[Secure-testing-team] Bug#825210: qemu: CVE-2016-4952: scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines
Salvatore Bonaccorso
carnil at debian.org
Tue May 24 14:57:37 UTC 2016
Source: qemu
Version: 1.5.0~rc0+dfsg-1
Severity: important
Tags: security upstream
Hi,
the following vulnerability was published for qemu.
CVE-2016-4952[0]:
| scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data
| routines
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2016-4952
Please adjust the affected versions in the BTS as needed, but should
be from 1.5.0~rc0 on.
Regards,
Salvatore
More information about the Secure-testing-team
mailing list