From 32b6ec8c614621b32d723e1609a91de00fcf1cb9 Mon Sep 17 00:00:00 2001
From: Michael Young <m.a.young(a)durham.ac.uk>
Date: Nov 30 2017 21:40:27 +0000
Subject: add some CVE references
---
diff --git a/xen.spec b/xen.spec
index 64410b4..fd23fa5 100644
--- a/xen.spec
+++ b/xen.spec
@@ -868,8 +868,8 @@ rm -rf %{buildroot}
%changelog
* Tue Nov 28 2017 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.1-2
- xen: various flaws (#1518214)
- x86: infinite loop due to missing PoD error checking [XSA-246]
- Missing p2m error checking in PoD code [XSA-247]
+ x86: infinite loop due to missing PoD error checking [XSA-246, CVE-2017-17044]
+ Missing p2m error checking in PoD code [XSA-247, CVE-2017-17045]
* Thu Nov 23 2017 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.1-1
- update to 4.9.1 (#1515818)
@@ -902,7 +902,7 @@ rm -rf %{buildroot}
CVE-2017-15594]
* Sun Oct 01 2017 Michael Young <m.a.young(a)durham.ac.uk> - 4.9.0-11
-- ARM: Some memory not scrubbed at boot [XSA-245] (#1499843)
+- ARM: Some memory not scrubbed at boot [XSA-245, CVE-2017-17046] (#1499843)
- Qemu: vga: reachable assert failure during during display update
[CVE-2017-13673] (#1486591)
- Qemu: vga: OOB read access during display update [CVE-2017-13672] (#1486562)
https://src.fedoraproject.org/rpms/xen/c/32b6ec8c614621b32d723e1609a91de0...