[Secure-testing-commits] r49147 - data/CVE

[Guido Guenther]

Author: agx
Date: 2017-02-23 14:12:31 +0000 (Thu, 23 Feb 2017)
New Revision: 49147

Modified:
   data/CVE/list
Log:
lts: mark CVE-2017-5856 as not affecting qemu

megasas support was as added past wheezy

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-23 13:53:14 UTC (rev 49146)
+++ data/CVE/list	2017-02-23 14:12:31 UTC (rev 49147)
@@ -493,7 +493,8 @@
 	RESERVED
 	- qemu <unfixed> (bug #855159)
 	[wheezy] - qemu <not-affected> (Vulnerable code not present)
-	- qemu-kvm <not-affected> (Vulnerable code not present)
+	- qemu-kvm <removed>
+	[wheezy] - qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html
 CVE-2017-5986 (Race condition in the sctp_wait_for_sndbuf function in ...)
 	- linux 4.9.10-1
@@ -1412,7 +1413,9 @@
 	RESERVED
 	- qemu <unfixed> (bug #853996)
 	[jessie] - qemu <no-dsa> (Minor issue; can be fixed in future DSA or point release)
+	[wheezy] - qemu <not-affected> (Vulnerable code not present)
 	- qemu-kvm <removed>
+	[wheezy] - qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/02/01/19
 	NOTE: http://git.qemu.org/?p=qemu.git;a=commit;h=765a707000e838c30b18d712fe6cb3dd8e0435f3
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1418342
@@ -1648,7 +1651,8 @@
 	- qemu <unfixed> (bug #853996)
 	[jessie] - qemu <no-dsa> (Minor issue)
 	[wheezy] - qemu <not-affected> (Vulnerable code not present)
-	- qemu-kvm <not-affected> (Vulnerable code not present)
+	- qemu-kvm <removed>
+	[wheezy] - qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06191.html
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1417559
 	NOTE: http://www.openwall.com/lists/oss-security/2017/01/30/2