[Secure-testing-commits] r45361 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-10-16 06:22:45 +0000 (Sun, 16 Oct 2016)
New Revision: 45361

Modified:
   data/CVE/list
Log:
Add CVE-2016-8686/potrace

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-16 06:22:36 UTC (rev 45360)
+++ data/CVE/list	2016-10-16 06:22:45 UTC (rev 45361)
@@ -496,6 +496,9 @@
 	NOTE: and no mechanism is currently known by which an attacker who does not
 	NOTE: already have root privileges could induce systemd to send messages
 	NOTE: that would trigger the format string vulnerability.
+CVE-2016-8686 [memory allocation failure]
+	- potrace <unfixed>
+	NOTE: https://blogs.gentoo.org/ago/2016/08/29/potrace-memory-allocation-failure
 CVE-2016-8685 [invalid memory access in findnext (decompose.c)]
 	- potrace <unfixed>
 	NOTE: https://blogs.gentoo.org/ago/2016/08/29/potrace-invalid-memory-access-in-findnext-decompose-c/