[Secure-testing-commits] r52508 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-12 14:11:21 +0000 (Mon, 12 Jun 2017)
New Revision: 52508

Modified:
   data/CVE/list
Log:
Add CVE-2017-9524/qemu

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-12 13:51:24 UTC (rev 52507)
+++ data/CVE/list	2017-06-12 14:11:21 UTC (rev 52508)
@@ -56,8 +56,12 @@
 	NOTE: Curve Ed25519 signing and verification inplemented in 1.6.0 with
 	NOTE: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=bc5199a02abe428ad377443280b3eda60141a1d6
 	NOTE: and following refactorings.
-CVE-2017-9524
+CVE-2017-9524 [nbd: segmentation fault due to client non-negotiation]
 	RESERVED
+	- qemu <unfixed>
+	- qemu-kvm <removed>
+	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg06240.html
+	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg02321.html
 CVE-2017-9525 (In the cron package through 3.0pl1-128 on Debian, and through ...)
 	- cron <unfixed> (bug #864466)
 	[stretch] - cron <no-dsa> (Minor issue)