From 7be5ba3d1d968440dd14ce4e4ff77307803d478c Mon Sep 17 00:00:00 2001
From: miwi <miwi@FreeBSD.org>
Date: Tue, 11 Mar 2008 23:25:38 +0000
Subject: - Fix previos commit    * sort    * more reference

---
 security/vuxml/vuln.xml | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

(limited to 'security')

diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 6274e5b89c81..a7c9544d4074 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -48,18 +48,20 @@ Note:  Please add new entries to the beginning of this file.
 	<p>Ian Jackson reports on the debian-security mailinglist:</p>
 	<blockquote cite="http://lists.debian.org/debian-security/2008/02/msg00064.html">
 	  <p>When a block device read or write request is made by the guest,
-	  nothing checks that the request is within the range supported by the
-	  backend, but the code in the backend typically assumes that the
-	  request is sensible.</p>
+	    nothing checks that the request is within the range supported by
+	    the backend, but the code in the backend typically assumes that
+	    the request is sensible.</p>
 	  <p>Depending on the backend, this can allow the guest to read
-	  and write arbitrary memory locations in qemu, and possibly gain
-	  control over the qemu process, escaping from the
-	  emulation/virtualisation.</p>
+	    and write arbitrary memory locations in qemu, and possibly gain
+	    control over the qemu process, escaping from the
+	    emulation/virtualisation.</p>
 	</blockquote>
       </body>
     </description>
     <references>
       <cvename>CVE-2008-0928</cvename>
+      <url>http://secunia.com/advisories/29172</url>
+      <url>http://secunia.com/advisories/29172</url>
       <mlist msgid="18362.62578.44273.779731@mariner.uk.xensource.com">http://lists.debian.org/debian-security/2008/02/msg00064.html</mlist>
     </references>
     <dates>
-- 
cgit