[Secure-testing-team] Bug#840236: qemu: CVE-2016-7995: usb: hcd-ehci: memory leak in ehci_process_itd

Salvatore Bonaccorso carnil at debian.org
Sun Oct 9 19:30:58 UTC 2016


Source: qemu
Version: 1:2.6+dfsg-3.1
Severity: normal
Tags: security upstream

Hi,

the following vulnerability was published for qemu.

CVE-2016-7995[0]:
usb: hcd-ehci: memory leak in ehci_process_itd

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-7995
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1382668
[2] https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg06609.html

Please adjust the affected versions in the BTS as needed. In
particular please double-check/review the note in the security-tracker
if this is correct. 

Regards,
Salvatore



More information about the Secure-testing-team mailing list