[Secure-testing-commits] r48075 - data/CVE

Sun Jan 15 10:20:38 UTC 2017

Author: carnil
Date: 2017-01-15 10:20:38 +0000 (Sun, 15 Jan 2017)
New Revision: 48075

Modified:
   data/CVE/list
Log:
Set lower severity as discussed with Bartosz Fenski (fenio)

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-01-15 10:11:18 UTC (rev 48074)
+++ data/CVE/list	2017-01-15 10:20:38 UTC (rev 48075)
@@ -15811,7 +15811,7 @@
 	NOTE: that would trigger the format string vulnerability.
 CVE-2016-8686 [memory allocation failure]
 	RESERVED
-	- potrace <unfixed> (bug #850595)
+	- potrace <unfixed> (low; bug #850595)
 	NOTE: https://blogs.gentoo.org/ago/2016/08/29/potrace-memory-allocation-failure
 CVE-2016-8685 [invalid memory access in findnext (decompose.c)]
 	RESERVED


