[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Qemu CVEs in Xen

While looking at recent Qemu CVEs I noticed that Xen's embedded qemu
does not show up on the list of affected packages for QEMU CVEs anymore
so I added:

    - xen 4.4.0-1
    NOTE: Xen switched to qemu-system in 4.4.0-1

to these entries. This shows wheezy as affected so we can triage them
(wheezy beeing the only release left with an embedded qemu).

IMHO we need to go back through the other entries and do the same and
then triage them as usual or did I miss something related to XENs
embedded QEMU?

 -- Guido

Reply to: