[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2017-18030 already adressed earlier with the v2.8.1 import

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2138bc47 by Salvatore Bonaccorso at 2018-01-15T21:05:17+01:00
CVE-2017-18030 already adressed earlier with the v2.8.1 import

The qemu update versioned 1:2.8+dfsg-4 in unstable did include as patch
the 2.8.1 upstream stable/bugfix release including the commit

https://git.qemu.org/?p=qemu.git;a=commitdiff;h=f153b563f8cf121aebf5a2fff5f0110faf58ccb3

Adjust the fixing version accordingly.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -49,7 +49,7 @@ CVE-2018-5683
 	RESERVED
 CVE-2017-18030 [Out-of-bounds access in cirrus_invalidate_region routine]
 	RESERVED
-	- qemu 1:2.10.0-1
+	- qemu 1:2.8+dfsg-4
 	- qemu-kvm <removed>
 	NOTE: https://git.qemu.org/?p=qemu.git;a=commitdiff;h=f153b563f8cf121aebf5a2fff5f0110faf58ccb3
 CVE-2018-5682 (PrestaShop 1.7.2.4 allows user enumeration via the Reset Password ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2138bc47e7bcfe96c8f3ba5ebd9a5ee6949a7be5

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2138bc47e7bcfe96c8f3ba5ebd9a5ee6949a7be5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180115/b1e92020/attachment.html>