[Secure-testing-commits] r51503 - data/CVE

Wed May 10 16:43:00 UTC 2017

Author: carnil
Date: 2017-05-10 16:43:00 +0000 (Wed, 10 May 2017)
New Revision: 51503

Modified:
   data/CVE/list
Log:
Update information for CVE-2017-8379/qemu, mark as no-dsa

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-05-10 15:19:09 UTC (rev 51502)
+++ data/CVE/list	2017-05-10 16:43:00 UTC (rev 51503)
@@ -1193,8 +1193,9 @@
 CVE-2017-8379 [input: host memory lekage via keyboard]
 	RESERVED
 	- qemu <unfixed>
+	[jessie] - qemu <no-dsa> (Minor issue)
 	- qemu-kvm <removed>
-	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05599.html
+	NOTE: Fixed by: http://git.qemu.org/?p=qemu.git;a=commit;h=fa18f36a461984eae50ab957e47ec78dae3c14fc
 CVE-2017-8378 (Heap-based buffer overflow in the PdfParser::ReadObjects function in ...)
 	- libpodofo <unfixed> (bug #861597)
 	NOTE: https://github.com/xiangxiaobo/poc_and_report/tree/master/podofo_heapoverflow_PdfParser.ReadObjects


