[Secure-testing-team] Bug#841950: qemu: CVE-2016-8909: audio: intel-hda: infinite loop in processing dma buffer stream

Salvatore Bonaccorso carnil at debian.org
Mon Oct 24 18:54:41 UTC 2016


Source: qemu
Version: 1:2.7+dfsg-1
Severity: normal
Tags: security upstream

Hi,

the following vulnerability was published for qemu.

CVE-2016-8909[0]:
audio: intel-hda: infinite loop in processing dma  buffer stream

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-8909
[1] https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg04717.html

Please adjust the affected versions in the BTS as needed. Only unstable
source code was checked so far.

Regards,
Salvatore



More information about the Secure-testing-team mailing list