Author: lamby
Date: 2016-08-19 16:25:19 +0000 (Fri, 19 Aug 2016)
New Revision: 44060
Modified:
data/CVE/list
Log:
Mark qemu-{,kvm} in wheezy as not affected
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-08-19 14:37:11 UTC (rev 44059)
+++ data/CVE/list 2016-08-19 16:25:19 UTC (rev 44060)
@@ -1,6 +1,8 @@
CVE-2016-6888 [net: vmxnet: integer overflow in packet initialisation]
- qemu <unfixed>
+ [wheezy] - qemu <not-affected> (Vulnerable code not present, vmxnet3
introduced in 1.5)
- qemu-kvm <removed>
+ [wheezy] - qemu-kvm <not-affected> (Vulnerable code not present,
vmxnet3 introduced in 1.5)
NOTE:
https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html
NOTE:
http://git.qemu.org/?p=qemu.git;a=commit;h=47882fa4975bf0b58dd74474329fdd7154e8f04c
TODO: check
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
