.openwall.com/lists/oss-security/2017/01/30/2