[Secure-testing-commits] r52838 - data/CVE

Fri Jun 23 11:02:00 UTC 2017

Author: agx
Date: 2017-06-23 11:02:00 +0000 (Fri, 23 Jun 2017)
New Revision: 52838

Modified:
   data/CVE/list
Log:
lts: mark qemu{,-kvm} as not affected by CVE-2017-9310

e1000e introduced past 2.6.

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-06-23 10:03:32 UTC (rev 52837)
+++ data/CVE/list	2017-06-23 11:02:00 UTC (rev 52838)
@@ -2829,7 +2829,9 @@
 	- qemu <unfixed> (bug #863840)
 	[stretch] - qemu <no-dsa> (Minor issue)
 	[jessie] - qemu <no-dsa> (Minor issue)
+	[wheezy] - qemu <not-affected> (Vulnerable code not present)
 	- qemu-kvm <removed>
+	[wheezy] - qemu-kvm <not-affected> (Vulnerable code not present)
 	NOTE: Fixed by: http://git.qemu.org/?p=qemu.git;a=commitdiff;h=4154c7e03fa55b4cf52509a83d50d6c09d743b7
 CVE-2017-9303 (Laravel 5.4.x before 5.4.22 does not properly constrain the host ...)
 	NOT-FOR-US: Laravel


