[Secure-testing-commits] r58085 - in data: . CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-11-28 19:46:03 +0000 (Tue, 28 Nov 2017)
New Revision: 58085

Modified:
   data/CVE/list
   data/DSA/list
   data/dsa-needed.txt
Log:
xen DSA


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-28 19:30:41 UTC (rev 58084)
+++ data/CVE/list	2017-11-28 19:46:03 UTC (rev 58085)
@@ -1,9 +1,13 @@
 CVE-2017-XXXX [XSA-247: Missing p2m error checking in PoD code]
 	- xen <unfixed>
+	[stretch] - xen 4.8.2+xsa245-0+deb9u1
 	NOTE: https://xenbits.xen.org/xsa/advisory-247.html
+	NOTE: Workaround for DSA 4050
 CVE-2017-XXXX [XSA-246: x86: infinite loop due to missing PoD error checking]
 	- xen <unfixed>
+	[stretch] - xen 4.8.2+xsa245-0+deb9u1
 	NOTE: https://xenbits.xen.org/xsa/advisory-246.html
+	NOTE: Workaround for DSA 4050
 CVE-2018-0705
 	RESERVED
 CVE-2018-0704

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2017-11-28 19:30:41 UTC (rev 58084)
+++ data/DSA/list	2017-11-28 19:46:03 UTC (rev 58085)
@@ -1,3 +1,6 @@
+[28 Nov 2017] DSA-4050-1 xen - security update
+	{CVE-2017-14316 CVE-2017-14317 CVE-2017-14318 CVE-2017-14319 CVE-2017-15588 CVE-2017-15589 CVE-2017-15590 CVE-2017-15592 CVE-2017-15593 CVE-2017-15594 CVE-2017-15595 CVE-2017-15597}
+	[stretch] - xen 4.8.2+xsa245-0+deb9u1
 [27 Nov 2017] DSA-4049-1 ffmpeg - security update
 	{CVE-2017-15186 CVE-2017-15672 CVE-2017-16840}
 	[stretch] - ffmpeg 7:3.2.9-1~deb9u1

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2017-11-28 19:30:41 UTC (rev 58084)
+++ data/dsa-needed.txt	2017-11-28 19:46:03 UTC (rev 58085)
@@ -59,7 +59,5 @@
 --
 wordpress
 --
-xen
---
 zendframework/oldstable
 --