[Secure-testing-commits] r48499 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-01-28 21:22:16 +0000 (Sat, 28 Jan 2017)
New Revision: 48499

Modified:
   data/CVE/list
Log:
Add note for CVE-2016-9602/qemu

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-28 21:16:55 UTC (rev 48498)
+++ data/CVE/list	2017-01-28 21:22:16 UTC (rev 48499)
@@ -13039,7 +13039,8 @@
 	- qemu <unfixed>
 	- qemu-kvm <removed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1413929
-	TODO: check, proposed patch is not yet complete
+	NOTE: The original proposed patch does not fix the issue, cf.
+	NOTE: http://www.openwall.com/lists/oss-security/2017/01/17/14
 CVE-2016-9601 [Heap-buffer overflow due to Integer overflow in jbig2_image_new function]
 	RESERVED
 	- jbig2dec 0.13-4 (bug #850497)