From fe705c1f4b7f5f1c08104527650dbc134844159f Mon Sep 17 00:00:00 2001
From: Michael Young <m.a.young(a)durham.ac.uk>
Date: Nov 30 2017 21:54:20 +0000
Subject: add some CVE references
---
diff --git a/xen.spec b/xen.spec
index 4818895..8670b8d 100644
--- a/xen.spec
+++ b/xen.spec
@@ -944,8 +944,8 @@ rm -rf %{buildroot}
%changelog
* Tue Nov 28 2017 Michael Young <m.a.young(a)durham.ac.uk> - 4.8.2-8
- xen: various flaws (#1518214)
- x86: infinite loop due to missing PoD error checking [XSA-246]
- Missing p2m error checking in PoD code [XSA-247]
+ x86: infinite loop due to missing PoD error checking [XSA-246, CVE-2017-17044]
+ Missing p2m error checking in PoD code [XSA-247, CVE-2017-17045]
* Sun Nov 19 2017 Michael Young <m.a.young(a)durham.ac.uk> - 4.8.2-7
- incomplete adaption of new XSA-240 patch to Fedora state
@@ -973,7 +973,7 @@ rm -rf %{buildroot}
CVE-2017-15594]
* Tue Oct 03 2017 Michael Young <m.a.young(a)durham.ac.uk> - 4.8.2-3
-- ARM: Some memory not scrubbed at boot [XSA-245] (#1499843)
+- ARM: Some memory not scrubbed at boot [XSA-245, CVE-2017-17046] (#1499843)
- Qemu: vga: reachable assert failure during during display update
[CVE-2017-13673] (#1486591)
- Qemu: vga: OOB read access during display update [CVE-2017-13672] (#1486562)
https://src.fedoraproject.org/rpms/xen/c/fe705c1f4b7f5f1c08104527650dbc13...