[Secure-testing-commits] r56454 - data/CVE

[Guido Guenther]

Author: agx
Date: 2017-10-06 14:58:35 +0000 (Fri, 06 Oct 2017)
New Revision: 56454

Modified:
   data/CVE/list
Log:
lts: triage CVE-2017-13672 for qemu{,-kvm}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-06 13:16:07 UTC (rev 56453)
+++ data/CVE/list	2017-10-06 14:58:35 UTC (rev 56454)
@@ -3940,8 +3940,11 @@
 	{DSA-3991-1}
 	- qemu 1:2.10.0-1 (low; bug #873851)
 	[jessie] - qemu <postponed> (Can be fixed along in a future DSA)
+	[wheezy] - qemu <postponed> (Can be fixed along in a future DSA)
 	- qemu-kvm <removed>
+	[wheezy] - qemu-kvm <postponed> (Can be fixed along in a future DSA)
 	NOTE: https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg04684.html
+	NOTE: Fixed by https://git.qemu.org/gitweb.cgi?p=qemu.git;a=commit;h=3d90c6254863693a6b13d918d2b8682e08bbc681
 CVE-2017-13671 (app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent ...)
 	NOT-FOR-US: MISP (Malware Information Sharing Platform and Threat Sharing)
 CVE-2017-13670 (In BlackCat CMS 1.2, remote authenticated users can upload any file via ...)