[Secure-testing-commits] r44514 - in data: . CVE

[Balint Reczey]

Author: rbalint
Date: 2016-09-11 21:43:00 +0000 (Sun, 11 Sep 2016)
New Revision: 44514

Modified:
   data/CVE/list
   data/dla-needed.txt
Log:
add autotrace for DLA

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-09-11 21:19:34 UTC (rev 44513)
+++ data/CVE/list	2016-09-11 21:43:00 UTC (rev 44514)
@@ -7,6 +7,7 @@
 CVE-2016-7392 [heap-based buffer overflow in pstoedit_suffix_table_init (output-pstoedit.c)]
 	- autotrace <unfixed>
 	NOTE: https://blogs.gentoo.org/ago/2016/09/10/autotrace-heap-based-buffer-overflow-in-pstoedit_suffix_table_init-output-pstoedit-c/
+        NOTE: Also reproducible with valgrind
 CVE-2016-7180 (epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in ...)
 	- wireshark 2.2.0~rc1+g438c022-1
 	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=5213496250aceff086404c568e3718ebc0060934

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2016-09-11 21:19:34 UTC (rev 44513)
+++ data/dla-needed.txt	2016-09-11 21:43:00 UTC (rev 44514)
@@ -11,6 +11,9 @@
 --
 asterisk (Thorsten Alteholz)
 --
+autotrace
+ NOTE: Reproducible with valgrind on Wheezy
+--
 chicken
 --
 gcc-mingw-w64 (Stephen Kitt)